$ rpki-client -vvf repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft File: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft (raw, json) Hash identifier: SjSJ7FWiPWgYX6OwvEcAxcraPfIYnnYPIkuG/oDRi9I= Subject key identifier: 45:AD:C0:DC:4C:88:B8:6E:73:8D:A5:63:42:6D:49:8D:FD:ED:BD:BB Authority key identifier: 74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C Certificate issuer: /CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Certificate serial: 3BB8D6B5208D4F3AB6297129E230CBD4D767F30D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft Manifest number: 0218 Signing time: Sun 19 Oct 2025 14:51:56 +0000 Manifest this update: Sun 19 Oct 2025 14:46:56 +0000 Manifest next update: Thu 23 Oct 2025 00:57:56 +0000 Files and hashes: 1: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: q3nnfuFQ9fllwu5vaDMWKT58tFIU7r2iWutM+FFs7uM=) 2: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl (hash: shDEn+9WMe6HW4wX4/hfRTVs2uzQvahndpVQ+kKCn10=) 3: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: u/HGXTKlzUVzN3BHvIbNac6O5D491LLOLOhh0HKRChM=) 4: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: D6ZQ1Nszopc+tjvvlk9LxeInARJoQa1nF2ZqxR2uBQM=) 5: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: VaGZ2rtQiVhlvvEqhey8VuIsjUW/H1CymqkYlv2nCyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b8:d6:b5:20:8d:4f:3a:b6:29:71:29:e2:30:cb:d4:d7:67:f3:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Validity Not Before: Oct 19 14:46:56 2025 GMT Not After : Oct 23 00:57:56 2025 GMT Subject: CN=45ADC0DC4C88B86E738DA563426D498DFDEDBDBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:47:e9:a3:ad:b7:e0:b9:a0:60:e3:5e:15: 6d:22:8d:4b:7b:a8:e7:80:b6:47:fb:d9:54:28:4f: db:31:96:8e:56:ec:65:45:e1:5d:1f:88:c0:4a:cf: 2f:04:ec:83:6f:7d:75:5b:a4:5f:be:f5:9c:e5:74: 6e:fd:a6:c2:65:51:0b:44:91:3c:5f:35:36:e0:13: 4c:b1:3a:56:99:1d:80:13:e2:aa:d5:11:6e:b8:80: 47:7d:7f:48:15:1a:9e:7b:16:2f:63:d8:a6:12:75: a2:fb:82:04:75:a9:62:9c:21:9e:11:99:50:b0:a6: ca:9f:82:2c:a2:b3:84:ad:44:bc:84:02:75:1b:43: 71:b7:6c:35:68:7d:c2:22:5d:61:10:5f:18:3d:1c: 95:a2:eb:73:c1:80:27:9d:a5:ad:48:6a:00:53:cb: e2:29:34:e1:2a:52:f8:71:41:d1:d2:95:1d:e6:f0: da:ba:45:17:76:1c:d1:7e:f3:b9:1f:1c:6b:35:70: 81:56:df:f6:77:4a:e7:78:14:82:e5:fd:ca:8f:5c: e4:e6:24:4b:da:b2:10:63:66:41:90:1d:eb:e2:19: 64:ab:b2:62:de:57:b4:da:b5:89:8f:23:0f:f2:f1: 71:99:2c:b2:e5:ae:a6:c1:8e:dd:ec:f2:32:1d:fa: 2c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AD:C0:DC:4C:88:B8:6E:73:8D:A5:63:42:6D:49:8D:FD:ED:BD:BB X509v3 Authority Key Identifier: keyid:74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5b:07:0d:2b:75:48:bb:86:fd:f8:ff:40:6b:b4:d4:3c:72: cc:84:60:62:cf:00:07:93:7a:bc:28:db:0c:70:e9:c2:7d:8b: 39:d3:cd:fb:19:e0:9a:cc:86:91:ae:92:bf:55:f9:e3:b9:c9: fe:86:d5:31:93:2e:4c:fb:e7:6f:d4:84:b1:12:bd:bd:06:7a: 54:6b:c0:ef:c6:5d:27:49:40:bb:d5:d2:00:4d:b5:66:40:77: 68:82:95:ad:69:90:25:ed:38:d6:5e:a7:ab:50:e0:ef:88:34: 48:2a:f1:65:16:f8:7e:53:e0:d6:32:40:2b:84:f4:71:c9:4e: 67:85:07:b4:ec:da:42:ea:c0:c3:50:dc:f3:02:40:03:39:f9: 2c:77:eb:49:62:9b:67:60:24:4a:ab:a1:c6:35:48:ee:96:b2: 50:d9:f9:42:6e:9d:60:b4:41:42:81:a6:b9:9d:20:97:2d:42: 8a:aa:08:11:b3:4c:5b:cd:1a:b3:d0:62:52:32:bf:36:99:02: 6c:cc:b7:3d:3c:cf:5c:e0:5f:c0:53:f0:a4:09:29:b6:ae:5c: b9:e8:ef:9f:a0:ae:99:4e:2b:77:a4:6b:fa:7e:a9:0e:43:50: 2d:c1:e0:ea:ff:bd:a1:02:59:2c:5d:75:3d:40:4c:9b:1b:64: 20:e5:c3:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7jWtSCNTzq2KXEp4jDL1Ndn8w0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNF QTI3NjM1QzAeFw0yNTEwMTkxNDQ2NTZaFw0yNTEwMjMwMDU3NTZaMDMxMTAvBgNV BAMTKDQ1QURDMERDNEM4OEI4NkU3MzhEQTU2MzQyNkQ0OThERkRFREJEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Okfpo6234LmgYONeFW0ijUt7 qOeAtkf72VQoT9sxlo5W7GVF4V0fiMBKzy8E7INvfXVbpF++9ZzldG79psJlUQtE kTxfNTbgE0yxOlaZHYAT4qrVEW64gEd9f0gVGp57Fi9j2KYSdaL7ggR1qWKcIZ4R mVCwpsqfgiyis4StRLyEAnUbQ3G3bDVofcIiXWEQXxg9HJWi63PBgCedpa1IagBT y+IpNOEqUvhxQdHSlR3m8Nq6RRd2HNF+87kfHGs1cIFW3/Z3Sud4FILl/cqPXOTm JEvashBjZkGQHeviGWSrsmLeV7TatYmPIw/y8XGZLLLlrqbBjt3s8jId+iwhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURa3A3EyIuG5zjaVjQm1Jjf3tvbswHwYDVR0j BBgwFoAUdJ6PbF8i0YpwtoL4bGXs0+onY1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWU4ZGIzOC02M2E4LTQxM2MtYTlmNi1jYzIyM2FmYTRhNzUvMC83NDlFOEY2QzVG MjJEMThBNzBCNjgyRjg2QzY1RUNEM0VBMjc2MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNFQTI3 NjM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVD RDNFQTI3NjM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhbBw0rdUi7hv34/0BrtNQ8csyEYGLPAAeT erwo2wxw6cJ9iznTzfsZ4JrMhpGukr9V+eO5yf6G1TGTLkz752/UhLESvb0GelRr wO/GXSdJQLvV0gBNtWZAd2iCla1pkCXtONZep6tQ4O+INEgq8WUW+H5T4NYyQCuE 9HHJTmeFB7Ts2kLqwMNQ3PMCQAM5+Sx360lim2dgJEqrocY1SO6WslDZ+UJunWC0 QUKBprmdIJctQoqqCBGzTFvNGrPQYlIyvzaZAmzMtz08z1zgX8BT8KQJKbauXLno 75+grplOK3eka/p+qQ5DUC3B4Or/vaECWSxddT1ATJsbZCDlw1I= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:45 2025 by rpki-client