$ rpki-client -vvf repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft File: 748B52A8C3E54FEB10B3067D1E130242894DB86F.mft (raw, json) Hash identifier: Dbo4Kxyxn6mCGlfSkOEUBFP9LyNauPvIO91X7K9m518= Subject key identifier: F2:CD:C7:62:EF:F6:5F:23:BF:27:A4:57:76:0B:4E:0E:A6:81:F6:E7 Authority key identifier: 74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F Certificate issuer: /CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Certificate serial: 4ED57DAACC9A9886D422EBA4F9C53B77CF355914 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft Manifest number: 0183 Signing time: Fri 22 Aug 2025 09:53:41 +0000 Manifest this update: Fri 22 Aug 2025 09:48:41 +0000 Manifest next update: Mon 25 Aug 2025 16:43:41 +0000 Files and hashes: 1: 748B52A8C3E54FEB10B3067D1E130242894DB86F.crl (hash: UhZyddMmapmQzgO2DDzEWaiPHPXw7qDECC7ajb8isRM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d5:7d:aa:cc:9a:98:86:d4:22:eb:a4:f9:c5:3b:77:cf:35:59:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Validity Not Before: Aug 22 09:48:41 2025 GMT Not After : Aug 25 16:43:41 2025 GMT Subject: CN=F2CDC762EFF65F23BF27A457760B4E0EA681F6E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:ac:d8:96:91:cd:75:df:76:71:02:57:97: 70:7c:6d:0b:76:09:5d:31:3d:19:0c:5c:dc:39:6b: 0b:35:85:36:43:7e:73:81:ff:85:18:64:7c:9d:65: 2d:17:9b:49:a9:84:9b:da:b3:96:d5:82:96:a1:9f: 07:49:99:c4:fb:ff:01:6d:34:a5:2f:bb:ce:04:62: 14:eb:c1:33:ad:bc:17:b2:32:64:9d:6f:db:95:79: f7:15:28:2f:a3:a7:e1:20:ef:20:a0:77:8c:f4:95: 1c:3f:c5:86:e9:11:6d:8e:44:e3:08:c7:bb:6c:d2: 43:6a:38:fc:ec:de:1a:55:ca:87:72:eb:2d:3e:57: 94:ca:4e:43:01:06:f0:bc:c4:40:95:5d:ee:ab:39: 77:50:ae:5e:fa:7f:14:65:9c:29:3a:eb:cc:f6:de: e7:ef:62:2f:b9:ed:1d:98:36:1b:ce:f3:0f:49:11: af:54:fd:89:b3:61:fd:e7:1e:41:f9:78:0c:d2:88: 3b:fa:bc:0e:c1:a1:24:31:26:89:31:e4:17:e1:48: aa:85:4e:f6:44:45:c1:c9:b1:54:26:03:a1:c7:50: a4:da:5d:e5:59:bc:b2:57:87:6d:78:f1:02:bf:df: 61:d7:18:86:db:44:3d:f2:22:da:7b:0e:2a:2c:c1: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CD:C7:62:EF:F6:5F:23:BF:27:A4:57:76:0B:4E:0E:A6:81:F6:E7 X509v3 Authority Key Identifier: keyid:74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:76:17:a2:5f:04:06:52:e2:ef:c9:2f:3d:f6:e7:19:61:81: 8e:f7:d1:d0:23:be:a3:2f:47:23:b2:45:ce:65:60:da:41:48: 93:64:38:69:47:2a:e6:c0:43:da:68:ea:2c:63:fd:88:65:75: 82:34:c9:bf:e1:59:dc:6f:1f:ac:25:86:cc:c6:42:e1:cd:f7: 41:fd:98:82:0d:7b:c6:33:74:bd:c0:75:b3:1c:38:da:d4:46: 0b:7a:81:54:ec:44:3d:89:ca:d1:d0:75:bf:66:c4:f0:2c:46: 26:77:b1:a9:9f:ad:82:6b:13:74:eb:77:50:db:a5:db:36:ca: a4:01:a4:2c:dd:e3:5a:24:eb:a7:37:6e:19:21:b8:29:78:74: 93:a4:5c:52:17:78:7b:b9:f0:02:a8:ca:10:69:9c:dc:8b:e0: 4f:fa:fb:84:f0:b1:17:0a:f1:c6:85:3a:ae:56:b2:0f:c5:64: d9:63:62:6e:ee:a0:56:e8:d2:37:fd:9d:1e:24:69:37:0d:0a: 19:80:a1:ed:d4:6d:98:af:4f:53:8b:95:e8:05:1d:73:4d:53: 2c:16:e3:72:59:ed:09:36:86:06:36:e4:4f:c1:90:fa:c4:16: 18:fc:8f:79:75:24:5d:47:45:a4:a9:94:1b:bb:82:80:73:63: 3f:01:52:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtV9qsyamIbUIuuk+cU7d881WRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4 OTREQjg2RjAeFw0yNTA4MjIwOTQ4NDFaFw0yNTA4MjUxNjQzNDFaMDMxMTAvBgNV BAMTKEYyQ0RDNzYyRUZGNjVGMjNCRjI3QTQ1Nzc2MEI0RTBFQTY4MUY2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyIqzYlpHNdd92cQJXl3B8bQt2 CV0xPRkMXNw5aws1hTZDfnOB/4UYZHydZS0Xm0mphJvas5bVgpahnwdJmcT7/wFt NKUvu84EYhTrwTOtvBeyMmSdb9uVefcVKC+jp+Eg7yCgd4z0lRw/xYbpEW2OROMI x7ts0kNqOPzs3hpVyody6y0+V5TKTkMBBvC8xECVXe6rOXdQrl76fxRlnCk668z2 3ufvYi+57R2YNhvO8w9JEa9U/YmzYf3nHkH5eAzSiDv6vA7BoSQxJokx5BfhSKqF TvZERcHJsVQmA6HHUKTaXeVZvLJXh2148QK/32HXGIbbRD3yItp7DiosweKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8s3HYu/2XyO/J6RXdgtODqaB9ucwHwYDVR0j BBgwFoAUdItSqMPlT+sQswZ9HhMCQolNuG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDNlOWNkNi1iOTBkLTRjOGUtYjBkNi0yMWE1NTI5ZjcyOTEvMC83NDhCNTJBOEMz RTU0RkVCMTBCMzA2N0QxRTEzMDI0Mjg5NERCODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4OTRE Qjg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAy NDI4OTREQjg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALp2F6JfBAZS4u/JLz325xlhgY730dAjvqMv RyOyRc5lYNpBSJNkOGlHKubAQ9po6ixj/YhldYI0yb/hWdxvH6wlhszGQuHN90H9 mIINe8YzdL3AdbMcONrURgt6gVTsRD2JytHQdb9mxPAsRiZ3samfrYJrE3Trd1Db pds2yqQBpCzd41ok66c3bhkhuCl4dJOkXFIXeHu58AKoyhBpnNyL4E/6+4TwsRcK 8caFOq5Wsg/FZNljYm7uoFbo0jf9nR4kaTcNChmAoe3UbZivT1OLlegFHXNNUywW 43JZ7Qk2hgY25E/BkPrEFhj8j3l1JF1HRaSplBu7goBzYz8BUgc= -----END CERTIFICATE-----Generated at Sat Aug 23 16:48:50 2025 by rpki-client