$ rpki-client -vvf repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft File: 748B52A8C3E54FEB10B3067D1E130242894DB86F.mft (raw, json) Hash identifier: 70FVEtM3gAhmIpyfriUkxsIulJwbpX0Hh4UD0FqRhNE= Subject key identifier: 2B:4B:74:E8:0B:FD:78:F1:26:70:C9:1B:8F:59:25:BD:7A:0E:B0:3E Authority key identifier: 74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F Certificate issuer: /CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Certificate serial: 203B773D0F8D020990AC9AF4C5913C9BFF5F38DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft Manifest number: 019D Signing time: Mon 20 Oct 2025 03:11:16 +0000 Manifest this update: Mon 20 Oct 2025 03:06:16 +0000 Manifest next update: Thu 23 Oct 2025 07:31:16 +0000 Files and hashes: 1: 748B52A8C3E54FEB10B3067D1E130242894DB86F.crl (hash: Liip71Ud7ZiFwqR8EU1O+nWqpAtuseyjaIvgjhjr90M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3b:77:3d:0f:8d:02:09:90:ac:9a:f4:c5:91:3c:9b:ff:5f:38:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Validity Not Before: Oct 20 03:06:16 2025 GMT Not After : Oct 23 07:31:16 2025 GMT Subject: CN=2B4B74E80BFD78F12670C91B8F5925BD7A0EB03E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:a3:49:c5:c3:93:ee:06:42:30:0d:d9:49: 86:49:a8:61:be:4c:34:8d:0f:16:b3:6e:31:e0:de: 1c:64:8f:20:3b:e3:26:b8:6f:82:57:8b:fc:f0:ab: cd:50:4e:41:cb:ae:f8:fe:d3:8c:ec:68:b1:1f:48: 32:c1:41:0c:c9:c5:8e:d4:cd:95:d3:51:ca:75:cb: e5:5a:86:ca:09:b8:e1:80:fe:95:17:af:3b:52:13: 60:b5:eb:7f:ca:61:19:41:f6:cb:06:06:aa:14:18: 0d:06:58:8c:92:ff:06:19:57:3a:e6:c9:4c:8a:38: 8f:8c:af:2f:bd:25:8e:e2:b3:49:9d:ef:93:f4:56: f6:a6:d3:4d:d5:b8:40:f5:cf:59:63:ae:8a:b3:d5: 32:f3:fb:6d:b6:54:d0:c6:f3:cb:d9:6b:00:c0:cb: d5:2a:a5:43:25:be:90:a4:d4:79:bd:38:95:d0:10: 3f:e1:72:16:a4:c2:1d:9c:1f:b0:89:30:79:26:c0: f1:8a:6a:59:5b:a4:50:42:21:4f:4f:27:bf:fb:bf: 49:8f:53:28:30:d7:9f:8e:0d:e6:64:a3:ad:f1:c9: 18:1d:cd:38:2a:15:7b:e6:9c:af:82:bd:d5:80:d9: 0e:28:cb:97:f0:92:ba:69:0e:a9:1d:94:79:a5:d5: b2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4B:74:E8:0B:FD:78:F1:26:70:C9:1B:8F:59:25:BD:7A:0E:B0:3E X509v3 Authority Key Identifier: keyid:74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6d:34:a9:55:00:37:ab:f0:b8:3c:7f:64:39:b2:be:9c:62: 4c:75:39:4f:57:5c:4d:f7:a5:56:e3:0c:10:21:f6:8b:93:09: ad:f6:a1:65:f0:cb:7a:2f:a3:24:c2:e9:0d:fa:83:cc:0f:6c: 25:d6:07:4a:5b:6e:11:45:19:f2:94:e9:21:55:72:e3:5b:62: 02:b8:32:c6:29:e4:11:38:56:32:a1:5c:2e:e0:a7:dc:9c:05: b7:c9:53:be:88:b0:9f:b2:12:1f:ca:1c:47:d0:b5:db:b9:23: 01:c1:4d:93:fc:b7:8c:fd:95:50:0c:7d:87:e2:02:1f:aa:62: c0:8b:fc:6b:28:20:7a:9b:b5:c0:54:dc:16:50:ba:7c:f7:ea: eb:46:99:a5:9d:24:d2:bc:82:8a:ee:88:c2:cf:ae:51:ca:cb: b6:59:69:50:cb:0d:43:fb:6a:78:bc:10:a9:04:54:38:55:a9: f9:53:ed:9a:a7:57:d2:da:df:b9:7f:2b:3b:d7:9c:3c:31:81: 54:6f:99:9d:a4:bb:4a:c7:4a:8e:e9:54:6d:0a:74:3c:08:61: b4:52:84:dc:83:a4:4f:7b:ba:53:4e:a0:43:61:9c:ed:d4:1c: 38:0b:a2:1b:c6:3a:07:5a:ab:24:19:e2:48:a8:47:3e:49:d0: ff:bf:0f:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDt3PQ+NAgmQrJr0xZE8m/9fON4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4 OTREQjg2RjAeFw0yNTEwMjAwMzA2MTZaFw0yNTEwMjMwNzMxMTZaMDMxMTAvBgNV BAMTKDJCNEI3NEU4MEJGRDc4RjEyNjcwQzkxQjhGNTkyNUJEN0EwRUIwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVKNJxcOT7gZCMA3ZSYZJqGG+ TDSNDxazbjHg3hxkjyA74ya4b4JXi/zwq81QTkHLrvj+04zsaLEfSDLBQQzJxY7U zZXTUcp1y+VahsoJuOGA/pUXrztSE2C163/KYRlB9ssGBqoUGA0GWIyS/wYZVzrm yUyKOI+Mry+9JY7is0md75P0Vvam003VuED1z1ljroqz1TLz+222VNDG88vZawDA y9UqpUMlvpCk1Hm9OJXQED/hchakwh2cH7CJMHkmwPGKallbpFBCIU9PJ7/7v0mP Uygw15+ODeZko63xyRgdzTgqFXvmnK+CvdWA2Q4oy5fwkrppDqkdlHml1bJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK0t06Av9ePEmcMkbj1klvXoOsD4wHwYDVR0j BBgwFoAUdItSqMPlT+sQswZ9HhMCQolNuG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDNlOWNkNi1iOTBkLTRjOGUtYjBkNi0yMWE1NTI5ZjcyOTEvMC83NDhCNTJBOEMz RTU0RkVCMTBCMzA2N0QxRTEzMDI0Mjg5NERCODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4OTRE Qjg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAy NDI4OTREQjg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJtNKlVADer8Lg8f2Q5sr6cYkx1OU9XXE33 pVbjDBAh9ouTCa32oWXwy3ovoyTC6Q36g8wPbCXWB0pbbhFFGfKU6SFVcuNbYgK4 MsYp5BE4VjKhXC7gp9ycBbfJU76IsJ+yEh/KHEfQtdu5IwHBTZP8t4z9lVAMfYfi Ah+qYsCL/GsoIHqbtcBU3BZQunz36utGmaWdJNK8goruiMLPrlHKy7ZZaVDLDUP7 ani8EKkEVDhVqflT7ZqnV9La37l/KzvXnDwxgVRvmZ2ku0rHSo7pVG0KdDwIYbRS hNyDpE97ulNOoENhnO3UHDgLohvGOgdaqyQZ4kioRz5J0P+/D7U= -----END CERTIFICATE-----Generated at Mon Oct 20 09:27:33 2025 by rpki-client