$ rpki-client -vvf repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft File: 744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft (raw, json) Hash identifier: wHlF/93Y0/3+Z8V6AaBO/JOM/he61wbeLwbI/zXr5Ic= Subject key identifier: 56:B5:B3:4E:2B:0C:1E:30:C5:F3:BE:D1:1C:7A:AB:68:82:84:02:65 Authority key identifier: 74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23 Certificate issuer: /CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323 Certificate serial: 2A70A3BC2DFB7D8AA8672C9C6947B91FCF64232A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft Manifest number: F1 Signing time: Sat 28 Jun 2025 02:10:59 +0000 Manifest this update: Sat 28 Jun 2025 02:05:59 +0000 Manifest next update: Tue 01 Jul 2025 12:35:59 +0000 Files and hashes: 1: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: 4R0ewsQUFLUVyE7+RSBY5nMwWIm0sLWkA4V0ZrdAVrk=) 2: 744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl (hash: nV/J2YwHweZZd7FWB+TNAn9k/dEA0TcLTNzd1QUNj5M=) 3: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: 5SmTajAharPZV3QJPqwQSw9HbsdUe2nEolyVEBBASJU=) 4: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: bdGVInKG942n8PXL1PKuGQ0Pq5j+ZmOgUrMT9tNRThE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 12:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:70:a3:bc:2d:fb:7d:8a:a8:67:2c:9c:69:47:b9:1f:cf:64:23:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323 Validity Not Before: Jun 28 02:05:59 2025 GMT Not After : Jul 1 12:35:59 2025 GMT Subject: CN=56B5B34E2B0C1E30C5F3BED11C7AAB6882840265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:53:2c:36:41:f6:90:49:e1:cb:6e:1c:82: cb:7a:c9:fd:08:74:29:9c:aa:fe:84:d7:28:48:ed: 4b:b8:bd:80:31:e7:1e:a8:fc:ce:c2:47:d9:cf:f7: b6:69:04:f7:60:93:f2:e4:52:ca:ab:84:79:27:4a: 26:47:3d:eb:cf:ed:02:70:3b:96:08:60:c2:73:36: c7:19:09:da:dd:c7:58:92:cd:f1:a9:4c:01:db:b4: 95:03:db:0e:b2:bf:2e:e9:7f:bd:65:e5:98:b5:fc: 33:23:60:7f:b2:4d:f2:3c:92:78:03:31:d5:06:09: 18:6d:fd:10:ab:94:9a:b5:68:8e:19:22:ec:f5:20: 32:35:db:fd:0f:5e:9b:10:96:c1:00:13:a0:49:b0: e3:10:eb:53:de:07:06:7c:4e:ce:d6:5e:59:76:c5: de:8b:58:13:a5:cc:31:68:9a:c5:e7:2b:7f:61:18: d9:67:52:ef:df:49:91:14:54:41:86:44:52:e7:bb: 91:54:07:f7:81:83:7d:eb:1c:0a:6d:8a:bb:dc:f3: 36:d4:f6:a3:70:a7:4e:06:0e:91:ed:eb:dc:ce:c5: e2:d6:93:05:07:c2:3f:56:35:89:80:82:8a:c9:1b: d3:0b:ad:b1:c7:76:5d:b8:6a:e8:aa:ec:3b:10:cc: 6b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B5:B3:4E:2B:0C:1E:30:C5:F3:BE:D1:1C:7A:AB:68:82:84:02:65 X509v3 Authority Key Identifier: keyid:74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f4:35:12:a6:28:1c:7e:e6:5e:f3:ed:ae:5c:42:c6:d4:7b: c3:b7:99:fb:e9:51:dd:90:23:31:28:d3:37:9e:c6:47:76:d0: e5:d2:0e:f1:39:fa:38:d8:fd:de:77:cb:b5:82:ca:cc:e6:dc: fe:a9:1d:30:0c:c6:cd:89:0c:77:6f:66:ca:c2:40:15:b5:7e: 9e:47:e6:84:0e:5d:9b:6f:3e:e1:c0:e1:73:fc:e8:4c:10:1c: 1f:37:8b:d5:ad:47:15:f5:05:a2:51:20:6c:10:e3:60:47:2f: 24:80:76:2d:e1:f7:6d:5f:b8:0f:94:65:8d:5b:16:be:f4:ff: 74:73:b4:51:ee:63:0c:fa:8c:a0:be:18:f0:ea:04:e4:93:96: 79:a1:e2:96:02:88:3a:66:7c:50:df:7a:9d:a3:dd:a8:c1:c3: 80:b2:95:0d:84:2d:e2:04:4d:27:78:fe:ec:e4:5f:a5:c6:c9: 54:28:48:55:35:59:6c:29:34:7e:27:c1:be:1a:e8:7e:1f:00: da:40:91:33:a9:4e:ce:44:33:2d:ed:94:cc:18:f7:dd:9c:aa: 33:b7:13:9e:21:d5:f4:8a:5f:e7:50:e1:e2:f8:96:47:23:3f: 22:71:95:90:26:7e:6c:51:7c:00:7c:fa:df:47:70:3e:ac:2f: 92:9c:b9:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKnCjvC37fYqoZyycaUe5H89kIyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5 OEY0MzMyMzAeFw0yNTA2MjgwMjA1NTlaFw0yNTA3MDExMjM1NTlaMDMxMTAvBgNV BAMTKDU2QjVCMzRFMkIwQzFFMzBDNUYzQkVEMTFDN0FBQjY4ODI4NDAyNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHlMsNkH2kEnhy24cgst6yf0I dCmcqv6E1yhI7Uu4vYAx5x6o/M7CR9nP97ZpBPdgk/LkUsqrhHknSiZHPevP7QJw O5YIYMJzNscZCdrdx1iSzfGpTAHbtJUD2w6yvy7pf71l5Zi1/DMjYH+yTfI8kngD MdUGCRht/RCrlJq1aI4ZIuz1IDI12/0PXpsQlsEAE6BJsOMQ61PeBwZ8Ts7WXll2 xd6LWBOlzDFomsXnK39hGNlnUu/fSZEUVEGGRFLnu5FUB/eBg33rHAptirvc8zbU 9qNwp04GDpHt69zOxeLWkwUHwj9WNYmAgorJG9MLrbHHdl24auiq7DsQzGtpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVrWzTisMHjDF877RHHqraIKEAmUwHwYDVR0j BBgwFoAUdE+X4d8b1tN+bC6o8CwIhJj0MyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODBkZGU5NC1lNWJlLTRkMjktYmIxMi00NWZiNWMxZDJjNzkvMC83NDRGOTdFMURG MUJENkQzN0U2QzJFQThGMDJDMDg4NDk4RjQzMzIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5OEY0 MzMyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgwZGRlOTQtZTViZS00ZDI5LWJi MTItNDVmYjVjMWQyYzc5LzAvNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4 ODQ5OEY0MzMyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEz0NRKmKBx+5l7z7a5cQsbUe8O3mfvpUd2Q IzEo0zeexkd20OXSDvE5+jjY/d53y7WCyszm3P6pHTAMxs2JDHdvZsrCQBW1fp5H 5oQOXZtvPuHA4XP86EwQHB83i9WtRxX1BaJRIGwQ42BHLySAdi3h921fuA+UZY1b Fr70/3RztFHuYwz6jKC+GPDqBOSTlnmh4pYCiDpmfFDfep2j3ajBw4CylQ2ELeIE TSd4/uzkX6XGyVQoSFU1WWwpNH4nwb4a6H4fANpAkTOpTs5EMy3tlMwY992cqjO3 E54h1fSKX+dQ4eL4lkcjPyJxlZAmfmxRfAB8+t9HcD6sL5KcuYE= -----END CERTIFICATE-----Generated at Sun Jun 29 18:54:52 2025 by rpki-client