$ rpki-client -vvf repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft File: 744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft (raw, json) Hash identifier: QZ8NW541imJzKfiMhShcwMrXlcWef5wJdsY3fqZuGSY= Subject key identifier: 00:6C:89:45:9C:1A:22:37:06:91:1D:60:FE:BA:D5:1C:4B:C0:BB:DB Authority key identifier: 74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23 Certificate issuer: /CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323 Certificate serial: 5445A50D19055E7EB384E60A2D0C50F39124E2E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft Manifest number: 0123 Signing time: Mon 20 Oct 2025 02:31:01 +0000 Manifest this update: Mon 20 Oct 2025 02:26:01 +0000 Manifest next update: Thu 23 Oct 2025 05:56:01 +0000 Files and hashes: 1: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: bdGVInKG942n8PXL1PKuGQ0Pq5j+ZmOgUrMT9tNRThE=) 2: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: 4R0ewsQUFLUVyE7+RSBY5nMwWIm0sLWkA4V0ZrdAVrk=) 3: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: 5SmTajAharPZV3QJPqwQSw9HbsdUe2nEolyVEBBASJU=) 4: 744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl (hash: iLio1hL25nYaiFhRdiuD74XY4J/fePTZsPa2gKV3Ukk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:45:a5:0d:19:05:5e:7e:b3:84:e6:0a:2d:0c:50:f3:91:24:e2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323 Validity Not Before: Oct 20 02:26:01 2025 GMT Not After : Oct 23 05:56:01 2025 GMT Subject: CN=006C89459C1A223706911D60FEBAD51C4BC0BBDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:14:f2:63:fb:74:d2:10:bc:f2:7b:c0:48:83: fe:9d:75:07:fe:c2:90:ed:53:2e:20:23:c4:04:a5: 78:48:b5:7f:d7:40:70:b9:9f:fa:0f:ea:fb:85:30: e2:08:a3:75:56:b7:16:8e:a6:48:15:f4:a4:f2:e4: a5:fa:00:d1:77:0c:1d:0c:f1:9c:ca:b0:81:c9:4a: 19:b1:7f:da:6a:e7:4b:d3:a5:ed:08:1c:f9:ac:4b: 2a:de:d1:65:67:0a:a5:36:5e:b2:22:27:35:7a:b0: 9b:85:8e:4d:c5:56:00:65:23:c6:3b:23:86:bd:c8: 24:b2:29:f7:81:bd:9e:d9:e5:0a:f3:bc:72:10:c3: fb:a7:3a:cf:ad:ab:62:56:d2:da:1f:1e:8f:9e:dc: 4c:b0:2c:71:02:0f:8f:cc:35:f0:7d:42:f7:59:62: b3:c0:79:5c:6a:2a:65:84:8c:80:de:f9:d4:0d:45: 88:9f:91:b4:96:f2:d9:0a:44:02:01:04:e8:e9:00: 27:1e:ab:0b:b7:a5:54:36:99:c3:88:b5:28:0d:6b: 99:e4:a7:43:e6:8e:d8:a8:52:5e:de:09:cd:6b:1f: de:f0:78:7c:d3:4d:1a:95:d2:86:c5:93:37:a1:40: 21:ba:84:87:7c:d6:ab:25:83:71:1a:8a:b6:9b:7f: 84:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6C:89:45:9C:1A:22:37:06:91:1D:60:FE:BA:D5:1C:4B:C0:BB:DB X509v3 Authority Key Identifier: keyid:74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:04:1b:20:83:69:fa:21:f0:63:a4:50:8f:b4:67:32:29:af: d6:12:f8:19:96:c4:7f:18:bc:94:ef:0e:02:bc:f8:09:76:56: f8:3b:46:b2:fb:e3:5e:59:65:f5:74:de:3f:78:aa:1d:e5:ef: dd:9e:57:0c:7e:38:4c:da:c3:b2:8f:02:6c:99:43:22:8a:14: 93:9b:3d:2d:8a:52:35:25:49:7a:57:67:a8:6c:52:9f:b9:64: d4:bf:eb:cb:ac:40:e3:b5:42:e8:7d:99:53:38:02:55:bb:34: aa:52:a5:0c:72:67:43:72:7a:cf:f6:6e:d0:9a:8e:16:6e:eb: 90:6f:ac:70:60:b1:1c:51:1f:88:2d:cc:97:90:e3:7f:f4:95: 80:a9:ff:ac:74:e3:f8:39:2e:6c:85:7e:b9:a1:fa:21:49:f3: 6d:29:c7:05:14:cd:ec:ae:d4:6d:99:e9:48:45:a2:6c:7f:91: bf:9d:04:b0:91:fc:fa:ba:68:f2:b1:c6:d4:66:10:b2:fe:91: 77:d4:27:a5:f0:a1:dd:78:48:e1:f0:23:63:2e:71:72:fc:c1: 49:c6:dd:d0:b3:46:af:0a:25:f6:29:a5:54:2d:80:e3:27:89: f9:02:fa:e2:f9:1f:8c:2b:83:98:15:81:3c:1f:ce:74:f0:5f: f4:9f:76:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVEWlDRkFXn6zhOYKLQxQ85Ek4ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5 OEY0MzMyMzAeFw0yNTEwMjAwMjI2MDFaFw0yNTEwMjMwNTU2MDFaMDMxMTAvBgNV BAMTKDAwNkM4OTQ1OUMxQTIyMzcwNjkxMUQ2MEZFQkFENTFDNEJDMEJCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaFPJj+3TSELzye8BIg/6ddQf+ wpDtUy4gI8QEpXhItX/XQHC5n/oP6vuFMOIIo3VWtxaOpkgV9KTy5KX6ANF3DB0M 8ZzKsIHJShmxf9pq50vTpe0IHPmsSyre0WVnCqU2XrIiJzV6sJuFjk3FVgBlI8Y7 I4a9yCSyKfeBvZ7Z5QrzvHIQw/unOs+tq2JW0tofHo+e3EywLHECD4/MNfB9QvdZ YrPAeVxqKmWEjIDe+dQNRYifkbSW8tkKRAIBBOjpACceqwu3pVQ2mcOItSgNa5nk p0PmjtioUl7eCc1rH97weHzTTRqV0obFkzehQCG6hId81qslg3Eairabf4TbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAGyJRZwaIjcGkR1g/rrVHEvAu9swHwYDVR0j BBgwFoAUdE+X4d8b1tN+bC6o8CwIhJj0MyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODBkZGU5NC1lNWJlLTRkMjktYmIxMi00NWZiNWMxZDJjNzkvMC83NDRGOTdFMURG MUJENkQzN0U2QzJFQThGMDJDMDg4NDk4RjQzMzIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5OEY0 MzMyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgwZGRlOTQtZTViZS00ZDI5LWJi MTItNDVmYjVjMWQyYzc5LzAvNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4 ODQ5OEY0MzMyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEEGyCDafoh8GOkUI+0ZzIpr9YS+BmWxH8Y vJTvDgK8+Al2Vvg7RrL7415ZZfV03j94qh3l792eVwx+OEzaw7KPAmyZQyKKFJOb PS2KUjUlSXpXZ6hsUp+5ZNS/68usQOO1Quh9mVM4AlW7NKpSpQxyZ0Nyes/2btCa jhZu65BvrHBgsRxRH4gtzJeQ43/0lYCp/6x04/g5LmyFfrmh+iFJ820pxwUUzeyu 1G2Z6UhFomx/kb+dBLCR/Pq6aPKxxtRmELL+kXfUJ6Xwod14SOHwI2MucXL8wUnG 3dCzRq8KJfYppVQtgOMnifkC+uL5H4wrg5gVgTwfznTwX/SfdoE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:35 2025 by rpki-client