$ rpki-client -vvf repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft File: 744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft (raw, json) Hash identifier: bxJKgKdSA5zXsdTATqGdg8BVYHjV3XJm1BU+o4KumCM= Subject key identifier: D4:59:B7:FD:AF:17:F9:EC:DF:B4:B8:71:31:9E:E8:29:B8:3C:F6:0F Authority key identifier: 74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23 Certificate issuer: /CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323 Certificate serial: 1C710603A8AB29AD76E99493CD50E1D928F2F9E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft Manifest number: 0109 Signing time: Thu 21 Aug 2025 22:20:59 +0000 Manifest this update: Thu 21 Aug 2025 22:15:59 +0000 Manifest next update: Mon 25 Aug 2025 08:05:59 +0000 Files and hashes: 1: 744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl (hash: sxNHw7zi8kE96kkChEz4q+Ns7D+K4PiJTgDkXjE8NUM=) 2: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: bdGVInKG942n8PXL1PKuGQ0Pq5j+ZmOgUrMT9tNRThE=) 3: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: 5SmTajAharPZV3QJPqwQSw9HbsdUe2nEolyVEBBASJU=) 4: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: 4R0ewsQUFLUVyE7+RSBY5nMwWIm0sLWkA4V0ZrdAVrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:71:06:03:a8:ab:29:ad:76:e9:94:93:cd:50:e1:d9:28:f2:f9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323 Validity Not Before: Aug 21 22:15:59 2025 GMT Not After : Aug 25 08:05:59 2025 GMT Subject: CN=D459B7FDAF17F9ECDFB4B871319EE829B83CF60F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c6:eb:b5:08:6a:f6:a4:bf:0e:22:80:b4:23: 0a:fc:d0:11:e5:6e:2e:31:0c:c9:8f:fe:13:ea:29: 24:27:3f:00:33:73:a0:a8:75:76:64:67:68:1d:46: a6:7f:73:13:da:e2:8b:18:e5:3b:3e:35:78:ae:3c: 78:37:c1:40:f3:b5:fe:c9:18:ff:68:19:19:bc:99: bd:83:aa:72:cc:85:f5:e9:df:7b:89:12:06:11:99: 71:a0:2a:8c:45:61:b6:33:71:36:ef:f5:b4:12:d2: 5e:98:c4:d7:d3:e8:05:06:b8:47:f6:ee:7a:d0:ab: a7:a6:41:9e:1f:5c:3a:42:e9:ce:90:b6:0d:e7:81: 63:7b:18:2d:b6:de:69:4b:eb:dc:6e:60:24:51:dd: 05:73:a6:96:e5:a1:87:48:4a:1e:c8:f5:e1:57:1a: 4c:ef:42:17:c0:83:6c:32:1d:1d:93:90:07:54:d2: 37:28:14:86:1d:bf:d4:d7:13:a5:33:1c:dc:8b:b6: 42:be:e3:60:b9:48:8d:96:81:02:a4:8e:2b:c2:da: 56:98:8b:b9:37:a6:61:5f:0b:40:6d:28:6c:ef:5f: 0b:4f:71:89:f6:c5:06:61:3a:3d:ea:d9:99:16:33: 58:5f:1a:47:a7:1b:cc:c6:63:02:49:1f:40:e8:72: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:59:B7:FD:AF:17:F9:EC:DF:B4:B8:71:31:9E:E8:29:B8:3C:F6:0F X509v3 Authority Key Identifier: keyid:74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:1a:ab:22:bb:0f:3d:12:fb:d8:8a:f7:7b:d8:2c:6a:15:c4: 04:6f:0b:5f:6b:78:ae:bd:6c:0b:8c:9d:00:76:77:17:c3:75: 67:2f:88:90:bc:2b:52:2c:2f:d9:e1:4b:cb:51:70:13:11:ab: 38:a4:41:9e:1b:93:4b:24:5c:ad:05:5f:0a:15:01:48:ad:04: 32:39:db:35:31:8b:b5:fc:4c:3f:bf:d9:36:59:f2:0d:c1:ca: f4:42:15:df:58:65:7a:39:d4:5a:dc:d5:a8:da:b5:2b:57:0c: cf:ad:bc:9c:7f:ea:a2:58:01:85:56:e4:55:d8:3d:95:14:41: 6c:ba:a1:54:53:6b:9c:f7:cc:d5:f6:29:68:d8:79:99:83:c7: b2:62:c1:09:19:71:4e:80:db:01:2e:b8:b4:d1:ad:bd:87:a7: a9:ce:d1:c4:70:f1:f2:ab:6f:1c:87:43:cb:1f:86:0c:78:51: e7:50:cd:47:dc:dd:b8:30:58:3b:07:36:18:58:17:0f:09:2a: 0b:23:1b:78:c2:73:4a:29:0f:fa:04:43:7d:1e:68:29:94:42: 7c:60:87:1f:13:d7:54:a0:a2:f7:32:b9:1d:ee:4c:7b:47:3b: 82:fc:bd:47:5b:00:1c:c3:e4:d9:c2:3c:3b:c9:d5:a4:44:9b: f1:c8:66:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHEGA6irKa126ZSTzVDh2Sjy+egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5 OEY0MzMyMzAeFw0yNTA4MjEyMjE1NTlaFw0yNTA4MjUwODA1NTlaMDMxMTAvBgNV BAMTKEQ0NTlCN0ZEQUYxN0Y5RUNERkI0Qjg3MTMxOUVFODI5QjgzQ0Y2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxuu1CGr2pL8OIoC0Iwr80BHl bi4xDMmP/hPqKSQnPwAzc6CodXZkZ2gdRqZ/cxPa4osY5Ts+NXiuPHg3wUDztf7J GP9oGRm8mb2DqnLMhfXp33uJEgYRmXGgKoxFYbYzcTbv9bQS0l6YxNfT6AUGuEf2 7nrQq6emQZ4fXDpC6c6Qtg3ngWN7GC223mlL69xuYCRR3QVzppbloYdISh7I9eFX GkzvQhfAg2wyHR2TkAdU0jcoFIYdv9TXE6UzHNyLtkK+42C5SI2WgQKkjivC2laY i7k3pmFfC0BtKGzvXwtPcYn2xQZhOj3q2ZkWM1hfGkenG8zGYwJJH0DocguRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Fm3/a8X+ezftLhxMZ7oKbg89g8wHwYDVR0j BBgwFoAUdE+X4d8b1tN+bC6o8CwIhJj0MyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODBkZGU5NC1lNWJlLTRkMjktYmIxMi00NWZiNWMxZDJjNzkvMC83NDRGOTdFMURG MUJENkQzN0U2QzJFQThGMDJDMDg4NDk4RjQzMzIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5OEY0 MzMyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgwZGRlOTQtZTViZS00ZDI5LWJi MTItNDVmYjVjMWQyYzc5LzAvNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4 ODQ5OEY0MzMyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL8aqyK7Dz0S+9iK93vYLGoVxARvC19reK69 bAuMnQB2dxfDdWcviJC8K1IsL9nhS8tRcBMRqzikQZ4bk0skXK0FXwoVAUitBDI5 2zUxi7X8TD+/2TZZ8g3ByvRCFd9YZXo51Frc1ajatStXDM+tvJx/6qJYAYVW5FXY PZUUQWy6oVRTa5z3zNX2KWjYeZmDx7JiwQkZcU6A2wEuuLTRrb2Hp6nO0cRw8fKr bxyHQ8sfhgx4UedQzUfc3bgwWDsHNhhYFw8JKgsjG3jCc0opD/oEQ30eaCmUQnxg hx8T11SgovcyuR3uTHtHO4L8vUdbABzD5NnCPDvJ1aREm/HIZgA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:14 2025 by rpki-client