$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json) Hash identifier: v5QnnRIXBQYuJjSpkQkJ0nyKBZ5yOc8bXdUSbAYFpGQ= Subject key identifier: 54:42:57:21:6B:6E:80:AF:B6:E0:71:DF:B4:C2:9C:92:F9:B2:39:B4 Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Certificate serial: 18AB1932F59117B908DF39F41B738844130DD5D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft Manifest number: 01D6 Signing time: Wed 06 Aug 2025 21:01:47 +0000 Manifest this update: Wed 06 Aug 2025 20:56:47 +0000 Manifest next update: Sun 10 Aug 2025 06:03:47 +0000 Files and hashes: 1: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: eQf+lBiG06rbfde7F9jIGqOJ246J+2+eNoXWgBG4vH4=) 2: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: LxMwNxJqtsDAew6t2HZWJN3elxDUrVZNuiLgSdrPlIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ab:19:32:f5:91:17:b9:08:df:39:f4:1b:73:88:44:13:0d:d5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Validity Not Before: Aug 6 20:56:47 2025 GMT Not After : Aug 10 06:03:47 2025 GMT Subject: CN=544257216B6E80AFB6E071DFB4C29C92F9B239B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fd:77:ee:d9:37:3e:13:db:49:29:8b:52:55: 5d:39:df:31:f1:6f:79:35:b6:0c:7b:24:66:d3:ca: a2:3d:af:45:5e:b6:38:02:91:c4:01:36:68:62:5b: 50:a7:2d:31:3e:32:14:0f:36:4c:b0:78:21:31:f9: e2:9f:42:b2:d4:3c:44:58:ba:aa:49:25:54:d5:ce: a5:85:3c:e7:52:97:db:b4:fc:46:22:f9:93:8a:d7: b9:43:86:23:1a:3f:fe:b5:6a:35:91:04:8b:85:63: 32:88:9b:a8:59:7f:55:64:80:03:21:06:04:ce:42: 9c:e3:84:62:d1:dc:d4:a1:39:40:74:c1:c8:c1:ae: 4e:5e:82:8b:34:5b:37:dd:ca:2f:3d:98:cf:3d:d5: 39:c5:fd:45:88:b8:21:a6:0a:1a:47:f6:b9:6e:16: 62:e9:c1:6c:b6:56:a2:51:3a:3d:24:5e:42:3e:4c: 95:fd:cb:5c:95:d3:3a:64:d5:f6:ad:65:bf:07:a2: ba:61:17:ca:30:6f:f9:cb:0f:96:ee:c9:1c:72:f4: 79:4b:35:4d:ed:69:d1:dd:77:2a:45:7c:da:6c:d2: 4f:eb:5c:d9:5c:9a:1e:ae:27:ad:5a:df:72:f4:97: c5:a0:09:81:f1:49:63:c6:fc:67:7f:78:3b:23:97: 6b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:42:57:21:6B:6E:80:AF:B6:E0:71:DF:B4:C2:9C:92:F9:B2:39:B4 X509v3 Authority Key Identifier: keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:cf:4a:24:9d:83:fa:73:40:d8:14:4c:28:9a:af:16:3c:6a: 45:06:ce:c5:e8:1f:1a:b3:e9:41:fa:ed:c2:69:c9:2d:30:5c: c1:ac:01:b8:f7:53:7f:30:53:ad:ec:07:22:ba:3e:44:6f:24: f7:7a:21:81:dd:4d:26:a0:1a:91:63:83:42:95:20:c1:18:19: 77:55:21:97:3b:91:dc:e6:a3:5f:ce:f4:74:4e:df:d3:89:30: e0:b9:f3:e0:7b:49:11:2f:c1:8d:7e:7c:b9:3d:f0:29:f4:92: 92:e5:19:3c:a6:8f:b6:56:49:8a:bd:6f:55:c9:bc:92:ef:58: 40:9c:76:46:ad:dd:85:0f:7e:7a:ad:88:9a:88:74:a3:d6:52: cd:76:90:aa:f6:7f:90:0b:8c:fe:9e:59:01:ba:63:91:08:77: a1:07:d0:50:e0:02:cc:06:07:0f:ec:44:b6:b0:8f:58:96:fe: fb:16:56:39:b3:0f:88:65:c4:5d:a1:11:6f:1c:00:16:b8:52: 6f:ee:17:8a:91:59:8e:ba:94:c7:37:5e:dc:ff:b2:b2:e0:a2: 20:09:a3:34:4d:0a:9e:3a:54:f4:1a:53:da:e5:bd:52:ca:f7: c0:fa:49:22:48:18:14:0e:b0:71:d8:1a:12:ff:b0:91:35:23: 7a:3f:ad:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGKsZMvWRF7kI3zn0G3OIRBMN1dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3 OEM2MTJEMDAeFw0yNTA4MDYyMDU2NDdaFw0yNTA4MTAwNjAzNDdaMDMxMTAvBgNV BAMTKDU0NDI1NzIxNkI2RTgwQUZCNkUwNzFERkI0QzI5QzkyRjlCMjM5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/Xfu2Tc+E9tJKYtSVV053zHx b3k1tgx7JGbTyqI9r0VetjgCkcQBNmhiW1CnLTE+MhQPNkyweCEx+eKfQrLUPERY uqpJJVTVzqWFPOdSl9u0/EYi+ZOK17lDhiMaP/61ajWRBIuFYzKIm6hZf1VkgAMh BgTOQpzjhGLR3NShOUB0wcjBrk5egos0Wzfdyi89mM891TnF/UWIuCGmChpH9rlu FmLpwWy2VqJROj0kXkI+TJX9y1yV0zpk1fatZb8HorphF8owb/nLD5buyRxy9HlL NU3tadHddypFfNps0k/rXNlcmh6uJ61a33L0l8WgCYHxSWPG/Gd/eDsjl2s/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVEJXIWtugK+24HHftMKckvmyObQwHwYDVR0j BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2 MTJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIw OEE3OEM2MTJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDPSiSdg/pzQNgUTCiarxY8akUGzsXoHxqz 6UH67cJpyS0wXMGsAbj3U38wU63sByK6PkRvJPd6IYHdTSagGpFjg0KVIMEYGXdV IZc7kdzmo1/O9HRO39OJMOC58+B7SREvwY1+fLk98Cn0kpLlGTymj7ZWSYq9b1XJ vJLvWECcdkat3YUPfnqtiJqIdKPWUs12kKr2f5ALjP6eWQG6Y5EId6EH0FDgAswG Bw/sRLawj1iW/vsWVjmzD4hlxF2hEW8cABa4Um/uF4qRWY66lMc3Xtz/srLgoiAJ ozRNCp46VPQaU9rlvVLK98D6SSJIGBQOsHHYGhL/sJE1I3o/rSA= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:18 2025 by rpki-client