$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json) Hash identifier: 4XUvupjA6Y0ijmDSRBxt7Dk9UwsrBB/nT4aET0QYIK4= Subject key identifier: A2:31:3D:33:91:51:4C:8D:5D:71:ED:6C:13:E6:D9:2B:63:EC:3F:C7 Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Certificate serial: 126A0F627F58E47B606D9B8CA73CA161A37757EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft Manifest number: 01C5 Signing time: Sun 29 Jun 2025 21:51:45 +0000 Manifest this update: Sun 29 Jun 2025 21:46:45 +0000 Manifest next update: Wed 02 Jul 2025 23:24:45 +0000 Files and hashes: 1: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: 3QnTf0YoXQJscuCwYg1KPE+WmW7axIlOxVDNOVS8XGY=) 2: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: LxMwNxJqtsDAew6t2HZWJN3elxDUrVZNuiLgSdrPlIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6a:0f:62:7f:58:e4:7b:60:6d:9b:8c:a7:3c:a1:61:a3:77:57:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Validity Not Before: Jun 29 21:46:45 2025 GMT Not After : Jul 2 23:24:45 2025 GMT Subject: CN=A2313D3391514C8D5D71ED6C13E6D92B63EC3FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:42:6b:2e:89:3b:8c:db:4c:33:53:4f:be:15: b3:20:75:48:fb:45:c9:83:3a:b6:be:93:43:c9:52: 06:ff:d6:e5:4d:8e:66:c1:2c:ae:98:4f:c7:76:f7: 92:3e:22:4e:f3:42:44:16:e0:a7:68:fe:a4:09:f3: 37:f5:7f:b5:43:0b:d9:84:05:c6:68:c8:49:97:45: 67:33:f6:5f:ed:74:f2:bc:28:6c:43:97:b5:9f:db: 9d:e6:ea:29:e6:fe:e6:40:da:32:80:8b:8e:32:3b: 7b:ba:48:ad:57:84:09:90:37:86:20:dc:eb:58:48: 6c:71:25:29:ef:a2:53:a1:45:71:cf:22:1a:51:f2: 36:7f:69:03:14:af:2a:21:e8:37:86:16:24:63:e3: 70:65:18:a1:44:0f:43:c2:37:bc:fe:19:5a:bf:fd: 81:80:41:c4:ce:8c:19:06:13:94:38:cd:c7:9f:6d: eb:4a:ea:af:3f:21:e2:02:8a:9a:83:57:95:37:b5: 5e:c2:42:63:6d:e9:63:94:52:4b:12:fd:fd:00:ca: d4:94:72:00:87:ad:99:0a:f4:a4:9b:13:71:04:ed: 89:54:48:18:33:a7:52:72:59:5a:6c:1a:cd:e6:e7: 6d:f0:51:34:a1:f3:7b:da:4f:3f:92:95:04:da:02: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:31:3D:33:91:51:4C:8D:5D:71:ED:6C:13:E6:D9:2B:63:EC:3F:C7 X509v3 Authority Key Identifier: keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:88:15:cd:dc:a6:4e:2d:61:dd:b5:1f:fd:41:cc:a4:bf:45: 81:d6:a4:aa:d5:ed:5e:49:4a:be:48:56:9a:04:ac:97:10:3b: 42:07:30:36:55:0d:a8:d6:ed:28:7d:30:91:3f:b8:d8:3f:c4: d7:af:29:e8:da:9d:c5:aa:c8:a3:1f:55:0b:72:4e:6c:2c:8b: 10:ff:38:4b:12:f9:cc:d1:f0:52:f8:26:e5:24:f7:52:a4:fd: 3b:05:cc:ee:ad:83:af:7e:a8:a6:ba:75:4f:e9:dd:11:bc:7b: e7:a9:20:38:3c:77:64:d4:09:6e:5a:01:2b:94:a2:ce:de:55: 01:8d:2a:b3:c2:b0:55:ae:ff:d3:2d:c0:44:6e:0f:5a:8f:02: 1a:80:cc:d6:04:aa:98:f9:a0:08:46:c2:38:79:2e:98:bc:b6: 33:22:45:91:9a:ba:56:fd:0b:d5:2b:ad:98:6d:b7:35:86:8b: 52:bc:ee:99:7a:ed:84:fa:4d:1b:ac:89:05:a6:42:23:4d:d1: 15:85:89:7c:95:0c:62:2f:46:9f:d3:93:86:41:1c:79:f9:e2: 7f:32:34:3f:72:9e:9b:1e:1d:29:c0:4d:fd:c4:65:93:3f:24: 00:b6:6d:03:53:cb:e2:a2:54:c1:a9:c9:ab:c1:5b:e3:72:b9: 9b:1d:7d:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmoPYn9Y5HtgbZuMpzyhYaN3V+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3 OEM2MTJEMDAeFw0yNTA2MjkyMTQ2NDVaFw0yNTA3MDIyMzI0NDVaMDMxMTAvBgNV BAMTKEEyMzEzRDMzOTE1MTRDOEQ1RDcxRUQ2QzEzRTZEOTJCNjNFQzNGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQmsuiTuM20wzU0++FbMgdUj7 RcmDOra+k0PJUgb/1uVNjmbBLK6YT8d295I+Ik7zQkQW4Kdo/qQJ8zf1f7VDC9mE BcZoyEmXRWcz9l/tdPK8KGxDl7Wf253m6inm/uZA2jKAi44yO3u6SK1XhAmQN4Yg 3OtYSGxxJSnvolOhRXHPIhpR8jZ/aQMUryoh6DeGFiRj43BlGKFED0PCN7z+GVq/ /YGAQcTOjBkGE5Q4zcefbetK6q8/IeICipqDV5U3tV7CQmNt6WOUUksS/f0AytSU cgCHrZkK9KSbE3EE7YlUSBgzp1JyWVpsGs3m523wUTSh83vaTz+SlQTaAuQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUojE9M5FRTI1dce1sE+bZK2PsP8cwHwYDVR0j BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2 MTJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIw OEE3OEM2MTJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiIFc3cpk4tYd21H/1BzKS/RYHWpKrV7V5J Sr5IVpoErJcQO0IHMDZVDajW7Sh9MJE/uNg/xNevKejancWqyKMfVQtyTmwsixD/ OEsS+czR8FL4JuUk91Kk/TsFzO6tg69+qKa6dU/p3RG8e+epIDg8d2TUCW5aASuU os7eVQGNKrPCsFWu/9MtwERuD1qPAhqAzNYEqpj5oAhGwjh5Lpi8tjMiRZGaulb9 C9UrrZhttzWGi1K87pl67YT6TRusiQWmQiNN0RWFiXyVDGIvRp/Tk4ZBHHn54n8y ND9ynpseHSnATf3EZZM/JAC2bQNTy+KiVMGpyavBW+NyuZsdfeY= -----END CERTIFICATE-----Generated at Mon Jun 30 00:44:33 2025 by rpki-client