$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json) Hash identifier: okH2QWU8xlZfWwdm77NLm7+I0LVsbko7B5khiee48K4= Subject key identifier: 11:91:19:06:EC:39:6E:AE:DD:5C:E7:82:AC:56:90:FD:5A:2D:20:71 Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Certificate serial: 38695E43744281AAD3BE96CC3CE6ED1E058D5C0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft Manifest number: 01F7 Signing time: Sun 19 Oct 2025 06:21:45 +0000 Manifest this update: Sun 19 Oct 2025 06:16:45 +0000 Manifest next update: Wed 22 Oct 2025 16:57:45 +0000 Files and hashes: 1: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: wlhhz4T86+ShRU2p6Up+KvbeI0BWxilrsa27X54ni/4=) 2: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: mk5IpUy/e+wjt2vP9xbWdQkAc+Gu8dQSrB9Z1Ss56Sg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:69:5e:43:74:42:81:aa:d3:be:96:cc:3c:e6:ed:1e:05:8d:5c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Validity Not Before: Oct 19 06:16:45 2025 GMT Not After : Oct 22 16:57:45 2025 GMT Subject: CN=11911906EC396EAEDD5CE782AC5690FD5A2D2071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:d3:41:b3:81:5b:a2:9d:f8:95:2d:89:0a: 0d:71:19:ef:72:b9:8e:f2:bd:13:cc:e2:d8:38:91: c6:cd:eb:09:c7:42:f1:50:d0:93:2c:32:56:5b:2b: 47:ce:d4:69:ac:63:d1:55:7b:db:da:58:cb:73:29: 68:f2:8b:90:51:15:28:1c:65:ee:bd:15:04:f2:08: 35:5a:98:9f:95:f5:15:ab:bf:1a:4d:e2:62:b0:e1: a2:77:b3:ef:12:39:78:72:ba:c5:db:73:94:99:7a: 47:bb:7f:01:69:1d:45:3e:65:be:71:99:36:62:09: 75:19:d4:fd:2f:60:29:a1:17:ab:5e:0b:26:56:9f: 69:7b:00:4d:eb:08:df:fa:93:e6:0d:c4:ac:b1:b9: 8e:b9:41:40:e7:ab:45:c7:c5:5f:22:74:f7:94:30: 6f:e3:72:de:97:9f:29:53:d8:b6:af:06:b4:89:80: 71:55:0c:d3:27:eb:ad:26:12:54:cc:a6:8d:03:5a: 8a:ed:64:69:e3:02:41:8c:97:56:b6:b4:df:c8:bc: 30:b4:a5:ed:10:ea:e3:b3:c3:2a:b8:f7:39:a7:92: e7:ad:86:1e:cc:ca:77:cf:3f:ac:b6:50:9c:c0:01: 9d:ac:90:87:c0:a2:2e:cd:a4:ea:e3:31:59:27:9e: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:91:19:06:EC:39:6E:AE:DD:5C:E7:82:AC:56:90:FD:5A:2D:20:71 X509v3 Authority Key Identifier: keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7a:4f:49:d2:50:ab:0a:50:98:8c:10:04:f0:11:57:8a:39: 1e:1f:7c:a7:a5:3b:1c:27:86:50:3b:0f:6d:1b:95:cd:54:39: da:00:ca:7f:32:5f:d3:14:8e:ee:88:0c:5f:d1:aa:0b:8b:5b: 5a:87:31:1c:55:93:38:2c:12:89:ab:17:6b:8c:a2:b5:95:18: e5:2e:00:53:d9:ef:52:3d:ce:ad:32:52:fc:62:a0:8a:bd:ac: 80:77:2d:a5:ef:4d:38:d6:01:8a:58:04:cf:8f:16:21:22:28: ae:95:2f:b1:15:a4:9a:b6:d5:b7:5e:02:20:d9:00:16:a9:1c: 6b:2e:9f:17:9a:49:a5:d5:60:51:58:b8:c3:29:6f:65:17:f0: 2c:ba:61:6a:06:1a:2f:35:6f:c9:e8:84:d7:b5:2a:85:a0:76: c9:7d:af:79:40:37:b7:ef:10:37:aa:ce:91:0f:57:d6:02:b4: 38:a8:64:87:a3:7b:e6:8c:2f:76:b3:33:da:31:38:dd:7f:bc: 67:3e:68:ca:8f:37:37:22:03:68:3f:2e:eb:ae:9c:b4:be:90: eb:51:4e:6b:c6:ce:51:64:d5:fd:c9:4e:6e:ac:ba:b5:81:9b: f7:bc:9b:6c:c5:49:6f:d7:6c:a6:6e:92:68:25:bb:5e:3d:ba: 5b:5a:43:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGleQ3RCgarTvpbMPObtHgWNXA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3 OEM2MTJEMDAeFw0yNTEwMTkwNjE2NDVaFw0yNTEwMjIxNjU3NDVaMDMxMTAvBgNV BAMTKDExOTExOTA2RUMzOTZFQUVERDVDRTc4MkFDNTY5MEZENUEyRDIwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCritNBs4Fbop34lS2JCg1xGe9y uY7yvRPM4tg4kcbN6wnHQvFQ0JMsMlZbK0fO1GmsY9FVe9vaWMtzKWjyi5BRFSgc Ze69FQTyCDVamJ+V9RWrvxpN4mKw4aJ3s+8SOXhyusXbc5SZeke7fwFpHUU+Zb5x mTZiCXUZ1P0vYCmhF6teCyZWn2l7AE3rCN/6k+YNxKyxuY65QUDnq0XHxV8idPeU MG/jct6XnylT2LavBrSJgHFVDNMn660mElTMpo0DWortZGnjAkGMl1a2tN/IvDC0 pe0Q6uOzwyq49zmnkuethh7MynfPP6y2UJzAAZ2skIfAoi7NpOrjMVknntu/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEZEZBuw5bq7dXOeCrFaQ/VotIHEwHwYDVR0j BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2 MTJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIw OEE3OEM2MTJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAh6T0nSUKsKUJiMEATwEVeKOR4ffKelOxwn hlA7D20blc1UOdoAyn8yX9MUju6IDF/RqguLW1qHMRxVkzgsEomrF2uMorWVGOUu AFPZ71I9zq0yUvxioIq9rIB3LaXvTTjWAYpYBM+PFiEiKK6VL7EVpJq21bdeAiDZ ABapHGsunxeaSaXVYFFYuMMpb2UX8Cy6YWoGGi81b8nohNe1KoWgdsl9r3lAN7fv EDeqzpEPV9YCtDioZIeje+aML3azM9oxON1/vGc+aMqPNzciA2g/LuuunLS+kOtR TmvGzlFk1f3JTm6surWBm/e8m2zFSW/XbKZukmglu149ultaQzg= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:49 2025 by rpki-client