$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft (raw, json) Hash identifier: jqO6yEUawjurEw53CwnSdDEg/ZovsDoLEROmiP7pheg= Subject key identifier: 5B:26:01:64:B5:BB:0C:B6:89:0E:0B:1A:41:20:2E:77:2A:85:D7:95 Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Certificate serial: 6DEF80C3279E948BEC84E8ACF5F7D42E400DB440 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft Manifest number: 012F Signing time: Thu 21 Aug 2025 14:11:04 +0000 Manifest this update: Thu 21 Aug 2025 14:06:04 +0000 Manifest next update: Sun 24 Aug 2025 23:22:04 +0000 Files and hashes: 1: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl (hash: V5NKtfox6AfZDg4n7lAuHIataZhC/haAn+wfwYkjNhw=) 2: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: gY0MYBLnrNGMInBtjBk2fVW/5Y8HTuVN7KMpfZNbvwM=) 3: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: dJaS59sTNR5P0zfWxcM9Q8SeRwLPq4ilnHYQElEDNMo=) 4: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: LAATNsnHcnoJWKciQROoRwDYWcBiokYiUiwzyLuS2UY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ef:80:c3:27:9e:94:8b:ec:84:e8:ac:f5:f7:d4:2e:40:0d:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Validity Not Before: Aug 21 14:06:04 2025 GMT Not After : Aug 24 23:22:04 2025 GMT Subject: CN=5B260164B5BB0CB6890E0B1A41202E772A85D795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3a:27:13:b2:e6:aa:c6:61:25:02:33:a2:6f: 74:3b:d6:e0:76:26:8b:e0:39:4b:d2:7d:92:4e:65: 49:03:e1:b9:f9:14:fe:27:87:b7:b9:3f:b8:fa:42: a7:2a:c9:03:66:ce:61:58:7f:5b:ab:77:c7:db:a0: dc:68:73:3d:29:ed:7b:27:a4:8a:ff:2b:2a:58:fa: 6d:5b:b9:4a:32:06:5d:df:b3:80:55:49:f8:75:ee: 38:4a:28:c6:00:27:34:e6:de:2e:e9:92:94:26:4d: 33:62:ee:17:75:5c:72:21:93:94:33:39:cb:1f:09: a9:e6:da:05:7c:67:10:39:78:87:31:e5:52:77:04: 93:56:ab:71:16:85:55:03:43:bd:b7:a0:9c:43:3b: fb:ab:30:9d:eb:70:71:9f:93:63:b3:c6:0d:9b:1a: c9:5d:b2:84:2a:f6:ef:5d:df:0b:ab:14:0f:43:2a: 75:64:8c:99:2d:a8:d9:fa:e7:25:26:7a:23:c3:eb: ad:0f:1e:d8:2a:70:69:56:2b:bb:9b:86:12:85:4d: 5d:31:e6:f6:91:71:b5:53:49:dc:f2:23:f9:1e:6d: 43:93:7c:72:db:a7:4e:1d:60:49:4a:32:11:da:87: 68:de:2e:86:dd:8c:90:19:cf:5f:19:b4:2e:b3:48: 4e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:26:01:64:B5:BB:0C:B6:89:0E:0B:1A:41:20:2E:77:2A:85:D7:95 X509v3 Authority Key Identifier: keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:1d:59:cd:76:77:30:27:14:73:41:6e:1f:4d:5a:bd:e1:e3: 90:c5:92:3e:25:e6:85:c3:b3:c1:07:26:d5:74:57:d2:93:6f: 90:b5:1c:ed:9d:fc:0a:6c:89:a5:98:ce:83:98:b9:b5:7a:d1: 83:10:85:ba:3c:66:bf:0e:7a:a0:d6:e2:e3:90:02:28:0f:3b: 55:ba:b0:60:06:87:c4:64:35:c2:85:f2:6e:93:9e:06:60:ae: 87:cc:5d:ea:8f:f5:30:0d:69:e1:71:06:0f:d2:b2:df:46:36: 14:64:cd:4b:11:c5:00:2d:ca:cd:4d:16:9c:d0:b4:a0:b8:cd: 7e:6e:2d:e4:4c:cb:7c:f3:57:5b:92:30:7f:14:7d:34:8c:32: 0c:cb:2e:a3:89:1c:3d:08:f9:bf:1b:81:70:63:0a:26:86:05: 92:30:2c:64:0b:91:b6:e2:20:4c:78:51:90:1c:fd:06:84:33: 5a:27:d6:68:be:1f:5a:88:de:b5:2d:b7:63:67:1b:06:88:b3: 09:88:11:bc:43:c9:35:57:c0:07:bf:4d:71:29:71:06:77:73: 4c:dd:58:30:39:9e:24:df:02:12:18:8b:90:5e:58:71:c9:47: d6:1f:73:c0:f7:24:48:1a:46:a5:14:55:09:fe:43:40:4e:68: 38:08:a5:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbe+AwyeelIvshOis9ffULkANtEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5 M0QxOTZENjAeFw0yNTA4MjExNDA2MDRaFw0yNTA4MjQyMzIyMDRaMDMxMTAvBgNV BAMTKDVCMjYwMTY0QjVCQjBDQjY4OTBFMEIxQTQxMjAyRTc3MkE4NUQ3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgOicTsuaqxmElAjOib3Q71uB2 JovgOUvSfZJOZUkD4bn5FP4nh7e5P7j6QqcqyQNmzmFYf1urd8fboNxocz0p7Xsn pIr/KypY+m1buUoyBl3fs4BVSfh17jhKKMYAJzTm3i7pkpQmTTNi7hd1XHIhk5Qz OcsfCanm2gV8ZxA5eIcx5VJ3BJNWq3EWhVUDQ723oJxDO/urMJ3rcHGfk2Ozxg2b GsldsoQq9u9d3wurFA9DKnVkjJktqNn65yUmeiPD660PHtgqcGlWK7ubhhKFTV0x 5vaRcbVTSdzyI/kebUOTfHLbp04dYElKMhHah2jeLobdjJAZz18ZtC6zSE6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWyYBZLW7DLaJDgsaQSAudyqF15UwHwYDVR0j BBgwFoAU0fcuZ9qczgkET6QgTqmTrpPRltYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC9EMUY3MkU2N0RB OUNDRTA5MDQ0RkE0MjA0RUE5OTNBRTkzRDE5NkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5M0Qx OTZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkz QUU5M0QxOTZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQdWc12dzAnFHNBbh9NWr3h45DFkj4l5oXD s8EHJtV0V9KTb5C1HO2d/ApsiaWYzoOYubV60YMQhbo8Zr8OeqDW4uOQAigPO1W6 sGAGh8RkNcKF8m6TngZgrofMXeqP9TANaeFxBg/Sst9GNhRkzUsRxQAtys1NFpzQ tKC4zX5uLeRMy3zzV1uSMH8UfTSMMgzLLqOJHD0I+b8bgXBjCiaGBZIwLGQLkbbi IEx4UZAc/QaEM1on1mi+H1qI3rUtt2NnGwaIswmIEbxDyTVXwAe/TXEpcQZ3c0zd WDA5niTfAhIYi5BeWHHJR9Yfc8D3JEgaRqUUVQn+Q0BOaDgIpUg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:58:58 2025 by rpki-client