$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft (raw, json) Hash identifier: phrJwmHunB3weRsU8j60PAqrzi0e062tqdGK4dvnBcs= Subject key identifier: 9A:EF:4E:2B:7A:3F:AD:C0:CA:01:EC:0D:86:21:5F:DC:16:0D:57:2E Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Certificate serial: 17EC20112A91BC77DE1DC432ADA89D2B3B815DD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft Manifest number: 0149 Signing time: Sat 18 Oct 2025 21:31:04 +0000 Manifest this update: Sat 18 Oct 2025 21:26:04 +0000 Manifest next update: Wed 22 Oct 2025 06:39:04 +0000 Files and hashes: 1: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl (hash: JO8kGGQBFu0CQ0u3Hbp1T9GTB/3Z21ebe1H+G2PAI9E=) 2: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: dJaS59sTNR5P0zfWxcM9Q8SeRwLPq4ilnHYQElEDNMo=) 3: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: gY0MYBLnrNGMInBtjBk2fVW/5Y8HTuVN7KMpfZNbvwM=) 4: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: LAATNsnHcnoJWKciQROoRwDYWcBiokYiUiwzyLuS2UY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ec:20:11:2a:91:bc:77:de:1d:c4:32:ad:a8:9d:2b:3b:81:5d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Validity Not Before: Oct 18 21:26:04 2025 GMT Not After : Oct 22 06:39:04 2025 GMT Subject: CN=9AEF4E2B7A3FADC0CA01EC0D86215FDC160D572E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:aa:1b:09:93:c9:ff:43:d8:19:98:d6:12:c9: d8:55:95:a5:2b:64:b5:20:e6:8a:93:1d:86:af:bc: 9a:99:f2:4b:ba:75:c5:28:ff:c1:b5:bd:cf:d4:9b: 0c:25:89:3b:f6:27:7d:0e:e8:27:b8:a2:03:75:82: 2f:6e:b5:c2:be:8b:c8:2c:af:33:12:4b:c2:ba:9f: 71:1f:2c:62:33:dc:0d:26:9f:2e:9b:2b:0e:a7:66: 01:cc:ff:3e:c9:61:5e:da:60:6d:08:ac:03:01:af: 42:74:08:08:5e:8c:5b:fe:68:29:28:a5:09:04:a8: 78:5e:92:25:63:e8:d1:0c:15:e9:9b:b6:e1:98:98: 7d:ee:26:0a:59:b8:7a:3e:d5:be:78:e5:b2:c2:57: 43:98:c9:9e:be:a9:26:23:82:b8:e2:ae:4b:59:2a: 58:b9:6e:fb:01:0b:6c:29:bf:fd:3d:51:4b:5b:7b: 5b:5b:89:3e:3d:aa:e2:bc:9e:a5:37:86:6d:25:09: 1f:4a:19:09:75:1e:4f:18:0b:5f:d8:a8:ac:3c:a1: 3d:ba:e9:8f:a5:0a:31:20:8f:47:c5:57:5b:a1:90: 9f:1c:ff:4a:a9:53:b8:11:0a:41:1c:d0:e8:7a:12: ec:f6:3a:86:01:94:45:9d:87:06:14:51:6a:df:c7: 8c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EF:4E:2B:7A:3F:AD:C0:CA:01:EC:0D:86:21:5F:DC:16:0D:57:2E X509v3 Authority Key Identifier: keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0e:68:0e:a5:d5:c9:55:6c:71:7e:19:cc:6b:66:02:2a:10: 5f:56:bb:d1:8a:78:3f:7c:35:1a:56:75:9e:38:2b:bf:af:ac: cf:c2:71:dc:51:06:ac:70:67:40:50:3f:27:cf:ce:eb:24:d0: db:90:e2:b1:92:6d:3b:3d:46:f8:f7:33:5d:1c:ef:c0:d5:dc: 3c:c1:d5:46:14:6e:45:24:6e:c6:65:12:c4:fe:e1:f5:ad:ae: 9d:72:fb:05:56:88:d4:f8:db:d8:6d:05:85:03:49:86:9d:83: 1c:12:65:30:1b:01:c5:d3:e0:9d:d0:25:95:00:4e:7a:42:fd: 02:49:6a:3b:f5:cb:9d:db:85:b4:2d:6b:1d:39:14:1c:23:af: ac:db:5c:5b:75:50:ae:4a:fc:57:84:03:fb:40:cc:ea:e5:da: 0a:ed:01:26:0f:27:90:46:f4:f3:99:77:df:c8:cb:99:e7:a2: 26:c3:56:b3:3d:e5:99:6d:02:01:cd:13:18:81:a9:1b:bf:8c: 2a:d8:8f:a8:f0:cb:51:83:d9:85:45:49:3e:1a:7a:a4:2b:09: f0:d9:5a:94:28:82:cb:55:db:38:73:13:f7:77:9d:37:0c:7a: 56:ba:27:65:d6:b8:5a:9c:df:75:57:7b:7c:26:29:86:06:a2: a7:ea:8a:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+wgESqRvHfeHcQyraidKzuBXdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5 M0QxOTZENjAeFw0yNTEwMTgyMTI2MDRaFw0yNTEwMjIwNjM5MDRaMDMxMTAvBgNV BAMTKDlBRUY0RTJCN0EzRkFEQzBDQTAxRUMwRDg2MjE1RkRDMTYwRDU3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqhsJk8n/Q9gZmNYSydhVlaUr ZLUg5oqTHYavvJqZ8ku6dcUo/8G1vc/UmwwliTv2J30O6Ce4ogN1gi9utcK+i8gs rzMSS8K6n3EfLGIz3A0mny6bKw6nZgHM/z7JYV7aYG0IrAMBr0J0CAhejFv+aCko pQkEqHhekiVj6NEMFembtuGYmH3uJgpZuHo+1b545bLCV0OYyZ6+qSYjgrjirktZ Kli5bvsBC2wpv/09UUtbe1tbiT49quK8nqU3hm0lCR9KGQl1Hk8YC1/YqKw8oT26 6Y+lCjEgj0fFV1uhkJ8c/0qpU7gRCkEc0Oh6Euz2OoYBlEWdhwYUUWrfx4w5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmu9OK3o/rcDKAewNhiFf3BYNVy4wHwYDVR0j BBgwFoAU0fcuZ9qczgkET6QgTqmTrpPRltYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC9EMUY3MkU2N0RB OUNDRTA5MDQ0RkE0MjA0RUE5OTNBRTkzRDE5NkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5M0Qx OTZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkz QUU5M0QxOTZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8OaA6l1clVbHF+GcxrZgIqEF9Wu9GKeD98 NRpWdZ44K7+vrM/CcdxRBqxwZ0BQPyfPzusk0NuQ4rGSbTs9Rvj3M10c78DV3DzB 1UYUbkUkbsZlEsT+4fWtrp1y+wVWiNT429htBYUDSYadgxwSZTAbAcXT4J3QJZUA TnpC/QJJajv1y53bhbQtax05FBwjr6zbXFt1UK5K/FeEA/tAzOrl2grtASYPJ5BG 9POZd9/Iy5nnoibDVrM95ZltAgHNExiBqRu/jCrYj6jwy1GD2YVFST4aeqQrCfDZ WpQogstV2zhzE/d3nTcMela6J2XWuFqc33VXe3wmKYYGoqfqimU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:23 2025 by rpki-client