$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json) Hash identifier: /xYXOmJ4idp459Xjxy5roxm1L6cTBXZHnm+rzkibAfc= Subject key identifier: 10:4A:02:74:C6:A7:72:C6:61:DA:AD:6C:5F:95:18:86:01:A1:83:6E Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Certificate serial: 768F736D794AD6CBFE3022591B12E3228D1A4685 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft Manifest number: 01CE Signing time: Sun 20 Jul 2025 04:11:41 +0000 Manifest this update: Sun 20 Jul 2025 04:06:41 +0000 Manifest next update: Wed 23 Jul 2025 12:55:41 +0000 Files and hashes: 1: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: oPcc6o9YMDb9wxtUBYT49V79+XflBzUHm0VVNf5kD5c=) 2: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: LxMwNxJqtsDAew6t2HZWJN3elxDUrVZNuiLgSdrPlIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 12:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8f:73:6d:79:4a:d6:cb:fe:30:22:59:1b:12:e3:22:8d:1a:46:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Validity Not Before: Jul 20 04:06:41 2025 GMT Not After : Jul 23 12:55:41 2025 GMT Subject: CN=104A0274C6A772C661DAAD6C5F95188601A1836E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:3b:8c:7e:9b:82:99:5e:b3:95:f5:a1:ab: 7b:2e:21:5f:b1:2c:c2:21:31:b5:c6:90:f4:9e:68: 06:bf:55:a0:5b:a1:c6:8c:c8:10:f9:97:e9:b6:3f: 07:ea:19:64:d3:b6:35:12:05:30:89:57:42:3b:94: 52:73:28:40:5f:3e:78:19:3b:8a:a1:6d:6a:7c:cd: 06:73:94:13:db:d6:c1:5d:84:dc:41:5d:34:98:b1: bb:73:6d:2a:81:bf:05:45:31:15:64:ed:72:a8:89: c3:22:92:9d:16:07:27:f9:e0:bb:96:a9:73:71:24: 19:8e:e7:d1:2b:e2:4b:78:f6:7b:33:8c:8b:4e:25: 26:9d:5a:6c:98:e0:a6:52:d7:a6:cc:37:3f:88:9d: 15:e7:f0:ee:95:8f:55:2f:c7:eb:33:4b:63:b4:0a: 32:60:2a:be:a1:20:1f:1d:8b:b4:91:65:5a:74:ac: 16:e5:14:0f:fe:e6:3b:cb:24:5b:ce:6c:04:0b:e8: 1c:ab:76:0f:38:aa:54:cf:d8:73:d0:4e:ab:ab:04: 8c:13:8a:e0:88:71:7c:12:63:b6:3e:91:c2:ca:4d: d9:f0:20:5b:fa:9b:69:81:24:4f:0c:2e:63:18:97: 90:a4:e0:bf:20:9c:b8:14:2b:02:09:2b:51:4a:63: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4A:02:74:C6:A7:72:C6:61:DA:AD:6C:5F:95:18:86:01:A1:83:6E X509v3 Authority Key Identifier: keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:16:2b:e2:bc:c4:2d:ed:22:6a:9b:98:69:66:1a:08:70:8c: 98:aa:9b:44:9e:a9:d1:b0:cc:80:41:c3:a2:de:23:c6:2d:b5: 94:9f:ba:2e:40:dd:d7:65:12:82:99:78:f8:5f:f9:e0:bb:99: c6:05:25:e6:68:81:5b:f0:cb:bc:85:02:a9:0e:0a:a2:6c:83: 25:3d:03:2d:6f:94:20:17:bb:1f:62:93:ea:d3:04:22:f9:27: 8f:91:49:20:2f:9b:21:2c:24:2a:5f:27:36:3e:9a:4e:da:67: 8a:f6:76:36:e6:8e:43:73:4e:db:cb:cc:cf:f3:c5:ac:2a:a4: 31:de:6e:0c:a7:cf:bf:b1:2e:3d:17:c3:4a:2c:f2:88:ba:c6: 74:c7:5a:87:a2:e9:c0:4d:54:e2:c7:26:f2:46:16:05:01:75: a1:20:17:85:5e:80:10:08:25:b1:c3:b4:11:c0:87:43:8e:42: eb:35:28:d7:b1:04:31:a2:94:35:07:8b:ff:b1:aa:b5:58:7e: 4a:f3:3b:4b:cd:95:b1:2e:51:64:49:a1:1e:fe:90:06:51:95: 81:08:19:cc:84:3f:31:c0:c6:56:49:48:c3:ad:15:36:70:ff: 59:a3:27:f9:b3:88:44:02:23:dd:22:70:b8:58:a2:2c:63:a9: 7a:fe:3b:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdo9zbXlK1sv+MCJZGxLjIo0aRoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3 OEM2MTJEMDAeFw0yNTA3MjAwNDA2NDFaFw0yNTA3MjMxMjU1NDFaMDMxMTAvBgNV BAMTKDEwNEEwMjc0QzZBNzcyQzY2MURBQUQ2QzVGOTUxODg2MDFBMTgzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoDuMfpuCmV6zlfWhq3suIV+x LMIhMbXGkPSeaAa/VaBbocaMyBD5l+m2PwfqGWTTtjUSBTCJV0I7lFJzKEBfPngZ O4qhbWp8zQZzlBPb1sFdhNxBXTSYsbtzbSqBvwVFMRVk7XKoicMikp0WByf54LuW qXNxJBmO59Er4kt49nszjItOJSadWmyY4KZS16bMNz+InRXn8O6Vj1Uvx+szS2O0 CjJgKr6hIB8di7SRZVp0rBblFA/+5jvLJFvObAQL6Byrdg84qlTP2HPQTqurBIwT iuCIcXwSY7Y+kcLKTdnwIFv6m2mBJE8MLmMYl5Ck4L8gnLgUKwIJK1FKY9UNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEEoCdMancsZh2q1sX5UYhgGhg24wHwYDVR0j BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2 MTJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIw OEE3OEM2MTJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8WK+K8xC3tImqbmGlmGghwjJiqm0SeqdGw zIBBw6LeI8YttZSfui5A3ddlEoKZePhf+eC7mcYFJeZogVvwy7yFAqkOCqJsgyU9 Ay1vlCAXux9ik+rTBCL5J4+RSSAvmyEsJCpfJzY+mk7aZ4r2djbmjkNzTtvLzM/z xawqpDHebgynz7+xLj0Xw0os8oi6xnTHWoei6cBNVOLHJvJGFgUBdaEgF4VegBAI JbHDtBHAh0OOQus1KNexBDGilDUHi/+xqrVYfkrzO0vNlbEuUWRJoR7+kAZRlYEI GcyEPzHAxlZJSMOtFTZw/1mjJ/mziEQCI90icLhYoixjqXr+O28= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:50 2025 by rpki-client