$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft (raw, json) Hash identifier: 5CYnbEuGthkZcpRoiLQO/flQHyzn5puASy1eV/A84rI= Subject key identifier: 9D:D8:DC:F3:29:42:05:48:0B:93:80:64:F3:1A:D2:70:8F:72:96:ED Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Certificate serial: 3951025483561FB59C3D76A1F701D06E7F0AAB2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft Manifest number: 0120 Signing time: Sat 19 Jul 2025 05:51:05 +0000 Manifest this update: Sat 19 Jul 2025 05:46:05 +0000 Manifest next update: Tue 22 Jul 2025 12:29:05 +0000 Files and hashes: 1: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: LAATNsnHcnoJWKciQROoRwDYWcBiokYiUiwzyLuS2UY=) 2: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: gY0MYBLnrNGMInBtjBk2fVW/5Y8HTuVN7KMpfZNbvwM=) 3: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: dJaS59sTNR5P0zfWxcM9Q8SeRwLPq4ilnHYQElEDNMo=) 4: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl (hash: HFuHYWNiGdunyp+PHCzx9x43GtlOg18PPKEuvryf9Ks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:51:02:54:83:56:1f:b5:9c:3d:76:a1:f7:01:d0:6e:7f:0a:ab:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Validity Not Before: Jul 19 05:46:05 2025 GMT Not After : Jul 22 12:29:05 2025 GMT Subject: CN=9DD8DCF3294205480B938064F31AD2708F7296ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:53:66:a9:0f:fb:74:7f:cc:27:7c:6c:f0:89: f9:cf:39:bc:97:1e:36:17:9d:92:4b:e4:1a:73:4e: d3:35:1f:9f:39:64:20:90:fa:3c:86:ca:27:86:af: de:43:a7:ea:76:a1:5b:58:2a:4e:7f:6d:0a:25:38: c0:f2:c3:e6:52:9d:3d:3c:8c:f2:d6:17:9a:4b:d9: 38:88:17:b9:ec:71:34:be:33:ea:84:46:8d:ba:d4: 11:be:33:39:9d:03:eb:a3:ff:5b:57:6a:95:3c:ca: 4e:df:fb:79:d0:8d:9c:da:df:12:19:35:3d:23:0d: 50:94:2a:c1:69:a0:19:95:75:c5:55:7b:92:0b:11: 34:a0:70:ed:46:c3:77:ae:e1:fa:52:b2:fd:cb:ef: 4a:da:9f:72:12:b7:6b:76:1d:75:8e:5e:9d:6d:25: 7a:01:eb:0f:40:84:e7:7f:29:26:fd:03:fb:11:f0: cb:5d:ae:35:a0:d4:89:28:10:84:9f:ae:62:18:c8: 58:92:06:e1:f5:2d:ba:90:9b:25:c8:6e:a5:39:65: e8:22:64:f8:82:20:2a:35:10:09:7e:0d:57:c8:ad: e5:56:9f:9b:94:eb:9e:0d:17:46:aa:a7:02:8c:24: f6:67:50:0b:2d:86:b6:7e:67:16:ac:fb:92:f9:a6: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D8:DC:F3:29:42:05:48:0B:93:80:64:F3:1A:D2:70:8F:72:96:ED X509v3 Authority Key Identifier: keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c1:48:ac:a9:01:47:43:29:73:82:81:dd:91:0e:a6:fa:ac: 94:c2:5a:71:a3:0e:4a:0c:aa:ca:5a:b3:b9:91:01:1c:b5:93: 6a:95:8f:71:28:aa:e8:2d:67:c8:a7:45:5c:09:49:55:5c:18: ca:92:cc:70:e2:00:26:ff:0d:04:b5:5d:8f:0d:f2:b6:7f:47: 12:bd:4a:12:03:67:47:79:de:32:41:bc:8b:34:f2:cd:c0:be: 64:37:74:98:25:dd:4c:61:1f:a3:14:f0:3a:56:9c:79:53:1a: d8:20:e2:35:12:1e:b5:d5:4d:83:ae:df:ab:4b:dc:7b:94:97: f1:18:cc:ca:f7:9f:2f:33:4b:79:46:4a:89:1b:87:da:28:06: 75:b6:ba:0d:ce:95:1d:8f:7b:69:d3:67:ea:8a:e7:59:97:f6: 85:91:a7:b2:e3:92:47:f0:f1:06:a9:af:a4:a2:a8:0c:6d:1b: e4:c2:11:2d:23:c0:cb:32:78:fa:e5:54:0b:5e:03:79:eb:ea: d8:71:c1:8a:6d:e3:bd:a4:d8:44:4b:3f:0e:40:8b:25:bb:b5: 4f:9a:7f:42:62:42:13:28:86:69:82:31:9a:3b:af:7d:df:00: 7e:f9:b9:9c:52:24:bb:b0:5f:05:96:c7:62:85:be:52:76:2d: 01:ae:2b:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVECVINWH7WcPXah9wHQbn8Kqy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5 M0QxOTZENjAeFw0yNTA3MTkwNTQ2MDVaFw0yNTA3MjIxMjI5MDVaMDMxMTAvBgNV BAMTKDlERDhEQ0YzMjk0MjA1NDgwQjkzODA2NEYzMUFEMjcwOEY3Mjk2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfU2apD/t0f8wnfGzwifnPObyX HjYXnZJL5BpzTtM1H585ZCCQ+jyGyieGr95Dp+p2oVtYKk5/bQolOMDyw+ZSnT08 jPLWF5pL2TiIF7nscTS+M+qERo261BG+MzmdA+uj/1tXapU8yk7f+3nQjZza3xIZ NT0jDVCUKsFpoBmVdcVVe5ILETSgcO1Gw3eu4fpSsv3L70ran3ISt2t2HXWOXp1t JXoB6w9AhOd/KSb9A/sR8MtdrjWg1IkoEISfrmIYyFiSBuH1LbqQmyXIbqU5Zegi ZPiCICo1EAl+DVfIreVWn5uU654NF0aqpwKMJPZnUAsthrZ+Zxas+5L5pqR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUndjc8ylCBUgLk4Bk8xrScI9ylu0wHwYDVR0j BBgwFoAU0fcuZ9qczgkET6QgTqmTrpPRltYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC9EMUY3MkU2N0RB OUNDRTA5MDQ0RkE0MjA0RUE5OTNBRTkzRDE5NkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5M0Qx OTZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkz QUU5M0QxOTZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7BSKypAUdDKXOCgd2RDqb6rJTCWnGjDkoM qspas7mRARy1k2qVj3EoqugtZ8inRVwJSVVcGMqSzHDiACb/DQS1XY8N8rZ/RxK9 ShIDZ0d53jJBvIs08s3AvmQ3dJgl3UxhH6MU8DpWnHlTGtgg4jUSHrXVTYOu36tL 3HuUl/EYzMr3ny8zS3lGSokbh9ooBnW2ug3OlR2Pe2nTZ+qK51mX9oWRp7Ljkkfw 8Qapr6SiqAxtG+TCES0jwMsyePrlVAteA3nr6thxwYpt472k2ERLPw5AiyW7tU+a f0JiQhMohmmCMZo7r33fAH75uZxSJLuwXwWWx2KFvlJ2LQGuK20= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:36 2025 by rpki-client