$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json) Hash identifier: f/Ylmk2erpghErDbbtST2ENV3dETetlMEPSb4mLoHXc= Subject key identifier: 0F:0E:14:26:D5:36:A1:B6:35:61:2F:25:92:1F:C9:AD:D6:86:09:71 Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 Certificate issuer: /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Certificate serial: 44B4CAF34D2F7E0937B8C81C332B4EC0FDEE046C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft Manifest number: 017F Signing time: Thu 04 Sep 2025 18:21:31 +0000 Manifest this update: Thu 04 Sep 2025 18:16:31 +0000 Manifest next update: Sun 07 Sep 2025 22:31:31 +0000 Files and hashes: 1: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: t5cP9pI7pfpZ95tebj5VAs5xM+wyda4Uz0LABi641BU=) 2: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: Tu2pBk/URNroZW6zOqNNP1pzL3rQikcBMBsuhpkJzRA=) 3: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: y5OAfAd7fOIUB9zicQOUSyqHZ+0RV1CWpLEpWwqo3cA=) 4: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: +kGXvvTp0IkbxrGv/DEpgvQeRlEwoEyXoWledhe0tWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 22:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b4:ca:f3:4d:2f:7e:09:37:b8:c8:1c:33:2b:4e:c0:fd:ee:04:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Validity Not Before: Sep 4 18:16:31 2025 GMT Not After : Sep 7 22:31:31 2025 GMT Subject: CN=0F0E1426D536A1B635612F25921FC9ADD6860971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:3f:fd:01:07:3a:76:08:56:a2:83:63:a9: b2:bd:cf:a5:24:16:b9:a7:a7:b6:78:94:b1:9c:53: 08:03:12:d1:4d:61:f5:7c:ca:01:07:8e:1c:6c:5a: 31:74:9b:b4:c8:c8:ba:25:6d:b3:b1:c9:87:11:7b: e8:24:38:2b:2c:ae:84:d8:6c:79:65:ba:d0:71:00: 76:9b:a1:53:2c:5d:b9:6a:2d:4c:85:1a:a6:86:11: 7b:bc:e8:88:ff:46:82:35:d2:07:79:3e:8d:4a:06: 52:b7:2f:10:12:1f:9a:e3:57:f0:32:14:d4:b0:33: b4:b8:f5:89:5a:f2:82:3b:3f:69:03:6a:d1:4f:fa: 23:75:46:72:15:ff:0e:9d:3c:5b:38:b0:4b:47:0a: 91:62:eb:0a:7b:c5:46:d2:50:bd:53:ca:a5:91:88: ce:2e:d8:9f:5d:d8:d1:ae:38:df:78:32:ab:8b:50: 65:4d:38:38:9a:9e:55:5e:99:e4:a4:86:03:88:3f: 84:5e:b3:d0:2a:bd:b8:d3:31:3a:2e:22:a3:5e:b6: c8:ea:f1:21:70:62:42:42:2f:85:c8:37:30:8c:74: 60:61:4f:a6:1c:be:3c:4e:0f:8a:bc:71:e5:e6:b7: ed:08:05:0e:dc:21:dd:bd:1b:7b:a9:1e:6f:49:29: 4c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0E:14:26:D5:36:A1:B6:35:61:2F:25:92:1F:C9:AD:D6:86:09:71 X509v3 Authority Key Identifier: keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:95:4e:38:99:72:44:74:56:cd:92:67:2f:17:7e:5a:e9:59: 64:fc:59:ac:38:27:eb:9d:66:61:29:69:e3:81:97:7a:f8:10: be:2b:ec:e8:a1:65:ba:d5:9b:87:19:bb:53:6c:3f:b6:27:78: d5:f5:9d:15:72:a0:3c:1e:a2:37:68:33:26:7d:75:8a:e4:41: e5:9f:31:3a:4b:c7:b1:57:64:d0:4a:35:71:56:95:e0:86:ee: 05:17:3a:b6:0c:3a:2b:6b:fb:ae:24:fc:08:bc:27:6e:fc:72: 5e:bb:a6:fa:ce:65:08:b3:d4:bd:7a:3c:c0:a0:11:17:45:f2: e8:3c:33:c2:9b:10:ef:86:cc:36:35:0f:58:b4:33:79:47:e5: 82:4c:99:ea:0c:e8:77:28:cc:29:49:99:5c:f8:b9:98:d4:d2: 4f:86:a5:41:8a:4f:fd:c1:ea:a0:6c:17:bf:cc:b2:d7:ca:eb: c3:79:f9:3b:22:64:68:d2:59:27:3d:18:4d:f8:ec:5f:28:42: 10:9c:4c:14:5e:9c:6f:b5:58:ef:c6:e7:c9:c1:a6:b7:c3:f5: 8b:39:7c:0c:82:e8:52:a1:a9:f4:b6:d0:6e:f1:76:ce:c9:90: ae:ac:c9:93:64:cb:02:c5:5c:8b:b1:4c:47:2c:e3:c9:0f:48: b4:8a:be:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLTK800vfgk3uMgcMytOwP3uBGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVB RTA5RTdGMzAeFw0yNTA5MDQxODE2MzFaFw0yNTA5MDcyMjMxMzFaMDMxMTAvBgNV BAMTKDBGMEUxNDI2RDUzNkExQjYzNTYxMkYyNTkyMUZDOUFERDY4NjA5NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HD/9AQc6dghWooNjqbK9z6Uk Frmnp7Z4lLGcUwgDEtFNYfV8ygEHjhxsWjF0m7TIyLolbbOxyYcRe+gkOCssroTY bHllutBxAHaboVMsXblqLUyFGqaGEXu86Ij/RoI10gd5Po1KBlK3LxASH5rjV/Ay FNSwM7S49Yla8oI7P2kDatFP+iN1RnIV/w6dPFs4sEtHCpFi6wp7xUbSUL1TyqWR iM4u2J9d2NGuON94MquLUGVNODianlVemeSkhgOIP4Res9AqvbjTMTouIqNetsjq 8SFwYkJCL4XINzCMdGBhT6YcvjxOD4q8ceXmt+0IBQ7cId29G3upHm9JKUwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDw4UJtU2obY1YS8lkh/JrdaGCXEwHwYDVR0j BBgwFoAUHUp1YvCW8/dT44jBRZS6da4J5/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzZhYjA0ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMC8xRDRBNzU2MkYw OTZGM0Y3NTNFMzg4QzE0NTk0QkE3NUFFMDlFN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVBRTA5 RTdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJB NzVBRTA5RTdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOVTjiZckR0Vs2SZy8XflrpWWT8Waw4J+ud ZmEpaeOBl3r4EL4r7OihZbrVm4cZu1NsP7YneNX1nRVyoDweojdoMyZ9dYrkQeWf MTpLx7FXZNBKNXFWleCG7gUXOrYMOitr+64k/Ai8J278cl67pvrOZQiz1L16PMCg ERdF8ug8M8KbEO+GzDY1D1i0M3lH5YJMmeoM6HcozClJmVz4uZjU0k+GpUGKT/3B 6qBsF7/MstfK68N5+TsiZGjSWSc9GE347F8oQhCcTBRenG+1WO/G58nBprfD9Ys5 fAyC6FKhqfS20G7xds7JkK6syZNkywLFXIuxTEcs48kPSLSKvps= -----END CERTIFICATE-----Generated at Fri Sep 5 10:15:02 2025 by rpki-client