$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json) Hash identifier: HLAdTGUZLpa9sRiVPl1o8XMJllccjUOWImMDLyzHnHM= Subject key identifier: 8C:90:7F:77:32:07:67:CE:05:B7:2E:4F:11:4D:45:CF:F9:0A:3A:F6 Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Certificate serial: 5D54CEEDFE359D3EA9020E2DD12DC1C0912A74CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft Manifest number: 01E4 Signing time: Sat 06 Sep 2025 13:31:44 +0000 Manifest this update: Sat 06 Sep 2025 13:26:44 +0000 Manifest next update: Wed 10 Sep 2025 01:18:44 +0000 Files and hashes: 1: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: qJqURjeDo8u9/VhXM1PKho7GO5lPDN3t+sK2O/87xGc=) 2: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: LxMwNxJqtsDAew6t2HZWJN3elxDUrVZNuiLgSdrPlIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:54:ce:ed:fe:35:9d:3e:a9:02:0e:2d:d1:2d:c1:c0:91:2a:74:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Validity Not Before: Sep 6 13:26:44 2025 GMT Not After : Sep 10 01:18:44 2025 GMT Subject: CN=8C907F77320767CE05B72E4F114D45CFF90A3AF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:3c:6f:5e:54:06:b3:97:e9:36:ff:87:e1: 4b:65:a0:f8:b6:45:11:72:a1:bf:b4:d1:58:ec:d9: b0:bf:62:a0:6b:b0:8c:b6:66:95:ae:84:58:f6:18: 42:38:1f:81:99:cb:54:04:4f:c9:02:14:06:6f:d0: 4e:b2:9a:ce:a6:a7:93:74:db:86:c1:ce:73:99:2c: 43:e9:ab:f3:1d:73:b1:d1:bc:69:c0:ed:ce:5f:c7: 95:8d:84:80:5a:df:5a:35:01:1d:5b:92:31:c6:f3: 83:85:62:33:4c:94:7f:99:dc:f2:a1:25:71:6a:5c: eb:eb:80:51:08:ff:fc:1e:77:c8:f5:5f:5e:3e:ad: dd:20:02:68:25:69:72:b6:df:3e:50:8e:8b:a2:b4: ab:ee:c8:22:6b:16:63:d8:9b:55:83:76:89:24:a6: 7d:0e:08:14:96:88:64:aa:7a:7f:bc:ac:29:26:5b: 97:5c:08:2f:ed:f2:15:70:85:13:ba:c0:7e:ff:cf: c1:d2:a3:b0:b0:76:48:7f:3e:14:3b:45:69:6e:85: 33:33:09:a8:44:e7:ae:29:dc:b2:bc:94:78:68:7a: 41:ee:65:8d:49:9c:6f:7d:07:0b:ab:49:96:67:78: a3:65:d0:73:04:d2:3e:a5:a3:c2:48:2f:db:c4:9f: c6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:90:7F:77:32:07:67:CE:05:B7:2E:4F:11:4D:45:CF:F9:0A:3A:F6 X509v3 Authority Key Identifier: keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:94:5b:11:7b:ca:2b:d4:e0:3f:ee:28:e5:89:2d:2a:5f:ad: 6e:e2:e5:ce:dc:72:9f:c7:e1:1f:60:b4:4e:4d:ec:44:ca:4f: 5b:20:e5:b2:4b:a0:e9:e1:e0:0a:9a:37:ba:ad:7f:52:fd:b6: 0b:d0:2b:a5:30:72:23:36:fc:cc:d2:7c:4e:32:7f:76:ed:7e: 7e:99:74:8f:37:f4:cf:62:3c:6d:08:e4:09:61:10:01:1a:d6: c8:29:33:0c:c0:fb:26:ca:d0:e9:f5:38:7d:d3:cf:dd:25:b3: c4:3d:43:37:b9:ae:ef:b6:92:19:32:99:cc:52:9e:a8:1f:50: d4:8a:41:24:b1:d7:1f:ea:87:3a:d3:8e:ce:d7:45:22:04:e3: 15:83:c8:25:4e:b1:24:18:92:34:5c:1a:55:28:e3:98:bb:6b: f9:ba:79:64:35:74:05:9e:b7:58:d6:6c:35:cd:36:51:e4:5d: 42:05:07:a7:cb:ea:63:8f:14:ef:85:95:63:13:88:b4:00:27: ac:f0:fc:fc:54:70:77:46:3e:fc:16:99:05:4e:d3:e2:c5:77: 9a:97:3e:05:f1:33:e6:ec:17:22:f9:30:11:d3:59:32:a3:a8: a5:6a:b0:59:dc:52:04:d2:b7:90:91:20:ff:ad:7f:d5:0b:97: a0:e1:e7:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVTO7f41nT6pAg4t0S3BwJEqdM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3 OEM2MTJEMDAeFw0yNTA5MDYxMzI2NDRaFw0yNTA5MTAwMTE4NDRaMDMxMTAvBgNV BAMTKDhDOTA3Rjc3MzIwNzY3Q0UwNUI3MkU0RjExNEQ0NUNGRjkwQTNBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnnjxvXlQGs5fpNv+H4UtloPi2 RRFyob+00Vjs2bC/YqBrsIy2ZpWuhFj2GEI4H4GZy1QET8kCFAZv0E6yms6mp5N0 24bBznOZLEPpq/Mdc7HRvGnA7c5fx5WNhIBa31o1AR1bkjHG84OFYjNMlH+Z3PKh JXFqXOvrgFEI//wed8j1X14+rd0gAmglaXK23z5QjouitKvuyCJrFmPYm1WDdokk pn0OCBSWiGSqen+8rCkmW5dcCC/t8hVwhRO6wH7/z8HSo7Cwdkh/PhQ7RWluhTMz CahE564p3LK8lHhoekHuZY1JnG99BwurSZZneKNl0HME0j6lo8JIL9vEn8b7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJB/dzIHZ84Fty5PEU1Fz/kKOvYwHwYDVR0j BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2 MTJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIw OEE3OEM2MTJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOUWxF7yivU4D/uKOWJLSpfrW7i5c7ccp/H 4R9gtE5N7ETKT1sg5bJLoOnh4AqaN7qtf1L9tgvQK6UwciM2/MzSfE4yf3btfn6Z dI839M9iPG0I5AlhEAEa1sgpMwzA+ybK0On1OH3Tz90ls8Q9Qze5ru+2khkymcxS nqgfUNSKQSSx1x/qhzrTjs7XRSIE4xWDyCVOsSQYkjRcGlUo45i7a/m6eWQ1dAWe t1jWbDXNNlHkXUIFB6fL6mOPFO+FlWMTiLQAJ6zw/PxUcHdGPvwWmQVO0+LFd5qX PgXxM+bsFyL5MBHTWTKjqKVqsFncUgTSt5CRIP+tf9ULl6Dh5wM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:39 2025 by rpki-client