$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft (raw, json) Hash identifier: ET6DYgyt4d3BQmpO/k3jimE5DYe28qRGInRdyhq6qvA= Subject key identifier: 12:AB:B6:B3:E8:F6:CC:9A:34:D8:72:A5:4A:D0:4D:BA:DB:11:0F:87 Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Certificate serial: 4B79FE7E6DB15E170A2ECC8DB8520935B5A6EA13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft Manifest number: 0135 Signing time: Wed 03 Sep 2025 21:41:03 +0000 Manifest this update: Wed 03 Sep 2025 21:36:03 +0000 Manifest next update: Sun 07 Sep 2025 03:07:03 +0000 Files and hashes: 1: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: gY0MYBLnrNGMInBtjBk2fVW/5Y8HTuVN7KMpfZNbvwM=) 2: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: LAATNsnHcnoJWKciQROoRwDYWcBiokYiUiwzyLuS2UY=) 3: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl (hash: dkOvfuUiWsp6AwJ6ukLp1XGbEi3fm8ymcpkGQMYLMc8=) 4: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: dJaS59sTNR5P0zfWxcM9Q8SeRwLPq4ilnHYQElEDNMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 03:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:79:fe:7e:6d:b1:5e:17:0a:2e:cc:8d:b8:52:09:35:b5:a6:ea:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Validity Not Before: Sep 3 21:36:03 2025 GMT Not After : Sep 7 03:07:03 2025 GMT Subject: CN=12ABB6B3E8F6CC9A34D872A54AD04DBADB110F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:96:fc:7e:29:84:1c:df:97:a4:94:89:15: 82:6f:31:5b:2f:3a:d0:98:53:82:1e:96:81:85:eb: 26:6b:40:a7:21:93:a7:3b:c0:d0:1c:68:a2:5e:f9: d3:9f:eb:15:14:1e:e9:4e:5c:ad:98:e3:74:65:9f: 21:46:66:4f:96:1e:9f:c3:7c:e3:d3:3b:90:e3:bf: 4b:de:63:94:a3:2e:c8:bd:7c:56:5d:50:45:f2:1d: 95:2a:24:df:40:8a:27:a9:69:d4:16:a8:c4:a7:30: a9:ce:ea:b0:97:47:41:37:9b:c3:dc:63:ce:6f:b7: 17:a7:65:be:36:cf:95:e2:a6:98:ff:10:a7:9f:d7: bd:5b:a5:33:63:23:01:e7:6c:ee:f6:90:4a:d0:69: f5:85:07:0c:41:a2:68:85:34:27:15:c4:96:c2:97: 11:d4:c9:f8:90:3a:94:12:cb:f5:8a:e4:ba:a0:d1: f1:48:7d:29:be:33:37:86:e0:61:fe:1d:1c:73:d0: ca:b8:16:25:a4:d9:d9:9a:a8:2b:cd:33:2b:d0:a6: 14:06:cf:58:c0:d7:77:12:94:d1:b8:f3:e7:e6:93: 62:99:b4:8c:a5:b9:e6:fb:d2:f1:1f:7e:26:88:a5: 66:85:65:28:c2:8a:15:aa:39:0c:1c:1c:15:3c:b6: 98:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AB:B6:B3:E8:F6:CC:9A:34:D8:72:A5:4A:D0:4D:BA:DB:11:0F:87 X509v3 Authority Key Identifier: keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f8:f8:5f:61:9b:b4:54:4d:79:28:22:88:54:46:17:63:3a: c7:da:2c:10:8f:9a:3b:b6:dd:c3:9f:5e:69:53:b1:e1:d3:bb: 6a:95:c9:1c:8f:c7:f0:69:78:cf:90:4b:f6:31:3d:78:1b:dc: 5e:9e:86:c6:db:a4:57:a6:57:41:f2:1a:11:1d:c1:39:29:cd: e2:c4:a4:ef:29:18:21:0e:4a:61:dd:b1:df:f8:e4:4f:f9:6c: 24:f6:98:09:a7:53:f3:03:04:9a:df:e2:65:26:5d:ff:8c:b2: 3d:fa:03:df:13:35:c4:a4:f2:04:c5:c0:96:e8:64:95:4f:cf: 56:65:e5:a4:63:3e:4c:4e:de:54:70:0b:82:5a:90:56:01:e6: 7b:71:0c:b2:c8:f4:58:3f:37:bc:cc:7f:28:f9:33:5f:64:02: ea:6b:6e:8c:1f:67:a6:43:65:f6:2e:b6:9e:c6:2c:36:13:68: 45:76:6a:94:5a:49:c2:2a:93:fd:ca:08:05:c8:0e:60:32:e2: 32:90:cf:2a:e3:6e:2e:64:8c:65:bd:9b:40:d0:3b:d4:1e:37: e5:de:13:36:d4:01:8b:e4:0d:1b:f6:29:35:f8:c5:09:fc:5c: 17:8e:ec:c0:d3:18:83:26:61:32:8f:7f:59:13:4b:d8:e4:04: 4b:43:d9:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3n+fm2xXhcKLsyNuFIJNbWm6hMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5 M0QxOTZENjAeFw0yNTA5MDMyMTM2MDNaFw0yNTA5MDcwMzA3MDNaMDMxMTAvBgNV BAMTKDEyQUJCNkIzRThGNkNDOUEzNEQ4NzJBNTRBRDA0REJBREIxMTBGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+PZb8fimEHN+XpJSJFYJvMVsv OtCYU4IeloGF6yZrQKchk6c7wNAcaKJe+dOf6xUUHulOXK2Y43RlnyFGZk+WHp/D fOPTO5Djv0veY5SjLsi9fFZdUEXyHZUqJN9AiiepadQWqMSnMKnO6rCXR0E3m8Pc Y85vtxenZb42z5Xippj/EKef171bpTNjIwHnbO72kErQafWFBwxBomiFNCcVxJbC lxHUyfiQOpQSy/WK5Lqg0fFIfSm+MzeG4GH+HRxz0Mq4FiWk2dmaqCvNMyvQphQG z1jA13cSlNG48+fmk2KZtIylueb70vEffiaIpWaFZSjCihWqOQwcHBU8tphVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEqu2s+j2zJo02HKlStBNutsRD4cwHwYDVR0j BBgwFoAU0fcuZ9qczgkET6QgTqmTrpPRltYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC9EMUY3MkU2N0RB OUNDRTA5MDQ0RkE0MjA0RUE5OTNBRTkzRDE5NkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5M0Qx OTZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkz QUU5M0QxOTZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE34+F9hm7RUTXkoIohURhdjOsfaLBCPmju2 3cOfXmlTseHTu2qVyRyPx/BpeM+QS/YxPXgb3F6ehsbbpFemV0HyGhEdwTkpzeLE pO8pGCEOSmHdsd/45E/5bCT2mAmnU/MDBJrf4mUmXf+Msj36A98TNcSk8gTFwJbo ZJVPz1Zl5aRjPkxO3lRwC4JakFYB5ntxDLLI9Fg/N7zMfyj5M19kAuprbowfZ6ZD ZfYutp7GLDYTaEV2apRaScIqk/3KCAXIDmAy4jKQzyrjbi5kjGW9m0DQO9QeN+Xe EzbUAYvkDRv2KTX4xQn8XBeO7MDTGIMmYTKPf1kTS9jkBEtD2fc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:44 2025 by rpki-client