$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft File: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft (raw, json) Hash identifier: iBLE/JkKuke/DjAxqdkUd0S7kxf/MJyl6pe7SpufhRs= Subject key identifier: BB:04:24:A3:59:C8:29:45:29:7C:63:01:47:2D:07:2F:CD:07:A6:4C Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 Certificate issuer: /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Certificate serial: 4FBAB0004C111C9AF4ECB5F6910D3D43C1F82DEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft Manifest number: BB Signing time: Sun 29 Jun 2025 20:11:04 +0000 Manifest this update: Sun 29 Jun 2025 20:06:04 +0000 Manifest next update: Wed 02 Jul 2025 21:48:04 +0000 Files and hashes: 1: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl (hash: FOXdcpHJBv7Sqkt9m6nL8wSPgsydgP7zKglwUApRc3k=) 2: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: DWvVDDRpAMOpRUqp8QzsrLlGUPEfbewyxxzSjcofq2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ba:b0:00:4c:11:1c:9a:f4:ec:b5:f6:91:0d:3d:43:c1:f8:2d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Validity Not Before: Jun 29 20:06:04 2025 GMT Not After : Jul 2 21:48:04 2025 GMT Subject: CN=BB0424A359C82945297C6301472D072FCD07A64C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:dc:ac:3a:57:35:5c:03:0e:94:ac:eb:46: d9:3c:69:eb:6c:07:0f:b3:91:80:59:fc:b4:63:b3: 45:1b:0c:5e:32:93:b5:6e:44:a7:f1:9f:2e:6b:67: 2f:30:65:2b:2c:47:af:19:98:e7:b2:ff:68:0f:86: 17:9d:dc:9e:4b:e9:39:06:86:a0:f6:66:05:cf:e6: c8:05:f3:f6:6e:04:f8:64:33:80:38:eb:bb:ad:e3: 7c:c5:35:0e:a2:d5:8d:5f:e7:7d:62:62:34:6c:89: 86:12:59:83:21:6f:b1:fe:59:b4:9c:a6:61:9d:3a: 8e:4b:b7:bb:a6:19:88:61:2a:30:57:82:50:e9:27: 3c:66:34:1d:eb:bc:ef:86:ab:e2:21:65:4b:3d:94: 9f:24:26:e2:55:2d:f4:51:51:98:6d:56:38:89:d6: 1c:1b:8a:0f:c1:b5:76:fb:14:3f:86:03:ca:e4:fb: 43:de:6f:9c:7c:74:40:57:9d:51:84:a8:cd:a4:03: 41:ba:e4:67:c9:c7:ff:f9:53:66:5c:bd:68:01:84: 8f:50:af:4c:3e:37:30:1a:7e:ef:fe:63:03:66:df: 03:e2:c9:92:42:ad:8b:c4:34:9c:e0:fe:e4:54:e1: d2:54:f0:02:88:a0:86:dd:61:2f:07:c0:ad:0e:81: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:04:24:A3:59:C8:29:45:29:7C:63:01:47:2D:07:2F:CD:07:A6:4C X509v3 Authority Key Identifier: keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:16:b9:af:ba:9f:1d:a2:b2:d5:1d:3f:a7:27:0a:f6:3f:68: 4c:d8:74:07:9e:8c:bd:65:ba:bf:12:41:49:86:b2:6b:dd:00: 29:5d:c6:8e:0f:8d:9a:c5:4a:bf:ae:6c:e9:81:ca:cc:a2:82: 39:50:98:2b:6a:03:d8:e3:c6:93:73:9e:47:64:db:01:23:93: 41:44:33:8f:7c:ac:fa:0a:66:0c:1d:a5:e5:5e:1b:59:cb:b9: af:dd:3f:78:d7:40:21:27:15:28:5a:f5:b6:c9:01:31:0b:3e: 44:80:c3:ee:06:59:d5:81:b1:89:cf:e1:a2:59:32:55:05:07: 6e:41:dc:16:52:8e:49:27:3c:d4:69:6f:9b:19:00:ab:9a:2f: d9:0d:9a:11:61:72:22:bb:1b:10:5d:e1:4f:1f:40:5f:11:57: 13:b0:3b:c7:a7:c8:8c:76:e2:e9:15:86:f4:ff:d1:8f:78:0b: 29:d5:76:54:be:bb:d4:2b:b5:63:61:89:06:5c:22:f9:fc:9e: b1:4c:c7:84:36:a6:c2:a4:d8:16:01:94:b6:4e:61:90:60:d2: f4:90:05:1a:0e:44:5d:fe:af:42:32:18:0e:78:2c:48:ac:ed: f6:73:b5:12:4a:9e:ec:6c:68:24:96:82:a5:f5:3b:ac:86:5c: 09:30:4e:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7qwAEwRHJr07LX2kQ09Q8H4LeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJF QTg4OEYwNDAeFw0yNTA2MjkyMDA2MDRaFw0yNTA3MDIyMTQ4MDRaMDMxMTAvBgNV BAMTKEJCMDQyNEEzNTlDODI5NDUyOTdDNjMwMTQ3MkQwNzJGQ0QwN0E2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvc9ysOlc1XAMOlKzrRtk8aets Bw+zkYBZ/LRjs0UbDF4yk7VuRKfxny5rZy8wZSssR68ZmOey/2gPhhed3J5L6TkG hqD2ZgXP5sgF8/ZuBPhkM4A467ut43zFNQ6i1Y1f531iYjRsiYYSWYMhb7H+WbSc pmGdOo5Lt7umGYhhKjBXglDpJzxmNB3rvO+Gq+IhZUs9lJ8kJuJVLfRRUZhtVjiJ 1hwbig/BtXb7FD+GA8rk+0Peb5x8dEBXnVGEqM2kA0G65GfJx//5U2ZcvWgBhI9Q r0w+NzAafu/+YwNm3wPiyZJCrYvENJzg/uRU4dJU8AKIoIbdYS8HwK0OgXN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuwQko1nIKUUpfGMBRy0HL80HpkwwHwYDVR0j BBgwFoAUl3dv/wK5D/wXtligsaWY2+qIjwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMS85Nzc3NkZGRjAy QjkwRkZDMTdCNjU4QTBCMUE1OThEQkVBODg4RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJFQTg4 OEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzEvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4 REJFQTg4OEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMwWua+6nx2istUdP6cnCvY/aEzYdAeejL1l ur8SQUmGsmvdACldxo4PjZrFSr+ubOmBysyigjlQmCtqA9jjxpNznkdk2wEjk0FE M498rPoKZgwdpeVeG1nLua/dP3jXQCEnFSha9bbJATELPkSAw+4GWdWBsYnP4aJZ MlUFB25B3BZSjkknPNRpb5sZAKuaL9kNmhFhciK7GxBd4U8fQF8RVxOwO8enyIx2 4ukVhvT/0Y94CynVdlS+u9QrtWNhiQZcIvn8nrFMx4Q2psKk2BYBlLZOYZBg0vSQ BRoORF3+r0IyGA54LEis7fZztRJKnuxsaCSWgqX1O6yGXAkwTtQ= -----END CERTIFICATE-----Generated at Mon Jun 30 06:52:30 2025 by rpki-client