$ rpki-client -vvf repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft File: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft (raw, json) Hash identifier: if0KzQYaGZjTmxs4mDTmOTb5UEadxWjkjgpKhjx/SA8= Subject key identifier: 7E:F2:EB:6E:8C:A4:0E:7C:A1:26:3E:B2:3A:C2:C8:FB:FC:5D:1A:D5 Authority key identifier: 97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F Certificate issuer: /CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Certificate serial: 4FA3BE414E6B9F9BF4D6A22165E22284B393634A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft Manifest number: 04FE Signing time: Sat 23 Aug 2025 17:11:24 +0000 Manifest this update: Sat 23 Aug 2025 17:06:24 +0000 Manifest next update: Wed 27 Aug 2025 04:42:24 +0000 Files and hashes: 1: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl (hash: s1d0h1TREoe9yumYpyMKeRpd33aFc1zMTzNdgWWH0P8=) 2: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: UcHmCNm704dRdxu5mGnFESd+cYb7vs2gxWT3im+cP2U=) 3: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: vtrYPFcybkmKbw9RZMYXPUfTz3LO/v9B/HIV4T8BsWE=) 4: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: EeloRAa8rxGIeEpGTxQGak2WLi+75Ry5Z63pTnvFrf8=) 5: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: Jz7bd4l9iJshW7NcA6KcDnrf6hTtrcC3IwQK9KShw7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a3:be:41:4e:6b:9f:9b:f4:d6:a2:21:65:e2:22:84:b3:93:63:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Validity Not Before: Aug 23 17:06:24 2025 GMT Not After : Aug 27 04:42:24 2025 GMT Subject: CN=7EF2EB6E8CA40E7CA1263EB23AC2C8FBFC5D1AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:95:82:4f:d6:49:99:68:16:23:0c:62:59: f2:cf:31:f4:18:15:2a:b4:26:30:b7:50:45:c7:f7: 5c:c9:6c:ac:6a:f5:96:7b:bb:d7:d2:3f:22:16:1c: 53:05:79:c7:f0:07:7e:2d:ff:42:01:20:0b:24:6e: 30:9d:4f:00:b6:d0:cf:8a:4e:af:69:22:f6:a1:f7: 20:61:c2:9a:d8:98:4b:77:d9:82:24:d2:b0:1d:de: 92:f2:15:e9:46:00:d1:a6:c6:db:45:41:43:ba:3a: 0f:65:50:46:cc:65:96:2b:de:e6:c2:e1:48:02:ef: 30:c1:af:f7:f0:80:84:d0:21:77:1e:78:35:5a:7c: 48:3e:84:46:ad:48:4b:16:6b:89:72:d5:ee:61:15: 8d:0e:c2:75:1d:5e:80:f2:4a:6b:e4:cd:b7:66:33: 27:03:9c:3d:d5:0b:8f:9a:d5:10:8f:ad:67:20:4a: e1:f4:dd:79:e1:aa:90:2c:35:04:4c:e7:69:eb:17: e3:76:cf:af:8a:c9:a1:52:dc:78:b9:8e:4e:5b:c1: a0:80:25:3b:c5:b3:07:94:63:dc:c7:b5:9e:80:25: f9:8b:39:51:e2:01:29:1d:44:a0:b8:09:88:3b:2e: 53:da:62:58:84:a5:c3:80:e5:0f:50:98:a7:d2:14: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F2:EB:6E:8C:A4:0E:7C:A1:26:3E:B2:3A:C2:C8:FB:FC:5D:1A:D5 X509v3 Authority Key Identifier: keyid:97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:90:aa:e8:11:bb:77:23:95:75:5c:2a:0e:97:47:8b:0a:50: dd:fb:1c:bd:3d:89:59:3b:50:09:59:9b:01:b8:a7:b8:e3:dc: 71:6e:42:e5:4a:7e:d4:53:41:b4:66:44:da:d2:d0:5b:57:17: c6:ac:00:e5:2f:0b:15:f6:9f:f2:63:45:86:9c:b3:4f:ce:c4: 3d:dd:b3:dd:ac:71:80:9d:7f:6c:23:1b:39:3f:fe:74:60:76: c8:1a:e8:ce:47:45:bf:44:72:01:cf:12:18:30:bc:7d:ad:ed: 0f:77:af:ae:91:40:5b:ee:f7:df:d6:00:54:67:c2:db:ee:fc: 7d:c8:05:f7:1c:c2:5a:c3:d8:21:4d:7c:16:82:2a:28:61:64: d6:41:24:a4:40:b3:e5:8d:b2:c4:38:a2:f4:8d:7b:da:07:7b: fd:b8:ec:1c:db:0d:e1:5a:04:1e:8b:6a:ff:b6:17:7f:ea:10: 86:cb:98:f4:48:9b:91:8c:27:17:55:9e:c7:e8:65:e2:c5:d3: 90:1e:64:25:0b:db:0f:8f:26:82:cf:92:c2:23:94:dd:f0:9b: 85:c9:52:d8:98:e9:51:15:99:c4:45:24:41:03:01:61:e6:14: 69:fb:a8:54:fe:9d:ee:df:90:c0:8c:9c:ed:69:c9:1b:1c:d6: 59:55:fa:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6O+QU5rn5v01qIhZeIihLOTY0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURD QUM2MkM5RjAeFw0yNTA4MjMxNzA2MjRaFw0yNTA4MjcwNDQyMjRaMDMxMTAvBgNV BAMTKDdFRjJFQjZFOENBNDBFN0NBMTI2M0VCMjNBQzJDOEZCRkM1RDFBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbJWCT9ZJmWgWIwxiWfLPMfQY FSq0JjC3UEXH91zJbKxq9ZZ7u9fSPyIWHFMFecfwB34t/0IBIAskbjCdTwC20M+K Tq9pIvah9yBhwprYmEt32YIk0rAd3pLyFelGANGmxttFQUO6Og9lUEbMZZYr3ubC 4UgC7zDBr/fwgITQIXceeDVafEg+hEatSEsWa4ly1e5hFY0OwnUdXoDySmvkzbdm MycDnD3VC4+a1RCPrWcgSuH03XnhqpAsNQRM52nrF+N2z6+KyaFS3Hi5jk5bwaCA JTvFsweUY9zHtZ6AJfmLOVHiASkdRKC4CYg7LlPaYliEpcOA5Q9QmKfSFMT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfvLrboykDnyhJj6yOsLI+/xdGtUwHwYDVR0j BBgwFoAUl9d/CGafuU5OmfeVUZ+2HcrGLJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmM2OTQ0MC04YjE3LTRhNjgtYTBmYS02NjE1OWUyMTYyZTAvMC85N0Q3N0YwODY2 OUZCOTRFNEU5OUY3OTU1MTlGQjYxRENBQzYyQzlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURDQUM2 MkM5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJjNjk0NDAtOGIxNy00YTY4LWEw ZmEtNjYxNTllMjE2MmUwLzAvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2 MURDQUM2MkM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqQqugRu3cjlXVcKg6XR4sKUN37HL09iVk7 UAlZmwG4p7jj3HFuQuVKftRTQbRmRNrS0FtXF8asAOUvCxX2n/JjRYacs0/OxD3d s92scYCdf2wjGzk//nRgdsga6M5HRb9EcgHPEhgwvH2t7Q93r66RQFvu99/WAFRn wtvu/H3IBfccwlrD2CFNfBaCKihhZNZBJKRAs+WNssQ4ovSNe9oHe/247BzbDeFa BB6Lav+2F3/qEIbLmPRIm5GMJxdVnsfoZeLF05AeZCUL2w+PJoLPksIjlN3wm4XJ UtiY6VEVmcRFJEEDAWHmFGn7qFT+ne7fkMCMnO1pyRsc1llV+sI= -----END CERTIFICATE-----Generated at Sat Aug 23 20:20:07 2025 by rpki-client