$ rpki-client -vvf repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft File: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft (raw, json) Hash identifier: /DogwvUXAAu4KuvtlOJodzEtUnEoY5G+SkmJPraasv8= Subject key identifier: 2C:A5:E2:FE:E6:86:E1:60:51:68:F2:08:74:AA:B4:AD:5C:65:21:5F Authority key identifier: 97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F Certificate issuer: /CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Certificate serial: 042411331C30B98709BBDA87C26A6C787A2B722D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft Manifest number: 04E5 Signing time: Fri 27 Jun 2025 20:41:27 +0000 Manifest this update: Fri 27 Jun 2025 20:36:27 +0000 Manifest next update: Tue 01 Jul 2025 00:42:27 +0000 Files and hashes: 1: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: vtrYPFcybkmKbw9RZMYXPUfTz3LO/v9B/HIV4T8BsWE=) 2: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: EeloRAa8rxGIeEpGTxQGak2WLi+75Ry5Z63pTnvFrf8=) 3: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl (hash: DmHqv60nD+H9ZEX//h7K5Jn8tsTGpr/zpUS+56pPoGc=) 4: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: Jz7bd4l9iJshW7NcA6KcDnrf6hTtrcC3IwQK9KShw7w=) 5: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: UcHmCNm704dRdxu5mGnFESd+cYb7vs2gxWT3im+cP2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:24:11:33:1c:30:b9:87:09:bb:da:87:c2:6a:6c:78:7a:2b:72:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Validity Not Before: Jun 27 20:36:27 2025 GMT Not After : Jul 1 00:42:27 2025 GMT Subject: CN=2CA5E2FEE686E1605168F20874AAB4AD5C65215F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:37:a6:59:68:bf:ff:91:d3:3d:6c:6c:7a: d3:31:b5:37:85:4c:ef:ca:ec:ef:2f:a1:e4:28:34: 2d:60:ec:f2:0b:75:08:b1:67:22:0c:54:54:64:87: 99:7d:9f:eb:1f:1d:64:1d:85:d5:29:8c:9d:c1:37: 5e:46:14:73:27:f1:49:7c:8f:f0:26:21:f7:f6:77: 26:2e:d8:bb:e5:6a:84:5f:28:b4:38:95:cc:19:3e: cc:16:28:fa:05:73:35:26:43:45:ee:4a:ab:b4:6b: 9b:36:72:6e:04:4e:24:cf:88:eb:a8:3a:a6:eb:ae: fb:4f:ec:ac:ae:fb:0f:fc:81:e6:d5:5b:ad:ed:fa: da:db:a4:ae:4c:70:82:b0:3f:41:f6:ce:83:41:7b: fd:b0:1e:2f:b9:7b:5f:13:86:c9:bc:4f:d2:80:74: c1:df:54:9c:29:fe:7a:ac:99:06:bc:fe:37:89:c0: 23:4d:99:68:c0:82:88:2f:f3:e8:41:20:ad:b3:eb: 0e:88:2b:a7:e6:ba:ff:f2:47:0c:ee:95:c6:be:ea: c7:b8:4e:90:1f:24:63:cf:56:34:e5:b2:39:0a:b7: 87:e7:fe:a6:25:65:58:18:97:22:cd:f8:81:3f:16: 2a:54:36:2d:87:fa:45:44:81:9b:6c:80:dd:0d:38: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A5:E2:FE:E6:86:E1:60:51:68:F2:08:74:AA:B4:AD:5C:65:21:5F X509v3 Authority Key Identifier: keyid:97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:1e:69:21:7d:b1:0d:64:cc:59:4d:72:1e:2c:b5:03:b3:09: 38:af:3b:47:b6:c6:1f:56:74:f7:2a:f8:8e:0a:9e:22:07:35: 7d:50:b6:4b:c7:bb:0d:ea:1e:3e:68:95:18:b9:3a:f9:7b:e2: f4:29:4b:62:30:cd:d7:01:40:5a:e4:20:3a:a8:af:0e:87:45: 54:9b:a7:51:6c:ca:f8:d8:86:a9:47:83:a1:cb:41:cc:46:1a: 14:28:31:d4:b5:0d:5e:5e:41:b2:c7:34:92:69:a1:2f:1b:fc: 22:59:1d:00:8e:52:df:28:2d:ba:f4:17:83:31:a7:7b:a8:0d: 87:34:b4:af:c2:e5:c2:6f:ef:54:ca:43:34:f5:e5:47:25:9f: d4:c4:9b:fe:e5:4a:cd:6c:da:15:c1:8a:bf:1e:91:ec:45:bb: b5:e7:7b:c0:bb:5f:a3:7e:a1:58:a2:14:2e:3f:69:2e:ac:23: 88:69:70:ed:ec:1f:6a:8b:e3:0f:d0:cd:4f:f0:b1:3e:a7:98: 2e:9d:c6:f4:65:53:26:26:09:d6:dc:3b:13:3c:32:f6:8d:e3: e7:f5:22:f9:7c:97:95:5b:06:09:67:00:fa:2a:e9:06:c1:16: 72:20:39:64:68:9f:06:30:e4:ff:90:93:8b:b5:bf:f9:50:64: c0:c6:3d:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCQRMxwwuYcJu9qHwmpseHorci0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURD QUM2MkM5RjAeFw0yNTA2MjcyMDM2MjdaFw0yNTA3MDEwMDQyMjdaMDMxMTAvBgNV BAMTKDJDQTVFMkZFRTY4NkUxNjA1MTY4RjIwODc0QUFCNEFENUM2NTIxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3jemWWi//5HTPWxsetMxtTeF TO/K7O8voeQoNC1g7PILdQixZyIMVFRkh5l9n+sfHWQdhdUpjJ3BN15GFHMn8Ul8 j/AmIff2dyYu2LvlaoRfKLQ4lcwZPswWKPoFczUmQ0XuSqu0a5s2cm4ETiTPiOuo OqbrrvtP7Kyu+w/8gebVW63t+trbpK5McIKwP0H2zoNBe/2wHi+5e18Thsm8T9KA dMHfVJwp/nqsmQa8/jeJwCNNmWjAgogv8+hBIK2z6w6IK6fmuv/yRwzulca+6se4 TpAfJGPPVjTlsjkKt4fn/qYlZVgYlyLN+IE/FipUNi2H+kVEgZtsgN0NOBM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULKXi/uaG4WBRaPIIdKq0rVxlIV8wHwYDVR0j BBgwFoAUl9d/CGafuU5OmfeVUZ+2HcrGLJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmM2OTQ0MC04YjE3LTRhNjgtYTBmYS02NjE1OWUyMTYyZTAvMC85N0Q3N0YwODY2 OUZCOTRFNEU5OUY3OTU1MTlGQjYxRENBQzYyQzlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURDQUM2 MkM5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJjNjk0NDAtOGIxNy00YTY4LWEw ZmEtNjYxNTllMjE2MmUwLzAvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2 MURDQUM2MkM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALceaSF9sQ1kzFlNch4stQOzCTivO0e2xh9W dPcq+I4KniIHNX1QtkvHuw3qHj5olRi5Ovl74vQpS2IwzdcBQFrkIDqorw6HRVSb p1FsyvjYhqlHg6HLQcxGGhQoMdS1DV5eQbLHNJJpoS8b/CJZHQCOUt8oLbr0F4Mx p3uoDYc0tK/C5cJv71TKQzT15Ucln9TEm/7lSs1s2hXBir8ekexFu7Xne8C7X6N+ oViiFC4/aS6sI4hpcO3sH2qL4w/QzU/wsT6nmC6dxvRlUyYmCdbcOxM8MvaN4+f1 Ivl8l5VbBglnAPoq6QbBFnIgOWRonwYw5P+Qk4u1v/lQZMDGPUo= -----END CERTIFICATE-----Generated at Sun Jun 29 23:19:35 2025 by rpki-client