$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft File: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json) Hash identifier: CkKHOg6NuCiXb6DfNzMa5kf5/AF9Cl20UCbTrcX5ylk= Subject key identifier: 24:84:C6:6D:1D:E8:B1:6D:53:BA:06:77:4C:27:56:BC:D2:55:B1:9C Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA Certificate issuer: /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Certificate serial: 155B2DA156CA319F940DC8EBDA835A90FED81CD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft Manifest number: 04CF Signing time: Sat 10 May 2025 08:51:07 +0000 Manifest this update: Sat 10 May 2025 08:46:07 +0000 Manifest next update: Tue 13 May 2025 18:02:07 +0000 Files and hashes: 1: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: 6vpG1FwswZyXqrOMn8CrPtMvpqJGHzx+Yb/i8Uh1oPM=) 2: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: ak+v2nbvgfZTh3h5P5sQibbb9i+t1k7IQ43q7lj+gG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 18:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5b:2d:a1:56:ca:31:9f:94:0d:c8:eb:da:83:5a:90:fe:d8:1c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Validity Not Before: May 10 08:46:07 2025 GMT Not After : May 13 18:02:07 2025 GMT Subject: CN=2484C66D1DE8B16D53BA06774C2756BCD255B19C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:93:c8:2a:09:05:02:63:00:40:54:15:ac: c8:0e:e2:de:9a:29:ff:f9:65:e6:00:ac:a0:b2:97: c8:f7:ef:95:09:68:42:21:a3:d4:c6:b7:a4:ff:2f: c7:56:1a:eb:cc:c1:ed:de:ea:0d:a5:fe:8e:36:d3: 36:57:92:ed:9e:2d:9b:1c:38:93:7e:83:8d:b7:12: 1b:9b:bb:ff:3b:24:80:48:b7:32:2a:65:10:db:10: 65:84:32:8e:e7:c4:c7:d5:85:61:96:b4:23:84:df: f0:bc:cf:6b:5c:09:87:fe:75:65:73:22:20:37:c0: 8d:69:25:28:ef:b1:eb:8c:cf:5a:31:95:20:26:49: f2:96:cd:08:3f:7c:c4:fb:bd:84:28:15:0a:a5:75: 25:7d:e3:a3:da:21:f6:d6:02:3e:d3:45:bd:0b:3f: 87:fe:9a:d6:3e:7e:e3:c3:29:a7:3f:91:ec:2d:e7: e8:65:d6:26:08:b0:5b:1c:ee:13:7a:6d:28:80:a8: 74:81:e1:c6:26:d9:6c:a6:c2:95:14:7e:36:03:12: bb:b1:a0:83:ab:b9:80:12:f1:29:17:79:98:c5:cd: f0:41:a5:06:3c:40:d9:fb:d9:99:84:54:61:42:73: 94:c6:c5:6f:ca:56:95:38:4c:15:c0:6c:4e:62:a6: 3c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:84:C6:6D:1D:E8:B1:6D:53:BA:06:77:4C:27:56:BC:D2:55:B1:9C X509v3 Authority Key Identifier: keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:48:bd:8e:ac:34:84:d5:66:a1:96:94:04:04:9b:4b:ee:d4: 90:fd:43:db:95:7f:f7:c3:85:fc:8c:37:20:eb:5a:8c:45:28: 3b:0c:ec:06:0a:43:2d:0c:76:e9:36:cd:78:c5:de:3d:08:ff: ae:2c:85:9a:93:a6:3a:b0:50:25:02:c7:c2:12:61:ce:fe:00: 25:81:76:6c:3c:d4:6e:04:78:b5:c3:00:c3:85:0e:e4:81:cb: f9:23:91:2a:88:93:a1:69:4b:d8:d9:9d:0f:aa:db:16:93:2d: c2:31:be:8e:2d:e2:60:bb:c8:b9:d1:ac:31:e2:7b:df:7a:b1: bb:a9:68:99:15:83:d5:f2:48:84:34:dd:bc:0b:78:e0:95:60: 8f:0c:4c:ad:b6:6e:0c:19:2d:20:47:9f:fd:f2:6a:61:ab:a1: 28:82:14:29:22:df:af:b0:07:f8:6a:d0:d2:a8:5f:98:38:51: 0e:95:f5:4b:eb:30:45:47:b8:16:da:e7:37:83:09:9a:fb:20: 2e:1a:22:7b:1b:a7:bf:c1:9e:98:75:8c:ce:a8:ad:18:be:ac: 98:30:26:ff:64:e0:d5:fb:db:59:ba:00:1f:47:a0:6f:21:18: f2:f4:8d:6e:c2:dd:df:23:fd:0b:d9:90:39:c2:ba:6d:66:8a: df:a2:99:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFVstoVbKMZ+UDcjr2oNakP7YHNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5 NkQzREVCQTAeFw0yNTA1MTAwODQ2MDdaFw0yNTA1MTMxODAyMDdaMDMxMTAvBgNV BAMTKDI0ODRDNjZEMURFOEIxNkQ1M0JBMDY3NzRDMjc1NkJDRDI1NUIxOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CpPIKgkFAmMAQFQVrMgO4t6a Kf/5ZeYArKCyl8j375UJaEIho9TGt6T/L8dWGuvMwe3e6g2l/o420zZXku2eLZsc OJN+g423Ehubu/87JIBItzIqZRDbEGWEMo7nxMfVhWGWtCOE3/C8z2tcCYf+dWVz IiA3wI1pJSjvseuMz1oxlSAmSfKWzQg/fMT7vYQoFQqldSV946PaIfbWAj7TRb0L P4f+mtY+fuPDKac/kewt5+hl1iYIsFsc7hN6bSiAqHSB4cYm2WymwpUUfjYDErux oIOruYAS8SkXeZjFzfBBpQY8QNn72ZmEVGFCc5TGxW/KVpU4TBXAbE5ipjy3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJITGbR3osW1TugZ3TCdWvNJVsZwwHwYDVR0j BBgwFoAUl36lEYVR6YrqqLsRydmdcZbT3rowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTg4YzBmMi0yODAwLTQ4ZGEtYTgzZS1hYjU0ZGY2NWM1NzQvMC85NzdFQTUxMTg1 NTFFOThBRUFBOEJCMTFDOUQ5OUQ3MTk2RDNERUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5NkQz REVCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlE NzE5NkQzREVCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpIvY6sNITVZqGWlAQEm0vu1JD9Q9uVf/fD hfyMNyDrWoxFKDsM7AYKQy0Mduk2zXjF3j0I/64shZqTpjqwUCUCx8ISYc7+ACWB dmw81G4EeLXDAMOFDuSBy/kjkSqIk6FpS9jZnQ+q2xaTLcIxvo4t4mC7yLnRrDHi e996sbupaJkVg9XySIQ03bwLeOCVYI8MTK22bgwZLSBHn/3yamGroSiCFCki36+w B/hq0NKoX5g4UQ6V9UvrMEVHuBba5zeDCZr7IC4aInsbp7/Bnph1jM6orRi+rJgw Jv9k4NX721m6AB9HoG8hGPL0jW7C3d8j/QvZkDnCum1mit+imRM= -----END CERTIFICATE-----Generated at Mon May 12 08:43:04 2025 by rpki-client