$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft File: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json) Hash identifier: mnwcOchjj6h0VijIeOVi+peyXGAO1ArvQf/bldalFvk= Subject key identifier: C3:BF:65:C5:44:A6:44:41:65:5F:35:38:5C:32:E7:5C:2F:55:04:02 Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA Certificate issuer: /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Certificate serial: 29CF2D916E83C9326F6C14FB635AA711FC1B7B62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft Manifest number: 04E6 Signing time: Sun 29 Jun 2025 17:11:07 +0000 Manifest this update: Sun 29 Jun 2025 17:06:07 +0000 Manifest next update: Wed 02 Jul 2025 21:04:07 +0000 Files and hashes: 1: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: q9pcjfkInqPcGghxGeh0wF/8x9n+wp0JshUKi76J40w=) 2: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: /k+RT4O+0q6NzTkLym2Iml8jIGYInfZDrVU8MGBCeUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cf:2d:91:6e:83:c9:32:6f:6c:14:fb:63:5a:a7:11:fc:1b:7b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Validity Not Before: Jun 29 17:06:07 2025 GMT Not After : Jul 2 21:04:07 2025 GMT Subject: CN=C3BF65C544A64441655F35385C32E75C2F550402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:cb:61:f1:89:7c:cf:64:47:b1:85:7d:29: 6c:81:8c:db:f6:18:c0:fe:5e:fc:b0:36:c5:65:6e: bf:fe:d6:0c:c7:d6:0e:bc:4e:53:bf:c7:4c:01:a7: ee:7e:c2:b7:5b:40:83:70:44:90:24:8f:09:0f:92: c0:ef:41:97:01:5e:09:ed:00:4f:81:04:d2:86:38: 27:3c:46:a0:31:3e:b5:58:12:df:8d:e2:47:c5:2b: 9a:d4:5c:27:6f:72:8a:e3:53:32:9c:c3:45:d0:0d: 47:01:f8:ae:83:99:94:2b:b0:71:e9:c9:19:cc:5e: 01:7c:4c:3f:2a:eb:74:77:1f:5c:5a:76:09:b1:91: d1:78:10:d2:5c:5c:06:c4:46:e3:c9:32:b4:65:b8: ee:b2:6c:4a:44:63:7b:3d:5d:40:b7:8c:a1:f5:d3: 80:9c:f1:da:b2:35:ca:0e:2a:35:70:f5:2f:30:0d: e2:d7:a2:cf:e6:ae:2b:7b:51:96:42:fa:74:ed:f9: fb:c8:f1:80:c5:5c:ef:5e:9b:1d:46:0b:05:18:86: 8c:67:35:c5:f3:2a:52:26:71:11:ea:6f:b8:cc:5b: 81:ca:7f:74:c9:5a:a9:4e:67:1e:3c:35:34:f8:c9: 95:10:38:3c:9e:b6:a2:59:53:97:06:59:08:b0:6d: 2b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BF:65:C5:44:A6:44:41:65:5F:35:38:5C:32:E7:5C:2F:55:04:02 X509v3 Authority Key Identifier: keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3b:01:db:19:c3:fa:d4:04:4e:8d:11:9c:dc:9e:38:a8:db: a0:e8:cd:57:b1:b4:27:ec:91:80:41:f4:38:b9:60:07:bb:aa: 5d:75:ba:88:b5:f0:85:51:29:32:07:19:9b:a8:91:b3:7d:43: 8f:f8:b7:7d:ee:e1:77:33:9f:3e:d8:98:b4:9c:4d:8b:80:b7: b5:4a:dd:29:cf:e0:3e:99:5f:28:6a:4a:32:98:86:c6:ea:8c: 7d:62:6c:ae:93:10:a1:7b:62:4f:95:4d:e6:7f:15:73:9f:04: 5b:24:5d:af:cb:5f:a6:10:9e:aa:18:e1:e8:d3:c2:53:bd:ff: 1f:46:e7:a7:d0:29:ac:31:00:b5:9b:4c:7c:f1:d3:20:b5:47: 0e:8a:09:52:83:22:2b:a3:55:18:40:ca:e9:5f:b5:c2:df:7d: 6e:a1:76:d0:1a:61:23:14:45:d4:03:ec:1e:e0:32:c7:0c:32: 26:a0:e3:ba:65:2c:a5:1c:95:b9:f3:6b:de:11:5c:de:29:82: fb:b3:c0:c7:7f:40:9d:3f:77:33:84:fe:ae:64:7e:2a:2e:25: 44:70:c7:ae:30:c0:fa:4f:aa:09:08:01:28:0e:eb:40:a3:c2: 8c:93:18:5c:86:bb:4e:d3:94:15:c8:88:49:64:5f:42:c2:b7: c9:86:d0:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKc8tkW6DyTJvbBT7Y1qnEfwbe2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5 NkQzREVCQTAeFw0yNTA2MjkxNzA2MDdaFw0yNTA3MDIyMTA0MDdaMDMxMTAvBgNV BAMTKEMzQkY2NUM1NDRBNjQ0NDE2NTVGMzUzODVDMzJFNzVDMkY1NTA0MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjK8th8Yl8z2RHsYV9KWyBjNv2 GMD+XvywNsVlbr/+1gzH1g68TlO/x0wBp+5+wrdbQINwRJAkjwkPksDvQZcBXgnt AE+BBNKGOCc8RqAxPrVYEt+N4kfFK5rUXCdvcorjUzKcw0XQDUcB+K6DmZQrsHHp yRnMXgF8TD8q63R3H1xadgmxkdF4ENJcXAbERuPJMrRluO6ybEpEY3s9XUC3jKH1 04Cc8dqyNcoOKjVw9S8wDeLXos/mrit7UZZC+nTt+fvI8YDFXO9emx1GCwUYhoxn NcXzKlImcRHqb7jMW4HKf3TJWqlOZx48NTT4yZUQODyetqJZU5cGWQiwbSsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw79lxUSmREFlXzU4XDLnXC9VBAIwHwYDVR0j BBgwFoAUl36lEYVR6YrqqLsRydmdcZbT3rowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTg4YzBmMi0yODAwLTQ4ZGEtYTgzZS1hYjU0ZGY2NWM1NzQvMC85NzdFQTUxMTg1 NTFFOThBRUFBOEJCMTFDOUQ5OUQ3MTk2RDNERUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5NkQz REVCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlE NzE5NkQzREVCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIo7AdsZw/rUBE6NEZzcnjio26DozVextCfs kYBB9Di5YAe7ql11uoi18IVRKTIHGZuokbN9Q4/4t33u4Xcznz7YmLScTYuAt7VK 3SnP4D6ZXyhqSjKYhsbqjH1ibK6TEKF7Yk+VTeZ/FXOfBFskXa/LX6YQnqoY4ejT wlO9/x9G56fQKawxALWbTHzx0yC1Rw6KCVKDIiujVRhAyulftcLffW6hdtAaYSMU RdQD7B7gMscMMiag47plLKUclbnza94RXN4pgvuzwMd/QJ0/dzOE/q5kfiouJURw x64wwPpPqgkIASgO60CjwoyTGFyGu07TlBXIiElkX0LCt8mG0C8= -----END CERTIFICATE-----Generated at Tue Jul 1 20:43:10 2025 by rpki-client