$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft File: 981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json) Hash identifier: 13XqHx1fC6tyM23oQMttsodWJnYJl/5erzFF0SJd48Q= Subject key identifier: 4C:57:25:B9:34:77:EB:9D:26:0C:2B:F6:04:BD:B4:78:FF:CD:80:0D Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 7C30ED8082B6AEE9DC80123D06BFB0C6C012974E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft Manifest number: 0563 Signing time: Sat 23 Aug 2025 07:02:26 +0000 Manifest this update: Sat 23 Aug 2025 06:57:26 +0000 Manifest next update: Tue 26 Aug 2025 10:36:26 +0000 Files and hashes: 1: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: 1MMaA/JALdwU46Gmn5cadR8bFFMn6pjjD2wa0Pe9Aag=) 2: 3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa (hash: HWMA9XCzWBVr3KMdmHK9hpuSoTRgdhwHDyLthwhLEMo=) 3: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: yk2Beo121KKGPqhGrImYDU3EMLdITUqRzn7ocJjo60c=) 4: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: KnuT4VJ8iLWdqrErOu2FeJ8mmwI6wwnIx48WuNVZS4g=) 5: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: H0HlMimCqXAso/aispJtA9+9Apf+w3psosa64aEPhuo=) 6: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: BYrXc+PLZ/j21jMX4S/tR9RU/3h3VFerg2jw36ACe00=) 7: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: vmMOC54VRYyQ6zaPWhSxLckPPT+mw9crTtfHlgZPBE8=) 8: 3230332e38342e3133362e302f32342d3234203d3e203234323036.roa (hash: 4CIlhDwPBWmO489rSkBL096ATSwuK+FjlEMQtzZL/kc=) 9: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: Wij0WNmFzkS7ii03UOjMpVj1DHEK+SaLjmorAVH1mZI=) 10: 3131302e34342e3137312e302f32342d3234203d3e203234323036.roa (hash: /Id0ptV6KhbD1snBODkIm970DRe1HBZaO2KQ2jikLRE=) 11: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: k8TYiHXc6vZmoqXaKgcDXCYwJI5QRLDArVJpzQsFi0s=) 12: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: +ioxMWbzQIk8162X0SpHMt662sECkzs897/VKWy1MDU=) 13: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: wu8diV5jdWuux9C39Tvhu1GJ88vcA6Du/7ncHsnVM8k=) 14: 3230332e38342e3133382e302f32342d3234203d3e20393834.roa (hash: OvL2f4eV/dIS/ISoFQJ5cS+0xjddfINmJd9dof7YWKE=) 15: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: tmM3oKcQYom0eZ0XNJS+YU7h43ssUwLiYaqon6dfaUY=) 16: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: njKwh9fBki9cQ9S37NNLRAGEY/gEGO5YoV7LWFXK6D8=) 17: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: 8Z6QdZAm6ipP1goiFZjslQYb9XOb/wZyuYYrPlulaFM=) 18: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: DzgPlEX76YPqKshtrhPz/EVID2lXXaNvCCo/tHgJE8c=) 19: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: lNnryO3KjbjallOCFXPMSeEsKPceLct4DmwTgOEASfo=) 20: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: aq3iMOcZU4XVOFPAPd2Nh3J2J2xxy7ZZYh4S2cWkrJY=) 21: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 9MSiXUftqD7YwgoDDhRkUOlJfbnaxlrR0kRkqPsHDsM=) 22: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: aaVQCjxDcTZfVP0GXV6UmhAVx/WHjfyhQPMjY9CDL1Y=) 23: 3230332e38342e3134332e302f32342d3234203d3e20323133363037.roa (hash: SU/DxOnFopjxkv8c6HfEkmadSFV8VExLgA9VBa2HuUc=) 24: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: JmIwFQ7aWfxfrg+xxgHoZlyC8qF9GhKfHmQe+ozagGg=) 25: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (hash: T9tknLjTeQ+7ZUfv8SNf4lCYZ42qRdSxxizSEJYn0CA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:30:ed:80:82:b6:ae:e9:dc:80:12:3d:06:bf:b0:c6:c0:12:97:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Aug 23 06:57:26 2025 GMT Not After : Aug 26 10:36:26 2025 GMT Subject: CN=4C5725B93477EB9D260C2BF604BDB478FFCD800D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:e9:c1:55:75:68:40:2f:ff:fe:54:c2:38: 18:da:58:de:f9:84:b7:0e:ca:fb:88:16:94:1e:e5: f1:a3:51:11:5e:e2:cf:c4:02:df:55:9b:3e:98:e3: c9:37:02:ba:de:e9:55:c0:8b:13:53:ff:1d:9c:0c: ba:dd:3e:14:45:b3:0c:e6:3b:88:a5:9e:59:7f:4b: 46:0c:86:ec:95:22:ca:fe:9c:6f:bb:b0:2b:0a:42: 85:32:95:44:61:70:a3:f0:bb:fd:6e:4c:91:c8:2f: 04:a1:07:01:f9:4b:1d:a0:ba:f8:4c:1d:0e:fd:b0: b3:3a:d4:1b:4f:81:40:21:74:4d:ca:c1:49:56:7a: e2:47:b9:64:68:ec:9f:14:cd:3c:9f:bb:44:2d:17: 1c:79:9f:d3:62:b7:93:d0:00:93:d0:5e:aa:4b:15: 17:ce:e2:4a:3b:2d:ba:8f:69:55:c0:a5:4b:da:4e: ab:69:5e:2c:98:7d:1a:f3:72:7b:f7:53:ca:64:56: 52:32:b9:5d:d0:df:02:e5:3e:33:e7:ed:59:2d:f8: 42:56:8f:c9:22:22:eb:5e:a1:4f:09:4d:b0:03:c1: 2b:34:d7:93:ce:ef:c6:ae:ff:a6:38:6c:96:97:6f: 87:ca:9a:8e:e9:f4:8b:48:cb:0f:63:9a:58:6c:10: 57:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:57:25:B9:34:77:EB:9D:26:0C:2B:F6:04:BD:B4:78:FF:CD:80:0D X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:da:0e:e1:65:27:f1:c8:c5:2f:a1:57:24:b5:d0:3e:97:84: ce:97:98:a6:fb:68:03:c9:29:5b:0c:69:64:c3:e9:d7:92:b9: 6f:21:ea:b3:6a:8c:dd:28:8a:05:33:1e:9b:88:5b:dc:c4:fb: dc:d5:ea:78:ce:d6:63:7a:f8:4c:d5:89:66:ff:dd:7a:5a:4f: 4c:5c:db:d7:fa:53:fa:81:6e:10:92:48:22:92:ad:58:af:ba: 1a:93:a4:68:eb:4b:03:ec:9a:d3:30:79:47:8a:5a:3c:5a:ee: 9a:f6:5d:81:0d:e8:3e:88:94:0d:19:95:22:4a:7f:dd:6b:f4: 9e:83:82:eb:14:8a:5f:fc:66:de:d4:d7:ca:49:5f:9a:fa:67: 02:7b:24:b3:1b:d4:9b:0b:ea:1b:38:aa:2f:9d:68:77:e4:97: 46:01:c2:dc:12:e3:17:e1:5d:55:65:c3:81:d8:8d:71:02:dd: 15:01:f0:48:37:22:ad:ed:43:42:39:c6:d2:a8:b5:36:38:14: b3:86:14:dd:48:6a:32:b8:35:ef:35:6e:ae:9b:3b:8d:dc:5f: 58:0c:ce:d3:fc:15:43:61:3a:b8:03:b2:97:a0:e7:bd:db:61: 47:21:79:95:db:08:3b:b7:89:98:8a:48:1b:09:6b:09:1b:89: 8d:14:9f:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDDtgIK2runcgBI9Br+wxsASl04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA4MjMwNjU3MjZaFw0yNTA4MjYxMDM2MjZaMDMxMTAvBgNV BAMTKDRDNTcyNUI5MzQ3N0VCOUQyNjBDMkJGNjA0QkRCNDc4RkZDRDgwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPunBVXVoQC///lTCOBjaWN75 hLcOyvuIFpQe5fGjURFe4s/EAt9Vmz6Y48k3Arre6VXAixNT/x2cDLrdPhRFswzm O4ilnll/S0YMhuyVIsr+nG+7sCsKQoUylURhcKPwu/1uTJHILwShBwH5Sx2guvhM HQ79sLM61BtPgUAhdE3KwUlWeuJHuWRo7J8UzTyfu0QtFxx5n9Nit5PQAJPQXqpL FRfO4ko7LbqPaVXApUvaTqtpXiyYfRrzcnv3U8pkVlIyuV3Q3wLlPjPn7Vkt+EJW j8kiIuteoU8JTbADwSs015PO78au/6Y4bJaXb4fKmo7p9ItIyw9jmlhsEFcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTFcluTR3650mDCv2BL20eP/NgA0wHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc5MjJmODktM2U5Yi00YjIxLTkx ODYtYTY0OGMyZGEzZjdiLzAvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlF N0NCMEMxMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPaDuFlJ/HIxS+hVyS10D6XhM6XmKb7aAPJ KVsMaWTD6deSuW8h6rNqjN0oigUzHpuIW9zE+9zV6njO1mN6+EzViWb/3XpaT0xc 29f6U/qBbhCSSCKSrVivuhqTpGjrSwPsmtMweUeKWjxa7pr2XYEN6D6IlA0ZlSJK f91r9J6DgusUil/8Zt7U18pJX5r6ZwJ7JLMb1JsL6hs4qi+daHfkl0YBwtwS4xfh XVVlw4HYjXEC3RUB8Eg3Iq3tQ0I5xtKotTY4FLOGFN1IajK4Ne81bq6bO43cX1gM ztP8FUNhOrgDspeg573bYUcheZXbCDu3iZiKSBsJawkbiY0Un6o= -----END CERTIFICATE-----Generated at Sat Aug 23 12:31:59 2025 by rpki-client