$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft File: 981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json) Hash identifier: PfZpogHKOEmXIf50o+PALutW5PDDGgd6OYQYnM1ruNM= Subject key identifier: 11:B9:31:1C:C5:A8:AF:B8:0A:0F:FB:97:25:00:67:8B:1C:09:82:18 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 4FCB7AB6024F97E261FE13EBF9DFE019732538C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft Manifest number: 0545 Signing time: Tue 01 Jul 2025 13:01:16 +0000 Manifest this update: Tue 01 Jul 2025 12:56:16 +0000 Manifest next update: Fri 04 Jul 2025 23:45:16 +0000 Files and hashes: 1: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: aaVQCjxDcTZfVP0GXV6UmhAVx/WHjfyhQPMjY9CDL1Y=) 2: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: aq3iMOcZU4XVOFPAPd2Nh3J2J2xxy7ZZYh4S2cWkrJY=) 3: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: tmM3oKcQYom0eZ0XNJS+YU7h43ssUwLiYaqon6dfaUY=) 4: 3230332e38342e3133382e302f32342d3234203d3e20393834.roa (hash: OvL2f4eV/dIS/ISoFQJ5cS+0xjddfINmJd9dof7YWKE=) 5: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: 1w88ZaASU+IezmbFAGItPt0iVYfj3PFgWl7YKMyNTuU=) 6: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: KnuT4VJ8iLWdqrErOu2FeJ8mmwI6wwnIx48WuNVZS4g=) 7: 3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa (hash: 9tWn1tUw0lnAE7QTSe9gFD7FXQ8Wg/JsMqpIZEwXrcQ=) 8: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: DzgPlEX76YPqKshtrhPz/EVID2lXXaNvCCo/tHgJE8c=) 9: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: yk2Beo121KKGPqhGrImYDU3EMLdITUqRzn7ocJjo60c=) 10: 3230332e38342e3134332e302f32342d3234203d3e20313530393732.roa (hash: TQogc+bIoAadk+dL2Cz1Noxh233Lv82bNDTeGntUavQ=) 11: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: armCdMsgrh9HBVd3tCBMp8GfztvN8GGDpG5VkguYG4U=) 12: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: NaDejpAdsfTSGp6kfBa9d5q0SpyPeyrqEXy4bb0zG4U=) 13: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: BYrXc+PLZ/j21jMX4S/tR9RU/3h3VFerg2jw36ACe00=) 14: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: GoGa19lNKrAbt7T4vItYqkUzpmzuN/7X1lEptYsCA58=) 15: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: lNnryO3KjbjallOCFXPMSeEsKPceLct4DmwTgOEASfo=) 16: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: 1MMaA/JALdwU46Gmn5cadR8bFFMn6pjjD2wa0Pe9Aag=) 17: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: 8l5eYrcFmWYoHIRslSOK/QjIOtGdM4ToITrA74vyIxo=) 18: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 9MSiXUftqD7YwgoDDhRkUOlJfbnaxlrR0kRkqPsHDsM=) 19: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: +ioxMWbzQIk8162X0SpHMt662sECkzs897/VKWy1MDU=) 20: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: IKrLXgzTRMNUHQiY7lPxbY4RYs8/kWiZvIMH5tUTx6c=) 21: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: RTuZkJtHP4oO5BZBcfIYPQEhgHjC830z/8gqHwaq6eQ=) 22: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: vmMOC54VRYyQ6zaPWhSxLckPPT+mw9crTtfHlgZPBE8=) 23: 3131302e34342e3137312e302f32342d3234203d3e203234323036.roa (hash: NYon6seWVPGfj3szG9Lc+42jdaypbm8ZjYwi9OVBxlE=) 24: 3230332e38342e3133362e302f32342d3234203d3e203234323036.roa (hash: 4CIlhDwPBWmO489rSkBL096ATSwuK+FjlEMQtzZL/kc=) 25: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (hash: tsk8yK4KqvJi7ogL1Fgl2IoF/vS9e+lT+cqgt4OR0O0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:cb:7a:b6:02:4f:97:e2:61:fe:13:eb:f9:df:e0:19:73:25:38:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Jul 1 12:56:16 2025 GMT Not After : Jul 4 23:45:16 2025 GMT Subject: CN=11B9311CC5A8AFB80A0FFB972500678B1C098218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4c:e5:a9:86:4d:2a:70:8d:3a:16:c1:f9:ad: b8:2f:64:24:88:6f:97:59:68:2d:42:9e:d7:11:da: 76:08:fa:3a:4b:52:44:48:50:ae:20:36:e0:a7:71: e4:5a:01:3c:3a:79:a7:53:cf:fa:94:83:4f:e1:8d: 94:20:ef:3d:05:03:a1:cc:14:0d:83:30:f0:f6:2f: 3b:75:b2:ee:4b:e5:17:be:3a:f1:d5:9c:56:9d:d0: fd:58:78:b2:72:72:1d:04:3b:67:5f:cf:ea:80:d1: ba:7b:25:75:61:43:4a:2c:91:59:c8:db:1f:62:e0: c4:29:02:97:c0:ee:f1:e5:34:56:4c:3b:87:b8:e6: 27:24:e6:41:ae:67:82:bc:0e:77:76:5c:c8:ea:8b: 87:9e:30:ad:b9:0e:af:99:3e:3d:ab:fe:e0:4f:8e: be:57:86:c9:f3:91:bf:62:6d:f0:49:c9:55:a2:93: a9:f9:be:17:56:26:85:99:08:ad:2f:8b:05:68:22: 43:b1:26:3d:9d:40:34:22:19:b9:79:1b:a8:31:e1: 6a:a6:1a:63:9d:aa:81:b0:f1:e7:38:c6:8e:fc:89: 8f:69:81:de:8d:8d:a3:92:e6:e9:1f:7f:72:55:5e: ce:0e:d3:7e:8f:26:ed:a2:44:f8:79:5e:80:96:6d: a2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B9:31:1C:C5:A8:AF:B8:0A:0F:FB:97:25:00:67:8B:1C:09:82:18 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:48:37:df:d9:61:4b:ab:23:45:0c:f3:9f:f1:21:c3:fc:05: 63:4d:d4:fe:07:8f:35:11:4b:67:52:67:f4:58:dd:c2:0e:5c: 77:68:6d:87:e7:0d:e4:9f:2e:b0:fe:16:37:bb:22:1f:18:54: ed:22:36:06:26:68:1f:85:eb:fe:43:3b:55:e0:5f:09:fc:45: 29:90:49:05:7b:97:cf:50:23:d3:a8:11:a8:f0:78:4b:fb:1f: e3:f9:1c:37:94:14:cf:eb:c2:f8:e2:09:0b:64:74:10:2f:d6: 8d:7c:27:d3:4c:3c:08:5a:0f:2c:aa:f3:41:6a:ca:87:d9:60: c4:c7:88:45:e7:91:38:ee:67:7d:49:56:ac:66:05:70:c6:37: 1e:01:35:51:ce:8c:78:02:f3:1e:e3:35:91:4d:c2:5f:d2:a1: c6:8d:74:a8:e0:48:b1:ba:2d:7d:34:ea:b2:f2:76:6b:e2:f4: 09:0a:9b:8c:1b:3e:4b:db:b9:9a:81:fd:fd:96:dc:ca:ff:76: 9a:ed:ac:06:cc:df:e0:07:df:0c:9d:41:06:ee:9b:45:cf:4f: 0d:29:75:65:7a:be:61:d0:de:21:3f:d9:25:d9:bb:b3:3a:28: 50:79:34:6f:c5:15:2d:d5:c0:83:43:30:26:b4:6f:c3:e4:74: 23:15:4c:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8t6tgJPl+Jh/hPr+d/gGXMlOMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA3MDExMjU2MTZaFw0yNTA3MDQyMzQ1MTZaMDMxMTAvBgNV BAMTKDExQjkzMTFDQzVBOEFGQjgwQTBGRkI5NzI1MDA2NzhCMUMwOTgyMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfTOWphk0qcI06FsH5rbgvZCSI b5dZaC1CntcR2nYI+jpLUkRIUK4gNuCnceRaATw6eadTz/qUg0/hjZQg7z0FA6HM FA2DMPD2Lzt1su5L5Re+OvHVnFad0P1YeLJych0EO2dfz+qA0bp7JXVhQ0oskVnI 2x9i4MQpApfA7vHlNFZMO4e45ick5kGuZ4K8Dnd2XMjqi4eeMK25Dq+ZPj2r/uBP jr5Xhsnzkb9ibfBJyVWik6n5vhdWJoWZCK0viwVoIkOxJj2dQDQiGbl5G6gx4Wqm GmOdqoGw8ec4xo78iY9pgd6NjaOS5ukff3JVXs4O036PJu2iRPh5XoCWbaKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEbkxHMWor7gKD/uXJQBnixwJghgwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc5MjJmODktM2U5Yi00YjIxLTkx ODYtYTY0OGMyZGEzZjdiLzAvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlF N0NCMEMxMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJIN9/ZYUurI0UM85/xIcP8BWNN1P4HjzUR S2dSZ/RY3cIOXHdobYfnDeSfLrD+Fje7Ih8YVO0iNgYmaB+F6/5DO1XgXwn8RSmQ SQV7l89QI9OoEajweEv7H+P5HDeUFM/rwvjiCQtkdBAv1o18J9NMPAhaDyyq80Fq yofZYMTHiEXnkTjuZ31JVqxmBXDGNx4BNVHOjHgC8x7jNZFNwl/SocaNdKjgSLG6 LX006rLydmvi9AkKm4wbPkvbuZqB/f2W3Mr/dprtrAbM3+AH3wydQQbum0XPTw0p dWV6vmHQ3iE/2SXZu7M6KFB5NG/FFS3VwINDMCa0b8PkdCMVTAI= -----END CERTIFICATE-----Generated at Tue Jul 1 18:01:20 2025 by rpki-client