$ rpki-client -vvf repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft File: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft (raw, json) Hash identifier: EL5KhLfeZzmZP10WmvCH64XDr1lXuwUPpUVtXxUJ6Qg= Subject key identifier: AA:42:76:2D:B1:7D:F3:F7:F0:FF:DF:C8:2F:4D:45:03:C6:AD:31:AB Authority key identifier: 97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE Certificate issuer: /CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Certificate serial: 09278BA8317081633FB0CF2A2E8CB479F24A5724 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft Manifest number: 01BB Signing time: Sun 29 Jun 2025 15:30:48 +0000 Manifest this update: Sun 29 Jun 2025 15:25:48 +0000 Manifest next update: Wed 02 Jul 2025 19:29:48 +0000 Files and hashes: 1: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: 9EURxrNrlf7XNa4qBRBWmt6iAklp2ZexfAnaMIzL06c=) 2: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: A0Wh8osPNi8zZWQ36AcLaUjDaG9uaq4xPw9QuzcvUH4=) 3: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl (hash: DX5V0rL3wf3Piq9d55stU0g2LP7MeEqVrxOVifufrY0=) 4: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: pdPZa1hqVrYPWZYkmw/3L6oJ44J+aMpGpranP7CjD4s=) 5: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: zP2/xMyoKaZs6fiqSMcfKqk4R7UXbhBp7PEh6lL8fdI=) 6: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: VMR23vWqztgF5Q/iMRDhZJFW6rkTGEBU0HHkzSi1LgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:27:8b:a8:31:70:81:63:3f:b0:cf:2a:2e:8c:b4:79:f2:4a:57:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Validity Not Before: Jun 29 15:25:48 2025 GMT Not After : Jul 2 19:29:48 2025 GMT Subject: CN=AA42762DB17DF3F7F0FFDFC82F4D4503C6AD31AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:a3:86:f6:d0:a2:77:89:3c:bb:48:89:46: dd:ee:38:d5:46:f8:33:da:bb:38:af:ca:a0:db:48: bc:79:19:b2:1c:da:d6:e8:68:46:15:d2:25:c2:75: 90:7f:39:8c:52:ef:fd:f8:25:6e:3d:3c:63:81:76: 70:d3:ad:08:a2:60:c6:ea:d5:ff:f7:d2:53:3c:a5: da:1b:12:26:80:db:53:e4:f5:e0:6c:c4:27:1e:ad: 6d:59:67:34:ca:87:81:84:3d:f8:27:e1:22:9d:b2: 76:18:bc:fd:6c:f4:fd:00:28:18:34:b2:fe:51:8e: d1:7e:ac:32:96:b8:85:99:13:84:5a:1a:46:b4:6f: 03:94:d2:92:04:f8:1b:cd:25:2c:fe:ce:53:31:e1: 73:be:cc:16:0c:10:e4:57:8e:b1:17:37:cc:9c:16: 6e:31:d0:43:4c:9e:45:f1:08:a7:d7:a6:0b:23:5d: 8d:a9:fa:aa:f2:db:dc:50:36:07:f3:3e:7a:a0:48: 76:ee:18:3b:6f:f1:16:9d:39:3f:c0:ab:96:c1:07: 5b:bb:72:06:d9:75:3e:57:b8:3e:8f:69:33:d2:85: ff:02:f1:cb:b9:62:c7:e9:36:5a:f2:2e:2f:be:d0: 43:5b:d2:c5:5a:aa:fa:2d:17:67:54:11:74:dc:0f: 5f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:42:76:2D:B1:7D:F3:F7:F0:FF:DF:C8:2F:4D:45:03:C6:AD:31:AB X509v3 Authority Key Identifier: keyid:97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f5:f5:dc:ad:ba:35:ad:7f:49:a6:d7:d7:42:3e:63:5b:d0: 75:f0:fd:19:dd:cd:05:3f:16:4a:62:d3:f5:aa:05:50:c8:c3: 56:a9:0e:a9:4e:38:c0:4a:d0:c3:ff:dc:63:63:dc:c9:63:bc: 7a:dd:c7:27:e3:fe:c6:30:10:aa:70:5e:ca:69:49:9d:db:ab: 83:8b:30:2a:17:ac:2a:bf:e6:d8:a3:8f:71:d1:c9:e1:21:22: 4b:e4:6f:46:7b:1a:50:8e:d0:48:e2:27:ff:4c:a1:09:f2:03: 30:59:93:a7:44:e5:bf:20:42:02:bb:a6:8a:91:ac:c8:b1:47: 10:d3:13:e2:1c:38:14:c2:f0:4c:1c:06:ab:ef:82:6c:77:89: 92:c5:ca:2c:52:51:5c:0c:b1:4b:f3:c8:2b:d8:49:d9:0f:ea: eb:4a:66:1b:d3:4a:2c:45:b7:49:91:72:ef:76:db:10:d3:e2: d8:d3:c8:69:80:2e:ba:4a:b5:3c:c9:98:02:f9:34:ba:85:c7: 7b:16:78:08:a9:f3:6a:84:17:5b:5e:34:d7:62:4a:9a:d6:df: 6f:5b:4d:34:78:81:f9:19:15:7d:ec:2f:90:51:cb:0b:cf:a9: 7d:0c:cf:30:34:b5:15:40:e5:a4:55:f8:41:72:ae:b3:47:96: 6d:b5:53:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSeLqDFwgWM/sM8qLoy0efJKVyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdC NDlENEVGRTAeFw0yNTA2MjkxNTI1NDhaFw0yNTA3MDIxOTI5NDhaMDMxMTAvBgNV BAMTKEFBNDI3NjJEQjE3REYzRjdGMEZGREZDODJGNEQ0NTAzQzZBRDMxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDaOG9tCid4k8u0iJRt3uONVG +DPauzivyqDbSLx5GbIc2tboaEYV0iXCdZB/OYxS7/34JW49PGOBdnDTrQiiYMbq 1f/30lM8pdobEiaA21Pk9eBsxCcerW1ZZzTKh4GEPfgn4SKdsnYYvP1s9P0AKBg0 sv5RjtF+rDKWuIWZE4RaGka0bwOU0pIE+BvNJSz+zlMx4XO+zBYMEORXjrEXN8yc Fm4x0ENMnkXxCKfXpgsjXY2p+qry29xQNgfzPnqgSHbuGDtv8RadOT/Aq5bBB1u7 cgbZdT5XuD6PaTPShf8C8cu5YsfpNlryLi++0ENb0sVaqvotF2dUEXTcD183AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqkJ2LbF98/fw/9/IL01FA8atMaswHwYDVR0j BBgwFoAUl5syk16/otptywp52zl/17SdTv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGU3MTQzNy04NWZjLTQ3YWYtOTY4Ny05MDNiYWZiMmMxNjEvMC85NzlCMzI5MzVF QkZBMkRBNkRDQjBBNzlEQjM5N0ZEN0I0OUQ0RUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdCNDlE NEVGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdG RDdCNDlENEVGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP19dytujWtf0mm19dCPmNb0HXw/RndzQU/ Fkpi0/WqBVDIw1apDqlOOMBK0MP/3GNj3MljvHrdxyfj/sYwEKpwXsppSZ3bq4OL MCoXrCq/5tijj3HRyeEhIkvkb0Z7GlCO0EjiJ/9MoQnyAzBZk6dE5b8gQgK7poqR rMixRxDTE+IcOBTC8EwcBqvvgmx3iZLFyixSUVwMsUvzyCvYSdkP6utKZhvTSixF t0mRcu922xDT4tjTyGmALrpKtTzJmAL5NLqFx3sWeAip82qEF1teNNdiSprW329b TTR4gfkZFX3sL5BRywvPqX0MzzA0tRVA5aRV+EFyrrNHlm21U8w= -----END CERTIFICATE-----Generated at Sun Jun 29 18:14:13 2025 by rpki-client