$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: itVh34Wss9JqvuI8VWH4gVmpGEfvhqlap4iLiZgB87Y= Subject key identifier: 6E:F5:6A:10:63:2E:24:B2:FE:22:A3:D0:3C:5F:02:9B:13:B2:F0:ED Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 130C80DDA9658DCDB442C4F717411A4E941F0BA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 01A8 Signing time: Mon 30 Jun 2025 02:41:14 +0000 Manifest this update: Mon 30 Jun 2025 02:36:14 +0000 Manifest next update: Thu 03 Jul 2025 05:37:14 +0000 Files and hashes: 1: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: JUjPAOstxtzy3e2XRAdy16cqHuucp6sj9RxrkFhDS3Q=) 2: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: y45woR+frHwDPz+XrJyAsnYy051jps7RCl331frKeSU=) 3: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: sLLAll0PImFtI8I3NsjOtcAJonykiY3L65wq2vj3obw=) 4: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: NcNTdHcRodSJZLKLz640cCIZx0mxCUPWUiWbg907HuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 05:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:0c:80:dd:a9:65:8d:cd:b4:42:c4:f7:17:41:1a:4e:94:1f:0b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Jun 30 02:36:14 2025 GMT Not After : Jul 3 05:37:14 2025 GMT Subject: CN=6EF56A10632E24B2FE22A3D03C5F029B13B2F0ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f4:eb:b4:c5:83:1d:a3:be:a4:15:41:4a:05: f6:6f:8f:9f:57:14:68:90:f4:ff:26:dc:1c:2e:cb: 4c:cc:ab:a3:75:62:3a:25:c0:6b:6c:cc:4d:9b:eb: ac:f8:ef:0e:b7:09:1d:ec:de:c5:64:33:0a:b2:f6: 9b:a3:cc:eb:15:86:ca:93:3b:12:a4:7c:a2:ce:a4: 93:e7:ee:e7:88:56:fa:d7:b1:d8:70:cc:ee:fc:f1: 6b:d0:08:64:28:05:10:bc:93:f6:c5:83:64:6f:cf: f4:77:00:e4:60:04:45:23:8a:3e:b4:e9:47:ea:59: df:50:14:87:90:c3:7f:f2:ba:5a:79:ed:cc:98:ff: 48:ab:63:6a:c3:d8:9a:2b:05:13:e1:91:e0:bc:56: ff:85:af:ae:51:bd:68:28:b7:95:83:c9:ae:e3:58: 72:2c:66:4e:dd:9b:3e:3d:20:7e:ae:20:b2:34:0f: 5c:20:a3:9b:4e:fb:f6:d4:25:c2:7d:0b:d4:b8:7a: 2f:d5:c5:41:0a:54:89:90:8b:c5:39:c0:a0:28:a7: b0:76:4b:9b:d4:10:df:3a:20:62:fc:b8:17:b4:7c: 21:f0:d7:be:7d:e5:12:2c:e2:94:bf:d4:29:2a:c4: 27:b5:74:87:7a:dd:86:0a:94:8b:1b:7c:ac:cf:bf: 94:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F5:6A:10:63:2E:24:B2:FE:22:A3:D0:3C:5F:02:9B:13:B2:F0:ED X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:67:d5:2f:9d:ac:d1:c1:f2:73:f8:d6:02:73:1a:1a:4f:57: a1:d6:a6:d0:3b:eb:d5:96:b2:22:67:8a:ce:d9:3b:64:a3:4b: 0c:0b:be:93:c8:45:0c:6e:fc:27:66:87:2a:30:5e:40:07:0c: 39:8f:22:d1:38:81:f5:f7:93:5e:dd:19:f0:b3:ea:17:65:9b: 5f:95:4a:2f:21:5b:97:5c:31:d1:5b:99:06:5b:68:0c:3a:11: 78:73:68:93:c7:2d:c7:01:72:59:39:b5:71:09:f1:f1:01:77: e3:8a:8e:36:ab:80:e9:b9:e8:e1:59:9b:6b:e5:e6:4b:5f:8e: 04:4a:fc:9e:e9:40:9c:1a:1e:23:8c:db:b2:68:f6:3a:b5:cd: 99:93:67:d6:d8:98:dd:33:f1:80:ae:77:1f:88:11:88:c4:6a: ff:cd:fc:91:5b:88:12:eb:73:dc:74:89:8a:a8:05:91:e6:9c: 89:09:dc:ba:17:a5:b5:49:d4:a0:21:42:dd:36:eb:c1:1f:33: b2:d3:cc:9a:ef:6b:ba:5d:9d:11:d4:c2:0f:f2:33:cf:d7:58: a4:d2:5c:03:cf:e1:69:e7:49:e2:25:73:dc:42:ec:ce:15:0e: 02:dc:47:46:9a:c7:ba:55:84:bd:8a:8b:57:34:96:50:59:5b: df:7c:53:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwyA3alljc20QsT3F0EaTpQfC6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNTA2MzAwMjM2MTRaFw0yNTA3MDMwNTM3MTRaMDMxMTAvBgNV BAMTKDZFRjU2QTEwNjMyRTI0QjJGRTIyQTNEMDNDNUYwMjlCMTNCMkYwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR9Ou0xYMdo76kFUFKBfZvj59X FGiQ9P8m3Bwuy0zMq6N1YjolwGtszE2b66z47w63CR3s3sVkMwqy9pujzOsVhsqT OxKkfKLOpJPn7ueIVvrXsdhwzO788WvQCGQoBRC8k/bFg2Rvz/R3AORgBEUjij60 6UfqWd9QFIeQw3/yulp57cyY/0irY2rD2JorBRPhkeC8Vv+Fr65RvWgot5WDya7j WHIsZk7dmz49IH6uILI0D1wgo5tO+/bUJcJ9C9S4ei/VxUEKVImQi8U5wKAop7B2 S5vUEN86IGL8uBe0fCHw17595RIs4pS/1CkqxCe1dId63YYKlIsbfKzPv5RzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbvVqEGMuJLL+IqPQPF8CmxOy8O0wHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhn1S+drNHB8nP41gJzGhpPV6HWptA769WW siJnis7ZO2SjSwwLvpPIRQxu/CdmhyowXkAHDDmPItE4gfX3k17dGfCz6hdlm1+V Si8hW5dcMdFbmQZbaAw6EXhzaJPHLccBclk5tXEJ8fEBd+OKjjargOm56OFZm2vl 5ktfjgRK/J7pQJwaHiOM27Jo9jq1zZmTZ9bYmN0z8YCudx+IEYjEav/N/JFbiBLr c9x0iYqoBZHmnIkJ3LoXpbVJ1KAhQt0268EfM7LTzJrva7pdnRHUwg/yM8/XWKTS XAPP4WnnSeIlc9xC7M4VDgLcR0aax7pVhL2Ki1c0llBZW998U0c= -----END CERTIFICATE-----Generated at Wed Jul 2 05:02:54 2025 by rpki-client