$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft File: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft (raw, json) Hash identifier: pMyl5VoSPVh6GLcb2bBcwYfOpE5IFqY+5q0M+Fw3SqQ= Subject key identifier: BE:0C:E9:22:D1:D4:09:CF:43:1F:21:B5:B5:21:9B:3F:0B:FE:C0:BD Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 Certificate issuer: /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Certificate serial: 14D57AC21C166FF33CC8560DD83DB6ECB1208E0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft Manifest number: C4 Signing time: Sun 20 Jul 2025 02:11:02 +0000 Manifest this update: Sun 20 Jul 2025 02:06:02 +0000 Manifest next update: Wed 23 Jul 2025 13:12:02 +0000 Files and hashes: 1: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl (hash: zehkvvFIfsEHW2q+9LxNLnkCy2Pi0f+2+T0G5ZUJARo=) 2: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: DWvVDDRpAMOpRUqp8QzsrLlGUPEfbewyxxzSjcofq2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d5:7a:c2:1c:16:6f:f3:3c:c8:56:0d:d8:3d:b6:ec:b1:20:8e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Validity Not Before: Jul 20 02:06:02 2025 GMT Not After : Jul 23 13:12:02 2025 GMT Subject: CN=BE0CE922D1D409CF431F21B5B5219B3F0BFEC0BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:33:5d:bd:04:d4:58:75:a3:d9:70:62:7c: 7f:17:b0:36:4f:74:6e:e7:b6:56:5a:97:ea:ed:c7: fa:ed:74:4b:d1:21:00:cc:a7:5e:43:9c:c5:93:b9: e3:89:28:37:1a:42:26:b4:60:5c:e1:b5:27:29:26: 97:48:4e:22:ec:d9:8e:dc:82:d2:04:23:49:42:38: 3d:a7:36:fb:57:55:bc:72:e3:2f:03:0d:70:ce:99: 0d:75:fe:42:1b:36:6c:33:23:cc:02:96:53:ce:b2: ad:45:21:4a:cf:13:4b:59:32:40:8c:07:b7:da:d9: 05:9f:4b:b6:b6:82:eb:87:4a:b3:57:0e:61:e9:37: b9:a5:95:22:85:f3:47:3a:fc:67:29:e4:be:16:2f: 69:2c:ae:8e:4d:27:0f:2c:62:d0:9f:b8:d6:5d:aa: d4:1f:23:4f:ad:d5:ed:d6:27:b7:08:68:47:69:d7: 52:7e:63:ba:f0:95:76:19:1a:56:6f:cd:47:60:f1: 3f:89:0e:c0:9f:1c:0a:35:e0:9b:00:cf:56:61:c1: 1d:0a:97:93:08:1f:2d:81:a7:ef:03:ce:9a:93:d4: c4:4e:20:3a:69:41:81:8f:a7:02:3f:97:e2:a2:53: 7e:3f:50:cc:14:1e:6b:85:5b:33:32:8b:11:76:66: 64:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0C:E9:22:D1:D4:09:CF:43:1F:21:B5:B5:21:9B:3F:0B:FE:C0:BD X509v3 Authority Key Identifier: keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:61:aa:68:b8:f2:51:4e:d9:1b:fc:b2:5a:1e:c0:39:56:65: 97:9d:14:3b:12:64:af:69:d9:35:4f:6e:ef:16:d9:f2:2c:47: 18:44:86:50:89:b4:a6:35:2c:59:76:42:0c:ec:fb:77:a9:ef: 62:d5:3e:1b:73:36:01:62:f8:8f:02:f8:35:c7:3e:d8:80:fe: 8e:96:17:fa:75:97:b9:be:33:91:25:db:01:b8:bf:c9:77:4b: b9:62:53:5a:e3:75:4c:68:85:61:19:84:6e:e6:bd:c6:c2:09: f4:78:b7:07:86:fa:43:af:64:e0:98:53:99:7e:65:71:d7:77: b9:2e:e9:16:a0:c7:da:03:83:07:ed:4b:65:4c:4d:8e:3b:ea: 26:52:25:0a:da:3a:f5:a0:2b:5b:ec:5c:1d:e5:36:74:57:55: 68:8a:39:2b:ce:28:cf:1e:30:4e:6d:4f:e4:19:87:c4:41:f9: c1:95:cc:40:6e:f4:f6:48:17:f6:6b:51:6a:cf:ab:25:37:f8: 8a:a2:f8:36:b9:03:39:96:56:88:41:f5:d3:65:fe:e5:82:43: ed:eb:85:a3:df:0e:c1:e8:01:6c:23:f2:f3:ba:0d:7d:36:8e: 3d:54:5a:71:f4:71:e2:ec:61:50:1d:1e:b4:45:2a:a4:fc:80: 67:36:5b:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFNV6whwWb/M8yFYN2D227LEgjg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJF QTg4OEYwNDAeFw0yNTA3MjAwMjA2MDJaFw0yNTA3MjMxMzEyMDJaMDMxMTAvBgNV BAMTKEJFMENFOTIyRDFENDA5Q0Y0MzFGMjFCNUI1MjE5QjNGMEJGRUMwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fTNdvQTUWHWj2XBifH8XsDZP dG7ntlZal+rtx/rtdEvRIQDMp15DnMWTueOJKDcaQia0YFzhtScpJpdITiLs2Y7c gtIEI0lCOD2nNvtXVbxy4y8DDXDOmQ11/kIbNmwzI8wCllPOsq1FIUrPE0tZMkCM B7fa2QWfS7a2guuHSrNXDmHpN7mllSKF80c6/Gcp5L4WL2ksro5NJw8sYtCfuNZd qtQfI0+t1e3WJ7cIaEdp11J+Y7rwlXYZGlZvzUdg8T+JDsCfHAo14JsAz1ZhwR0K l5MIHy2Bp+8DzpqT1MROIDppQYGPpwI/l+KiU34/UMwUHmuFWzMyixF2ZmSbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvgzpItHUCc9DHyG1tSGbPwv+wL0wHwYDVR0j BBgwFoAUl3dv/wK5D/wXtligsaWY2+qIjwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMS85Nzc3NkZGRjAy QjkwRkZDMTdCNjU4QTBCMUE1OThEQkVBODg4RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJFQTg4 OEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzEvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4 REJFQTg4OEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANthqmi48lFO2Rv8sloewDlWZZedFDsSZK9p 2TVPbu8W2fIsRxhEhlCJtKY1LFl2Qgzs+3ep72LVPhtzNgFi+I8C+DXHPtiA/o6W F/p1l7m+M5El2wG4v8l3S7liU1rjdUxohWEZhG7mvcbCCfR4tweG+kOvZOCYU5l+ ZXHXd7ku6Ragx9oDgwftS2VMTY476iZSJQraOvWgK1vsXB3lNnRXVWiKOSvOKM8e ME5tT+QZh8RB+cGVzEBu9PZIF/ZrUWrPqyU3+Iqi+Da5AzmWVohB9dNl/uWCQ+3r haPfDsHoAWwj8vO6DX02jj1UWnH0ceLsYVAdHrRFKqT8gGc2W/k= -----END CERTIFICATE-----Generated at Mon Jul 21 02:11:50 2025 by rpki-client