$ rpki-client -vvf repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft File: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft (raw, json) Hash identifier: TTDVw1Hcv+dc58XVh6brx6rqJ73WuKIR6PCgHruMekI= Subject key identifier: 5B:8F:9E:9E:48:57:92:81:00:15:74:9F:DA:ED:EF:0A:03:E5:5F:2F Authority key identifier: 97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F Certificate issuer: /CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Certificate serial: 15743222C0D916911F9CEF5BD6B99E08A8EF64CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft Manifest number: 04EF Signing time: Sun 20 Jul 2025 13:11:24 +0000 Manifest this update: Sun 20 Jul 2025 13:06:24 +0000 Manifest next update: Thu 24 Jul 2025 01:06:24 +0000 Files and hashes: 1: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: vtrYPFcybkmKbw9RZMYXPUfTz3LO/v9B/HIV4T8BsWE=) 2: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: Jz7bd4l9iJshW7NcA6KcDnrf6hTtrcC3IwQK9KShw7w=) 3: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl (hash: qySUri7XkISsXLpRbMolT52WwTRTIu5Xxkck49jVHgg=) 4: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: UcHmCNm704dRdxu5mGnFESd+cYb7vs2gxWT3im+cP2U=) 5: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: EeloRAa8rxGIeEpGTxQGak2WLi+75Ry5Z63pTnvFrf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:74:32:22:c0:d9:16:91:1f:9c:ef:5b:d6:b9:9e:08:a8:ef:64:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Validity Not Before: Jul 20 13:06:24 2025 GMT Not After : Jul 24 01:06:24 2025 GMT Subject: CN=5B8F9E9E485792810015749FDAEDEF0A03E55F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:26:37:d8:17:9a:ed:aa:a6:79:fb:54:ab: 45:79:e3:d8:51:59:3e:47:d9:96:d4:20:ef:ff:af: 9e:79:b7:81:2c:06:f4:75:51:c4:45:a2:f4:6f:28: ec:c3:1d:ed:ba:19:ff:fc:1c:55:e6:99:36:72:ed: 29:fb:6c:62:29:dc:7d:2e:8e:a7:99:56:a5:3a:96: 60:cc:c6:e8:a4:80:9a:dd:6f:ae:3c:0b:ab:90:06: f0:b5:66:bc:95:a5:08:53:54:b9:e3:01:88:25:4c: c5:2b:dd:da:8d:4b:e8:4f:b9:9d:58:2d:6c:ad:15: 3c:9b:dd:eb:55:d9:f8:63:43:d0:21:06:0d:27:37: 7c:c1:1c:a6:d3:10:5a:18:f7:ff:92:6c:6e:26:a7: e9:80:f5:89:71:ed:c0:52:ef:19:99:54:9e:36:ce: ff:03:ad:f2:55:f5:b3:14:94:5f:cb:89:21:51:15: 19:10:43:79:e6:2a:85:17:4c:27:20:1d:ba:f8:e0: dd:74:89:a3:26:bf:1a:4d:45:23:67:3f:35:82:95: 43:c7:73:56:73:6e:d5:89:42:7b:e9:1b:e8:bc:2e: b1:50:dd:3d:2f:40:09:f0:ae:dc:75:de:3a:49:ff: 25:6f:bc:0d:bf:6f:a7:5f:b8:5c:12:7b:ab:d9:27: 0b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8F:9E:9E:48:57:92:81:00:15:74:9F:DA:ED:EF:0A:03:E5:5F:2F X509v3 Authority Key Identifier: keyid:97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:de:4f:b0:e9:0e:83:1d:dd:50:7e:92:f0:38:28:51:8d:91: 84:13:74:1d:69:db:25:fa:f3:99:b9:c7:6f:92:80:f7:20:ba: 80:81:53:38:ae:e2:07:c4:f9:29:99:bb:4d:bf:2e:f1:93:53: 5a:3d:cb:d1:58:70:fa:bd:d8:e5:0e:39:ad:88:64:52:c3:3e: e7:f8:1f:40:dc:d9:52:a4:b8:f8:ca:ad:a0:0f:fa:93:d6:46: 0e:db:03:06:f2:4b:b1:b3:20:c0:39:f2:46:13:3c:27:21:fb: a2:0f:7e:69:3e:43:9d:3c:2a:31:50:3b:be:13:1e:3f:7a:29: 88:54:b4:50:68:a8:63:13:17:a9:a7:70:14:78:a7:04:71:e7: a5:71:67:ce:72:5d:47:cb:07:f5:87:c9:58:3b:83:23:95:ef: ae:02:71:d1:ad:b9:e9:98:e5:03:06:59:35:97:a9:12:7a:f6: 8d:51:18:57:13:e8:16:09:4e:dd:28:34:e0:6b:2d:1a:cd:8e: af:19:7c:bd:86:5d:17:dd:4d:26:0e:d6:dc:be:73:d6:fa:7d: b7:ab:cf:da:ce:a6:ab:5f:19:b5:71:0a:40:8a:0c:73:4e:0d: 6d:18:9c:4a:91:64:9e:75:7d:5f:36:f9:88:c9:74:2d:aa:bc: ca:45:94:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXQyIsDZFpEfnO9b1rmeCKjvZM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURD QUM2MkM5RjAeFw0yNTA3MjAxMzA2MjRaFw0yNTA3MjQwMTA2MjRaMDMxMTAvBgNV BAMTKDVCOEY5RTlFNDg1NzkyODEwMDE1NzQ5RkRBRURFRjBBMDNFNTVGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4CY32Bea7aqmeftUq0V549hR WT5H2ZbUIO//r555t4EsBvR1UcRFovRvKOzDHe26Gf/8HFXmmTZy7Sn7bGIp3H0u jqeZVqU6lmDMxuikgJrdb648C6uQBvC1ZryVpQhTVLnjAYglTMUr3dqNS+hPuZ1Y LWytFTyb3etV2fhjQ9AhBg0nN3zBHKbTEFoY9/+SbG4mp+mA9Ylx7cBS7xmZVJ42 zv8DrfJV9bMUlF/LiSFRFRkQQ3nmKoUXTCcgHbr44N10iaMmvxpNRSNnPzWClUPH c1ZzbtWJQnvpG+i8LrFQ3T0vQAnwrtx13jpJ/yVvvA2/b6dfuFwSe6vZJws1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW4+enkhXkoEAFXSf2u3vCgPlXy8wHwYDVR0j BBgwFoAUl9d/CGafuU5OmfeVUZ+2HcrGLJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmM2OTQ0MC04YjE3LTRhNjgtYTBmYS02NjE1OWUyMTYyZTAvMC85N0Q3N0YwODY2 OUZCOTRFNEU5OUY3OTU1MTlGQjYxRENBQzYyQzlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURDQUM2 MkM5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJjNjk0NDAtOGIxNy00YTY4LWEw ZmEtNjYxNTllMjE2MmUwLzAvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2 MURDQUM2MkM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3eT7DpDoMd3VB+kvA4KFGNkYQTdB1p2yX6 85m5x2+SgPcguoCBUziu4gfE+SmZu02/LvGTU1o9y9FYcPq92OUOOa2IZFLDPuf4 H0Dc2VKkuPjKraAP+pPWRg7bAwbyS7GzIMA58kYTPCch+6IPfmk+Q508KjFQO74T Hj96KYhUtFBoqGMTF6mncBR4pwRx56VxZ85yXUfLB/WHyVg7gyOV764CcdGtuemY 5QMGWTWXqRJ69o1RGFcT6BYJTt0oNOBrLRrNjq8ZfL2GXRfdTSYO1ty+c9b6fber z9rOpqtfGbVxCkCKDHNODW0YnEqRZJ51fV82+YjJdC2qvMpFlB8= -----END CERTIFICATE-----Generated at Sun Jul 20 21:27:21 2025 by rpki-client