$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: MTi39H680dY9xK7qlIVHLL6kbZFknvGAo/9rlmTZfRI= Subject key identifier: 04:0A:DE:E6:80:BD:F8:A3:2C:53:B5:D7:CA:89:9F:54:D4:8F:8D:7C Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 512172E284F11363934004D4795D4ABDEB04957D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 0366 Signing time: Sun 20 Jul 2025 22:01:55 +0000 Manifest this update: Sun 20 Jul 2025 21:56:55 +0000 Manifest next update: Thu 24 Jul 2025 07:22:55 +0000 Files and hashes: 1: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) 2: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) 3: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: H8ijeQjpVeCsAKoZPdACpLBzD6bSWc5IsEYxUB1cL8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:21:72:e2:84:f1:13:63:93:40:04:d4:79:5d:4a:bd:eb:04:95:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Jul 20 21:56:55 2025 GMT Not After : Jul 24 07:22:55 2025 GMT Subject: CN=040ADEE680BDF8A32C53B5D7CA899F54D48F8D7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:dd:b0:18:23:a3:e2:fe:36:4f:89:f3:ea: f3:81:17:5a:55:0f:23:a8:9f:f5:f0:59:b8:5c:aa: 14:3a:6f:00:2c:94:2f:38:af:44:c3:6e:e3:68:e0: 23:62:5e:e4:fa:ef:8a:c7:c9:f5:b7:30:53:23:e4: fa:dd:d4:00:2c:f6:bd:53:cf:e0:9d:06:17:fc:66: 78:3a:1f:38:aa:29:44:2b:a3:7e:18:41:ff:58:ca: 14:7c:49:b3:60:9b:2d:a5:06:21:33:7f:1e:19:0d: 9c:0f:e5:65:6d:2b:74:d6:55:a0:7a:67:6a:18:0a: b9:bb:06:39:1c:a3:c7:e5:85:09:24:27:4b:d4:cc: 9f:3e:4d:13:27:71:53:d8:75:2b:91:b4:39:27:46: 18:75:f1:54:73:72:ab:61:e6:bc:99:32:48:93:7a: d4:1e:c6:70:83:f4:72:67:e4:06:a1:06:0f:b3:a9: a8:90:d8:c8:4a:12:38:e7:05:4f:b7:e9:e0:9b:21: e8:15:7c:2f:33:c4:b2:b5:b5:24:ca:bb:b1:b9:9d: 21:e1:e8:f5:ff:fe:35:af:ce:21:2d:19:57:ba:11: 83:eb:d3:16:fe:0d:ed:6b:83:a2:27:05:fb:2d:6b: 4e:bf:e4:eb:1e:2d:27:64:dc:a8:1d:59:f6:9d:57: 3b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0A:DE:E6:80:BD:F8:A3:2C:53:B5:D7:CA:89:9F:54:D4:8F:8D:7C X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a0:be:4e:72:1e:59:f2:29:47:43:00:f7:fa:90:09:51:7c: fe:22:77:bf:31:51:9b:27:c6:7f:3f:19:86:3a:1f:cb:3f:01: 5b:e3:05:65:13:3f:9d:47:d9:78:2e:3b:60:3d:51:04:76:4d: 78:f7:2b:64:a7:c4:66:62:82:5b:45:b1:2c:1d:90:c2:f2:a2: 5f:7d:4b:f3:23:12:26:9e:9f:43:f4:85:d1:90:ee:2b:02:8e: a4:fe:15:8c:d9:cf:15:d3:62:38:d8:36:bc:63:3c:33:e1:2f: 70:62:20:7b:17:b0:d8:62:e1:95:2d:92:f1:70:7b:81:7b:8c: 0d:70:3d:d8:bf:a7:88:87:74:07:d1:35:ac:e8:e2:1f:78:92: cb:ed:12:1b:24:52:b4:ff:44:10:3c:cc:3b:bc:67:96:2f:b8: 28:b4:e4:5a:d5:38:b5:8e:33:72:6d:5b:07:f8:03:2f:10:e7: 9e:c8:31:97:32:8b:33:38:b2:50:4b:83:d9:03:f8:72:0c:6c: 6d:62:8c:2a:ef:a1:00:c0:b0:f4:ab:1a:e2:a2:ae:a4:5c:6f: 89:0c:af:05:aa:e5:1a:f4:af:7c:b6:42:54:4b:1a:f5:a1:83: 03:87:fe:92:74:da:9f:ad:09:57:ae:e9:4c:b6:62:53:e7:02: cf:d1:93:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUSFy4oTxE2OTQATUeV1KvesElX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTA3MjAyMTU2NTVaFw0yNTA3MjQwNzIyNTVaMDMxMTAvBgNV BAMTKDA0MEFERUU2ODBCREY4QTMyQzUzQjVEN0NBODk5RjU0RDQ4RjhEN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNeN2wGCOj4v42T4nz6vOBF1pV DyOon/XwWbhcqhQ6bwAslC84r0TDbuNo4CNiXuT674rHyfW3MFMj5Prd1AAs9r1T z+CdBhf8Zng6HziqKUQro34YQf9YyhR8SbNgmy2lBiEzfx4ZDZwP5WVtK3TWVaB6 Z2oYCrm7Bjkco8flhQkkJ0vUzJ8+TRMncVPYdSuRtDknRhh18VRzcqth5ryZMkiT etQexnCD9HJn5AahBg+zqaiQ2MhKEjjnBU+36eCbIegVfC8zxLK1tSTKu7G5nSHh 6PX//jWvziEtGVe6EYPr0xb+De1rg6InBfsta06/5OseLSdk3KgdWfadVzspAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBAre5oC9+KMsU7XXyomfVNSPjXwwHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACygvk5yHlnyKUdDAPf6kAlRfP4id78xUZsn xn8/GYY6H8s/AVvjBWUTP51H2XguO2A9UQR2TXj3K2SnxGZigltFsSwdkMLyol99 S/MjEiaen0P0hdGQ7isCjqT+FYzZzxXTYjjYNrxjPDPhL3BiIHsXsNhi4ZUtkvFw e4F7jA1wPdi/p4iHdAfRNazo4h94ksvtEhskUrT/RBA8zDu8Z5YvuCi05FrVOLWO M3JtWwf4Ay8Q557IMZcyizM4slBLg9kD+HIMbG1ijCrvoQDAsPSrGuKirqRcb4kM rwWq5Rr0r3y2QlRLGvWhgwOH/pJ02p+tCVeu6Uy2YlPnAs/Rkwc= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:38 2025 by rpki-client