$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft File: 981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json) Hash identifier: cIR0czvq0ZqupcYrlbhZ9AtGHmXyOZLPvkPHS3z+hZ8= Subject key identifier: A3:74:41:2F:C7:81:D2:36:A2:43:08:68:27:19:2A:C6:64:98:A6:AD Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 43990F6632D0C48BCF9E043EF6DD91A7DD25C3EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft Manifest number: 0553 Signing time: Fri 25 Jul 2025 06:42:25 +0000 Manifest this update: Fri 25 Jul 2025 06:37:25 +0000 Manifest next update: Mon 28 Jul 2025 17:28:25 +0000 Files and hashes: 1: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: 8Z6QdZAm6ipP1goiFZjslQYb9XOb/wZyuYYrPlulaFM=) 2: 3131302e34342e3137312e302f32342d3234203d3e203234323036.roa (hash: NYon6seWVPGfj3szG9Lc+42jdaypbm8ZjYwi9OVBxlE=) 3: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: yk2Beo121KKGPqhGrImYDU3EMLdITUqRzn7ocJjo60c=) 4: 3230332e38342e3134332e302f32342d3234203d3e20323133363037.roa (hash: SU/DxOnFopjxkv8c6HfEkmadSFV8VExLgA9VBa2HuUc=) 5: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 9MSiXUftqD7YwgoDDhRkUOlJfbnaxlrR0kRkqPsHDsM=) 6: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: armCdMsgrh9HBVd3tCBMp8GfztvN8GGDpG5VkguYG4U=) 7: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: vmMOC54VRYyQ6zaPWhSxLckPPT+mw9crTtfHlgZPBE8=) 8: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: 8l5eYrcFmWYoHIRslSOK/QjIOtGdM4ToITrA74vyIxo=) 9: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: vTl0yJ2djqJDIZjMPJ40qiiWg73ATP1kA/wfBlcZUj0=) 10: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: +ioxMWbzQIk8162X0SpHMt662sECkzs897/VKWy1MDU=) 11: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: lNnryO3KjbjallOCFXPMSeEsKPceLct4DmwTgOEASfo=) 12: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: aq3iMOcZU4XVOFPAPd2Nh3J2J2xxy7ZZYh4S2cWkrJY=) 13: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: 1MMaA/JALdwU46Gmn5cadR8bFFMn6pjjD2wa0Pe9Aag=) 14: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: aaVQCjxDcTZfVP0GXV6UmhAVx/WHjfyhQPMjY9CDL1Y=) 15: 3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa (hash: 9tWn1tUw0lnAE7QTSe9gFD7FXQ8Wg/JsMqpIZEwXrcQ=) 16: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: RTuZkJtHP4oO5BZBcfIYPQEhgHjC830z/8gqHwaq6eQ=) 17: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (hash: tsk8yK4KqvJi7ogL1Fgl2IoF/vS9e+lT+cqgt4OR0O0=) 18: 3230332e38342e3133362e302f32342d3234203d3e203234323036.roa (hash: 4CIlhDwPBWmO489rSkBL096ATSwuK+FjlEMQtzZL/kc=) 19: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: k8TYiHXc6vZmoqXaKgcDXCYwJI5QRLDArVJpzQsFi0s=) 20: 3230332e38342e3133382e302f32342d3234203d3e20393834.roa (hash: OvL2f4eV/dIS/ISoFQJ5cS+0xjddfINmJd9dof7YWKE=) 21: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: BYrXc+PLZ/j21jMX4S/tR9RU/3h3VFerg2jw36ACe00=) 22: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: tmM3oKcQYom0eZ0XNJS+YU7h43ssUwLiYaqon6dfaUY=) 23: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: DzgPlEX76YPqKshtrhPz/EVID2lXXaNvCCo/tHgJE8c=) 24: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: KnuT4VJ8iLWdqrErOu2FeJ8mmwI6wwnIx48WuNVZS4g=) 25: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: 1w88ZaASU+IezmbFAGItPt0iVYfj3PFgWl7YKMyNTuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 17:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:99:0f:66:32:d0:c4:8b:cf:9e:04:3e:f6:dd:91:a7:dd:25:c3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Jul 25 06:37:25 2025 GMT Not After : Jul 28 17:28:25 2025 GMT Subject: CN=A374412FC781D236A243086827192AC66498A6AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:19:c0:4d:ab:cc:0b:23:f5:1e:99:c0:92: 66:4a:e9:d9:5e:74:33:98:e5:58:4f:0a:55:bf:ae: e6:5f:53:45:96:a0:ce:42:a2:2e:f4:68:e3:49:23: 7b:c6:5a:9a:3e:8b:88:2a:94:b5:d3:84:fa:24:61: dc:d4:5e:ec:a2:f7:de:d0:9d:26:89:8c:0f:79:c6: 72:fe:86:f4:68:aa:e0:47:42:3c:12:db:e8:e9:bb: af:8f:3b:14:0c:b6:7b:f9:79:31:89:f7:9e:65:5c: 97:e5:15:75:5f:78:9e:58:bc:cb:8b:f9:8c:ef:d0: 01:3f:21:fb:72:2f:e6:6c:e1:ac:ca:6d:52:05:83: ca:74:5f:21:41:99:9c:0b:37:70:49:58:0f:b7:b0: db:fb:4a:84:f4:f9:2c:7a:8b:f5:a1:82:5d:ec:ea: 7d:44:eb:1a:54:8d:d2:94:4f:65:b3:35:eb:d4:42: 8f:ed:d8:e3:09:d8:dd:ed:17:8b:20:df:23:64:64: 7b:ad:81:a3:14:7c:bc:f4:8f:1c:17:4a:d0:2f:34: 4f:01:9f:db:d0:89:53:c1:75:3c:57:70:18:71:4c: 31:a7:64:5b:ba:91:bf:bd:d7:ef:3c:7e:aa:68:68: a3:81:9a:85:cc:ff:67:d4:31:ea:e1:25:58:5d:46: db:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:74:41:2F:C7:81:D2:36:A2:43:08:68:27:19:2A:C6:64:98:A6:AD X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:97:c1:f9:a7:4f:fc:92:2c:4f:59:a0:75:96:8e:1a:6f:ae: fc:5b:9f:00:7e:9a:69:c4:c1:98:c1:9f:16:dd:90:10:44:7c: 52:98:1b:8f:ea:1a:36:df:4b:92:8d:67:82:7f:78:9a:ad:29: c6:a2:df:04:38:c1:af:dc:98:33:ea:8f:cd:51:ec:39:72:43: 90:02:8e:f8:74:d1:e0:f6:5f:ab:0b:4a:e4:57:24:a8:35:32: 70:f7:c5:6b:55:c4:26:10:d3:18:06:85:56:d6:a1:bb:e5:9d: aa:95:99:5f:0e:1f:47:f1:a3:85:46:1a:19:ac:92:a0:8d:89: c9:df:a9:60:14:84:2c:1d:bb:f7:00:81:7b:87:8f:a5:ce:69: aa:3d:02:d9:f2:c6:52:e7:fe:d4:e3:70:f4:6a:f9:53:3d:32: 49:bf:36:4a:6e:f0:bc:1b:b6:ca:ee:9e:93:5f:46:bb:f6:44: 37:a1:b9:20:97:e6:e8:a9:22:f8:22:9e:ac:03:f5:81:84:4a: 1e:26:08:b5:53:e1:ae:3d:53:37:c7:10:a5:5b:09:19:3a:0f: e5:bd:d1:a5:41:a7:f4:83:f9:d7:98:e0:cd:0b:66:c1:25:a7: 00:67:84:d9:a0:28:b4:1a:7e:69:9c:9c:5f:f9:3d:4a:44:60: d7:30:e2:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5kPZjLQxIvPngQ+9t2Rp90lw+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA3MjUwNjM3MjVaFw0yNTA3MjgxNzI4MjVaMDMxMTAvBgNV BAMTKEEzNzQ0MTJGQzc4MUQyMzZBMjQzMDg2ODI3MTkyQUM2NjQ5OEE2QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VhnATavMCyP1HpnAkmZK6dle dDOY5VhPClW/ruZfU0WWoM5Coi70aONJI3vGWpo+i4gqlLXThPokYdzUXuyi997Q nSaJjA95xnL+hvRoquBHQjwS2+jpu6+POxQMtnv5eTGJ955lXJflFXVfeJ5YvMuL +Yzv0AE/IftyL+Zs4azKbVIFg8p0XyFBmZwLN3BJWA+3sNv7SoT0+Sx6i/Whgl3s 6n1E6xpUjdKUT2WzNevUQo/t2OMJ2N3tF4sg3yNkZHutgaMUfLz0jxwXStAvNE8B n9vQiVPBdTxXcBhxTDGnZFu6kb+91+88fqpoaKOBmoXM/2fUMerhJVhdRttTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo3RBL8eB0jaiQwhoJxkqxmSYpq0wHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc5MjJmODktM2U5Yi00YjIxLTkx ODYtYTY0OGMyZGEzZjdiLzAvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlF N0NCMEMxMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuXwfmnT/ySLE9ZoHWWjhpvrvxbnwB+mmnE wZjBnxbdkBBEfFKYG4/qGjbfS5KNZ4J/eJqtKcai3wQ4wa/cmDPqj81R7DlyQ5AC jvh00eD2X6sLSuRXJKg1MnD3xWtVxCYQ0xgGhVbWobvlnaqVmV8OH0fxo4VGGhms kqCNicnfqWAUhCwdu/cAgXuHj6XOaao9AtnyxlLn/tTjcPRq+VM9Mkm/Nkpu8Lwb tsrunpNfRrv2RDehuSCX5uipIvginqwD9YGESh4mCLVT4a49UzfHEKVbCRk6D+W9 0aVBp/SD+deY4M0LZsElpwBnhNmgKLQafmmcnF/5PUpEYNcw4h0= -----END CERTIFICATE-----Generated at Sat Jul 26 15:12:51 2025 by rpki-client