$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json) Hash identifier: d4p+gjnszA0tx7qhnMSp8aKG/Z0gX8XpH/kMwfIaaew= Subject key identifier: 04:89:1B:B4:F4:17:F3:FA:D7:DC:4C:BC:7B:A9:36:5B:61:DB:0A:DB Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Certificate serial: 22FA5CA979E9B4B0D85C74FF7304AD28A41ED1B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft Manifest number: 010B Signing time: Sun 20 Jul 2025 03:41:24 +0000 Manifest this update: Sun 20 Jul 2025 03:36:24 +0000 Manifest next update: Wed 23 Jul 2025 09:25:24 +0000 Files and hashes: 1: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: qSzxrfqd29Pg9HOqmUjPO7crmnWP/zs2luJUdYRC76s=) 2: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: 5d3VKqCO9V04hs/HJi0+LiYt1h3MX8GhrKZHorM1IXw=) 3: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: IHqcErbm/jh+8G9ITpkeHubYhwRm77oQuURliUYMdFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fa:5c:a9:79:e9:b4:b0:d8:5c:74:ff:73:04:ad:28:a4:1e:d1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Validity Not Before: Jul 20 03:36:24 2025 GMT Not After : Jul 23 09:25:24 2025 GMT Subject: CN=04891BB4F417F3FAD7DC4CBC7BA9365B61DB0ADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:77:25:fa:ee:a3:47:a1:b5:49:38:52:23: 49:fc:b4:2a:e6:b3:58:66:64:f1:a1:cc:2a:88:05: 0d:31:bb:b3:72:c6:6c:52:a8:89:b4:d4:52:d4:f0: 4c:43:1b:86:b3:f7:01:dc:21:1a:cd:b8:d7:94:07: d0:4e:08:19:bf:95:9a:fb:85:88:0b:41:95:db:24: 83:ce:86:3a:ed:ca:41:76:27:9a:1a:da:e4:d4:74: 0a:9a:c2:be:96:31:ad:36:5c:d4:d7:c3:2d:44:4a: 54:93:49:04:c4:36:ab:ec:3c:e3:9a:62:f2:f4:2b: 27:c7:d0:85:08:3c:8b:e6:10:d5:59:4c:d3:d5:de: fe:40:20:f2:cd:bc:42:37:f7:38:0a:ea:e8:90:24: 1b:a8:29:70:3b:89:25:41:c7:b4:9b:20:87:72:43: e0:d1:9e:2a:9c:23:f1:33:bf:ce:46:e6:74:f5:de: 72:7d:6f:fd:5c:09:0c:93:31:58:04:e9:25:21:0c: 34:13:a9:40:fd:94:93:57:20:b5:e4:ea:20:a2:e7: 5b:9c:85:0c:9a:8a:59:00:47:a2:3c:8c:ed:09:ef: 5c:ce:0b:95:0b:8f:04:1e:80:91:24:9e:2a:f5:39: 65:79:d0:ed:ff:f7:6d:5d:90:90:c4:6a:41:04:f4: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:89:1B:B4:F4:17:F3:FA:D7:DC:4C:BC:7B:A9:36:5B:61:DB:0A:DB X509v3 Authority Key Identifier: keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:21:7b:26:7c:6d:f9:58:71:fe:f7:71:e7:c6:37:96:ab:57: 89:06:88:0b:ca:01:39:97:a9:53:24:0e:69:f4:f8:30:a8:76: fe:41:16:e4:31:17:72:2a:92:96:89:2b:f7:ad:a7:81:78:50: 95:bf:4e:c0:cd:47:d7:a0:f6:a3:7d:10:0b:67:7b:ae:da:50: 92:c2:3a:a5:a5:f7:3f:20:82:2c:c2:21:8a:e3:98:cf:24:02: 4e:85:36:ca:c7:46:74:b4:22:ea:d1:66:f6:de:3a:66:dc:0d: b2:3e:0c:c3:c4:92:fa:36:37:00:5d:65:30:f1:9d:0b:ec:4f: ed:8c:7c:75:88:f3:cc:c5:9b:2f:a3:5d:52:63:39:c9:c2:ab: 96:79:f9:29:2c:89:c5:87:fe:66:94:8d:d8:f9:df:8e:ce:dd: 37:db:69:33:70:e5:8a:9c:d0:f4:26:22:e5:4f:de:4b:b8:dd: 5f:ab:e4:9e:50:63:e8:b7:16:21:a8:19:4a:31:34:69:08:b8: 45:55:c8:dc:da:ad:d9:1c:7a:6f:dd:63:a5:49:56:06:29:4d: e8:38:51:b6:e9:01:5f:db:e6:50:1a:57:e0:1d:b4:62:a4:32: 64:69:4c:e3:c7:e8:75:97:8d:dd:0c:5e:ab:78:5c:2b:48:31: ac:8c:3d:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvpcqXnptLDYXHT/cwStKKQe0bcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez NjAxQTg4QjAeFw0yNTA3MjAwMzM2MjRaFw0yNTA3MjMwOTI1MjRaMDMxMTAvBgNV BAMTKDA0ODkxQkI0RjQxN0YzRkFEN0RDNENCQzdCQTkzNjVCNjFEQjBBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oncl+u6jR6G1SThSI0n8tCrm s1hmZPGhzCqIBQ0xu7NyxmxSqIm01FLU8ExDG4az9wHcIRrNuNeUB9BOCBm/lZr7 hYgLQZXbJIPOhjrtykF2J5oa2uTUdAqawr6WMa02XNTXwy1ESlSTSQTENqvsPOOa YvL0KyfH0IUIPIvmENVZTNPV3v5AIPLNvEI39zgK6uiQJBuoKXA7iSVBx7SbIIdy Q+DRniqcI/Ezv85G5nT13nJ9b/1cCQyTMVgE6SUhDDQTqUD9lJNXILXk6iCi51uc hQyailkAR6I8jO0J71zOC5ULjwQegJEknir1OWV50O3/921dkJDEakEE9EFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBIkbtPQX8/rX3Ey8e6k2W2HbCtswHwYDVR0j BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0 Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAheyZ8bflYcf73cefGN5arV4kGiAvKATmX qVMkDmn0+DCodv5BFuQxF3IqkpaJK/etp4F4UJW/TsDNR9eg9qN9EAtne67aUJLC OqWl9z8ggizCIYrjmM8kAk6FNsrHRnS0IurRZvbeOmbcDbI+DMPEkvo2NwBdZTDx nQvsT+2MfHWI88zFmy+jXVJjOcnCq5Z5+SksicWH/maUjdj5347O3TfbaTNw5Yqc 0PQmIuVP3ku43V+r5J5QY+i3FiGoGUoxNGkIuEVVyNzardkcem/dY6VJVgYpTeg4 UbbpAV/b5lAaV+AdtGKkMmRpTOPH6HWXjd0MXqt4XCtIMayMPbA= -----END CERTIFICATE-----Generated at Mon Jul 21 23:57:10 2025 by rpki-client