$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: lKLyoTmWHcuvhlYRA2J0IyPJCOUHSu9vRVHxgGEcN1A= Subject key identifier: 30:0D:6A:1E:DD:B3:BA:6E:6A:1F:E6:01:A9:F2:5F:9D:2C:F1:B2:AF Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 40A6FB3D9DFDB67CC804BD51793F8760FDA3D2C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 01B2 Signing time: Tue 22 Jul 2025 01:41:12 +0000 Manifest this update: Tue 22 Jul 2025 01:36:12 +0000 Manifest next update: Fri 25 Jul 2025 09:15:12 +0000 Files and hashes: 1: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: lJNy+JW+pFgINOsdPN1m81uQv6PG5GDZ13F5jnSj9B4=) 2: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: JUjPAOstxtzy3e2XRAdy16cqHuucp6sj9RxrkFhDS3Q=) 3: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: NcNTdHcRodSJZLKLz640cCIZx0mxCUPWUiWbg907HuU=) 4: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: y45woR+frHwDPz+XrJyAsnYy051jps7RCl331frKeSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 09:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a6:fb:3d:9d:fd:b6:7c:c8:04:bd:51:79:3f:87:60:fd:a3:d2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Jul 22 01:36:12 2025 GMT Not After : Jul 25 09:15:12 2025 GMT Subject: CN=300D6A1EDDB3BA6E6A1FE601A9F25F9D2CF1B2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:76:71:01:8a:6d:53:5f:c2:47:cf:32:30:18: a4:a8:5f:35:df:34:54:6a:18:b2:fa:2c:c0:f6:75: 19:f2:24:80:06:71:d7:e1:df:d6:f3:4e:2e:95:62: e2:17:d1:90:18:a9:d9:84:3d:f3:e0:d5:20:24:8a: bd:db:22:67:e1:5f:c5:f7:5c:b7:49:bd:62:1e:7b: 54:9b:9b:25:a2:f2:35:32:ba:77:a4:8a:99:30:a8: c3:99:fe:50:46:2a:ca:e1:e4:83:d7:58:68:ee:c6: 34:04:3f:80:25:e9:19:ce:d9:51:0b:d1:fc:2d:c6: e4:ea:8d:ff:52:9f:7d:0a:2a:8f:dd:32:12:6f:25: 9a:05:d1:cd:3d:af:82:ba:a9:66:0a:00:b5:f2:fb: 84:06:d8:7e:bc:fa:3c:7a:7e:90:da:b7:d2:39:21: 2f:57:9b:78:e5:51:04:0b:a9:a1:fb:7e:47:29:04: 7f:11:a9:cb:da:64:3b:2e:7d:e0:6a:35:68:3b:e0: 1a:03:0b:2b:1e:60:ed:22:6c:c6:c3:b5:a5:f2:3d: 53:7b:2c:6f:22:11:e8:ae:5e:60:a9:eb:06:3b:2b: 65:61:f4:cb:3a:55:44:cf:7e:85:1f:3a:5d:d9:bd: 14:ea:44:64:16:cb:29:b9:1d:18:5b:e7:7f:5a:9e: ea:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0D:6A:1E:DD:B3:BA:6E:6A:1F:E6:01:A9:F2:5F:9D:2C:F1:B2:AF X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f5:03:df:39:31:a6:d5:2e:48:c8:d7:a3:3e:ed:f0:c1:a7: d0:d3:91:1a:40:df:f1:06:47:82:b1:14:4a:8e:a7:74:84:db: 1b:73:a1:0e:43:53:7a:d4:b8:1c:dd:39:de:a8:72:a4:d5:92: f9:4a:bb:0d:46:93:bd:2f:bd:bb:01:79:50:aa:71:93:c7:2f: 85:ab:93:ca:1e:a0:2b:5a:01:20:05:09:c9:0e:f4:06:e0:b8: 28:a0:bf:29:12:b2:d9:58:d2:00:35:1b:a9:7d:92:9e:31:5f: fa:67:04:41:3d:8c:c8:ca:a2:ae:20:be:52:9a:a3:f7:db:e0: 18:84:03:dc:7f:18:30:ca:4d:04:0c:38:ce:73:01:02:29:22: 26:c5:f7:91:08:80:22:fa:81:35:b6:6b:21:69:55:16:d5:fc: f2:95:fb:ad:e3:dc:74:86:1f:57:1e:91:5f:45:34:b3:69:f9: 20:ce:92:0e:a9:b2:15:ad:2c:eb:59:75:71:72:a6:4c:3c:dc: 6b:08:99:bc:fe:85:86:83:a1:fb:7e:32:1f:85:15:6d:7d:dd: e0:4c:c5:b9:1e:22:83:4c:61:06:76:2f:96:10:4a:f3:d0:0c: 2a:a0:83:5d:4f:0e:c0:04:54:2b:1d:5f:de:33:ad:c1:16:85: 0d:00:6d:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKb7PZ39tnzIBL1ReT+HYP2j0sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNTA3MjIwMTM2MTJaFw0yNTA3MjUwOTE1MTJaMDMxMTAvBgNV BAMTKDMwMEQ2QTFFRERCM0JBNkU2QTFGRTYwMUE5RjI1RjlEMkNGMUIyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMdnEBim1TX8JHzzIwGKSoXzXf NFRqGLL6LMD2dRnyJIAGcdfh39bzTi6VYuIX0ZAYqdmEPfPg1SAkir3bImfhX8X3 XLdJvWIee1SbmyWi8jUyunekipkwqMOZ/lBGKsrh5IPXWGjuxjQEP4Al6RnO2VEL 0fwtxuTqjf9Sn30KKo/dMhJvJZoF0c09r4K6qWYKALXy+4QG2H68+jx6fpDat9I5 IS9Xm3jlUQQLqaH7fkcpBH8RqcvaZDsufeBqNWg74BoDCyseYO0ibMbDtaXyPVN7 LG8iEeiuXmCp6wY7K2Vh9Ms6VUTPfoUfOl3ZvRTqRGQWyym5HRhb539anupBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMA1qHt2zum5qH+YBqfJfnSzxsq8wHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACP1A985MabVLkjI16M+7fDBp9DTkRpA3/EG R4KxFEqOp3SE2xtzoQ5DU3rUuBzdOd6ocqTVkvlKuw1Gk70vvbsBeVCqcZPHL4Wr k8oeoCtaASAFCckO9AbguCigvykSstlY0gA1G6l9kp4xX/pnBEE9jMjKoq4gvlKa o/fb4BiEA9x/GDDKTQQMOM5zAQIpIibF95EIgCL6gTW2ayFpVRbV/PKV+63j3HSG H1cekV9FNLNp+SDOkg6pshWtLOtZdXFypkw83GsImbz+hYaDoft+Mh+FFW193eBM xbkeIoNMYQZ2L5YQSvPQDCqgg11PDsAEVCsdX94zrcEWhQ0AbXc= -----END CERTIFICATE-----Generated at Wed Jul 23 02:07:05 2025 by rpki-client