$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: BJVZf7crSqW7IQvLLrsk6hdXFBrDAQmZPvpdJ5lx0Rw= Subject key identifier: D1:DF:61:81:B0:DA:81:E5:B0:9A:43:22:96:C6:20:51:CB:E8:04:09 Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 755755BC981C82541CF5B6B0C489B2BEF4DE02D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 01B3 Signing time: Thu 24 Jul 2025 09:21:15 +0000 Manifest this update: Thu 24 Jul 2025 09:16:15 +0000 Manifest next update: Sun 27 Jul 2025 12:01:15 +0000 Files and hashes: 1: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: drouUY15tesjp4pojnWm/seoKQvV1GuANmrD/xbwz0c=) 2: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: JUjPAOstxtzy3e2XRAdy16cqHuucp6sj9RxrkFhDS3Q=) 3: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: NcNTdHcRodSJZLKLz640cCIZx0mxCUPWUiWbg907HuU=) 4: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: y45woR+frHwDPz+XrJyAsnYy051jps7RCl331frKeSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:57:55:bc:98:1c:82:54:1c:f5:b6:b0:c4:89:b2:be:f4:de:02:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Jul 24 09:16:15 2025 GMT Not After : Jul 27 12:01:15 2025 GMT Subject: CN=D1DF6181B0DA81E5B09A432296C62051CBE80409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:f3:fb:fc:20:53:d1:14:c0:03:c8:60:3f: 2d:f4:e3:f8:93:f4:b3:23:7f:b1:22:80:ae:0d:8d: 72:1a:ef:d9:4f:90:40:9a:f0:04:56:0e:7d:32:64: ae:e5:99:f9:d8:36:56:79:e5:94:2f:c0:04:3d:74: b3:5d:9a:2e:20:03:70:52:01:eb:13:1d:26:36:71: c7:7b:eb:96:97:f9:38:10:36:83:53:2a:1f:24:8d: c6:5b:5e:96:73:0d:c5:05:06:11:7c:62:c9:02:4f: 99:64:04:73:d0:d1:85:d6:7a:ad:bc:ca:de:9b:a1: bc:7c:11:78:ec:36:64:97:bd:dd:76:00:59:0b:23: f9:a1:36:5e:38:de:f2:05:a6:3d:3b:95:14:9d:5b: aa:ea:01:8f:e0:88:08:7b:3c:00:2e:e2:4b:4b:56: 23:30:e6:5e:1b:59:2d:d4:33:db:5e:3c:36:f9:ac: 18:80:f2:e5:e0:d2:b4:0b:77:37:76:a1:01:4b:23: c0:70:a9:f1:03:04:99:68:41:b4:5e:9e:01:ea:a9: 11:71:db:d3:86:a2:75:20:67:10:ff:a8:a7:d4:0f: 62:9e:52:f8:38:5f:60:3c:41:b6:16:14:05:07:b6: 29:b6:cd:17:7c:80:83:e6:85:44:dc:6c:8a:31:dc: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DF:61:81:B0:DA:81:E5:B0:9A:43:22:96:C6:20:51:CB:E8:04:09 X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cf:01:44:40:3b:9f:76:8d:8d:86:df:ae:39:67:77:9e:34: 20:0c:07:e1:5e:df:f3:bb:ce:60:c2:ff:41:76:21:fa:65:76: c4:03:8e:59:58:d3:5f:e2:06:f1:df:d5:de:ac:b7:ee:75:fb: b0:12:6b:a2:90:00:4b:85:9e:cf:9b:cb:04:91:93:20:43:28: ad:aa:7c:3e:49:50:35:8f:23:16:ea:9f:f4:10:c1:26:9b:fd: 80:54:a5:a0:28:09:b4:9b:ff:bb:41:5a:91:ba:ed:d0:f5:65: ac:66:37:74:51:b9:81:ac:65:3f:15:43:43:34:d8:c8:93:fe: 48:0c:f8:86:cf:f4:11:b0:ce:2e:f1:e4:78:6c:a2:bc:26:13: 2b:bc:85:ab:6c:36:1c:68:bb:f8:cf:86:66:28:a4:3d:4b:48: f2:26:91:c8:20:b5:33:b2:9a:ab:05:d3:c2:a5:f1:b3:b1:dd: 76:05:1e:4c:44:80:13:31:da:f6:9c:35:af:6e:45:e6:98:4a: 2a:c9:6c:79:93:3a:06:e5:b3:5d:5c:92:d5:c5:0a:9a:ea:1b: a8:e3:ef:e6:07:f0:bc:7a:44:ab:d8:50:3c:97:ae:09:18:59: 38:b2:be:48:b1:f0:9c:0e:ce:f7:76:0f:c7:fa:5b:83:8e:a4: 7b:67:6a:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVdVvJgcglQc9bawxImyvvTeAtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNTA3MjQwOTE2MTVaFw0yNTA3MjcxMjAxMTVaMDMxMTAvBgNV BAMTKEQxREY2MTgxQjBEQTgxRTVCMDlBNDMyMjk2QzYyMDUxQ0JFODA0MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58vP7/CBT0RTAA8hgPy304/iT 9LMjf7EigK4NjXIa79lPkECa8ARWDn0yZK7lmfnYNlZ55ZQvwAQ9dLNdmi4gA3BS AesTHSY2ccd765aX+TgQNoNTKh8kjcZbXpZzDcUFBhF8YskCT5lkBHPQ0YXWeq28 yt6bobx8EXjsNmSXvd12AFkLI/mhNl443vIFpj07lRSdW6rqAY/giAh7PAAu4ktL ViMw5l4bWS3UM9tePDb5rBiA8uXg0rQLdzd2oQFLI8BwqfEDBJloQbRengHqqRFx 29OGonUgZxD/qKfUD2KeUvg4X2A8QbYWFAUHtim2zRd8gIPmhUTcbIox3D0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0d9hgbDageWwmkMilsYgUcvoBAkwHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3PAURAO592jY2G3645Z3eeNCAMB+Fe3/O7 zmDC/0F2IfpldsQDjllY01/iBvHf1d6st+51+7ASa6KQAEuFns+bywSRkyBDKK2q fD5JUDWPIxbqn/QQwSab/YBUpaAoCbSb/7tBWpG67dD1ZaxmN3RRuYGsZT8VQ0M0 2MiT/kgM+IbP9BGwzi7x5HhsorwmEyu8hatsNhxou/jPhmYopD1LSPImkcggtTOy mqsF08Kl8bOx3XYFHkxEgBMx2vacNa9uReaYSirJbHmTOgbls11cktXFCprqG6jj 7+YH8Lx6RKvYUDyXrgkYWTiyvkix8JwOzvd2D8f6W4OOpHtnavw= -----END CERTIFICATE-----Generated at Thu Jul 24 12:05:07 2025 by rpki-client