$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft File: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft (raw, json) Hash identifier: wWM1Z+TQ8mAXEOPjbd9IgUCGivAN5kex9UIfV3H7xjM= Subject key identifier: 3B:07:FF:E0:75:B2:34:DE:D9:2E:66:59:B6:A0:07:6E:16:BD:89:F6 Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 Certificate issuer: /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Certificate serial: 22E33CAEDD29F02814AAC5F0A63F36CA73354F2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft Manifest number: D9 Signing time: Fri 05 Sep 2025 15:11:03 +0000 Manifest this update: Fri 05 Sep 2025 15:06:03 +0000 Manifest next update: Tue 09 Sep 2025 00:14:03 +0000 Files and hashes: 1: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: DWvVDDRpAMOpRUqp8QzsrLlGUPEfbewyxxzSjcofq2U=) 2: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl (hash: NOd7/aKQQa2dh1cKiG950tdREYIkWa/TTz+ChXMoSKg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e3:3c:ae:dd:29:f0:28:14:aa:c5:f0:a6:3f:36:ca:73:35:4f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Validity Not Before: Sep 5 15:06:03 2025 GMT Not After : Sep 9 00:14:03 2025 GMT Subject: CN=3B07FFE075B234DED92E6659B6A0076E16BD89F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:ef:82:9f:6d:2a:99:06:6d:dc:86:55:07: 82:29:e0:ca:c1:f0:8e:d0:4d:0a:2b:7a:32:c3:44: de:01:f9:d1:82:1d:7a:be:c8:93:a9:17:ec:60:2d: a4:0a:97:ee:72:5e:69:6f:c2:33:77:d8:cc:cb:7f: 68:b3:98:26:44:c0:19:a0:e2:83:e2:76:39:01:49: 97:39:c3:35:f0:61:fa:2e:71:3d:b8:69:1d:a8:d4: 5a:33:3d:7f:46:60:f1:b6:d2:15:25:ba:75:34:de: 90:f7:21:44:38:bd:4f:7a:9a:71:3e:f6:bb:1a:cc: 57:a6:39:49:3e:60:22:eb:3e:ce:49:f4:95:33:b8: 1f:ec:8e:6c:e9:6a:85:e9:0b:ff:0a:a8:54:38:31: 32:7a:73:2c:97:33:af:21:2e:d2:f0:27:93:27:5f: ac:58:d5:d5:e4:4b:d0:c5:35:68:4e:09:fe:e5:7e: 87:27:f4:45:4b:da:52:96:70:d7:77:8f:61:1c:48: 5e:e4:22:df:98:82:bb:f1:34:96:45:69:cb:c4:e4: b5:9e:3c:8e:50:28:b8:b3:a6:ee:c4:4d:60:ac:e7: 9c:4d:9f:f7:48:cf:11:3b:d5:cd:f6:91:72:12:61: bd:d8:d2:74:e5:dd:c5:b9:1f:1d:b9:6a:31:93:37: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:07:FF:E0:75:B2:34:DE:D9:2E:66:59:B6:A0:07:6E:16:BD:89:F6 X509v3 Authority Key Identifier: keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d9:99:d1:58:0e:a2:33:25:18:be:34:ad:b0:db:68:84:b2: e7:58:68:7c:85:28:47:2d:7b:38:4c:86:2b:bc:51:6c:bc:f1: 72:53:58:6f:c2:87:d1:79:56:34:dd:2b:9a:30:f6:ba:77:1d: 54:29:3a:ea:1c:0c:23:60:4e:45:5a:71:4e:e2:55:c2:7d:1b: dd:3c:b2:3a:e7:30:4c:99:30:76:c3:ab:db:db:11:33:a2:68: 65:06:6b:0c:36:64:14:4f:e0:1c:e4:a6:09:d3:18:6f:c1:d9: b9:11:fa:a0:40:29:61:4a:a0:42:c2:92:f3:6a:58:7f:ce:e6: 0a:8a:41:e7:c5:59:1e:36:07:da:8e:b4:ec:aa:d5:80:fa:b0: 3f:0d:15:42:c1:42:b5:76:df:41:a4:7e:fd:49:bc:31:ab:68: 11:15:21:1b:82:7c:78:2b:ca:56:5d:39:84:e1:b3:b3:29:90: 73:f6:ea:3a:30:02:1d:eb:fc:41:71:9c:27:f6:a4:45:39:ce: 80:9f:ac:1d:c4:bb:6b:95:27:86:dc:e4:0a:81:a0:67:61:e4: ae:c5:de:43:33:c6:8a:c9:62:b4:21:5a:4a:4e:08:4c:45:2d: f4:19:16:8f:2a:34:7b:5f:f6:51:08:8d:b5:ac:51:98:e8:da: 14:09:3f:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuM8rt0p8CgUqsXwpj82ynM1Ty0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJF QTg4OEYwNDAeFw0yNTA5MDUxNTA2MDNaFw0yNTA5MDkwMDE0MDNaMDMxMTAvBgNV BAMTKDNCMDdGRkUwNzVCMjM0REVEOTJFNjY1OUI2QTAwNzZFMTZCRDg5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Uu+Cn20qmQZt3IZVB4Ip4MrB 8I7QTQorejLDRN4B+dGCHXq+yJOpF+xgLaQKl+5yXmlvwjN32MzLf2izmCZEwBmg 4oPidjkBSZc5wzXwYfoucT24aR2o1FozPX9GYPG20hUlunU03pD3IUQ4vU96mnE+ 9rsazFemOUk+YCLrPs5J9JUzuB/sjmzpaoXpC/8KqFQ4MTJ6cyyXM68hLtLwJ5Mn X6xY1dXkS9DFNWhOCf7lfocn9EVL2lKWcNd3j2EcSF7kIt+YgrvxNJZFacvE5LWe PI5QKLizpu7ETWCs55xNn/dIzxE71c32kXISYb3Y0nTl3cW5Hx25ajGTNzHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwf/4HWyNN7ZLmZZtqAHbha9ifYwHwYDVR0j BBgwFoAUl3dv/wK5D/wXtligsaWY2+qIjwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMS85Nzc3NkZGRjAy QjkwRkZDMTdCNjU4QTBCMUE1OThEQkVBODg4RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJFQTg4 OEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzEvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4 REJFQTg4OEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnZmdFYDqIzJRi+NK2w22iEsudYaHyFKEct ezhMhiu8UWy88XJTWG/Ch9F5VjTdK5ow9rp3HVQpOuocDCNgTkVacU7iVcJ9G908 sjrnMEyZMHbDq9vbETOiaGUGaww2ZBRP4BzkpgnTGG/B2bkR+qBAKWFKoELCkvNq WH/O5gqKQefFWR42B9qOtOyq1YD6sD8NFULBQrV230Gkfv1JvDGraBEVIRuCfHgr ylZdOYThs7MpkHP26jowAh3r/EFxnCf2pEU5zoCfrB3Eu2uVJ4bc5AqBoGdh5K7F 3kMzxorJYrQhWkpOCExFLfQZFo8qNHtf9lEIjbWsUZjo2hQJP80= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:39 2025 by rpki-client