$ rpki-client -vvf repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft File: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft (raw, json) Hash identifier: SelfpWE7ZQFWjMDry7+yz9i04WDfTxyODrb03okFCkQ= Subject key identifier: 89:19:5C:CF:39:EE:47:70:84:A1:F5:8B:79:8C:7A:44:34:CD:52:A6 Authority key identifier: 97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F Certificate issuer: /CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Certificate serial: 40F8D0AB5D9C27614C19C90A086CDE4168AF4391 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft Manifest number: 04BE Signing time: Fri 04 Apr 2025 03:11:19 +0000 Manifest this update: Fri 04 Apr 2025 03:06:19 +0000 Manifest next update: Mon 07 Apr 2025 06:02:19 +0000 Files and hashes: 1: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: LgMxY+C8IWBIXMtNC15cz+Yu8Nh834gvigEyj+73bps=) 2: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: A88i4sMQ69jvjKSJIbcvM1Qm/xBfQH1X9pjGAAXcOnA=) 3: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl (hash: eXamnevJ3S7kUzahaMGKENYLGqMfAIyRA706Mfz+KHI=) 4: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: 4qMJHUxe3l+YBlJtgyKmY02Ml1hmBc8yTPTy7XEfGHs=) 5: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: TKNDudTeAYDpPafjacK5yotzzfWGVA+h/O5Pirph36Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f8:d0:ab:5d:9c:27:61:4c:19:c9:0a:08:6c:de:41:68:af:43:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Validity Not Before: Apr 4 03:06:19 2025 GMT Not After : Apr 7 06:02:19 2025 GMT Subject: CN=89195CCF39EE477084A1F58B798C7A4434CD52A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:0b:25:cc:9b:b6:60:0b:23:bf:a7:df:35: 89:bc:76:f5:be:9d:7d:82:fb:8c:c9:ac:a4:22:40: 93:04:b0:5a:dd:92:52:34:42:24:65:b6:9d:a4:02: b7:fb:f0:bc:a5:7b:51:5d:99:1c:f5:10:4b:f4:db: 6b:b5:d2:0b:c7:76:15:69:0a:67:27:2b:db:1e:28: b3:34:56:c0:8f:46:48:2e:87:46:42:19:51:e4:7b: fe:d1:3e:b5:54:ee:6b:41:80:85:d0:6a:22:72:b4: 33:a1:27:c2:32:9b:35:da:d9:cd:9e:32:be:b5:6e: ec:01:7e:bc:40:02:54:e7:f4:8e:b2:dd:7e:be:3e: 8e:e7:33:2b:50:48:44:57:1f:d3:41:4a:5a:f9:c0: a7:b7:7a:96:13:0d:3a:c4:c0:69:49:d6:20:d0:0b: ec:f5:be:42:d3:a3:e7:1d:b0:e2:c9:6f:6e:92:c0: 14:88:22:73:d6:fc:86:d3:2d:68:bd:c4:4f:c9:f1: f8:03:4d:40:d3:8c:4a:93:f9:d8:eb:84:0d:2b:40: c3:54:d4:10:02:99:c7:28:82:83:11:a9:65:55:76: 93:28:c5:9e:da:2f:7d:b4:78:a5:b8:82:7f:48:78: 4b:50:d3:84:bf:a4:d2:8a:0b:17:ff:75:9d:5b:65: 4e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:19:5C:CF:39:EE:47:70:84:A1:F5:8B:79:8C:7A:44:34:CD:52:A6 X509v3 Authority Key Identifier: keyid:97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:01:5d:cb:ce:0e:f5:e0:24:d6:9e:42:8a:7c:c7:9b:05:97: d3:0d:29:f5:8c:08:9a:e2:25:60:08:8f:0a:c9:b4:7f:b4:43: 0e:f9:11:91:e1:3e:c4:a8:17:77:2e:d2:8e:5b:8e:21:39:e1: b9:23:b7:4d:a9:e8:19:2e:73:63:7e:e0:50:8e:ba:25:f8:10: 0e:d4:23:c1:fc:a8:67:c3:dc:f8:f0:6c:57:22:e4:b2:f4:c7: 5c:d3:49:84:ca:1f:46:08:31:ee:2b:97:bc:39:4d:7f:ff:43: 93:3e:03:8c:b5:12:96:8c:33:31:f1:fe:90:3f:6c:d3:ee:68: 02:8a:7d:15:e4:cf:73:10:28:38:da:dc:db:6b:61:40:62:0e: d7:ea:f3:22:3b:ae:f9:c0:20:12:92:5e:72:b1:bd:29:ec:d3: 1d:ea:ce:a5:0a:27:c6:37:2a:54:ef:07:1b:de:d6:36:f7:74: 28:7a:96:74:d8:39:7e:ba:a9:98:24:6d:89:0b:dd:90:22:96: 50:bd:9a:2d:56:4e:f8:d8:b9:38:04:9a:65:d3:22:72:76:91: 18:59:f6:db:97:8c:96:5f:79:a0:8a:e7:9b:17:de:45:f7:83: 89:db:24:44:ae:4e:35:25:27:41:92:64:6c:40:af:fd:3c:bc: 91:e1:b7:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPjQq12cJ2FMGckKCGzeQWivQ5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURD QUM2MkM5RjAeFw0yNTA0MDQwMzA2MTlaFw0yNTA0MDcwNjAyMTlaMDMxMTAvBgNV BAMTKDg5MTk1Q0NGMzlFRTQ3NzA4NEExRjU4Qjc5OEM3QTQ0MzRDRDUyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAgslzJu2YAsjv6ffNYm8dvW+ nX2C+4zJrKQiQJMEsFrdklI0QiRltp2kArf78Lyle1FdmRz1EEv022u10gvHdhVp CmcnK9seKLM0VsCPRkguh0ZCGVHke/7RPrVU7mtBgIXQaiJytDOhJ8IymzXa2c2e Mr61buwBfrxAAlTn9I6y3X6+Po7nMytQSERXH9NBSlr5wKe3epYTDTrEwGlJ1iDQ C+z1vkLTo+cdsOLJb26SwBSIInPW/IbTLWi9xE/J8fgDTUDTjEqT+djrhA0rQMNU 1BACmccogoMRqWVVdpMoxZ7aL320eKW4gn9IeEtQ04S/pNKKCxf/dZ1bZU6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiRlczznuR3CEofWLeYx6RDTNUqYwHwYDVR0j BBgwFoAUl9d/CGafuU5OmfeVUZ+2HcrGLJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmM2OTQ0MC04YjE3LTRhNjgtYTBmYS02NjE1OWUyMTYyZTAvMC85N0Q3N0YwODY2 OUZCOTRFNEU5OUY3OTU1MTlGQjYxRENBQzYyQzlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURDQUM2 MkM5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJjNjk0NDAtOGIxNy00YTY4LWEw ZmEtNjYxNTllMjE2MmUwLzAvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2 MURDQUM2MkM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANYBXcvODvXgJNaeQop8x5sFl9MNKfWMCJri JWAIjwrJtH+0Qw75EZHhPsSoF3cu0o5bjiE54bkjt02p6Bkuc2N+4FCOuiX4EA7U I8H8qGfD3PjwbFci5LL0x1zTSYTKH0YIMe4rl7w5TX//Q5M+A4y1EpaMMzHx/pA/ bNPuaAKKfRXkz3MQKDja3NtrYUBiDtfq8yI7rvnAIBKSXnKxvSns0x3qzqUKJ8Y3 KlTvBxve1jb3dCh6lnTYOX66qZgkbYkL3ZAillC9mi1WTvjYuTgEmmXTInJ2kRhZ 9tuXjJZfeaCK55sX3kX3g4nbJESuTjUlJ0GSZGxAr/08vJHht/U= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:56 2025 by rpki-client