$ rpki-client -vvf repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft File: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft (raw, json) Hash identifier: mnhcRBwbghruzBlcofGj1458/6dhOkn8kkWEaL2lnQc= Subject key identifier: 0A:42:44:E2:44:99:F2:82:EC:49:8A:87:52:37:07:C2:7A:24:E1:8A Authority key identifier: 97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F Certificate issuer: /CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Certificate serial: 093854EEE94008C53C9BA1E888715014496EBB3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft Manifest number: 04DA Signing time: Wed 04 Jun 2025 10:31:22 +0000 Manifest this update: Wed 04 Jun 2025 10:26:22 +0000 Manifest next update: Sat 07 Jun 2025 12:16:22 +0000 Files and hashes: 1: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: vtrYPFcybkmKbw9RZMYXPUfTz3LO/v9B/HIV4T8BsWE=) 2: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl (hash: Um/cYvPyb14q96Mv5rS8MIPaO/ElmR8PDg0QnreK5rA=) 3: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: UcHmCNm704dRdxu5mGnFESd+cYb7vs2gxWT3im+cP2U=) 4: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: EeloRAa8rxGIeEpGTxQGak2WLi+75Ry5Z63pTnvFrf8=) 5: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: Jz7bd4l9iJshW7NcA6KcDnrf6hTtrcC3IwQK9KShw7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:38:54:ee:e9:40:08:c5:3c:9b:a1:e8:88:71:50:14:49:6e:bb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Validity Not Before: Jun 4 10:26:22 2025 GMT Not After : Jun 7 12:16:22 2025 GMT Subject: CN=0A4244E24499F282EC498A87523707C27A24E18A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:af:ba:0b:01:4a:4e:aa:02:fc:0d:7a:9e: 54:df:2a:db:8e:51:dd:1d:45:7f:26:e7:1e:8a:6c: 00:3f:a9:71:a4:28:e9:5d:dd:c1:53:d2:f2:4c:94: ca:74:cd:8a:4f:01:d1:10:e9:eb:57:5d:41:30:72: d2:d2:30:ff:f6:7e:8b:1b:4e:27:14:20:1b:6a:43: 35:d9:d1:40:a1:86:70:ad:e2:fa:da:0c:8e:35:8d: c3:09:23:1c:f7:7a:0f:49:bb:02:80:3e:e1:86:04: 9c:73:87:6c:8a:be:4d:ab:28:08:db:64:f4:5a:38: df:55:26:ed:2b:90:6a:ca:39:37:e9:f2:53:1e:c8: 60:05:7d:fb:a7:72:95:3a:c4:fd:8a:b6:b3:a4:5a: b6:71:b0:65:68:57:32:08:4a:8c:48:6c:47:bb:54: 81:e5:99:d1:ec:cd:92:4c:ea:f5:dd:79:0d:8d:5d: fa:cf:85:c6:df:93:bc:21:27:01:f1:f0:da:4a:ce: 0e:7f:64:8c:e3:9f:ad:7a:b9:b2:47:6e:58:95:ed: c9:50:f6:10:b6:3c:93:e4:ce:48:5e:65:02:15:08: 0c:e7:57:0c:45:ab:e3:29:9c:bb:90:99:ef:4a:b6: f9:f7:07:26:04:3e:97:90:a0:07:f7:cb:99:17:df: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:42:44:E2:44:99:F2:82:EC:49:8A:87:52:37:07:C2:7A:24:E1:8A X509v3 Authority Key Identifier: keyid:97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a5:7e:ea:44:08:ec:d6:bb:7a:52:b5:f8:12:81:0b:53:ea: d2:70:90:c5:fa:d7:51:6a:fa:b6:dc:4f:40:94:c8:3b:61:21: b2:12:44:1f:44:98:f2:70:51:95:7e:c9:ed:d6:60:13:22:ce: 17:a7:f3:dd:de:32:7a:d5:83:87:e8:f5:b2:12:27:fc:1b:06: 6b:c2:3d:55:01:1f:73:e4:ba:77:e4:0e:60:b5:1c:5a:25:57: 65:7b:cc:ea:15:b0:21:cd:c7:c7:90:43:34:40:b4:0a:f2:b7: 37:76:cb:52:58:2e:93:a4:47:d8:90:47:22:88:2d:4c:99:70: 67:9f:d7:98:db:83:17:a3:4a:6d:fc:08:8c:e4:0f:78:56:27: f7:f2:86:97:44:5e:36:d5:90:fb:ac:99:c8:cd:6a:37:59:17: 71:bc:7d:97:41:c8:6f:c6:93:97:25:2f:4e:4f:0c:6d:41:b3: 98:bb:2e:b7:db:2a:f9:c7:0c:64:a6:f0:ae:72:c4:cd:1c:58: 23:75:85:98:df:2f:e0:b2:82:6c:12:98:be:ae:f7:cb:d7:3f: f3:0c:c4:34:84:20:5e:63:77:6d:e0:cc:42:fd:23:ff:39:f5: ac:5c:ff:45:f4:5b:35:77:af:cc:6b:a5:bd:a6:d1:f6:7b:df: d2:5c:79:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCThU7ulACMU8m6HoiHFQFEluuz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURD QUM2MkM5RjAeFw0yNTA2MDQxMDI2MjJaFw0yNTA2MDcxMjE2MjJaMDMxMTAvBgNV BAMTKDBBNDI0NEUyNDQ5OUYyODJFQzQ5OEE4NzUyMzcwN0MyN0EyNEUxOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr76+6CwFKTqoC/A16nlTfKtuO Ud0dRX8m5x6KbAA/qXGkKOld3cFT0vJMlMp0zYpPAdEQ6etXXUEwctLSMP/2fosb TicUIBtqQzXZ0UChhnCt4vraDI41jcMJIxz3eg9JuwKAPuGGBJxzh2yKvk2rKAjb ZPRaON9VJu0rkGrKOTfp8lMeyGAFffuncpU6xP2KtrOkWrZxsGVoVzIISoxIbEe7 VIHlmdHszZJM6vXdeQ2NXfrPhcbfk7whJwHx8NpKzg5/ZIzjn616ubJHbliV7clQ 9hC2PJPkzkheZQIVCAznVwxFq+MpnLuQme9Ktvn3ByYEPpeQoAf3y5kX3y0DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCkJE4kSZ8oLsSYqHUjcHwnok4YowHwYDVR0j BBgwFoAUl9d/CGafuU5OmfeVUZ+2HcrGLJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmM2OTQ0MC04YjE3LTRhNjgtYTBmYS02NjE1OWUyMTYyZTAvMC85N0Q3N0YwODY2 OUZCOTRFNEU5OUY3OTU1MTlGQjYxRENBQzYyQzlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURDQUM2 MkM5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJjNjk0NDAtOGIxNy00YTY4LWEw ZmEtNjYxNTllMjE2MmUwLzAvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2 MURDQUM2MkM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWlfupECOzWu3pStfgSgQtT6tJwkMX611Fq +rbcT0CUyDthIbISRB9EmPJwUZV+ye3WYBMizhen893eMnrVg4fo9bISJ/wbBmvC PVUBH3PkunfkDmC1HFolV2V7zOoVsCHNx8eQQzRAtArytzd2y1JYLpOkR9iQRyKI LUyZcGef15jbgxejSm38CIzkD3hWJ/fyhpdEXjbVkPusmcjNajdZF3G8fZdByG/G k5clL05PDG1Bs5i7LrfbKvnHDGSm8K5yxM0cWCN1hZjfL+CygmwSmL6u98vXP/MM xDSEIF5jd23gzEL9I/859axc/0X0WzV3r8xrpb2m0fZ739Jcec8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:27:26 2025 by rpki-client