$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: FXMr8r55qHcyIrLduJquZ3ItWXBZR27/uDYIFgCnOfc= Subject key identifier: 48:33:1D:EE:2B:A6:5A:99:F3:7B:37:13:C8:4C:94:2D:04:FD:31:21 Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 234AEAE5E3C03665260852F89131818BFCAD17E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: 97 Signing time: Sat 07 Jun 2025 23:00:54 +0000 Manifest this update: Sat 07 Jun 2025 22:55:54 +0000 Manifest next update: Wed 11 Jun 2025 10:02:54 +0000 Files and hashes: 1: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: AFNs6LUrUTH71ZJR5GerVg3QnR19D3PjgMvXo5tLke4=) 2: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: GhxR22sRqPsgSQoLpKAI7yTQVizLaGLPWzCytQ0r9cY=) 3: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: Ws7wk8GBBz6uaKUyE3UI35E9XGkDiFZKCxUfK3/rPNE=) 4: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: I9nwed3s5J9MWCC1UAp67S/MVhHR3W/rsqME52e0/a0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4a:ea:e5:e3:c0:36:65:26:08:52:f8:91:31:81:8b:fc:ad:17:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Jun 7 22:55:54 2025 GMT Not After : Jun 11 10:02:54 2025 GMT Subject: CN=48331DEE2BA65A99F37B3713C84C942D04FD3121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:65:d6:13:4c:4d:d2:42:30:3e:35:98:b0: 3b:07:72:b6:5b:c0:b9:33:8d:f3:c4:31:95:b1:d0: 66:55:34:a7:3c:19:89:07:c9:89:f4:c4:8b:19:b3: 80:6a:e6:90:2c:0d:4e:8b:fc:3e:86:2c:74:81:50: ac:cb:0d:3e:08:65:78:63:50:c8:8e:d9:ba:6e:76: 52:34:3e:14:cc:5c:0e:56:8d:f5:da:9f:cb:e3:8d: 55:09:0b:1f:40:91:30:49:d4:6e:12:32:c9:1f:89: 84:a0:83:01:b9:03:e6:9e:6d:04:ba:8d:9a:03:1a: 34:a6:f8:5d:d0:a7:3e:15:0c:0b:81:5e:aa:6d:02: 4a:ab:21:98:72:2a:e5:13:f5:01:5d:a9:ae:6a:af: 17:77:5a:72:9b:a7:b8:d3:1f:5a:90:d2:4b:10:0e: a4:ce:9e:ec:e9:6d:66:50:9e:0b:ed:93:31:ca:07: 4d:b3:7a:6f:bd:a8:32:4b:09:43:47:ad:47:71:7c: 09:27:e4:4b:5d:04:87:ae:05:de:da:6d:46:c8:29: 79:48:7a:18:0b:1d:7a:6e:92:86:b5:18:24:93:c4: 6e:ef:a1:7e:ab:7d:8e:7f:d8:de:36:25:b7:56:52: 08:72:2c:eb:2d:c3:80:bf:cc:e8:cf:06:b1:f9:9b: 5e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:33:1D:EE:2B:A6:5A:99:F3:7B:37:13:C8:4C:94:2D:04:FD:31:21 X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:56:b5:e5:a3:17:7c:c8:75:f1:2d:43:0f:8b:7f:6f:00:43: c8:08:ab:1e:2f:dc:73:b7:ed:e3:20:ec:89:14:5f:05:ac:01: 80:b6:f7:c0:07:34:86:76:1f:42:f5:5e:18:88:de:b0:a0:52: 7f:74:ec:78:26:61:d9:bc:5b:d1:74:55:bc:f7:b1:b1:5d:2a: 63:ce:5e:ab:a8:ab:32:89:0d:15:85:5c:b3:15:53:7c:dd:63: 96:02:31:70:58:59:b8:b3:12:49:46:0c:98:e5:b7:e4:75:e3: e5:ff:0a:89:ce:9b:08:2d:3e:40:58:a2:7f:40:05:e5:f3:78: 61:b1:e0:c6:58:78:58:f4:db:b0:46:43:4c:0a:e7:6a:da:82: c7:f5:35:e4:06:e6:de:b2:a3:ad:08:76:94:ca:75:4b:d6:98: 25:a1:75:60:5c:f0:54:73:d0:6f:7a:24:51:d0:30:1c:be:48: 0d:10:e2:f3:5d:e0:63:b8:40:c5:52:c2:6a:52:96:0a:bf:35: a7:9d:c0:b5:d7:50:50:bd:13:7d:07:95:6a:d1:f0:f1:f4:f8: 23:03:c2:0e:1b:a2:c3:b4:92:78:ec:b6:f0:a9:36:c9:0b:d5: f4:66:cb:46:2a:13:76:49:3e:47:32:c7:00:4f:c1:13:36:a8: b7:6d:ad:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0rq5ePANmUmCFL4kTGBi/ytF+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNTA2MDcyMjU1NTRaFw0yNTA2MTExMDAyNTRaMDMxMTAvBgNV BAMTKDQ4MzMxREVFMkJBNjVBOTlGMzdCMzcxM0M4NEM5NDJEMDRGRDMxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROWXWE0xN0kIwPjWYsDsHcrZb wLkzjfPEMZWx0GZVNKc8GYkHyYn0xIsZs4Bq5pAsDU6L/D6GLHSBUKzLDT4IZXhj UMiO2bpudlI0PhTMXA5WjfXan8vjjVUJCx9AkTBJ1G4SMskfiYSggwG5A+aebQS6 jZoDGjSm+F3Qpz4VDAuBXqptAkqrIZhyKuUT9QFdqa5qrxd3WnKbp7jTH1qQ0ksQ DqTOnuzpbWZQngvtkzHKB02zem+9qDJLCUNHrUdxfAkn5EtdBIeuBd7abUbIKXlI ehgLHXpukoa1GCSTxG7voX6rfY5/2N42JbdWUghyLOstw4C/zOjPBrH5m17bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDMd7iumWpnzezcTyEyULQT9MSEwHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5WteWjF3zIdfEtQw+Lf28AQ8gIqx4v3HO3 7eMg7IkUXwWsAYC298AHNIZ2H0L1XhiI3rCgUn907HgmYdm8W9F0Vbz3sbFdKmPO XquoqzKJDRWFXLMVU3zdY5YCMXBYWbizEklGDJjlt+R14+X/ConOmwgtPkBYon9A BeXzeGGx4MZYeFj027BGQ0wK52ragsf1NeQG5t6yo60IdpTKdUvWmCWhdWBc8FRz 0G96JFHQMBy+SA0Q4vNd4GO4QMVSwmpSlgq/NaedwLXXUFC9E30HlWrR8PH0+CMD wg4bosO0knjstvCpNskL1fRmy0YqE3ZJPkcyxwBPwRM2qLdtrdE= -----END CERTIFICATE-----Generated at Sun Jun 8 21:35:30 2025 by rpki-client