$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: WRa+ZAA8FF/AOq2XQ2NjGWYfQ1ozZP9TLAJ1t3wQnmg= Subject key identifier: AB:22:FB:CA:EF:AC:5E:4E:88:3D:F7:57:CB:99:6F:EB:5B:C3:C8:7A Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 6EF998ACC183A372A4BCBAE6D77D8248CE917972 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: BD Signing time: Sat 30 Aug 2025 00:10:55 +0000 Manifest this update: Sat 30 Aug 2025 00:05:55 +0000 Manifest next update: Tue 02 Sep 2025 02:43:55 +0000 Files and hashes: 1: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: mWU4jmboYCtqBXXvWLLJ1BOzZD3/erQxWp8AmkjCmPc=) 2: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: FYy5UtFCXZKGCZxosr1oqFzrTkMP7sB8ytiR2n56UZs=) 3: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: iPqRbkelW4W9hPKQlPKh7dVapT99d9ruqUsqOdahl18=) 4: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: duCuSDamX6IXj6dNr3R2KvTWuX1Y0Ld9dMd4eFNkJZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f9:98:ac:c1:83:a3:72:a4:bc:ba:e6:d7:7d:82:48:ce:91:79:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Aug 30 00:05:55 2025 GMT Not After : Sep 2 02:43:55 2025 GMT Subject: CN=AB22FBCAEFAC5E4E883DF757CB996FEB5BC3C87A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:3e:2c:12:48:74:f3:d6:cb:c0:9b:b7:54: 7c:87:7d:61:08:89:d6:a9:99:8d:63:e1:fa:0c:fd: cc:c2:93:10:7b:dc:4c:4b:27:cd:2c:43:c6:af:12: d9:4a:16:fe:04:27:da:da:d7:d8:13:07:fa:15:3e: a8:f4:71:fc:43:02:6d:93:2f:15:ef:05:6f:da:2c: 92:e7:6e:20:36:9f:16:df:c3:2b:eb:a1:7c:2c:d3: fd:3e:92:03:6d:4e:57:8e:96:52:b7:8f:92:3c:56: ae:88:5d:5d:89:33:08:d1:4e:ce:0c:1f:98:69:2f: 3f:21:20:92:56:aa:ae:d9:6b:98:24:9c:87:b3:68: 53:9a:5f:75:0e:e9:e1:f8:e3:42:d9:fc:db:51:e7: 62:0d:d0:45:8d:84:cd:15:b9:48:49:04:3e:7f:64: 74:c3:e5:28:49:8f:e6:8d:03:8d:ed:33:10:b3:9c: 02:f1:35:0f:58:43:18:37:b6:0e:31:5a:0a:f9:35: 93:e5:71:95:63:91:a3:0c:89:cd:4c:eb:25:6d:3b: c2:43:61:33:10:50:44:30:c3:16:f5:e1:a2:db:86: 45:d1:54:14:2a:bd:bf:10:87:de:17:a4:4f:39:da: 78:61:91:18:05:8a:38:95:86:a0:fe:af:b0:b6:81: eb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:22:FB:CA:EF:AC:5E:4E:88:3D:F7:57:CB:99:6F:EB:5B:C3:C8:7A X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a1:56:69:85:86:57:c3:05:b9:c9:1e:88:6d:da:75:59:fa: 80:aa:f2:ec:e5:30:47:26:3f:a4:9a:2d:7d:90:79:12:55:37: ea:8f:e0:af:dd:bb:51:86:9b:40:01:b3:ae:50:d8:73:cd:34: f1:f8:ac:18:99:c7:81:41:f7:73:3d:55:57:27:03:7f:e9:a5: 94:0b:56:13:af:b5:b1:dc:60:25:2d:26:2b:56:cd:69:36:6e: b4:98:d5:8a:8b:49:10:69:ee:7a:69:ce:35:3a:38:67:c1:f7: 79:eb:8e:ec:ee:75:cf:23:a0:09:fb:b9:95:95:e8:d2:d7:3e: 86:5b:78:ba:1e:a5:f6:3a:c5:3e:e0:47:c4:97:d9:4c:e7:45: 9f:ea:25:1c:c7:9d:bc:5e:b1:5d:2b:b2:a5:e6:d3:65:58:0b: b9:82:d5:dc:9b:14:f2:95:c0:8b:78:fd:51:a8:6d:f1:91:7f: 7d:ce:58:33:10:05:b2:2d:ee:bf:b4:2a:18:60:86:99:e3:c2: 50:cb:92:74:63:be:e3:c1:c2:b4:25:77:89:23:36:24:da:e3: 1e:8a:78:52:49:ef:c7:80:9c:c7:55:d7:9d:c2:2c:fd:c6:71: fc:d6:87:08:8f:2e:1d:f8:df:00:a7:9f:e2:99:f3:bc:74:42: de:09:8f:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbvmYrMGDo3KkvLrm132CSM6ReXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNTA4MzAwMDA1NTVaFw0yNTA5MDIwMjQzNTVaMDMxMTAvBgNV BAMTKEFCMjJGQkNBRUZBQzVFNEU4ODNERjc1N0NCOTk2RkVCNUJDM0M4N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpgD4sEkh089bLwJu3VHyHfWEI idapmY1j4foM/czCkxB73ExLJ80sQ8avEtlKFv4EJ9ra19gTB/oVPqj0cfxDAm2T LxXvBW/aLJLnbiA2nxbfwyvroXws0/0+kgNtTleOllK3j5I8Vq6IXV2JMwjRTs4M H5hpLz8hIJJWqq7Za5gknIezaFOaX3UO6eH440LZ/NtR52IN0EWNhM0VuUhJBD5/ ZHTD5ShJj+aNA43tMxCznALxNQ9YQxg3tg4xWgr5NZPlcZVjkaMMic1M6yVtO8JD YTMQUEQwwxb14aLbhkXRVBQqvb8Qh94XpE852nhhkRgFijiVhqD+r7C2gevPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqyL7yu+sXk6IPfdXy5lv61vDyHowHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFahVmmFhlfDBbnJHoht2nVZ+oCq8uzlMEcm P6SaLX2QeRJVN+qP4K/du1GGm0ABs65Q2HPNNPH4rBiZx4FB93M9VVcnA3/ppZQL VhOvtbHcYCUtJitWzWk2brSY1YqLSRBp7nppzjU6OGfB93nrjuzudc8joAn7uZWV 6NLXPoZbeLoepfY6xT7gR8SX2UznRZ/qJRzHnbxesV0rsqXm02VYC7mC1dybFPKV wIt4/VGobfGRf33OWDMQBbIt7r+0KhhghpnjwlDLknRjvuPBwrQld4kjNiTa4x6K eFJJ78eAnMdV153CLP3GcfzWhwiPLh343wCnn+KZ87x0Qt4Jj+Y= -----END CERTIFICATE-----Generated at Sun Aug 31 04:24:35 2025 by rpki-client