$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft File: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json) Hash identifier: vWG/+Scw4OGQaYzhjqI1Em/+5dXgRrMDnKXf1vBAtYo= Subject key identifier: 89:87:C1:67:6B:DC:D5:97:7F:3E:BB:9B:B7:C7:5A:35:5E:B0:C7:90 Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA Certificate issuer: /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Certificate serial: 68A5356A1568658F61FA29A78F4FED6A0ABCDA28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft Manifest number: 04C5 Signing time: Fri 18 Apr 2025 04:21:08 +0000 Manifest this update: Fri 18 Apr 2025 04:16:08 +0000 Manifest next update: Mon 21 Apr 2025 06:49:08 +0000 Files and hashes: 1: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: eJk7kug0Ipcv4C8IH9AU2JLIKnMBvADkWYnFG9Eo8A8=) 2: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: 6vpG1FwswZyXqrOMn8CrPtMvpqJGHzx+Yb/i8Uh1oPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 06:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a5:35:6a:15:68:65:8f:61:fa:29:a7:8f:4f:ed:6a:0a:bc:da:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Validity Not Before: Apr 18 04:16:08 2025 GMT Not After : Apr 21 06:49:08 2025 GMT Subject: CN=8987C1676BDCD5977F3EBB9BB7C75A355EB0C790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a9:15:7a:95:ee:35:c0:92:db:01:a7:a5:96: 1a:01:1b:19:ac:22:a2:5f:ce:90:37:61:b0:51:0e: fc:e3:10:84:c7:96:82:57:35:f8:3f:c6:2d:a1:23: 35:08:fd:67:bd:a9:a7:2d:39:d5:f7:c1:a9:e8:5a: a4:b0:84:1b:ac:b3:e4:f4:b0:c9:90:94:56:cb:9b: 1f:dd:8b:35:58:07:46:81:fd:ac:44:86:29:e1:22: f3:84:cd:68:1a:ea:ec:db:c6:77:e4:53:bb:49:2d: 73:5a:5e:9e:79:8e:5a:5b:02:96:ce:51:c1:d5:41: 81:81:92:ae:d4:65:3c:64:0f:e8:33:4c:fb:38:c1: b7:db:1c:c5:84:78:e7:81:37:05:2c:d5:d8:3c:ac: 4d:4b:39:61:f5:b4:7b:2a:97:97:08:6c:3b:1b:4d: 8c:a3:21:08:90:92:af:40:63:bc:a0:f0:42:3a:13: f4:7c:2f:51:b6:3e:40:67:66:74:63:1a:b1:83:f3: f8:17:2c:f6:b8:5e:c9:be:28:b2:02:20:47:99:a0: e1:43:20:ef:b9:e4:29:70:8d:fc:e0:83:38:e7:d8: eb:af:dd:ee:45:f8:ca:8d:19:3b:12:06:b7:b2:d4: 07:3e:86:94:a3:a2:d4:11:2a:bd:94:96:75:53:8d: 00:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:87:C1:67:6B:DC:D5:97:7F:3E:BB:9B:B7:C7:5A:35:5E:B0:C7:90 X509v3 Authority Key Identifier: keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:04:86:b0:a9:53:be:95:50:22:34:4a:c6:c7:04:34:0d:91: 21:23:b9:13:2b:ce:77:df:b9:f2:90:19:80:d6:6a:47:79:05: 6a:c2:48:b8:f7:3a:c5:57:40:1b:c3:68:a4:9c:5d:41:4a:6e: aa:96:d4:22:0c:5a:39:07:08:c6:f4:4e:72:99:ec:6b:87:b1: 41:5b:e5:4e:96:f2:e1:c7:45:e4:eb:d8:94:37:2c:d1:52:98: 89:f5:01:30:51:d9:1d:71:2c:0e:54:55:02:18:f3:24:17:0b: 34:71:7b:8c:7c:fc:cc:c6:f5:0d:47:01:f6:6f:78:d4:03:a9: 3e:e1:79:f0:ae:8d:34:87:7a:74:8b:a0:33:80:60:2b:07:56: 20:d7:8f:75:69:6b:eb:c1:93:56:00:39:5d:13:de:98:b3:5c: 95:3e:5b:76:09:fa:c5:a4:25:76:c1:22:11:b3:d7:e2:ca:73: 2a:31:09:1a:2b:98:4d:bc:c3:c6:b8:28:d3:69:86:8c:0b:27: 7f:ff:d6:a7:c4:43:7f:33:59:15:5b:e8:54:2f:89:9f:f2:40: e1:4c:c3:23:c7:33:84:f6:95:0f:16:35:dc:32:21:ba:ae:77: 66:27:49:a9:db:45:d0:77:56:66:a9:c1:dd:d7:1e:9a:4f:5a: 94:e3:83:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKU1ahVoZY9h+imnj0/tagq82igwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5 NkQzREVCQTAeFw0yNTA0MTgwNDE2MDhaFw0yNTA0MjEwNjQ5MDhaMDMxMTAvBgNV BAMTKDg5ODdDMTY3NkJEQ0Q1OTc3RjNFQkI5QkI3Qzc1QTM1NUVCMEM3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbqRV6le41wJLbAaellhoBGxms IqJfzpA3YbBRDvzjEITHloJXNfg/xi2hIzUI/We9qactOdX3wanoWqSwhBuss+T0 sMmQlFbLmx/dizVYB0aB/axEhinhIvOEzWga6uzbxnfkU7tJLXNaXp55jlpbApbO UcHVQYGBkq7UZTxkD+gzTPs4wbfbHMWEeOeBNwUs1dg8rE1LOWH1tHsql5cIbDsb TYyjIQiQkq9AY7yg8EI6E/R8L1G2PkBnZnRjGrGD8/gXLPa4Xsm+KLICIEeZoOFD IO+55Clwjfzggzjn2Ouv3e5F+MqNGTsSBrey1Ac+hpSjotQRKr2UlnVTjQBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiYfBZ2vc1Zd/Prubt8daNV6wx5AwHwYDVR0j BBgwFoAUl36lEYVR6YrqqLsRydmdcZbT3rowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTg4YzBmMi0yODAwLTQ4ZGEtYTgzZS1hYjU0ZGY2NWM1NzQvMC85NzdFQTUxMTg1 NTFFOThBRUFBOEJCMTFDOUQ5OUQ3MTk2RDNERUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5NkQz REVCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlE NzE5NkQzREVCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8EhrCpU76VUCI0SsbHBDQNkSEjuRMrznff ufKQGYDWakd5BWrCSLj3OsVXQBvDaKScXUFKbqqW1CIMWjkHCMb0TnKZ7GuHsUFb 5U6W8uHHReTr2JQ3LNFSmIn1ATBR2R1xLA5UVQIY8yQXCzRxe4x8/MzG9Q1HAfZv eNQDqT7hefCujTSHenSLoDOAYCsHViDXj3Vpa+vBk1YAOV0T3pizXJU+W3YJ+sWk JXbBIhGz1+LKcyoxCRormE28w8a4KNNphowLJ3//1qfEQ38zWRVb6FQviZ/yQOFM wyPHM4T2lQ8WNdwyIbqud2YnSanbRdB3Vmapwd3XHppPWpTjg/Q= -----END CERTIFICATE-----Generated at Fri Apr 18 07:50:38 2025 by rpki-client