$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft File: 981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json) Hash identifier: Bw0AW2b+hxZnv73xpKmmFQV75c7ocTtrCf+KBfHmSUg= Subject key identifier: D8:28:9D:65:63:4E:5C:25:32:BE:D6:AA:3C:93:60:72:47:BF:C6:55 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 2F0607FF3F00C3362824B2A4A01E98AA9C1C954C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft Manifest number: 0535 Signing time: Fri 06 Jun 2025 10:41:19 +0000 Manifest this update: Fri 06 Jun 2025 10:36:19 +0000 Manifest next update: Mon 09 Jun 2025 18:24:19 +0000 Files and hashes: 1: 3230332e38342e3133382e302f32342d3234203d3e20393834.roa (hash: OvL2f4eV/dIS/ISoFQJ5cS+0xjddfINmJd9dof7YWKE=) 2: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 27UeUaEQQTlGBzMMtig9mrxqvsFGGYiXFECx86HP9vw=) 3: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (hash: tsk8yK4KqvJi7ogL1Fgl2IoF/vS9e+lT+cqgt4OR0O0=) 4: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: BYrXc+PLZ/j21jMX4S/tR9RU/3h3VFerg2jw36ACe00=) 5: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: IKrLXgzTRMNUHQiY7lPxbY4RYs8/kWiZvIMH5tUTx6c=) 6: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: m0Qe62ytaZMKNB4gQCVhBMudXZyhLsB3FcV65dwOjuM=) 7: 3230332e38342e3134332e302f32342d3234203d3e20313530393732.roa (hash: TQogc+bIoAadk+dL2Cz1Noxh233Lv82bNDTeGntUavQ=) 8: 3230332e38342e3133362e302f32342d3234203d3e203234323036.roa (hash: 4CIlhDwPBWmO489rSkBL096ATSwuK+FjlEMQtzZL/kc=) 9: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: GoGa19lNKrAbt7T4vItYqkUzpmzuN/7X1lEptYsCA58=) 10: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: armCdMsgrh9HBVd3tCBMp8GfztvN8GGDpG5VkguYG4U=) 11: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: gDE9/OhZHSWK8pSq7uGqk744ZfgEp48VY/AnfNVTHcA=) 12: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: zQbQBWWEi5D5FTstthFEurL4sFplPWdltQCq5iDGgW0=) 13: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: uR6D5Vottqw3UGMrbavLqGe0RHF7yIauRiSRYUAqjK4=) 14: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: aq3iMOcZU4XVOFPAPd2Nh3J2J2xxy7ZZYh4S2cWkrJY=) 15: 3131302e34342e3137312e302f32342d3234203d3e203234323036.roa (hash: NYon6seWVPGfj3szG9Lc+42jdaypbm8ZjYwi9OVBxlE=) 16: 3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa (hash: 9tWn1tUw0lnAE7QTSe9gFD7FXQ8Wg/JsMqpIZEwXrcQ=) 17: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: 8l5eYrcFmWYoHIRslSOK/QjIOtGdM4ToITrA74vyIxo=) 18: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: mYxf6C6pLjXmVFDLfOQlsOJY104hPXXJrDn5WUaMTOY=) 19: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: +ioxMWbzQIk8162X0SpHMt662sECkzs897/VKWy1MDU=) 20: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: RTuZkJtHP4oO5BZBcfIYPQEhgHjC830z/8gqHwaq6eQ=) 21: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: lNnryO3KjbjallOCFXPMSeEsKPceLct4DmwTgOEASfo=) 22: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: KnuT4VJ8iLWdqrErOu2FeJ8mmwI6wwnIx48WuNVZS4g=) 23: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: 1w88ZaASU+IezmbFAGItPt0iVYfj3PFgWl7YKMyNTuU=) 24: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: vOZImVj+3gF72eE2CzEznjhg79i5MOG2duEZOdKTL9k=) 25: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: 8V+Zya7yK3fEGLmUtkhLrEpRvGEZWoHeCqz3YLbVbVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:06:07:ff:3f:00:c3:36:28:24:b2:a4:a0:1e:98:aa:9c:1c:95:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Jun 6 10:36:19 2025 GMT Not After : Jun 9 18:24:19 2025 GMT Subject: CN=D8289D65634E5C2532BED6AA3C93607247BFC655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:19:d0:6c:af:b1:c3:c8:e1:b3:28:6b:b0: b0:a6:e7:45:d7:7a:fe:b4:a3:85:e1:c9:9f:cb:de: 8f:b1:b8:56:6a:c9:0d:00:70:6f:aa:2f:67:1c:e2: a1:69:ec:99:2c:07:88:e8:80:e0:aa:b0:b4:8a:aa: 31:10:a3:b6:dd:33:f0:e3:9d:e5:84:ae:39:f8:30: 31:b6:be:36:65:9f:9a:e0:fb:6a:c5:8d:65:ea:b4: 8a:5d:2f:e7:e3:d0:d2:c9:76:df:83:2c:bb:51:2e: 73:00:8b:fa:01:1f:90:ea:8c:58:f8:de:c6:98:5c: e0:de:af:4a:c4:bb:ea:0e:1f:a0:fc:6a:77:f4:02: 06:ca:8f:b5:6b:56:c6:60:64:01:fe:d6:4d:62:e4: f1:e8:ac:7d:01:33:ad:64:02:4a:1e:7f:0e:35:4a: 3e:41:56:39:3c:82:08:15:b2:bf:db:e5:ea:4b:5f: 1d:e0:54:3d:5b:fa:5c:0f:79:03:6a:39:ef:21:39: 74:7b:ed:60:94:b3:4d:ed:e1:ee:dd:b2:d2:6a:19: 79:14:68:7c:ab:df:86:7e:d9:85:77:f1:c9:d9:64: af:28:69:c8:d0:3d:c4:b9:ea:52:de:b9:dd:37:34: 71:8a:dc:97:7c:56:b8:29:27:d2:e6:5c:9d:b5:87: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:28:9D:65:63:4E:5C:25:32:BE:D6:AA:3C:93:60:72:47:BF:C6:55 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:46:bf:09:3a:4e:71:3a:f6:c4:b3:b4:0f:c2:d3:e1:e6:3c: d5:73:89:2f:f8:86:8a:45:4b:5c:67:9b:f6:54:4f:73:ed:84: da:37:6e:13:2e:5f:c0:63:31:ad:1b:a7:0d:8a:e4:10:4e:3f: c9:c9:6c:8c:58:de:aa:78:65:b4:0b:a9:ab:c3:d7:a8:1a:f2: a9:bb:34:fb:a5:cd:f6:50:22:c7:4f:fd:8f:10:0a:b4:65:f2: 32:47:e6:ae:30:d9:4c:fb:ad:55:4b:c2:f5:40:8b:15:10:96: 74:12:40:de:4d:d0:8a:d6:59:ad:1f:ef:0a:1e:8d:bd:c2:5c: 3c:1e:82:72:95:18:6c:cf:cb:aa:92:cb:24:26:58:e7:96:46: cc:1a:8e:0f:0c:01:79:91:51:dc:2d:cc:4b:38:67:d1:90:ba: c7:5a:fb:6d:a2:32:c1:a8:14:69:99:67:46:dd:85:c0:c0:17: 14:1f:f3:d1:87:82:48:44:ae:40:ca:57:ed:f9:76:ce:b6:81: 13:e9:c4:da:11:2d:95:61:47:f2:b8:e2:16:39:61:a3:5b:e2: 21:69:6c:07:b2:7a:0c:06:36:71:14:85:81:4a:04:d8:92:50: 03:53:65:01:57:51:5c:7d:69:35:90:8d:1f:b6:2c:89:39:65: 77:a6:c1:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwYH/z8AwzYoJLKkoB6YqpwclUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA2MDYxMDM2MTlaFw0yNTA2MDkxODI0MTlaMDMxMTAvBgNV BAMTKEQ4Mjg5RDY1NjM0RTVDMjUzMkJFRDZBQTNDOTM2MDcyNDdCRkM2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7xnQbK+xw8jhsyhrsLCm50XX ev60o4XhyZ/L3o+xuFZqyQ0AcG+qL2cc4qFp7JksB4jogOCqsLSKqjEQo7bdM/Dj neWErjn4MDG2vjZln5rg+2rFjWXqtIpdL+fj0NLJdt+DLLtRLnMAi/oBH5DqjFj4 3saYXODer0rEu+oOH6D8anf0AgbKj7VrVsZgZAH+1k1i5PHorH0BM61kAkoefw41 Sj5BVjk8gggVsr/b5epLXx3gVD1b+lwPeQNqOe8hOXR77WCUs03t4e7dstJqGXkU aHyr34Z+2YV38cnZZK8oacjQPcS56lLeud03NHGK3Jd8VrgpJ9LmXJ21h7qlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2CidZWNOXCUyvtaqPJNgcke/xlUwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc5MjJmODktM2U5Yi00YjIxLTkx ODYtYTY0OGMyZGEzZjdiLzAvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlF N0NCMEMxMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNGvwk6TnE69sSztA/C0+HmPNVziS/4hopF S1xnm/ZUT3PthNo3bhMuX8BjMa0bpw2K5BBOP8nJbIxY3qp4ZbQLqavD16ga8qm7 NPulzfZQIsdP/Y8QCrRl8jJH5q4w2Uz7rVVLwvVAixUQlnQSQN5N0IrWWa0f7woe jb3CXDwegnKVGGzPy6qSyyQmWOeWRswajg8MAXmRUdwtzEs4Z9GQusda+22iMsGo FGmZZ0bdhcDAFxQf89GHgkhErkDKV+35ds62gRPpxNoRLZVhR/K44hY5YaNb4iFp bAeyegwGNnEUhYFKBNiSUANTZQFXUVx9aTWQjR+2LIk5ZXemwZg= -----END CERTIFICATE-----Generated at Sat Jun 7 19:49:56 2025 by rpki-client