$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json) Hash identifier: ULBPNqeIA98arKt5Aru/OWictQW6ZbOPN2rM7WifyVc= Subject key identifier: 8A:B1:B6:A6:52:49:AE:AB:64:3B:F2:A4:43:EB:06:6B:91:FE:DD:11 Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Certificate serial: 0A5C8BDCDA7ECBA5176B1CC72118E2B0DD839481 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft Manifest number: 011F Signing time: Thu 04 Sep 2025 01:21:23 +0000 Manifest this update: Thu 04 Sep 2025 01:16:23 +0000 Manifest next update: Sun 07 Sep 2025 03:03:23 +0000 Files and hashes: 1: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: IHqcErbm/jh+8G9ITpkeHubYhwRm77oQuURliUYMdFs=) 2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: qSzxrfqd29Pg9HOqmUjPO7crmnWP/zs2luJUdYRC76s=) 3: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: Lh/k5YsFWkay+//In6MZC47MjIt+PkHT10rKGqBwJwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 03:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5c:8b:dc:da:7e:cb:a5:17:6b:1c:c7:21:18:e2:b0:dd:83:94:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Validity Not Before: Sep 4 01:16:23 2025 GMT Not After : Sep 7 03:03:23 2025 GMT Subject: CN=8AB1B6A65249AEAB643BF2A443EB066B91FEDD11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:ec:23:34:00:2d:27:f8:67:38:82:0e:16:88: bc:df:2c:d3:c5:e0:ba:05:f6:ae:f2:09:f1:a3:15: c0:c1:c0:51:92:f8:d9:01:18:bd:ba:bd:d0:de:c8: bb:cd:b1:1e:86:f4:fd:12:6f:97:eb:a4:2f:98:62: 7d:48:a9:9e:da:a8:28:60:c9:b0:d6:fc:e5:b8:19: 87:b0:0a:b9:01:0f:ac:2c:7d:00:c6:7b:da:c6:25: 4f:91:c9:f4:ae:87:57:82:5e:e4:e5:60:dc:d0:30: 20:35:b7:e2:95:8e:a7:5a:1e:2d:d7:e9:17:98:ea: 88:50:1b:cc:56:af:77:98:67:92:75:28:22:1a:b2: 58:e8:e3:7a:85:18:23:2d:8f:b0:29:d3:99:a9:be: 44:8c:8e:84:fd:41:fc:00:ea:67:d4:ec:c2:47:e9: fe:64:09:7c:11:cf:69:2c:0f:99:a9:29:00:83:91: 1c:b1:4f:1c:12:c4:bb:1e:04:a8:b5:8d:48:75:5d: 35:60:9a:37:f1:41:7a:5d:3b:10:ac:8d:5b:14:88: 68:56:e1:41:ae:bd:c2:e6:c5:4f:f3:5a:c2:0a:72: b9:83:7f:76:64:b3:7b:2e:35:39:ee:d1:a2:b6:d1: 3e:98:69:e1:c8:6b:9c:90:39:a4:7b:bc:15:65:ef: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B1:B6:A6:52:49:AE:AB:64:3B:F2:A4:43:EB:06:6B:91:FE:DD:11 X509v3 Authority Key Identifier: keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b3:4a:ce:72:2d:17:b4:4c:89:d3:19:41:4a:fa:13:f2:b5: f7:35:5b:95:5a:95:36:59:46:45:67:f9:06:e2:1c:6f:15:2a: ea:e2:e7:62:9b:7f:fe:c0:0f:cc:5e:d4:37:4b:e0:b5:e2:0d: 2b:8e:07:79:2f:5d:db:53:70:80:69:b0:18:a8:80:44:82:0e: f5:de:60:e4:ae:7d:7a:89:12:6d:9c:01:fb:d2:f2:80:a1:3f: f9:d7:11:98:8b:b9:02:2a:06:54:d1:be:f4:19:f7:25:31:95: 6c:44:46:7b:f6:c9:bc:be:aa:ff:41:7b:9a:7f:99:b7:41:10: c7:62:80:ec:2a:a2:5c:69:0f:d9:f6:6b:a7:6c:45:46:fa:0d: 96:4d:71:31:bd:0c:5d:4f:e0:26:ac:24:42:df:99:75:39:7f: 07:b5:b4:2b:5e:7a:f2:67:04:3a:64:26:a3:4f:5d:d0:1f:75: d2:d7:b9:26:4c:73:ab:24:92:09:93:34:68:60:3a:06:8d:88: c3:39:9c:a4:7a:69:e7:6f:54:6a:32:3f:38:b2:0e:65:63:62: 8d:98:c8:2d:80:a6:3e:1b:72:ae:66:76:9d:65:d2:fa:dd:77: 29:b4:e9:79:29:ef:c7:ba:2a:a0:b1:74:3d:0d:36:45:b2:e1: e9:2b:9a:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClyL3Np+y6UXaxzHIRjisN2DlIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez NjAxQTg4QjAeFw0yNTA5MDQwMTE2MjNaFw0yNTA5MDcwMzAzMjNaMDMxMTAvBgNV BAMTKDhBQjFCNkE2NTI0OUFFQUI2NDNCRjJBNDQzRUIwNjZCOTFGRUREMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD87CM0AC0n+Gc4gg4WiLzfLNPF 4LoF9q7yCfGjFcDBwFGS+NkBGL26vdDeyLvNsR6G9P0Sb5frpC+YYn1IqZ7aqChg ybDW/OW4GYewCrkBD6wsfQDGe9rGJU+RyfSuh1eCXuTlYNzQMCA1t+KVjqdaHi3X 6ReY6ohQG8xWr3eYZ5J1KCIasljo43qFGCMtj7Ap05mpvkSMjoT9QfwA6mfU7MJH 6f5kCXwRz2ksD5mpKQCDkRyxTxwSxLseBKi1jUh1XTVgmjfxQXpdOxCsjVsUiGhW 4UGuvcLmxU/zWsIKcrmDf3Zks3suNTnu0aK20T6YaeHIa5yQOaR7vBVl70+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUirG2plJJrqtkO/KkQ+sGa5H+3REwHwYDVR0j BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0 Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmzSs5yLRe0TInTGUFK+hPytfc1W5ValTZZ RkVn+QbiHG8VKuri52Kbf/7AD8xe1DdL4LXiDSuOB3kvXdtTcIBpsBiogESCDvXe YOSufXqJEm2cAfvS8oChP/nXEZiLuQIqBlTRvvQZ9yUxlWxERnv2yby+qv9Be5p/ mbdBEMdigOwqolxpD9n2a6dsRUb6DZZNcTG9DF1P4CasJELfmXU5fwe1tCteevJn BDpkJqNPXdAfddLXuSZMc6skkgmTNGhgOgaNiMM5nKR6aedvVGoyPziyDmVjYo2Y yC2Apj4bcq5mdp1l0vrddym06Xkp78e6KqCxdD0NNkWy4ekrmsM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:27:08 2025 by rpki-client