$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json) Hash identifier: lKweKlvkDssApsAfGbg4veoviU6wHk3uQekeYpqVa3o= Subject key identifier: 85:13:CF:F8:CB:90:CE:65:3F:6B:03:D1:E0:BA:36:7F:31:30:53:B4 Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Certificate serial: 4D68CF7259BC4A6FC488EEFE7AD240B14FF2D6D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft Manifest number: F6 Signing time: Mon 02 Jun 2025 08:31:27 +0000 Manifest this update: Mon 02 Jun 2025 08:26:27 +0000 Manifest next update: Thu 05 Jun 2025 11:46:27 +0000 Files and hashes: 1: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: IHqcErbm/jh+8G9ITpkeHubYhwRm77oQuURliUYMdFs=) 2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: qSzxrfqd29Pg9HOqmUjPO7crmnWP/zs2luJUdYRC76s=) 3: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: ndaW6G5Hvqb4dsIPlVc+GHs6ADeFBJp3dcNK6431+/I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 11:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:68:cf:72:59:bc:4a:6f:c4:88:ee:fe:7a:d2:40:b1:4f:f2:d6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Validity Not Before: Jun 2 08:26:27 2025 GMT Not After : Jun 5 11:46:27 2025 GMT Subject: CN=8513CFF8CB90CE653F6B03D1E0BA367F313053B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2f:8a:6f:5a:cf:1f:9b:45:67:15:12:89:1a: 83:d0:77:53:74:a5:ae:10:7b:fd:5f:0f:e0:a6:65: 5a:26:e8:ac:7e:a0:60:fb:e0:91:66:9f:74:8e:34: b4:d4:ba:87:cc:b7:c2:4d:92:e7:57:0e:a2:b1:85: 6f:d5:2a:9f:34:92:13:c6:54:c7:93:4a:e5:a2:b1: 4d:66:e0:ce:ba:c8:9a:71:06:88:84:f2:83:22:eb: 2e:e9:07:5d:89:2c:d5:33:cf:6e:73:88:6d:1e:a3: 67:e6:51:5d:20:fb:c4:9a:69:06:fc:dc:89:20:a2: 72:d2:28:2d:62:e7:fe:9e:00:09:ff:24:cb:3d:da: 2a:dc:b9:3e:03:47:fa:53:31:b0:20:73:5a:3e:40: ad:11:fa:a0:80:ac:29:a8:1e:ec:e8:e6:16:8d:67: 27:20:c4:6a:aa:33:29:ae:5f:be:ed:8a:32:eb:1f: 2d:46:74:9a:65:0c:c4:d5:0d:c6:59:5c:20:56:80: a9:99:ce:04:c2:a8:cf:06:c6:28:42:c2:de:dd:4e: c8:75:02:7d:13:52:16:66:94:f6:06:91:01:96:87: 6f:01:d5:66:87:20:13:a0:f7:a9:e3:ae:f5:07:43: b1:63:ca:64:0d:1a:66:4c:77:1a:a4:ce:07:2e:d6: f8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:13:CF:F8:CB:90:CE:65:3F:6B:03:D1:E0:BA:36:7F:31:30:53:B4 X509v3 Authority Key Identifier: keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:bc:68:5c:2a:9b:74:3e:96:7f:7d:ef:98:14:2e:ba:55:31: 0e:59:42:ee:41:c7:31:cc:93:a6:0c:97:ec:e7:ae:77:3f:93: f2:78:f5:f4:bb:06:d9:57:a4:9d:9a:97:5d:7b:77:57:89:01: b7:41:b2:23:7c:2a:4e:0c:e3:09:f1:5e:60:d4:bb:19:cf:21: 94:4d:07:98:7e:a2:9b:37:7b:b3:06:7a:45:ce:0b:bb:c8:ce: f0:b2:f0:c5:43:8b:03:a5:be:36:91:04:fb:f0:c0:65:aa:7c: df:37:23:e4:a1:d2:a2:98:4f:20:f4:7d:5d:47:70:a3:3a:9c: 43:24:b2:3a:71:5e:be:9d:9d:ed:a2:dd:fd:31:89:80:da:f7: ee:a3:e3:f5:d3:b5:74:be:c4:e4:7e:74:56:7e:59:39:47:c2: 3b:3a:c1:6d:c9:78:08:7c:d3:25:bf:12:cf:7a:7f:d4:46:68: cc:a0:6d:f2:2b:1b:2f:94:57:c4:57:f4:cd:76:43:e9:bf:39: ef:8c:47:79:95:c9:24:90:9b:d0:25:16:fb:96:42:88:97:d9: f1:41:26:a4:96:5f:f5:49:14:af:b7:f3:4a:0d:4f:cc:89:5c: 10:53:fe:02:4f:71:f9:8a:8e:ad:1c:a5:d1:7f:32:6f:a6:0a: 2d:67:f9:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTWjPclm8Sm/EiO7+etJAsU/y1tgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez NjAxQTg4QjAeFw0yNTA2MDIwODI2MjdaFw0yNTA2MDUxMTQ2MjdaMDMxMTAvBgNV BAMTKDg1MTNDRkY4Q0I5MENFNjUzRjZCMDNEMUUwQkEzNjdGMzEzMDUzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWL4pvWs8fm0VnFRKJGoPQd1N0 pa4Qe/1fD+CmZVom6Kx+oGD74JFmn3SONLTUuofMt8JNkudXDqKxhW/VKp80khPG VMeTSuWisU1m4M66yJpxBoiE8oMi6y7pB12JLNUzz25ziG0eo2fmUV0g+8SaaQb8 3IkgonLSKC1i5/6eAAn/JMs92ircuT4DR/pTMbAgc1o+QK0R+qCArCmoHuzo5haN ZycgxGqqMymuX77tijLrHy1GdJplDMTVDcZZXCBWgKmZzgTCqM8GxihCwt7dTsh1 An0TUhZmlPYGkQGWh28B1WaHIBOg96njrvUHQ7FjymQNGmZMdxqkzgcu1vinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhRPP+MuQzmU/awPR4Lo2fzEwU7QwHwYDVR0j BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0 Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO8aFwqm3Q+ln9975gULrpVMQ5ZQu5BxzHM k6YMl+znrnc/k/J49fS7BtlXpJ2al117d1eJAbdBsiN8Kk4M4wnxXmDUuxnPIZRN B5h+ops3e7MGekXOC7vIzvCy8MVDiwOlvjaRBPvwwGWqfN83I+Sh0qKYTyD0fV1H cKM6nEMksjpxXr6dne2i3f0xiYDa9+6j4/XTtXS+xOR+dFZ+WTlHwjs6wW3JeAh8 0yW/Es96f9RGaMygbfIrGy+UV8RX9M12Q+m/Oe+MR3mVySSQm9AlFvuWQoiX2fFB JqSWX/VJFK+380oNT8yJXBBT/gJPcfmKjq0cpdF/Mm+mCi1n+WI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:17 2025 by rpki-client