$ rpki-client -vvf repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft File: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft (raw, json) Hash identifier: 8F0Fn95RVl9RtDbJgQkCMrnuDAaHZSh5mERnVC+FvEs= Subject key identifier: A8:45:E6:1D:DA:20:72:E0:7B:FD:4E:4C:D1:D2:A5:A8:43:6D:30:9F Authority key identifier: 97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F Certificate issuer: /CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Certificate serial: 094FD70B74C3A839DAA2BE1986F8BEE9AFF44321 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft Manifest number: 04F6 Signing time: Tue 05 Aug 2025 10:01:23 +0000 Manifest this update: Tue 05 Aug 2025 09:56:23 +0000 Manifest next update: Fri 08 Aug 2025 18:52:23 +0000 Files and hashes: 1: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: UcHmCNm704dRdxu5mGnFESd+cYb7vs2gxWT3im+cP2U=) 2: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: EeloRAa8rxGIeEpGTxQGak2WLi+75Ry5Z63pTnvFrf8=) 3: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl (hash: Nj6nzRMYsFt0lIGPqEtE0K2NB2oKdWERNoeKKu0x+r4=) 4: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: Jz7bd4l9iJshW7NcA6KcDnrf6hTtrcC3IwQK9KShw7w=) 5: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: vtrYPFcybkmKbw9RZMYXPUfTz3LO/v9B/HIV4T8BsWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4f:d7:0b:74:c3:a8:39:da:a2:be:19:86:f8:be:e9:af:f4:43:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Validity Not Before: Aug 5 09:56:23 2025 GMT Not After : Aug 8 18:52:23 2025 GMT Subject: CN=A845E61DDA2072E07BFD4E4CD1D2A5A8436D309F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:31:53:5d:9a:16:52:99:10:5d:f5:7f:94: 94:fe:bf:5c:a9:a4:d3:48:10:c1:4a:41:4a:c2:a2: a8:13:80:e9:37:a2:be:07:be:46:b6:e0:46:4e:fb: 88:6c:e4:ae:7c:b7:1a:5b:26:ce:3c:d5:4e:77:2c: 3f:8e:61:c8:30:a6:51:c6:fc:5c:7d:3e:aa:2b:6b: 9e:d0:bc:e3:b7:6f:85:c3:17:2a:86:1c:6c:b7:09: d1:ef:49:9d:6f:84:8a:db:6d:11:b5:45:9a:09:02: 4a:3a:cc:4f:0a:91:2b:34:b0:07:e9:65:b9:50:10: e9:fe:a4:9c:98:e5:c9:dc:29:e3:df:c3:e0:d4:40: cf:4a:4d:59:49:09:77:a4:29:23:43:1a:de:41:f0: a4:c3:5c:1a:fc:29:e4:a4:cc:f0:87:08:88:aa:04: c3:d9:01:11:e3:57:b5:f0:52:a3:51:26:64:e3:a2: 7e:8c:bd:4f:75:85:c7:49:81:3e:5d:2d:4f:e5:cd: f9:37:a3:d5:e7:c6:0c:b5:51:2e:4a:83:d1:e2:5d: fe:91:f1:8a:e3:52:56:31:96:eb:b1:52:65:4e:44: e2:39:a6:81:f8:38:17:2e:0b:71:61:70:75:79:54: 35:32:78:41:ee:be:0b:df:ac:95:d9:36:8f:cb:5b: 76:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:45:E6:1D:DA:20:72:E0:7B:FD:4E:4C:D1:D2:A5:A8:43:6D:30:9F X509v3 Authority Key Identifier: keyid:97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:33:9f:7e:b8:ae:3f:7b:84:6f:67:75:c0:9d:81:cc:a0:2f: 50:3c:73:87:6f:89:9a:7f:c4:eb:e6:85:14:5c:56:57:ad:e1: d1:ca:de:44:8f:fb:d7:a5:28:4a:f8:1f:f0:44:93:57:19:78: 63:f0:ae:c4:ef:eb:04:25:ae:65:03:cb:46:ca:83:f7:7b:cb: b3:57:bf:ad:d5:c9:13:f0:74:57:62:02:c8:7c:00:31:bd:e1: a9:e3:10:3e:af:6d:bd:17:29:94:25:b1:26:5c:ca:f3:76:91: 33:41:29:80:7d:0f:87:1b:43:ff:2e:2d:8c:36:53:0b:bf:d4: f4:33:ea:53:fe:2c:e8:8b:0e:8c:a0:bd:2a:26:ea:d3:07:87: b9:96:be:8c:b3:93:d3:33:51:ae:37:7e:13:8d:3f:16:d0:01: dd:15:eb:a6:2c:aa:4d:b9:c3:a7:c4:0c:98:84:0d:0f:76:17: ab:ec:29:12:df:4d:5c:51:0f:0e:b0:31:d0:87:b4:0e:22:98: 3d:e1:00:6f:6c:1f:b8:ca:a3:79:d9:fb:ed:a2:28:43:9c:e4: 58:f2:96:b1:0d:db:14:d3:15:cb:e9:87:1c:0e:09:91:29:f7: 67:ed:59:79:3d:a0:49:4e:2f:c8:26:ea:61:07:50:13:3e:55: 94:ed:78:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCU/XC3TDqDnaor4Zhvi+6a/0QyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURD QUM2MkM5RjAeFw0yNTA4MDUwOTU2MjNaFw0yNTA4MDgxODUyMjNaMDMxMTAvBgNV BAMTKEE4NDVFNjFEREEyMDcyRTA3QkZENEU0Q0QxRDJBNUE4NDM2RDMwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFjFTXZoWUpkQXfV/lJT+v1yp pNNIEMFKQUrCoqgTgOk3or4Hvka24EZO+4hs5K58txpbJs481U53LD+OYcgwplHG /Fx9Pqora57QvOO3b4XDFyqGHGy3CdHvSZ1vhIrbbRG1RZoJAko6zE8KkSs0sAfp ZblQEOn+pJyY5cncKePfw+DUQM9KTVlJCXekKSNDGt5B8KTDXBr8KeSkzPCHCIiq BMPZARHjV7XwUqNRJmTjon6MvU91hcdJgT5dLU/lzfk3o9Xnxgy1US5Kg9HiXf6R 8YrjUlYxluuxUmVOROI5poH4OBcuC3FhcHV5VDUyeEHuvgvfrJXZNo/LW3Z7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqEXmHdogcuB7/U5M0dKlqENtMJ8wHwYDVR0j BBgwFoAUl9d/CGafuU5OmfeVUZ+2HcrGLJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmM2OTQ0MC04YjE3LTRhNjgtYTBmYS02NjE1OWUyMTYyZTAvMC85N0Q3N0YwODY2 OUZCOTRFNEU5OUY3OTU1MTlGQjYxRENBQzYyQzlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURDQUM2 MkM5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJjNjk0NDAtOGIxNy00YTY4LWEw ZmEtNjYxNTllMjE2MmUwLzAvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2 MURDQUM2MkM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0zn364rj97hG9ndcCdgcygL1A8c4dviZp/ xOvmhRRcVlet4dHK3kSP+9elKEr4H/BEk1cZeGPwrsTv6wQlrmUDy0bKg/d7y7NX v63VyRPwdFdiAsh8ADG94anjED6vbb0XKZQlsSZcyvN2kTNBKYB9D4cbQ/8uLYw2 Uwu/1PQz6lP+LOiLDoygvSom6tMHh7mWvoyzk9MzUa43fhONPxbQAd0V66Ysqk25 w6fEDJiEDQ92F6vsKRLfTVxRDw6wMdCHtA4imD3hAG9sH7jKo3nZ++2iKEOc5Fjy lrEN2xTTFcvphxwOCZEp92ftWXk9oElOL8gm6mEHUBM+VZTteLM= -----END CERTIFICATE-----Generated at Thu Aug 7 07:20:46 2025 by rpki-client