$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: 2cymyvv3Zoex/q9BhUFGJA6BkbFo1F6FXkvMVMkW9mY= Subject key identifier: A2:91:7F:B7:C9:47:D6:C2:E0:50:FF:4A:1B:20:37:95:36:39:F2:86 Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 6FDF07DA0D5C8393235D40C60544068C2461EFEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: B4 Signing time: Fri 08 Aug 2025 22:30:56 +0000 Manifest this update: Fri 08 Aug 2025 22:25:56 +0000 Manifest next update: Tue 12 Aug 2025 04:00:56 +0000 Files and hashes: 1: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: 7ie69hhAisKJENUPYYvKRbEY2iriDlh/kybAsCaC8zc=) 2: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: iPqRbkelW4W9hPKQlPKh7dVapT99d9ruqUsqOdahl18=) 3: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: FYy5UtFCXZKGCZxosr1oqFzrTkMP7sB8ytiR2n56UZs=) 4: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: duCuSDamX6IXj6dNr3R2KvTWuX1Y0Ld9dMd4eFNkJZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:df:07:da:0d:5c:83:93:23:5d:40:c6:05:44:06:8c:24:61:ef:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Aug 8 22:25:56 2025 GMT Not After : Aug 12 04:00:56 2025 GMT Subject: CN=A2917FB7C947D6C2E050FF4A1B2037953639F286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:0c:bf:7c:07:58:de:06:b4:b5:17:03:43: 44:6e:bd:0b:98:68:c4:94:a7:2d:ed:25:37:14:6d: 21:6a:db:46:e8:0e:27:32:31:19:c4:a3:3f:e9:db: f5:38:a3:8e:4d:be:51:8e:d3:5d:fd:a5:2f:58:a9: 24:89:00:ff:7e:b6:69:6b:30:f9:34:65:57:01:1d: 0c:23:52:c4:4c:9d:a6:18:ab:23:ca:90:db:fd:b1: 68:ea:cd:a3:b1:cb:ce:c3:b7:f0:6f:ed:af:fa:50: 63:29:9c:0c:ed:6a:1c:a6:76:ff:db:fc:a2:2b:7d: bb:88:eb:90:0d:1f:b9:b6:ca:18:88:9d:07:d4:d4: c1:0c:a7:2c:e0:6e:2e:f5:07:72:bc:43:08:3c:19: 27:4a:95:24:79:b8:52:c4:f9:2f:7b:40:ec:e0:ae: b3:75:c0:bc:e9:b0:72:b2:b6:bb:94:1c:5a:d4:89: d9:26:37:85:d4:fb:25:59:cd:be:22:db:81:4b:95: 0f:8c:a7:7f:da:4b:ee:a9:5b:42:80:5d:3b:47:dc: 53:72:5b:ab:29:f0:62:56:b9:3e:41:cc:09:14:10: 2a:95:9e:09:f8:d1:cf:0e:1a:d8:bd:a6:b6:08:41: 4e:6c:de:81:28:c2:b0:b1:be:e5:c9:2a:9f:14:f7: b3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:91:7F:B7:C9:47:D6:C2:E0:50:FF:4A:1B:20:37:95:36:39:F2:86 X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4c:45:4b:7d:dd:87:07:7b:41:61:8b:65:5e:0d:5f:74:f5: c5:e8:99:4e:34:8d:e3:24:14:87:92:c1:0f:a2:7c:b3:3a:f6: 63:7c:1f:0d:f2:80:22:d6:8b:90:9e:15:c9:eb:58:fa:3a:5c: 11:69:d8:26:be:51:24:06:c0:ad:24:cd:b3:ec:98:07:27:c1: 79:47:1f:91:c0:02:bb:73:e8:ac:6c:8a:a2:bb:c3:e2:ca:dc: 95:bb:13:3b:ef:59:f7:55:64:a4:45:7e:bd:79:f7:c3:e4:43: b8:cc:8c:3a:fb:76:cf:9a:45:e0:84:a4:27:8b:98:17:fd:f1: 33:eb:0b:f0:45:54:7f:4c:7a:4e:3c:c5:d2:9e:d4:5d:63:ce: 67:a9:32:e9:f2:be:b2:e3:d8:ae:da:8e:a3:af:50:36:8b:50: ca:b2:de:c9:fe:58:59:6f:23:37:0f:64:0e:5a:89:92:df:7a: 13:ec:32:77:fb:bb:6d:46:ac:a0:a1:13:f2:37:8d:8d:73:a8: 70:a4:e3:2f:ec:bd:55:5f:e5:49:b7:cb:57:52:ea:56:45:ef: b4:23:4c:ee:c0:2b:2c:a1:5b:64:68:46:a6:82:66:bd:32:dd: 2b:45:a2:44:dd:b8:ef:44:99:db:7e:df:82:29:a8:47:cb:d8: 63:7b:31:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb98H2g1cg5MjXUDGBUQGjCRh7+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNTA4MDgyMjI1NTZaFw0yNTA4MTIwNDAwNTZaMDMxMTAvBgNV BAMTKEEyOTE3RkI3Qzk0N0Q2QzJFMDUwRkY0QTFCMjAzNzk1MzYzOUYyODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pgy/fAdY3ga0tRcDQ0RuvQuY aMSUpy3tJTcUbSFq20boDicyMRnEoz/p2/U4o45NvlGO0139pS9YqSSJAP9+tmlr MPk0ZVcBHQwjUsRMnaYYqyPKkNv9sWjqzaOxy87Dt/Bv7a/6UGMpnAztahymdv/b /KIrfbuI65ANH7m2yhiInQfU1MEMpyzgbi71B3K8Qwg8GSdKlSR5uFLE+S97QOzg rrN1wLzpsHKytruUHFrUidkmN4XU+yVZzb4i24FLlQ+Mp3/aS+6pW0KAXTtH3FNy W6sp8GJWuT5BzAkUECqVngn40c8OGti9prYIQU5s3oEowrCxvuXJKp8U97O3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUopF/t8lH1sLgUP9KGyA3lTY58oYwHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVMRUt93YcHe0Fhi2VeDV909cXomU40jeMk FIeSwQ+ifLM69mN8Hw3ygCLWi5CeFcnrWPo6XBFp2Ca+USQGwK0kzbPsmAcnwXlH H5HAArtz6KxsiqK7w+LK3JW7EzvvWfdVZKRFfr1598PkQ7jMjDr7ds+aReCEpCeL mBf98TPrC/BFVH9Mek48xdKe1F1jzmepMunyvrLj2K7ajqOvUDaLUMqy3sn+WFlv IzcPZA5aiZLfehPsMnf7u21GrKChE/I3jY1zqHCk4y/svVVf5Um3y1dS6lZF77Qj TO7AKyyhW2RoRqaCZr0y3StFokTduO9Emdt+34IpqEfL2GN7MbY= -----END CERTIFICATE-----Generated at Sat Aug 9 02:45:39 2025 by rpki-client