$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: 7W5j+AgvXo5QMPK1zH7+l7cn70iKr1jSJbtpHXwsMkI= Subject key identifier: 01:A2:4A:AA:B8:CE:A4:A3:93:BE:83:88:1B:BE:47:36:20:CD:83:46 Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 33CD100B9621BF01E85450090C6CCD13B1A5C830 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: 9B Signing time: Tue 17 Jun 2025 05:00:53 +0000 Manifest this update: Tue 17 Jun 2025 04:55:53 +0000 Manifest next update: Fri 20 Jun 2025 07:42:53 +0000 Files and hashes: 1: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: Ws7wk8GBBz6uaKUyE3UI35E9XGkDiFZKCxUfK3/rPNE=) 2: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: GhxR22sRqPsgSQoLpKAI7yTQVizLaGLPWzCytQ0r9cY=) 3: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: I9nwed3s5J9MWCC1UAp67S/MVhHR3W/rsqME52e0/a0=) 4: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: t7/1LCK2DxMJZG0bx0+XA9KgoB3+eFzDnz6KvAh4BBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 07:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cd:10:0b:96:21:bf:01:e8:54:50:09:0c:6c:cd:13:b1:a5:c8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Jun 17 04:55:53 2025 GMT Not After : Jun 20 07:42:53 2025 GMT Subject: CN=01A24AAAB8CEA4A393BE83881BBE473620CD8346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:41:a9:ae:96:2a:cc:da:4b:71:ae:58:bd:82: 88:4f:f8:65:1e:f7:ea:2a:ce:52:c8:7d:13:e0:50: 47:22:2d:17:ae:f0:bc:6c:b8:64:5f:6d:39:b5:52: af:c3:ff:82:b0:23:90:4e:5a:c1:92:77:1c:7b:aa: 76:3c:f1:c9:6c:38:18:75:ce:ea:c7:c0:c3:84:07: 77:f8:fc:4f:1f:8a:c3:76:7d:c6:03:fa:48:fa:41: 20:63:fa:4f:a3:3f:b2:f3:9d:46:10:a5:54:5a:32: 29:3c:2f:a9:6a:9f:de:b5:c5:b9:8a:6a:64:72:1e: a6:93:bd:bb:8c:ec:e5:6a:00:04:c4:35:43:22:5e: 51:78:4f:57:f8:a3:e5:26:cf:48:cc:f5:ee:a8:0d: 4a:9b:21:b4:76:c3:33:cc:38:8f:01:7c:91:ac:f2: a5:02:c0:f4:94:b5:61:57:21:f6:96:9f:58:ab:e0: db:58:d9:50:f3:e1:30:b5:e2:83:f4:c1:35:77:47: 91:a7:d7:ed:0c:fe:91:24:8f:1d:25:dd:a0:d5:6a: 24:8b:6e:76:3c:56:28:47:c4:08:43:8c:41:69:ad: 4f:61:7f:f2:83:6d:6d:8c:a3:83:60:da:e0:85:6e: 1f:e8:cf:c8:98:e7:01:3c:3d:9c:bc:1e:58:3f:ff: ff:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A2:4A:AA:B8:CE:A4:A3:93:BE:83:88:1B:BE:47:36:20:CD:83:46 X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e0:6e:75:d4:1f:79:11:5c:e6:d7:5f:6c:24:d2:f3:43:00: 57:47:ad:6d:85:e1:21:ef:1d:bc:b5:e9:a0:1a:f0:1f:ac:2e: ab:8e:1d:fa:a2:8a:e9:b3:31:25:1d:2d:03:f0:ed:10:c8:e6: bf:36:5c:f6:e2:41:1a:e3:ad:22:16:f2:ec:12:f1:ab:85:5d: 68:e1:74:4d:34:0e:0b:72:d3:67:83:d9:7d:05:e9:ab:3f:5b: 73:7f:e6:a5:c4:6b:fa:15:b1:b5:5e:4e:13:07:db:c0:37:c6: 45:0d:46:26:9b:b0:18:ee:04:82:b6:07:97:8a:34:2d:46:27: 48:a3:b2:da:f3:77:13:d8:bc:95:09:c8:1d:b4:51:a9:9b:8b: 08:39:89:6d:e6:62:59:54:51:80:ba:97:01:0a:fb:70:e1:72: 4f:f3:8e:74:dc:23:1a:69:a4:25:62:d7:ef:f0:4d:34:36:ad: 38:e0:75:31:7f:62:d7:1c:5c:ca:4f:26:f5:15:a0:13:2a:b6: 33:db:20:04:95:6a:51:66:9a:9f:fd:02:83:f6:fe:83:e8:4b: 59:32:d8:fb:3d:b3:29:c1:91:ce:3e:31:7e:7f:7f:ad:17:24: 0e:78:13:43:94:15:0b:0c:a5:27:c5:34:63:2b:40:2a:ff:3a: 6c:a6:14:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM80QC5YhvwHoVFAJDGzNE7GlyDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNTA2MTcwNDU1NTNaFw0yNTA2MjAwNzQyNTNaMDMxMTAvBgNV BAMTKDAxQTI0QUFBQjhDRUE0QTM5M0JFODM4ODFCQkU0NzM2MjBDRDgzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4QamulirM2ktxrli9gohP+GUe 9+oqzlLIfRPgUEciLReu8LxsuGRfbTm1Uq/D/4KwI5BOWsGSdxx7qnY88clsOBh1 zurHwMOEB3f4/E8fisN2fcYD+kj6QSBj+k+jP7LznUYQpVRaMik8L6lqn961xbmK amRyHqaTvbuM7OVqAATENUMiXlF4T1f4o+Umz0jM9e6oDUqbIbR2wzPMOI8BfJGs 8qUCwPSUtWFXIfaWn1ir4NtY2VDz4TC14oP0wTV3R5Gn1+0M/pEkjx0l3aDVaiSL bnY8VihHxAhDjEFprU9hf/KDbW2Mo4Ng2uCFbh/oz8iY5wE8PZy8Hlg////xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAaJKqrjOpKOTvoOIG75HNiDNg0YwHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPgbnXUH3kRXObXX2wk0vNDAFdHrW2F4SHv Hby16aAa8B+sLquOHfqiiumzMSUdLQPw7RDI5r82XPbiQRrjrSIW8uwS8auFXWjh dE00Dgty02eD2X0F6as/W3N/5qXEa/oVsbVeThMH28A3xkUNRiabsBjuBIK2B5eK NC1GJ0ijstrzdxPYvJUJyB20Uambiwg5iW3mYllUUYC6lwEK+3Dhck/zjnTcIxpp pCVi1+/wTTQ2rTjgdTF/YtccXMpPJvUVoBMqtjPbIASValFmmp/9AoP2/oPoS1ky 2Ps9synBkc4+MX5/f60XJA54E0OUFQsMpSfFNGMrQCr/OmymFLk= -----END CERTIFICATE-----Generated at Wed Jun 18 21:35:12 2025 by rpki-client