$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: kDCDnMfLCnCuRk4H7XkszO6Mg7QqxMhOsGVy3LIj+3Y= Subject key identifier: D2:06:07:3D:7F:BE:83:FE:9E:BA:40:FF:C6:94:A7:74:94:AA:45:A6 Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 3461C323A4C2A460C0A6372AF3B286BBA092F96C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 036D Signing time: Wed 06 Aug 2025 10:02:03 +0000 Manifest this update: Wed 06 Aug 2025 09:57:03 +0000 Manifest next update: Sat 09 Aug 2025 11:50:03 +0000 Files and hashes: 1: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: 3h4082sOmoj08nl16dZVAQO3cziHHCo0aL4zBbyB9SU=) 2: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) 3: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:61:c3:23:a4:c2:a4:60:c0:a6:37:2a:f3:b2:86:bb:a0:92:f9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Aug 6 09:57:03 2025 GMT Not After : Aug 9 11:50:03 2025 GMT Subject: CN=D206073D7FBE83FE9EBA40FFC694A77494AA45A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:74:f7:8e:f6:10:d0:50:0f:01:e1:be:00: d2:3f:4f:88:f8:04:7e:99:82:d7:a7:33:9f:51:12: ed:86:78:e8:2a:2e:bf:23:bd:32:49:2f:e4:ce:f5: 4b:4e:00:23:8a:de:9f:e1:e7:b5:23:00:22:f3:4b: bd:ec:31:9b:ab:83:21:81:f5:05:8f:a5:3e:90:38: 8b:52:19:18:31:33:40:28:ed:66:f2:15:37:98:2c: 59:31:c4:a9:7f:5c:20:3f:3a:69:71:6b:54:a8:1b: dd:b2:78:1d:d1:46:7d:e0:1b:86:27:01:7c:88:e0: b9:68:6b:7a:21:56:94:29:30:ea:28:ff:6c:f0:1f: 5b:15:ce:6d:70:3e:6e:21:d1:73:dc:40:b8:b6:e0: 9e:70:d0:7a:bb:15:63:1d:65:d0:32:cb:2d:1c:74: 13:d9:e0:e6:5b:29:91:1b:26:a6:23:47:d5:b1:95: 5d:ed:d2:f1:a7:18:d7:cf:45:b0:9c:cb:86:b7:03: f4:d8:d6:6f:5f:f2:93:fd:ec:66:9f:11:79:78:81: cf:ff:c7:d8:c0:9e:89:f7:61:52:dd:c9:f2:3a:72: e1:75:b5:02:4b:d8:23:e8:5f:40:62:ea:91:99:27: 81:53:44:06:48:6d:e8:78:25:d5:05:4e:b8:e6:16: e6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:06:07:3D:7F:BE:83:FE:9E:BA:40:FF:C6:94:A7:74:94:AA:45:A6 X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a6:a5:0e:03:11:3d:2c:56:43:d3:01:c7:2e:1a:11:9b:89: c3:e5:de:a7:c0:a1:75:4a:f1:0c:44:03:84:d2:b7:b3:41:3c: 2e:64:5c:1d:ec:10:1b:0c:f5:b8:e3:43:b0:8d:0e:7c:19:19: 9b:52:6a:59:3e:bf:4c:ea:87:4b:0c:8a:11:6f:bc:09:8f:12: c7:80:d9:c6:0e:21:c5:f6:19:6b:54:1a:33:e9:f0:b6:d1:05: c2:bd:14:7e:d4:23:d3:2e:41:40:1e:db:95:b8:e7:c4:9f:56: aa:7c:c1:22:77:73:67:20:ea:af:b4:91:a2:87:37:5c:74:21: b8:60:bb:21:9c:83:58:d7:6b:6c:3b:35:20:f4:01:ae:2f:9c: bf:7b:d5:e3:d8:f5:87:07:ad:5e:9d:36:db:95:7d:7f:c0:ad: cd:e1:8a:e8:38:2b:d6:7b:eb:cb:00:9b:a6:45:ed:96:b5:0f: 41:1d:69:d8:19:b5:68:9c:d5:d8:f3:df:b7:34:17:5e:f5:b0: c0:e1:9b:bc:10:de:66:a1:03:6f:14:03:20:2c:bf:a4:98:d2: a4:30:fa:a4:6c:11:b8:1b:8d:36:fc:21:8d:75:42:5a:36:11: 12:a4:62:4e:19:32:a8:b0:48:7d:c9:2e:4f:11:0f:a5:bd:c6: f9:18:79:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGHDI6TCpGDApjcq87KGu6CS+WwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTA4MDYwOTU3MDNaFw0yNTA4MDkxMTUwMDNaMDMxMTAvBgNV BAMTKEQyMDYwNzNEN0ZCRTgzRkU5RUJBNDBGRkM2OTRBNzc0OTRBQTQ1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoeXT3jvYQ0FAPAeG+ANI/T4j4 BH6ZgtenM59REu2GeOgqLr8jvTJJL+TO9UtOACOK3p/h57UjACLzS73sMZurgyGB 9QWPpT6QOItSGRgxM0Ao7WbyFTeYLFkxxKl/XCA/Omlxa1SoG92yeB3RRn3gG4Yn AXyI4Lloa3ohVpQpMOoo/2zwH1sVzm1wPm4h0XPcQLi24J5w0Hq7FWMdZdAyyy0c dBPZ4OZbKZEbJqYjR9WxlV3t0vGnGNfPRbCcy4a3A/TY1m9f8pP97GafEXl4gc// x9jAnon3YVLdyfI6cuF1tQJL2CPoX0Bi6pGZJ4FTRAZIbeh4JdUFTrjmFubfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0gYHPX++g/6eukD/xpSndJSqRaYwHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmmpQ4DET0sVkPTAccuGhGbicPl3qfAoXVK 8QxEA4TSt7NBPC5kXB3sEBsM9bjjQ7CNDnwZGZtSalk+v0zqh0sMihFvvAmPEseA 2cYOIcX2GWtUGjPp8LbRBcK9FH7UI9MuQUAe25W458SfVqp8wSJ3c2cg6q+0kaKH N1x0IbhguyGcg1jXa2w7NSD0Aa4vnL971ePY9YcHrV6dNtuVfX/Arc3hiug4K9Z7 68sAm6ZF7Za1D0EdadgZtWic1djz37c0F171sMDhm7wQ3mahA28UAyAsv6SY0qQw +qRsEbgbjTb8IY11Qlo2ERKkYk4ZMqiwSH3JLk8RD6W9xvkYeRg= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:40 2025 by rpki-client