$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft File: 981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json) Hash identifier: F6r15/bohdjpxaPXPlZQCgexSGMI9LwVT/Y8JQgKDy8= Subject key identifier: C5:E4:4A:28:85:A5:5D:32:6E:69:6C:05:1A:C9:0D:90:61:37:7A:7C Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 37E7B25E213077750FF68588ED789128A456F87F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft Manifest number: 055A Signing time: Tue 05 Aug 2025 19:31:27 +0000 Manifest this update: Tue 05 Aug 2025 19:26:27 +0000 Manifest next update: Fri 08 Aug 2025 22:07:27 +0000 Files and hashes: 1: 3131302e34342e3137312e302f32342d3234203d3e203234323036.roa (hash: /Id0ptV6KhbD1snBODkIm970DRe1HBZaO2KQ2jikLRE=) 2: 3230332e38342e3133362e302f32342d3234203d3e203234323036.roa (hash: 4CIlhDwPBWmO489rSkBL096ATSwuK+FjlEMQtzZL/kc=) 3: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: njKwh9fBki9cQ9S37NNLRAGEY/gEGO5YoV7LWFXK6D8=) 4: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: aq3iMOcZU4XVOFPAPd2Nh3J2J2xxy7ZZYh4S2cWkrJY=) 5: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: KnuT4VJ8iLWdqrErOu2FeJ8mmwI6wwnIx48WuNVZS4g=) 6: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (hash: T9tknLjTeQ+7ZUfv8SNf4lCYZ42qRdSxxizSEJYn0CA=) 7: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: k8TYiHXc6vZmoqXaKgcDXCYwJI5QRLDArVJpzQsFi0s=) 8: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: tmM3oKcQYom0eZ0XNJS+YU7h43ssUwLiYaqon6dfaUY=) 9: 3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa (hash: 9tWn1tUw0lnAE7QTSe9gFD7FXQ8Wg/JsMqpIZEwXrcQ=) 10: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: dH0KuzFyQ3sZjvSqm5y9J/a3JLFxZMwVHA4nVqv5qW4=) 11: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: H0HlMimCqXAso/aispJtA9+9Apf+w3psosa64aEPhuo=) 12: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: 8Z6QdZAm6ipP1goiFZjslQYb9XOb/wZyuYYrPlulaFM=) 13: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: vmMOC54VRYyQ6zaPWhSxLckPPT+mw9crTtfHlgZPBE8=) 14: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 9MSiXUftqD7YwgoDDhRkUOlJfbnaxlrR0kRkqPsHDsM=) 15: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: 1MMaA/JALdwU46Gmn5cadR8bFFMn6pjjD2wa0Pe9Aag=) 16: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: aaVQCjxDcTZfVP0GXV6UmhAVx/WHjfyhQPMjY9CDL1Y=) 17: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: Wij0WNmFzkS7ii03UOjMpVj1DHEK+SaLjmorAVH1mZI=) 18: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: +ioxMWbzQIk8162X0SpHMt662sECkzs897/VKWy1MDU=) 19: 3230332e38342e3134332e302f32342d3234203d3e20323133363037.roa (hash: SU/DxOnFopjxkv8c6HfEkmadSFV8VExLgA9VBa2HuUc=) 20: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: lNnryO3KjbjallOCFXPMSeEsKPceLct4DmwTgOEASfo=) 21: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: DzgPlEX76YPqKshtrhPz/EVID2lXXaNvCCo/tHgJE8c=) 22: 3230332e38342e3133382e302f32342d3234203d3e20393834.roa (hash: OvL2f4eV/dIS/ISoFQJ5cS+0xjddfINmJd9dof7YWKE=) 23: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: RTuZkJtHP4oO5BZBcfIYPQEhgHjC830z/8gqHwaq6eQ=) 24: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: yk2Beo121KKGPqhGrImYDU3EMLdITUqRzn7ocJjo60c=) 25: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: BYrXc+PLZ/j21jMX4S/tR9RU/3h3VFerg2jw36ACe00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 22:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e7:b2:5e:21:30:77:75:0f:f6:85:88:ed:78:91:28:a4:56:f8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Aug 5 19:26:27 2025 GMT Not After : Aug 8 22:07:27 2025 GMT Subject: CN=C5E44A2885A55D326E696C051AC90D9061377A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f9:d3:0b:0b:0e:84:4f:e9:b6:0f:b9:72:e9: d3:c7:29:be:69:8e:5e:71:9f:37:b2:7c:b4:06:61: e8:c4:6e:d0:67:da:cc:73:2b:aa:f5:f6:8a:e0:5b: cb:92:de:54:34:3b:2f:56:c0:0f:40:9b:84:02:84: 4a:7b:cc:1b:91:02:ec:2f:6e:98:f8:94:9e:92:db: e2:fe:6f:5d:5c:2e:05:43:fd:08:01:d7:77:28:05: 81:e5:f0:a9:66:9a:5d:b5:7d:0f:9f:84:be:2d:cc: ba:6c:23:31:8c:07:ab:cb:11:69:60:1c:85:be:60: eb:67:50:6f:ff:05:5e:13:1b:de:e1:72:37:c3:f2: 7f:e3:73:4e:49:d3:d0:4f:86:bf:59:b7:f6:c2:21: 85:02:07:7b:35:ce:c4:0b:20:d4:a8:a5:5d:27:c5: 08:d6:93:24:0c:ae:80:5c:1d:23:f0:89:4d:19:24: 02:a6:c8:2d:fb:c7:ab:f8:56:95:da:ea:d2:a0:82: 47:0b:d5:63:d1:14:a8:b0:ec:4a:aa:38:02:85:b8: 36:2f:3f:78:da:32:57:e4:d9:a3:da:79:88:26:a8: 6c:4f:dc:d5:79:90:fc:e4:80:3e:5f:3f:29:77:c4: c5:01:74:ca:e2:85:cf:27:82:f2:cf:ec:c0:f2:58: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E4:4A:28:85:A5:5D:32:6E:69:6C:05:1A:C9:0D:90:61:37:7A:7C X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a2:fb:24:63:1a:91:26:71:9c:b3:2d:27:aa:b0:21:41:64: 2d:f7:31:fa:90:ce:b6:c2:7c:21:13:dd:a3:50:99:94:c8:8a: 74:df:ac:8e:54:19:a7:02:d2:b1:de:70:c2:54:24:2a:43:31: fa:f9:3f:b2:8a:1b:d3:91:9f:62:38:ab:b5:d4:09:49:d7:f0: 85:aa:a1:3a:de:54:c0:52:ea:7a:3e:8b:25:45:20:e4:68:af: 62:e7:b8:7d:5b:b4:ec:7c:94:28:62:e5:4e:93:ea:32:25:d5: d6:fd:2b:7e:06:4f:aa:6e:06:53:e0:75:e6:0f:5f:cf:2f:79: f1:d7:ce:6c:69:43:8e:5b:64:8e:4d:a0:52:7b:67:d5:2b:b3: 47:fa:b4:3f:50:b8:1f:3d:28:0d:b8:2c:ed:d4:bf:a3:7c:cf: 10:5e:d8:f7:0c:0b:31:fd:c2:82:cf:40:74:6d:42:af:34:75: 17:fb:52:58:61:b4:b6:24:78:d8:68:e6:d8:0d:66:d5:1a:7f: 36:d3:2d:cf:05:ef:97:84:6a:3b:06:1c:1f:bc:51:8c:66:4a: 74:d0:3d:65:85:e6:ee:d6:69:27:33:7c:ff:b0:78:66:a0:4d: aa:b2:be:26:db:8f:85:18:bb:a7:2a:81:f3:55:64:a4:71:e4: b0:1b:05:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+eyXiEwd3UP9oWI7XiRKKRW+H8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA4MDUxOTI2MjdaFw0yNTA4MDgyMjA3MjdaMDMxMTAvBgNV BAMTKEM1RTQ0QTI4ODVBNTVEMzI2RTY5NkMwNTFBQzkwRDkwNjEzNzdBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+dMLCw6ET+m2D7ly6dPHKb5p jl5xnzeyfLQGYejEbtBn2sxzK6r19orgW8uS3lQ0Oy9WwA9Am4QChEp7zBuRAuwv bpj4lJ6S2+L+b11cLgVD/QgB13coBYHl8Klmml21fQ+fhL4tzLpsIzGMB6vLEWlg HIW+YOtnUG//BV4TG97hcjfD8n/jc05J09BPhr9Zt/bCIYUCB3s1zsQLINSopV0n xQjWkyQMroBcHSPwiU0ZJAKmyC37x6v4VpXa6tKggkcL1WPRFKiw7EqqOAKFuDYv P3jaMlfk2aPaeYgmqGxP3NV5kPzkgD5fPyl3xMUBdMrihc8ngvLP7MDyWNy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxeRKKIWlXTJuaWwFGskNkGE3enwwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc5MjJmODktM2U5Yi00YjIxLTkx ODYtYTY0OGMyZGEzZjdiLzAvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlF N0NCMEMxMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIei+yRjGpEmcZyzLSeqsCFBZC33MfqQzrbC fCET3aNQmZTIinTfrI5UGacC0rHecMJUJCpDMfr5P7KKG9ORn2I4q7XUCUnX8IWq oTreVMBS6no+iyVFIORor2LnuH1btOx8lChi5U6T6jIl1db9K34GT6puBlPgdeYP X88vefHXzmxpQ45bZI5NoFJ7Z9Urs0f6tD9QuB89KA24LO3Uv6N8zxBe2PcMCzH9 woLPQHRtQq80dRf7UlhhtLYkeNho5tgNZtUafzbTLc8F75eEajsGHB+8UYxmSnTQ PWWF5u7WaSczfP+weGagTaqyvibbj4UYu6cqgfNVZKRx5LAbBVs= -----END CERTIFICATE-----Generated at Thu Aug 7 05:05:40 2025 by rpki-client