$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json) Hash identifier: wWngB/lqBOEmPYpIWmcktT7WBUxMYtVrsLpUttPkmxo= Subject key identifier: 65:FE:C4:FC:7D:F4:14:B4:2D:9C:6E:69:7A:08:BA:DF:B1:68:CB:1B Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Certificate serial: 0D51F57DE94045048F105512BEF0E1B9FA2C29E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft Manifest number: FC Signing time: Sun 15 Jun 2025 20:21:33 +0000 Manifest this update: Sun 15 Jun 2025 20:16:33 +0000 Manifest next update: Thu 19 Jun 2025 04:13:33 +0000 Files and hashes: 1: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: IHqcErbm/jh+8G9ITpkeHubYhwRm77oQuURliUYMdFs=) 2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: qSzxrfqd29Pg9HOqmUjPO7crmnWP/zs2luJUdYRC76s=) 3: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: jy80x6SrcJfKCQCTNlsiBFey8vezMgaYyIbAAWUOUmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 04:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:51:f5:7d:e9:40:45:04:8f:10:55:12:be:f0:e1:b9:fa:2c:29:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Validity Not Before: Jun 15 20:16:33 2025 GMT Not After : Jun 19 04:13:33 2025 GMT Subject: CN=65FEC4FC7DF414B42D9C6E697A08BADFB168CB1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:c1:80:ee:6c:5d:55:bd:b7:7a:c2:13:37: 0f:f6:f4:f5:c3:2d:4b:0d:77:55:a2:11:6d:ef:68: 68:e3:11:d3:23:c9:99:de:bf:b5:e6:4d:23:b0:28: 0c:df:52:70:28:56:7e:79:fb:4b:6e:cf:96:1f:0f: 54:56:64:91:59:ad:9e:02:d3:c6:74:f3:1f:bf:6b: cd:16:a9:8c:cd:24:92:63:33:eb:42:09:b2:a5:45: 9b:61:4d:ab:28:f8:33:a5:17:4f:e8:4e:57:db:6f: 61:cc:54:8b:14:a3:5c:a0:c3:6a:37:a3:a9:8b:45: dc:1d:1b:a0:6e:7a:53:dd:49:30:00:1d:3c:57:55: 18:07:6d:38:51:84:31:ef:60:55:96:32:ff:00:f2: 9f:fd:57:28:d0:f7:6d:f1:c3:55:eb:58:a7:05:d9: a2:5f:9f:45:75:e8:55:31:ce:b5:c6:44:45:53:12: c7:89:5b:6b:a9:e9:9a:12:96:9d:df:3c:35:c6:db: ba:6c:d0:85:05:02:ae:80:f6:74:71:77:4a:a4:3d: cb:28:98:8e:62:65:47:33:4c:8b:99:b0:34:19:2c: b2:cc:87:f3:4d:d8:25:8a:df:50:e4:33:0a:b6:5d: 70:b2:89:ba:a3:50:da:af:44:54:17:22:9b:01:e1: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FE:C4:FC:7D:F4:14:B4:2D:9C:6E:69:7A:08:BA:DF:B1:68:CB:1B X509v3 Authority Key Identifier: keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f7:7d:84:38:76:7b:df:ad:20:32:9f:75:29:82:81:87:3e: 11:78:63:d5:08:39:b5:35:86:18:6e:46:79:63:b9:ca:a1:3a: 11:f4:72:85:bb:35:12:48:26:f7:26:7e:3d:af:c4:1b:1f:1d: a9:56:de:27:16:de:11:91:44:21:5a:05:10:55:03:5e:b6:e3: 5c:d2:f7:4b:be:70:6b:52:50:7c:a6:35:71:56:f8:da:6e:f1: 72:08:3c:c6:53:2a:22:9a:c0:fd:72:82:af:8e:91:3c:6e:2f: da:4c:b3:72:22:39:22:cb:61:5a:11:98:e9:1c:48:2b:b2:cc: 8d:4d:e4:0c:83:d6:7e:bb:47:19:83:3b:41:5b:b3:65:cf:a0: 30:ce:da:7e:f4:17:4e:86:e3:4a:08:f8:dc:42:5c:8d:7a:ee: 2d:b9:52:7e:1d:17:f6:c6:49:9a:82:27:fa:a8:c0:c6:d3:2a: af:0c:fd:d3:8f:22:39:b6:3a:1a:a3:6c:3e:e6:a6:41:d8:d8: 75:8e:88:2e:d3:8d:c9:7d:a8:10:e6:5d:8c:9e:90:60:98:53: 0f:b9:2d:91:f7:0d:2c:8d:95:37:13:f7:5d:59:da:e9:05:54: 92:03:f9:4e:43:37:c6:4e:bc:96:a8:b9:7a:3b:93:b1:c9:5a: f9:15:6e:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDVH1felARQSPEFUSvvDhufosKegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez NjAxQTg4QjAeFw0yNTA2MTUyMDE2MzNaFw0yNTA2MTkwNDEzMzNaMDMxMTAvBgNV BAMTKDY1RkVDNEZDN0RGNDE0QjQyRDlDNkU2OTdBMDhCQURGQjE2OENCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIY8GA7mxdVb23esITNw/29PXD LUsNd1WiEW3vaGjjEdMjyZnev7XmTSOwKAzfUnAoVn55+0tuz5YfD1RWZJFZrZ4C 08Z08x+/a80WqYzNJJJjM+tCCbKlRZthTaso+DOlF0/oTlfbb2HMVIsUo1ygw2o3 o6mLRdwdG6BuelPdSTAAHTxXVRgHbThRhDHvYFWWMv8A8p/9VyjQ923xw1XrWKcF 2aJfn0V16FUxzrXGREVTEseJW2up6ZoSlp3fPDXG27ps0IUFAq6A9nRxd0qkPcso mI5iZUczTIuZsDQZLLLMh/NN2CWK31DkMwq2XXCyibqjUNqvRFQXIpsB4euJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZf7E/H30FLQtnG5pegi637FoyxswHwYDVR0j BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0 Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEn3fYQ4dnvfrSAyn3UpgoGHPhF4Y9UIObU1 hhhuRnljucqhOhH0coW7NRJIJvcmfj2vxBsfHalW3icW3hGRRCFaBRBVA16241zS 90u+cGtSUHymNXFW+Npu8XIIPMZTKiKawP1ygq+OkTxuL9pMs3IiOSLLYVoRmOkc SCuyzI1N5AyD1n67RxmDO0Fbs2XPoDDO2n70F06G40oI+NxCXI167i25Un4dF/bG SZqCJ/qowMbTKq8M/dOPIjm2OhqjbD7mpkHY2HWOiC7Tjcl9qBDmXYyekGCYUw+5 LZH3DSyNlTcT911Z2ukFVJID+U5DN8ZOvJaouXo7k7HJWvkVbkQ= -----END CERTIFICATE-----Generated at Tue Jun 17 08:17:28 2025 by rpki-client