$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json) Hash identifier: GuKSd2DdVJbIXO29x2bSUzNX0XGSjxbXHgnz9qRvFM8= Subject key identifier: 76:90:8C:0F:99:C6:92:00:9D:33:65:5A:28:D5:72:65:37:09:B1:F6 Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Certificate serial: 7CB8045B890860F0474773074117CD92A56B534B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft Manifest number: 0113 Signing time: Thu 07 Aug 2025 13:31:24 +0000 Manifest this update: Thu 07 Aug 2025 13:26:24 +0000 Manifest next update: Sun 10 Aug 2025 14:34:24 +0000 Files and hashes: 1: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: qSzxrfqd29Pg9HOqmUjPO7crmnWP/zs2luJUdYRC76s=) 2: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: IHqcErbm/jh+8G9ITpkeHubYhwRm77oQuURliUYMdFs=) 3: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: orwgsj0wTrtg5tdJxesAbg0nQafC12DE77p0hasLmPQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 14:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b8:04:5b:89:08:60:f0:47:47:73:07:41:17:cd:92:a5:6b:53:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Validity Not Before: Aug 7 13:26:24 2025 GMT Not After : Aug 10 14:34:24 2025 GMT Subject: CN=76908C0F99C692009D33655A28D572653709B1F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b8:bf:03:a5:68:9d:bc:5e:b4:c8:63:f3:64: f2:dd:96:81:a7:46:94:09:d9:22:b7:cd:d9:ac:f7: 57:b7:16:75:d0:64:f8:1d:94:87:51:97:0c:8b:e5: 42:cd:7f:b6:b9:52:e5:14:a3:60:f4:24:2a:d0:a6: cb:9d:cc:c4:ce:83:f1:25:2b:8c:ba:34:90:45:a8: 7e:44:97:55:87:3b:01:f7:54:1b:9c:c3:2e:b1:4e: f4:53:88:a5:8d:a1:0d:66:e7:9c:32:13:69:73:f3: d3:9c:ff:b6:c0:b8:e6:c5:4e:6c:50:a5:4f:ab:78: ac:70:b0:0e:c8:db:26:66:81:46:63:b4:e9:62:c5: 84:b3:61:f4:30:f2:6b:a3:af:31:95:94:13:af:85: d6:0c:90:5d:d9:8d:af:66:37:b5:4d:5c:90:31:86: d2:4e:e9:d7:4f:7e:f0:9d:1a:a1:2c:8b:b0:4d:e3: 01:4b:48:29:59:d1:ee:b3:c7:6e:dc:31:4c:de:96: d3:ec:d2:72:17:d9:5c:b3:44:82:86:89:dc:73:a5: 64:a7:b0:1c:77:e7:a5:73:1f:27:81:a6:9b:17:7b: 2b:d9:13:70:f4:d9:d8:e6:7b:1a:1a:c7:74:e6:e9: 58:4c:7a:c2:97:3e:6f:ac:6f:cb:3d:0d:c4:62:a3: ba:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:90:8C:0F:99:C6:92:00:9D:33:65:5A:28:D5:72:65:37:09:B1:F6 X509v3 Authority Key Identifier: keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:41:c5:47:1f:1a:c5:8f:3f:3b:34:e5:ef:c7:cb:8b:da:fd: 7b:a6:dd:da:5a:f2:76:f1:81:db:57:8c:18:91:02:9c:2d:08: 05:7b:33:e9:dd:ed:e6:0b:da:a1:b4:67:18:fd:51:49:45:a0: 94:07:ce:98:66:1a:92:52:4a:7f:05:fc:f1:35:c3:cc:79:27: c2:6c:71:c9:a5:1b:ef:e7:0e:db:03:fa:8a:9c:f7:27:b4:86: 22:e7:cc:c4:1a:64:e7:6b:96:fa:0b:ab:9b:69:01:d4:59:b4: 5f:83:c9:24:9e:58:ee:f4:9f:10:bd:2e:e2:0a:0f:91:2a:59: ca:3c:74:46:46:49:51:74:b0:57:6f:a1:87:67:b6:de:04:1e: 63:56:a4:73:24:0b:3d:50:8f:55:b8:30:91:2c:58:c3:a8:61: 78:cd:a2:b8:b8:b8:c1:cc:ee:07:4f:fd:fa:ee:83:d1:4f:9c: 88:b1:43:bd:6e:ae:c5:27:5c:dc:79:b9:ca:54:11:c1:ec:00: db:c9:a5:d5:fc:9a:55:87:db:85:db:08:10:2a:54:eb:c8:ec: 8e:8a:e0:eb:38:d9:85:e1:ac:50:fe:a6:e7:98:a1:f1:1a:37: 95:e4:17:b9:b8:be:e4:a4:c1:60:66:ec:00:e6:37:2c:99:71: e9:cc:53:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLgEW4kIYPBHR3MHQRfNkqVrU0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez NjAxQTg4QjAeFw0yNTA4MDcxMzI2MjRaFw0yNTA4MTAxNDM0MjRaMDMxMTAvBgNV BAMTKDc2OTA4QzBGOTlDNjkyMDA5RDMzNjU1QTI4RDU3MjY1MzcwOUIxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWuL8DpWidvF60yGPzZPLdloGn RpQJ2SK3zdms91e3FnXQZPgdlIdRlwyL5ULNf7a5UuUUo2D0JCrQpsudzMTOg/El K4y6NJBFqH5El1WHOwH3VBucwy6xTvRTiKWNoQ1m55wyE2lz89Oc/7bAuObFTmxQ pU+reKxwsA7I2yZmgUZjtOlixYSzYfQw8mujrzGVlBOvhdYMkF3Zja9mN7VNXJAx htJO6ddPfvCdGqEsi7BN4wFLSClZ0e6zx27cMUzeltPs0nIX2VyzRIKGidxzpWSn sBx356VzHyeBppsXeyvZE3D02djmexoax3Tm6VhMesKXPm+sb8s9DcRio7qLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdpCMD5nGkgCdM2VaKNVyZTcJsfYwHwYDVR0j BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0 Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVBxUcfGsWPPzs05e/Hy4va/Xum3dpa8nbx gdtXjBiRApwtCAV7M+nd7eYL2qG0Zxj9UUlFoJQHzphmGpJSSn8F/PE1w8x5J8Js ccmlG+/nDtsD+oqc9ye0hiLnzMQaZOdrlvoLq5tpAdRZtF+DySSeWO70nxC9LuIK D5EqWco8dEZGSVF0sFdvoYdntt4EHmNWpHMkCz1Qj1W4MJEsWMOoYXjNori4uMHM 7gdP/frug9FPnIixQ71ursUnXNx5ucpUEcHsANvJpdX8mlWH24XbCBAqVOvI7I6K 4Os42YXhrFD+pueYofEaN5XkF7m4vuSkwWBm7ADmNyyZcenMUw0= -----END CERTIFICATE-----Generated at Fri Aug 8 00:16:15 2025 by rpki-client