$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft File: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft (raw, json) Hash identifier: h60cZqnVXAhhWzBSwM94IKdx8IWNaUbT3UpXZ3pci+o= Subject key identifier: DB:40:91:7F:FA:3F:46:44:5E:4F:EE:7F:9E:B0:68:6A:EB:AC:3B:D7 Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 297AC41159F3E9D48743D15E504F3F2208EEA714 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft Manifest number: 050B Signing time: Tue 05 Aug 2025 19:30:52 +0000 Manifest this update: Tue 05 Aug 2025 19:25:52 +0000 Manifest next update: Sat 09 Aug 2025 00:11:52 +0000 Files and hashes: 1: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: pR7u7IsW9E5zx/4Gewaf11qIOvq1r/xgCkMTQFAUEcc=) 2: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl (hash: OYHVjkrbw53+CudGyoqta2CFQGDDGcax5U4g5/Opft8=) 3: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: TyftOcvbZs91N5rxusfIjMZ5akc+NP+roH91JhFQg20=) 4: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: JqPwBzOb9IGp/J3IK4HU+cGl2mSkMSYQ3owKhX9duIs=) 5: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: JxgdhcTrs6B/jpG5QUO9aLWXUNbAlaSX869U6y/nYjo=) 6: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: JnLquCgIroielTjx4ROKisgjaiP3OgaMmkhANFXPFCc=) 7: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: /vst8lOP9Na9sgAVJ1wD7o5HJMQFWxGn08eczXMCCA0=) 8: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: WDUUBVToiU1iccjikjgrMyjUMVvcr2yL6nTb6EMxpMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7a:c4:11:59:f3:e9:d4:87:43:d1:5e:50:4f:3f:22:08:ee:a7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: Aug 5 19:25:52 2025 GMT Not After : Aug 9 00:11:52 2025 GMT Subject: CN=DB40917FFA3F46445E4FEE7F9EB0686AEBAC3BD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:cc:4e:ff:67:36:48:68:35:19:6b:d8:9a: 37:7d:3f:96:9c:f3:36:9c:bc:6c:7e:2e:a0:98:e5: 68:ff:0c:1a:f6:be:4c:31:78:23:fa:3d:39:c0:b3: eb:7d:5a:c9:c2:28:67:ee:15:2d:be:07:3e:24:d5: 28:40:ec:94:33:50:5c:01:b0:17:b8:73:b3:fb:07: 6a:a4:6f:8d:d0:37:ca:39:90:4e:41:38:b7:77:fc: 15:a6:cd:4e:d3:a5:85:f7:b7:a7:48:c1:f3:7b:6a: c8:f4:14:f5:e1:26:7d:fb:c1:ac:b5:20:2e:30:6d: a4:24:91:87:7d:6a:c2:63:ef:0f:23:70:2a:40:5a: ea:52:d0:15:67:08:1b:e5:75:eb:4a:54:af:ff:00: 91:e4:75:dc:77:4b:c2:5b:b0:a5:39:43:f0:cb:51: 20:60:11:e8:33:f1:06:b5:ee:06:78:65:25:49:a8: 8b:e0:01:1b:80:28:e2:59:8b:f2:d0:61:c1:57:3f: a6:5c:f2:1b:55:8a:ca:20:bb:57:5c:00:80:86:2e: 76:47:a8:dd:cd:df:90:ac:1b:b0:db:b9:2e:23:dd: 89:d7:46:ed:b2:78:56:1b:bc:ea:76:36:b3:1b:13: ce:98:79:46:6e:f5:df:70:f9:ff:b0:a9:e1:87:46: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:40:91:7F:FA:3F:46:44:5E:4F:EE:7F:9E:B0:68:6A:EB:AC:3B:D7 X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4d:f4:15:e9:17:ac:bb:79:3a:76:fd:98:69:75:97:e6:31: 7b:ce:a3:b4:02:c8:1a:6a:d8:3d:f8:74:e2:cb:ab:15:f8:40: 56:3e:82:26:b4:de:0e:77:8a:09:b7:07:40:61:e4:6c:4d:07: ef:bb:e2:8f:2f:f0:48:4a:d5:72:2e:99:1d:13:55:08:89:be: 93:c4:ec:23:d6:85:42:f2:f0:b7:ab:23:4e:c6:80:ec:0e:bd: 06:c9:1f:23:b8:88:5a:4d:79:74:75:86:51:15:e7:c8:fd:84: 46:33:69:60:01:58:27:3e:a7:56:7d:ff:5b:13:2c:99:f9:ca: 79:6c:33:10:84:99:f5:19:69:d2:9d:cd:97:85:0d:05:20:5e: 96:62:8a:f1:af:fd:93:0f:06:dc:3d:07:ff:72:31:97:aa:c4: 85:c4:c6:3f:77:e1:bc:fe:a6:d9:60:36:16:9b:7f:9c:90:75: ba:e8:30:82:cb:f3:c1:18:5b:19:b8:13:a2:ff:44:03:63:5c: 16:63:43:20:35:0e:26:cd:13:7b:6c:a5:45:05:73:d7:5e:21: af:bf:51:06:09:e5:29:c0:cc:e3:4c:97:dd:90:9d:d9:e0:b6: e8:6d:37:8e:66:22:7b:1e:70:14:4d:b0:8f:40:8a:3a:ea:40: 16:97:9a:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKXrEEVnz6dSHQ9FeUE8/IgjupxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNTA4MDUxOTI1NTJaFw0yNTA4MDkwMDExNTJaMDMxMTAvBgNV BAMTKERCNDA5MTdGRkEzRjQ2NDQ1RTRGRUU3RjlFQjA2ODZBRUJBQzNCRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDq8xO/2c2SGg1GWvYmjd9P5ac 8zacvGx+LqCY5Wj/DBr2vkwxeCP6PTnAs+t9WsnCKGfuFS2+Bz4k1ShA7JQzUFwB sBe4c7P7B2qkb43QN8o5kE5BOLd3/BWmzU7TpYX3t6dIwfN7asj0FPXhJn37way1 IC4wbaQkkYd9asJj7w8jcCpAWupS0BVnCBvldetKVK//AJHkddx3S8JbsKU5Q/DL USBgEegz8Qa17gZ4ZSVJqIvgARuAKOJZi/LQYcFXP6Zc8htVisogu1dcAICGLnZH qN3N35CsG7DbuS4j3YnXRu2yeFYbvOp2NrMbE86YeUZu9d9w+f+wqeGHRhv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU20CRf/o/RkReT+5/nrBoauusO9cwHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiY2MwMGQtY2U3OS00MjE2LWE2 MmItZTNkNTBjYzc5NDQyLzAvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0 RjUxMkU0RkQ2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpN9BXpF6y7eTp2/ZhpdZfmMXvOo7QCyBpq 2D34dOLLqxX4QFY+gia03g53igm3B0Bh5GxNB++74o8v8EhK1XIumR0TVQiJvpPE 7CPWhULy8LerI07GgOwOvQbJHyO4iFpNeXR1hlEV58j9hEYzaWABWCc+p1Z9/1sT LJn5ynlsMxCEmfUZadKdzZeFDQUgXpZiivGv/ZMPBtw9B/9yMZeqxIXExj934bz+ ptlgNhabf5yQdbroMILL88EYWxm4E6L/RANjXBZjQyA1DibNE3tspUUFc9deIa+/ UQYJ5SnAzONMl92QndngtuhtN45mInsecBRNsI9AijrqQBaXmvI= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:13 2025 by rpki-client