$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: LDVLXnrHS7XzyClp3N8RRiEehoh/KSFkgfpnuGdyNE4= Subject key identifier: 25:4F:3B:1D:6E:F6:79:B1:5A:09:A5:CA:00:45:4A:A8:92:57:D9:F0 Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 4E0CA5A67C93A6254B62EA0CFBA94D2F0092054D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 01A2 Signing time: Mon 16 Jun 2025 15:11:13 +0000 Manifest this update: Mon 16 Jun 2025 15:06:13 +0000 Manifest next update: Thu 19 Jun 2025 16:32:13 +0000 Files and hashes: 1: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: JUjPAOstxtzy3e2XRAdy16cqHuucp6sj9RxrkFhDS3Q=) 2: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: zNnqNd7eLV12Rrab6U7STP1+qdDljT1/CgWQpPULMEc=) 3: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: NcNTdHcRodSJZLKLz640cCIZx0mxCUPWUiWbg907HuU=) 4: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: y45woR+frHwDPz+XrJyAsnYy051jps7RCl331frKeSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0c:a5:a6:7c:93:a6:25:4b:62:ea:0c:fb:a9:4d:2f:00:92:05:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Jun 16 15:06:13 2025 GMT Not After : Jun 19 16:32:13 2025 GMT Subject: CN=254F3B1D6EF679B15A09A5CA00454AA89257D9F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:76:9d:b2:ef:5c:5d:c1:d2:b8:17:70:d9:ba: b1:2e:8d:67:a0:83:d4:98:e9:8e:de:af:a3:8a:1c: 67:fe:bf:45:27:4d:44:a9:54:5a:26:d7:f5:1d:8b: 09:0a:bf:87:f0:69:0c:7d:f9:6d:1a:7e:14:1c:3f: c7:b2:1e:e7:9f:26:ed:b4:ef:82:3c:9a:ed:31:6c: f3:cd:27:c0:15:03:23:a9:ed:91:f6:a5:80:99:90: 17:7e:c3:42:4f:26:8d:c3:31:c2:cf:0a:89:93:b9: 0c:b2:e4:bb:04:86:bb:5c:10:a3:ff:af:4d:bc:77: 14:31:09:e5:b4:cb:e2:c1:14:50:5e:57:c0:fa:9b: 02:41:5c:23:db:b6:9a:da:c4:6c:b4:1b:e2:67:17: 51:fe:a9:82:bc:56:cf:a0:fb:50:ab:49:dd:2a:c2: b8:c1:bd:6e:a2:31:62:a6:6f:80:86:ac:c3:1b:ee: 03:26:89:48:a1:07:16:c5:20:23:63:65:8b:d9:4c: b2:58:60:29:25:58:cd:67:e2:cf:6c:bc:b7:c8:28: 0d:fb:5c:1d:f3:58:a1:4a:8d:1f:e0:8c:78:dd:18: cb:a1:bf:e2:95:fa:91:c9:02:2d:c5:0e:50:90:8f: c0:87:d3:b8:28:21:be:b4:77:3b:43:74:9d:32:79: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4F:3B:1D:6E:F6:79:B1:5A:09:A5:CA:00:45:4A:A8:92:57:D9:F0 X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:41:8f:67:be:0f:4a:aa:b1:a4:59:f0:a9:b3:fd:c3:f4:92: b9:ea:73:ae:66:39:dc:ea:25:70:b5:ff:fe:80:63:3a:22:1c: 41:9d:56:94:75:cc:78:3e:e3:ab:91:30:96:33:f7:a6:71:64: 86:ae:e4:82:83:c4:6d:62:e6:ec:08:7a:7e:59:3b:11:06:16: 2d:88:13:23:62:ef:cd:b8:17:ae:7b:5b:e5:68:61:9a:f7:10: 19:50:a6:82:e3:fd:3e:b9:ce:87:02:25:d3:06:0a:f2:a1:77: 4b:ab:f9:d1:09:8e:d8:ac:c8:10:5f:e2:34:59:a3:29:6f:f5: e2:9a:fa:ca:f2:82:49:53:d0:38:5d:19:b5:01:42:bd:1f:fd: 0d:a2:c2:34:4d:ac:ab:17:e7:8d:81:2d:fc:1d:51:85:46:34: 43:b0:9d:01:6f:25:41:4b:96:7f:67:5d:de:cf:2c:bc:e1:70: cb:d9:db:93:b4:fb:05:66:c3:c0:81:48:97:4c:ac:f1:0e:bd: 80:18:b4:00:92:a8:c9:4f:c9:c7:e1:f1:29:9c:16:c4:4a:4f: 50:14:88:18:65:00:a1:2c:33:45:49:f2:12:04:71:cf:b7:bb: 0a:3e:30:b4:21:6b:d1:f3:d3:79:31:df:a5:21:d4:dc:34:0a: 09:44:c0:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgylpnyTpiVLYuoM+6lNLwCSBU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNTA2MTYxNTA2MTNaFw0yNTA2MTkxNjMyMTNaMDMxMTAvBgNV BAMTKDI1NEYzQjFENkVGNjc5QjE1QTA5QTVDQTAwNDU0QUE4OTI1N0Q5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dp2y71xdwdK4F3DZurEujWeg g9SY6Y7er6OKHGf+v0UnTUSpVFom1/UdiwkKv4fwaQx9+W0afhQcP8eyHuefJu20 74I8mu0xbPPNJ8AVAyOp7ZH2pYCZkBd+w0JPJo3DMcLPComTuQyy5LsEhrtcEKP/ r028dxQxCeW0y+LBFFBeV8D6mwJBXCPbtpraxGy0G+JnF1H+qYK8Vs+g+1CrSd0q wrjBvW6iMWKmb4CGrMMb7gMmiUihBxbFICNjZYvZTLJYYCklWM1n4s9svLfIKA37 XB3zWKFKjR/gjHjdGMuhv+KV+pHJAi3FDlCQj8CH07goIb60dztDdJ0yeWf9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJU87HW72ebFaCaXKAEVKqJJX2fAwHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpBj2e+D0qqsaRZ8Kmz/cP0krnqc65mOdzq JXC1//6AYzoiHEGdVpR1zHg+46uRMJYz96ZxZIau5IKDxG1i5uwIen5ZOxEGFi2I EyNi7824F657W+VoYZr3EBlQpoLj/T65zocCJdMGCvKhd0ur+dEJjtisyBBf4jRZ oylv9eKa+srygklT0DhdGbUBQr0f/Q2iwjRNrKsX542BLfwdUYVGNEOwnQFvJUFL ln9nXd7PLLzhcMvZ25O0+wVmw8CBSJdMrPEOvYAYtACSqMlPycfh8SmcFsRKT1AU iBhlAKEsM0VJ8hIEcc+3uwo+MLQha9Hz03kx36Uh1Nw0CglEwO8= -----END CERTIFICATE-----Generated at Tue Jun 17 04:36:12 2025 by rpki-client