$ rpki-client -vvf repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft File: 277D3C0811B597BC22847329E543CCEE7E2449A0.mft (raw, json) Hash identifier: 44lZ7ibWbaGkogOFULx9kc9MoenpLpmDkp+wQY7VF4w= Subject key identifier: 80:09:26:70:EC:93:4A:64:37:F7:62:22:68:68:F4:C1:D9:D5:3E:40 Authority key identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 Certificate issuer: /CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Certificate serial: 3B632246F9B5434D65883945F78CB8C304F96237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft Manifest number: B7 Signing time: Fri 29 Aug 2025 11:20:54 +0000 Manifest this update: Fri 29 Aug 2025 11:15:54 +0000 Manifest next update: Mon 01 Sep 2025 18:09:54 +0000 Files and hashes: 1: 277D3C0811B597BC22847329E543CCEE7E2449A0.crl (hash: aqkn9/5UYmuHz8Zt7ltCWaSgc6cPDEjGxZNE6LVnSlo=) 2: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: fefCWKXr30YVqWiq342VlH8lfhnIRdZEARC93/LTaB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 18:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:63:22:46:f9:b5:43:4d:65:88:39:45:f7:8c:b8:c3:04:f9:62:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Validity Not Before: Aug 29 11:15:54 2025 GMT Not After : Sep 1 18:09:54 2025 GMT Subject: CN=80092670EC934A6437F762226868F4C1D9D53E40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fd:7d:34:8f:6b:78:10:af:75:e5:9d:70:a3: ca:cb:0a:e8:f4:3e:b7:4e:39:1b:db:03:7a:76:2a: 21:77:2d:17:af:11:a8:97:67:38:f9:39:f0:d3:97: 83:f1:12:d6:5f:eb:e2:c8:43:3f:b8:f7:0f:99:b6: 21:a6:59:99:75:31:19:e0:b0:ed:49:75:44:56:a4: f2:5b:29:95:54:44:3a:52:7e:50:91:5a:4e:c7:3a: 12:b4:e7:4e:73:62:01:ef:c4:48:11:07:e9:5a:1f: 07:6b:39:04:13:1d:e8:99:ea:39:d5:0d:03:c9:c4: 8b:2c:50:ce:6d:0b:fd:c1:1d:76:9d:36:fc:c9:b7: 0f:ec:a1:55:66:65:63:13:be:44:c7:05:ea:fe:b4: eb:f1:d1:58:a6:1f:0b:91:be:21:14:ba:2b:9b:53: 8f:30:2f:52:eb:1d:c8:e7:cb:44:76:6e:9f:ec:9e: fa:4f:ce:e3:35:a3:93:ed:fd:20:0f:70:ad:92:a4: 65:ac:1d:dd:0a:c4:56:2d:ee:4b:84:6a:82:42:ae: ee:dc:aa:e4:13:48:31:8d:ab:d1:41:c7:74:6d:49: fc:e3:cb:df:3b:68:a1:91:b6:02:b1:6f:d7:31:22: 0c:0c:ce:2a:9e:00:50:4b:79:fd:5b:4e:4c:61:2b: 6c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:09:26:70:EC:93:4A:64:37:F7:62:22:68:68:F4:C1:D9:D5:3E:40 X509v3 Authority Key Identifier: keyid:27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4e:9b:6c:1e:07:bf:18:d8:b3:b3:84:f7:dd:89:82:75:51: 71:ad:56:b4:12:05:64:fe:06:e6:97:a0:98:29:72:41:24:a5: c1:01:cc:29:92:ff:a6:d1:99:7d:a8:ae:c3:cf:5b:e5:32:1b: 71:a1:f4:f0:87:e3:7c:d6:96:4b:64:9b:b8:80:3f:7e:f2:9e: 54:03:c1:02:86:44:42:1a:55:cb:6f:fd:ef:f7:1e:cb:a7:84: bb:e4:01:c3:e6:f8:e7:4b:75:e1:87:26:d2:ed:ed:56:c5:a1: a0:99:73:81:e5:63:7c:ef:2b:e9:5a:b5:29:b4:75:e3:b7:18: 3d:f2:f5:71:9f:7c:d0:0c:8c:c0:9c:07:0e:dc:56:fc:d9:71: 1f:cc:73:94:24:c9:40:23:c5:f0:c7:0c:59:d8:46:ff:1a:9a: 59:c5:85:c7:37:56:a6:03:d7:4b:f5:f8:bd:94:21:49:7a:4d: 1c:9a:6a:c0:0b:72:b5:21:b1:08:36:e9:be:05:e6:ad:ad:ba: 8a:aa:12:e6:27:55:58:ff:02:c1:40:71:15:70:c4:6f:97:cb: 91:ed:c7:c9:fd:3e:4c:f7:3e:51:e9:58:33:59:e6:94:d2:13: 6b:95:db:24:36:4f:bd:d5:ac:95:d7:e2:1c:32:45:c0:ca:ab: 46:eb:e9:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2MiRvm1Q01liDlF94y4wwT5YjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3 RTI0NDlBMDAeFw0yNTA4MjkxMTE1NTRaFw0yNTA5MDExODA5NTRaMDMxMTAvBgNV BAMTKDgwMDkyNjcwRUM5MzRBNjQzN0Y3NjIyMjY4NjhGNEMxRDlENTNFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/X00j2t4EK915Z1wo8rLCuj0 PrdOORvbA3p2KiF3LRevEaiXZzj5OfDTl4PxEtZf6+LIQz+49w+ZtiGmWZl1MRng sO1JdURWpPJbKZVURDpSflCRWk7HOhK0505zYgHvxEgRB+laHwdrOQQTHeiZ6jnV DQPJxIssUM5tC/3BHXadNvzJtw/soVVmZWMTvkTHBer+tOvx0VimHwuRviEUuiub U48wL1LrHcjny0R2bp/snvpPzuM1o5Pt/SAPcK2SpGWsHd0KxFYt7kuEaoJCru7c quQTSDGNq9FBx3RtSfzjy987aKGRtgKxb9cxIgwMziqeAFBLef1bTkxhK2ztAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgAkmcOyTSmQ392IiaGj0wdnVPkAwHwYDVR0j BBgwFoAUJ308CBG1l7wihHMp5UPM7n4kSaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzgyNTlkNi0yNjU1LTQ0MTctYmVjNC04M2VmNjY0NGY1N2UvMC8yNzdEM0MwODEx QjU5N0JDMjI4NDczMjlFNTQzQ0NFRTdFMjQ0OUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3RTI0 NDlBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc4MjU5ZDYtMjY1NS00NDE3LWJl YzQtODNlZjY2NDRmNTdlLzAvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0ND RUU3RTI0NDlBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVOm2weB78Y2LOzhPfdiYJ1UXGtVrQSBWT+ BuaXoJgpckEkpcEBzCmS/6bRmX2orsPPW+UyG3Gh9PCH43zWlktkm7iAP37ynlQD wQKGREIaVctv/e/3HsunhLvkAcPm+OdLdeGHJtLt7VbFoaCZc4HlY3zvK+latSm0 deO3GD3y9XGffNAMjMCcBw7cVvzZcR/Mc5QkyUAjxfDHDFnYRv8amlnFhcc3VqYD 10v1+L2UIUl6TRyaasALcrUhsQg26b4F5q2tuoqqEuYnVVj/AsFAcRVwxG+Xy5Ht x8n9Pkz3PlHpWDNZ5pTSE2uV2yQ2T73VrJXX4hwyRcDKq0br6WI= -----END CERTIFICATE-----Generated at Sat Aug 30 23:56:03 2025 by rpki-client