$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft File: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft (raw, json) Hash identifier: EQlvjGmVgxS+wQNbaCOWTNSZzmk8CdE/5GITWR6bRT0= Subject key identifier: B8:A8:8C:C1:5C:AA:DB:98:61:16:BB:8D:9B:E5:96:48:C3:89:90:7A Authority key identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B Certificate issuer: /CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Certificate serial: 41738F10ADAEFE3DAC0D85D692747BD6FAFF8D1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft Manifest number: 8E Signing time: Sat 15 Feb 2025 08:21:35 +0000 Manifest this update: Sat 15 Feb 2025 08:16:35 +0000 Manifest next update: Tue 18 Feb 2025 17:41:35 +0000 Files and hashes: 1: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: mBt52f39yB2WTMjY8yTiBWW7j1vK6aWMbOkMPXZ1lgU=) 2: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl (hash: vPsosbeWJw6gIT60szjyza2DXmkMOCmvvuJhOstPBK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 17:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:73:8f:10:ad:ae:fe:3d:ac:0d:85:d6:92:74:7b:d6:fa:ff:8d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Validity Not Before: Feb 15 08:16:35 2025 GMT Not After : Feb 18 17:41:35 2025 GMT Subject: CN=B8A88CC15CAADB986116BB8D9BE59648C389907A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:8e:1b:58:76:b5:d1:e7:7f:11:a2:61:63: 71:6f:16:6f:8d:e9:73:b4:ac:19:f1:be:2e:b9:b2: 15:dc:28:4f:8e:fe:68:34:5d:9e:0b:c8:3b:db:af: e6:83:79:ea:5d:24:de:bb:32:79:58:d8:e1:35:15: 19:0b:e4:45:6e:43:f7:06:05:a7:10:af:87:48:98: 39:e0:62:2d:a4:bd:b1:5a:6c:0c:0e:e2:bc:9e:ea: 78:90:28:16:8f:33:7e:cd:52:84:79:de:f1:fe:05: 1a:99:38:30:a8:8c:0d:d5:85:26:e8:d7:c5:5f:62: db:3c:35:7f:f4:c8:84:e2:f2:b5:69:78:ea:cb:b2: c9:2b:ed:30:3c:df:b9:fe:27:61:0d:a6:7e:cf:50: d9:e1:d8:ff:20:61:c0:26:8d:1c:0b:04:0f:95:b1: d9:8f:eb:d3:19:70:05:72:70:21:d7:13:34:f3:81: 0b:49:d5:bc:74:62:98:d3:35:50:b7:ae:4b:21:d7: 60:02:d8:b4:dc:8f:5b:69:4e:b5:83:22:fe:bb:51: 09:d1:19:00:b9:77:4a:f6:b2:7e:90:fe:a5:4f:26: ff:8c:47:3e:a1:29:32:bb:e6:b4:79:01:20:4f:a4: 50:6e:a5:cd:e1:59:f2:3b:42:7d:07:eb:a8:17:10: 51:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A8:8C:C1:5C:AA:DB:98:61:16:BB:8D:9B:E5:96:48:C3:89:90:7A X509v3 Authority Key Identifier: keyid:77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a6:99:66:9a:5c:63:45:95:53:87:ee:d2:fe:2b:ae:e5:7e: 33:76:5d:f6:d9:b2:77:84:9f:ff:c6:01:e5:e5:1e:3b:e6:59: c7:ca:9f:d0:ae:01:1a:9d:14:86:c9:f3:2c:a1:a1:80:3b:ef: 34:61:7a:f1:83:23:77:1a:e9:c0:8d:1c:e9:57:9e:a3:32:98: 70:cd:08:9e:0c:94:36:c1:0a:57:97:4b:64:76:47:f8:29:68: a9:78:5e:6f:94:45:7c:0f:a4:86:95:71:66:7b:1a:e0:a5:01: 81:32:ba:d4:11:b4:b1:2a:c9:a5:e6:fb:b4:93:ab:30:34:ba: 11:d4:14:e7:2e:46:25:23:01:e6:61:67:c4:2d:61:bb:9c:f1: f1:9c:9c:ca:be:d5:7f:f0:5a:3b:0a:e2:4e:54:d3:0d:b2:23: 39:e2:ae:ab:a5:0b:e8:26:50:24:65:9c:7a:fc:85:85:5e:a3: 79:08:bb:2e:b4:60:15:d1:95:a5:d2:ae:05:2c:27:12:18:76: 9e:d6:7e:4e:c5:59:2f:d1:ee:54:5e:e1:dd:38:c5:00:f7:58: 5f:30:a5:c3:68:fb:0e:a8:c7:67:e7:06:8c:0d:5b:90:96:7f: 58:2c:d4:a5:79:fe:96:dc:e7:03:2d:7d:ee:98:d9:86:3e:f9: b9:9d:b6:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQXOPEK2u/j2sDYXWknR71vr/jR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIz NEZBMkQ4QjAeFw0yNTAyMTUwODE2MzVaFw0yNTAyMTgxNzQxMzVaMDMxMTAvBgNV BAMTKEI4QTg4Q0MxNUNBQURCOTg2MTE2QkI4RDlCRTU5NjQ4QzM4OTkwN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVho4bWHa10ed/EaJhY3FvFm+N 6XO0rBnxvi65shXcKE+O/mg0XZ4LyDvbr+aDeepdJN67MnlY2OE1FRkL5EVuQ/cG BacQr4dImDngYi2kvbFabAwO4rye6niQKBaPM37NUoR53vH+BRqZODCojA3VhSbo 18VfYts8NX/0yITi8rVpeOrLsskr7TA837n+J2ENpn7PUNnh2P8gYcAmjRwLBA+V sdmP69MZcAVycCHXEzTzgQtJ1bx0YpjTNVC3rksh12AC2LTcj1tpTrWDIv67UQnR GQC5d0r2sn6Q/qVPJv+MRz6hKTK75rR5ASBPpFBupc3hWfI7Qn0H66gXEFEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuKiMwVyq25hhFruNm+WWSMOJkHowHwYDVR0j BBgwFoAUd6zxj1MX56IC5YPDxZwiMjT6LYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMC83N0FDRjE4RjUz MTdFN0EyMDJFNTgzQzNDNTlDMjIzMjM0RkEyRDhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIzNEZB MkQ4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzAvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIy MzIzNEZBMkQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmmmWaaXGNFlVOH7tL+K67lfjN2XfbZsneE n//GAeXlHjvmWcfKn9CuARqdFIbJ8yyhoYA77zRhevGDI3ca6cCNHOlXnqMymHDN CJ4MlDbBCleXS2R2R/gpaKl4Xm+URXwPpIaVcWZ7GuClAYEyutQRtLEqyaXm+7ST qzA0uhHUFOcuRiUjAeZhZ8QtYbuc8fGcnMq+1X/wWjsK4k5U0w2yIznirqulC+gm UCRlnHr8hYVeo3kIuy60YBXRlaXSrgUsJxIYdp7Wfk7FWS/R7lRe4d04xQD3WF8w pcNo+w6ox2fnBowNW5CWf1gs1KV5/pbc5wMtfe6Y2YY++bmdtn8= -----END CERTIFICATE-----Generated at Sun Feb 16 20:58:44 2025 by rpki-client