$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft File: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft (raw, json) Hash identifier: HqorwFzIBJnhkEHj8SSOemQVzVMEt2CUG00s9NXV+Qw= Subject key identifier: 5E:56:35:3B:B9:75:35:8F:EA:8E:34:FE:DA:72:27:57:85:98:0E:85 Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 Certificate issuer: /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Certificate serial: 7A8632FAE1F05A7AEAAFB88E1D362762050F4538 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft Manifest number: 01C3 Signing time: Tue 03 Jun 2025 21:11:15 +0000 Manifest this update: Tue 03 Jun 2025 21:06:15 +0000 Manifest next update: Sat 07 Jun 2025 07:48:15 +0000 Files and hashes: 1: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl (hash: RuP6RJfci0OpSmX1GWQ9dThdDkhq6HLt8KGmv1vkIUw=) 2: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: UB8JtipfosdHlml62Xhk5sLTDI0owepm37Luu+44jy4=) 3: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: 4o94mrc4fRlBDhHzDJcRb+ENMoJpRlPOPsOhrRbyRi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:86:32:fa:e1:f0:5a:7a:ea:af:b8:8e:1d:36:27:62:05:0f:45:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Validity Not Before: Jun 3 21:06:15 2025 GMT Not After : Jun 7 07:48:15 2025 GMT Subject: CN=5E56353BB975358FEA8E34FEDA72275785980E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:ec:22:58:a6:e3:59:53:53:f0:bf:72:b6: f8:8f:60:b6:5b:69:d4:40:56:29:f7:bc:3d:69:d1: 9d:0e:7d:96:85:25:19:98:3f:ca:8c:fc:f7:db:8c: e6:44:27:69:f3:97:8b:a1:38:c0:b0:79:7a:fd:96: c1:af:bc:28:d6:62:24:54:75:da:f2:c6:46:02:36: 87:64:8c:95:b3:05:38:ac:36:6f:62:d3:bf:dd:a5: f5:d1:ac:22:f4:03:2c:85:42:41:ae:1d:d1:40:7c: 4d:c5:fb:a2:16:1e:04:88:3b:8f:7a:1b:51:dd:cb: a9:27:34:77:bb:4d:11:d4:9c:47:ea:f5:64:b3:33: b5:66:54:17:3b:91:e1:d3:4e:25:95:5a:bf:d8:0c: d1:d0:ee:38:36:73:06:b1:25:60:44:cd:1f:4d:79: 8b:6a:29:d3:34:8d:39:a6:c3:d4:bf:d2:63:6e:aa: ef:5d:6f:33:bf:bb:8b:45:32:3d:c8:39:ba:c2:51: 9a:66:e1:18:7c:6e:a4:21:49:57:5e:b3:e8:da:aa: 62:b8:98:0a:58:dd:5d:96:38:d7:22:2d:b8:79:32: d9:96:80:7d:db:51:be:7f:d3:6a:74:44:b3:9b:c7: 48:bf:b8:d7:09:0d:d2:47:4c:3c:9b:10:cb:e6:a3: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:56:35:3B:B9:75:35:8F:EA:8E:34:FE:DA:72:27:57:85:98:0E:85 X509v3 Authority Key Identifier: keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:59:39:df:3e:fa:49:4c:62:86:0e:36:24:db:5b:18:96:a0: aa:eb:d3:ec:f6:07:98:2f:c3:1d:74:fe:58:69:61:83:dc:0f: f7:4a:54:a1:4b:bb:2e:b1:10:ff:d2:32:0d:67:b6:77:d8:30: e4:56:c3:7b:3f:a7:0d:d3:89:28:dc:3a:73:dd:e4:a3:25:ff: 42:56:85:ec:47:e2:26:9e:09:6c:4b:c3:ee:3b:d0:fb:f7:e9: 6a:76:f5:ee:0f:2c:3d:56:17:52:07:ec:48:39:49:11:dc:a4: 21:37:e3:fa:9e:7c:7d:10:7d:42:ec:11:89:78:fc:de:40:ef: 75:14:b2:db:ac:e0:31:57:84:a2:d2:4a:dc:84:cd:34:04:c0: 40:15:65:a4:b6:76:03:7b:7a:04:8c:da:ea:79:b7:6d:6c:7b: 89:5c:cd:3f:30:dd:a8:2e:dc:53:41:ef:c1:73:44:e4:76:7b: 04:82:d8:bd:d4:cc:1c:fa:ca:70:69:85:35:ce:74:5d:85:15: 62:57:11:25:87:8d:9c:53:4c:ec:a7:77:25:1a:ac:7e:11:26: a0:d5:bf:79:b7:44:23:a3:9e:84:98:d0:01:f5:58:57:f0:32: 61:38:25:37:1d:4b:32:08:01:c7:96:98:92:ce:a7:80:c1:ee: fd:80:46:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoYy+uHwWnrqr7iOHTYnYgUPRTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVE OEJBMzg2MjAeFw0yNTA2MDMyMTA2MTVaFw0yNTA2MDcwNzQ4MTVaMDMxMTAvBgNV BAMTKDVFNTYzNTNCQjk3NTM1OEZFQThFMzRGRURBNzIyNzU3ODU5ODBFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSewiWKbjWVNT8L9ytviPYLZb adRAVin3vD1p0Z0OfZaFJRmYP8qM/PfbjOZEJ2nzl4uhOMCweXr9lsGvvCjWYiRU ddryxkYCNodkjJWzBTisNm9i07/dpfXRrCL0AyyFQkGuHdFAfE3F+6IWHgSIO496 G1Hdy6knNHe7TRHUnEfq9WSzM7VmVBc7keHTTiWVWr/YDNHQ7jg2cwaxJWBEzR9N eYtqKdM0jTmmw9S/0mNuqu9dbzO/u4tFMj3IObrCUZpm4Rh8bqQhSVdes+jaqmK4 mApY3V2WONciLbh5MtmWgH3bUb5/02p0RLObx0i/uNcJDdJHTDybEMvmo3X7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXlY1O7l1NY/qjjT+2nInV4WYDoUwHwYDVR0j BBgwFoAUdx0KucRFsoyIf9e6GN7FFdi6OGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFkNmEzZi02Y2EwLTQ2NjktOThmNy02ZjM0ODM3ZmFhNjIvMC83NzFEMEFCOUM0 NDVCMjhDODg3RkQ3QkExOERFQzUxNUQ4QkEzODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVEOEJB Mzg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4 ZjctNmYzNDgzN2ZhYTYyLzAvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1 MTVEOEJBMzg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlZOd8++klMYoYONiTbWxiWoKrr0+z2B5gv wx10/lhpYYPcD/dKVKFLuy6xEP/SMg1ntnfYMORWw3s/pw3TiSjcOnPd5KMl/0JW hexH4iaeCWxLw+470Pv36Wp29e4PLD1WF1IH7Eg5SRHcpCE34/qefH0QfULsEYl4 /N5A73UUstus4DFXhKLSStyEzTQEwEAVZaS2dgN7egSM2up5t21se4lczT8w3agu 3FNB78FzROR2ewSC2L3UzBz6ynBphTXOdF2FFWJXESWHjZxTTOyndyUarH4RJqDV v3m3RCOjnoSY0AH1WFfwMmE4JTcdSzIIAceWmJLOp4DB7v2ARg4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:11 2025 by rpki-client