$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft File: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft (raw, json) Hash identifier: LF+w80STeH6h7vLn+avZQxUw/lJJaGV2mlUfZv1CcpY= Subject key identifier: 46:2C:6A:51:25:FE:BA:88:01:87:2E:F7:E8:01:20:97:FE:06:C2:32 Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 Certificate issuer: /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Certificate serial: 5F8CE0AA52F7E6BDAC45BC30DBE45433DB981B00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft Manifest number: 01A2 Signing time: Fri 04 Apr 2025 06:10:47 +0000 Manifest this update: Fri 04 Apr 2025 06:05:47 +0000 Manifest next update: Mon 07 Apr 2025 13:50:47 +0000 Files and hashes: 1: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl (hash: 6YvVxE6H+kxLvSvHa8EaqjaxJbQA6WcT1gXA43OmV/M=) 2: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: DN3LfFZiZkFTfv0ow89vnLboqsNTK14mjnN189aXrDs=) 3: 3130332e3232302e32322e302f32332d3234203d3e20313431363037.roa (hash: SXTACo3iDe+Od7ewPU887kA52s+INFqEHi0Gq+fwibo=) 4: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: FVBFuUrqgSMPY21WdVOmGg4Dr0XlF9EyorL680ZGfxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 13:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8c:e0:aa:52:f7:e6:bd:ac:45:bc:30:db:e4:54:33:db:98:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Validity Not Before: Apr 4 06:05:47 2025 GMT Not After : Apr 7 13:50:47 2025 GMT Subject: CN=462C6A5125FEBA8801872EF7E8012097FE06C232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:e6:cc:94:93:a1:f7:db:7a:62:be:ad:8c: 3f:4b:69:08:c6:26:ee:96:19:b4:ca:b5:8b:c8:91: a9:3c:5b:a3:95:66:7d:83:48:9d:1a:f0:85:ba:1d: a2:94:87:39:c1:e4:7c:06:68:81:39:48:ba:83:d6: 36:92:45:c3:5b:7b:5e:fb:3f:91:5e:64:0e:c5:a9: 81:56:da:9f:d3:ce:00:1a:6a:2b:25:01:99:66:93: 95:83:6a:6c:e2:11:6c:09:b4:7c:8c:41:ac:70:50: 2a:73:f8:79:17:43:60:81:59:e8:fd:e9:aa:3f:7e: 39:58:62:e2:93:05:52:51:98:bd:19:e2:6d:9f:c6: df:6a:d9:00:3d:e7:e1:4c:da:12:e6:2d:12:7c:e5: c6:96:b7:3b:87:09:24:f5:08:8c:54:54:90:16:1e: 51:0c:dd:79:4a:46:47:ab:35:2c:21:3f:87:f9:66: 53:33:c5:a5:70:cc:0c:35:84:e0:e4:92:6e:6a:2a: 99:7d:24:ca:44:54:c8:48:e9:e0:1c:0c:33:1e:5a: 4e:46:17:4c:a2:c5:f4:98:26:8c:ae:31:cd:83:61: 27:2a:75:ca:f8:41:fb:2a:89:dd:f4:41:66:6d:aa: 47:92:e2:0e:dd:9b:c3:bd:26:f3:1f:bd:b9:1b:07: d5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2C:6A:51:25:FE:BA:88:01:87:2E:F7:E8:01:20:97:FE:06:C2:32 X509v3 Authority Key Identifier: keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0d:12:e9:5a:b8:23:81:92:b1:09:83:af:57:db:47:5e:b9: 7c:18:88:65:a9:bc:af:3d:16:ab:87:9c:ee:9a:d6:e3:f7:11: 53:51:b1:d5:85:15:73:24:5a:09:93:4a:7f:74:e6:f1:4c:8f: b9:d8:91:7b:6c:76:34:e4:41:6d:c0:b9:fb:e3:b0:6b:34:52: 6d:c6:bc:f1:ef:83:7a:82:a2:95:02:ed:f4:e0:c9:87:13:60: 16:97:99:11:2b:f0:83:57:2a:ad:49:55:47:62:61:fb:5e:0f: 5d:95:16:43:f0:25:58:eb:ea:ed:10:56:77:e5:70:e8:a7:a7: c3:de:ee:73:db:b2:7b:17:46:78:d1:16:03:5c:aa:56:42:08: 40:ad:19:02:d7:77:c3:d4:13:d3:89:9b:96:a6:72:2d:00:3c: 3b:58:4d:0c:5f:02:ed:81:d3:fe:13:c6:49:53:22:41:c0:77: 68:f4:fa:6d:c0:29:15:e6:e4:aa:fc:42:ab:9a:cc:b5:4e:3e: bf:cf:a3:50:8f:cd:a2:2f:cc:8f:be:9c:05:39:9d:6d:2b:4d: d3:df:92:77:d6:63:35:37:15:d3:8b:18:e8:ed:e3:ef:40:d6: 05:e6:f6:32:5f:ec:3c:1f:4f:7a:a8:7d:45:9c:ba:b9:d5:d9: 59:bd:b0:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4zgqlL35r2sRbww2+RUM9uYGwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVE OEJBMzg2MjAeFw0yNTA0MDQwNjA1NDdaFw0yNTA0MDcxMzUwNDdaMDMxMTAvBgNV BAMTKDQ2MkM2QTUxMjVGRUJBODgwMTg3MkVGN0U4MDEyMDk3RkUwNkMyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaNubMlJOh99t6Yr6tjD9LaQjG Ju6WGbTKtYvIkak8W6OVZn2DSJ0a8IW6HaKUhznB5HwGaIE5SLqD1jaSRcNbe177 P5FeZA7FqYFW2p/TzgAaaislAZlmk5WDamziEWwJtHyMQaxwUCpz+HkXQ2CBWej9 6ao/fjlYYuKTBVJRmL0Z4m2fxt9q2QA95+FM2hLmLRJ85caWtzuHCST1CIxUVJAW HlEM3XlKRkerNSwhP4f5ZlMzxaVwzAw1hODkkm5qKpl9JMpEVMhI6eAcDDMeWk5G F0yixfSYJoyuMc2DYScqdcr4Qfsqid30QWZtqkeS4g7dm8O9JvMfvbkbB9XLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURixqUSX+uogBhy736AEgl/4GwjIwHwYDVR0j BBgwFoAUdx0KucRFsoyIf9e6GN7FFdi6OGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFkNmEzZi02Y2EwLTQ2NjktOThmNy02ZjM0ODM3ZmFhNjIvMC83NzFEMEFCOUM0 NDVCMjhDODg3RkQ3QkExOERFQzUxNUQ4QkEzODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVEOEJB Mzg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4 ZjctNmYzNDgzN2ZhYTYyLzAvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1 MTVEOEJBMzg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0NEulauCOBkrEJg69X20deuXwYiGWpvK89 FquHnO6a1uP3EVNRsdWFFXMkWgmTSn905vFMj7nYkXtsdjTkQW3AufvjsGs0Um3G vPHvg3qCopUC7fTgyYcTYBaXmREr8INXKq1JVUdiYfteD12VFkPwJVjr6u0QVnfl cOinp8Pe7nPbsnsXRnjRFgNcqlZCCECtGQLXd8PUE9OJm5amci0APDtYTQxfAu2B 0/4TxklTIkHAd2j0+m3AKRXm5Kr8QquazLVOPr/Po1CPzaIvzI++nAU5nW0rTdPf knfWYzU3FdOLGOjt4+9A1gXm9jJf7DwfT3qofUWcurnV2Vm9sHg= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:34 2025 by rpki-client