$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft File: A777F080277567701C7EF464D9A7351ADB0B538E.mft (raw, json) Hash identifier: zjN3s9FHuayKljLRWbfQAcaGNmTgtpuAMUSmrmWQhrY= Subject key identifier: 0C:12:42:ED:19:56:25:8E:8A:73:14:55:A3:29:C1:2B:E4:99:6A:D2 Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E Certificate issuer: /CN=A777F080277567701C7EF464D9A7351ADB0B538E Certificate serial: 71CA6DA3FE6A229E3ACB1435FAFE5EC3FA0A9DE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft Manifest number: 0136 Signing time: Wed 04 Jun 2025 06:51:23 +0000 Manifest this update: Wed 04 Jun 2025 06:46:23 +0000 Manifest next update: Sat 07 Jun 2025 12:52:23 +0000 Files and hashes: 1: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: JBW3MNYcLkvyzbMzPH1digOsTzRoTjkVj2ZYm/AplQ8=) 2: A777F080277567701C7EF464D9A7351ADB0B538E.crl (hash: l1hKR8yl9eMGixQ5vzv1Vv0Aeu3hv+lcv7TXAWBHwoQ=) 3: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: nww0OvBV7eoF7ccGlEcWlOh6cTNl+JMulSg7kpc2Jzg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ca:6d:a3:fe:6a:22:9e:3a:cb:14:35:fa:fe:5e:c3:fa:0a:9d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E Validity Not Before: Jun 4 06:46:23 2025 GMT Not After : Jun 7 12:52:23 2025 GMT Subject: CN=0C1242ED1956258E8A731455A329C12BE4996AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a5:3c:87:17:75:81:04:60:db:f4:cd:a8:67: 86:87:af:cd:e6:7d:38:c9:2f:57:ad:42:7f:bf:3c: da:21:9b:d2:92:6b:39:1b:67:82:a0:a2:d8:a1:67: 08:aa:6a:d2:39:d5:84:cc:2e:e1:55:48:86:3b:0d: 10:d5:5f:bf:f6:b0:c5:8e:35:98:87:8f:3d:fd:a0: 2d:95:28:b2:39:41:b7:ca:bf:b8:c6:28:e0:ce:b5: 08:52:7f:b8:98:af:15:69:63:c1:43:54:fc:f4:45: 6e:4c:28:e3:94:d5:44:d6:b5:ca:77:c1:32:83:8f: 74:ff:26:68:82:c0:ad:3f:11:17:8f:8a:33:c3:d9: 4a:5d:61:db:63:67:fa:db:4f:35:04:7d:37:7f:68: ff:ad:2f:5e:52:2f:3b:65:6e:58:1f:ae:5f:b8:5c: 2b:11:02:52:c4:10:08:fb:f3:94:d4:aa:fd:f1:8a: 97:9a:ce:3c:61:fa:6b:c9:17:92:a7:14:d0:c9:c0: 91:14:db:ec:59:49:0a:43:46:6a:eb:76:17:bf:ab: a7:08:7a:a9:25:0d:4e:e2:de:5a:5e:59:ce:17:73: 2f:43:db:66:59:a1:2f:e0:22:3b:1f:e4:a2:40:1f: e5:34:fe:84:ea:0f:eb:8c:44:5e:c8:54:06:e3:06: 96:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:12:42:ED:19:56:25:8E:8A:73:14:55:A3:29:C1:2B:E4:99:6A:D2 X509v3 Authority Key Identifier: keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7d:76:09:19:b6:f7:4d:b5:95:95:d4:f0:59:7c:48:f9:34: 09:30:ae:bf:6b:b5:6e:64:ba:c8:8c:ad:97:32:bb:ef:71:ce: bd:9f:97:fe:d0:53:a0:f6:4e:f8:f1:cb:48:2d:59:23:53:b1: 62:ae:43:4f:34:36:84:21:3f:e7:2c:22:5a:52:3f:51:cc:75: 4f:20:d2:2b:97:52:92:98:0f:92:d9:c6:7a:7f:95:00:3e:fb: 0d:da:b2:90:03:12:d7:07:38:f9:25:4e:47:9d:e1:23:63:48: 7e:c1:f6:1b:da:9b:09:db:9e:cf:4d:18:3a:ae:52:7d:85:99: 0b:89:10:e6:c6:dd:f8:b6:bc:7e:4c:e2:a9:5c:bb:09:a6:6b: b5:2e:d6:de:2e:dd:19:05:77:a0:93:8e:26:ad:3c:46:92:2f: 79:17:21:56:fe:40:01:8d:88:ca:70:ae:2b:57:e3:f1:f5:2d: f0:55:89:49:8a:f5:4a:06:2c:e4:30:21:74:cf:f1:78:53:86: 4e:a1:ea:f8:4b:db:79:34:6f:48:ac:13:20:78:58:a4:2a:d9: 4b:ca:f5:19:d7:8f:35:c9:23:ac:1a:fa:29:d0:8e:e8:51:3f: 31:12:08:5a:2c:ab:a3:1c:35:27:24:54:4b:cc:4c:a8:ac:ce: f2:ba:f6:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccpto/5qIp46yxQ1+v5ew/oKnekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFE QjBCNTM4RTAeFw0yNTA2MDQwNjQ2MjNaFw0yNTA2MDcxMjUyMjNaMDMxMTAvBgNV BAMTKDBDMTI0MkVEMTk1NjI1OEU4QTczMTQ1NUEzMjlDMTJCRTQ5OTZBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUpTyHF3WBBGDb9M2oZ4aHr83m fTjJL1etQn+/PNohm9KSazkbZ4KgotihZwiqatI51YTMLuFVSIY7DRDVX7/2sMWO NZiHjz39oC2VKLI5QbfKv7jGKODOtQhSf7iYrxVpY8FDVPz0RW5MKOOU1UTWtcp3 wTKDj3T/JmiCwK0/ERePijPD2UpdYdtjZ/rbTzUEfTd/aP+tL15SLztlblgfrl+4 XCsRAlLEEAj785TUqv3xipeazjxh+mvJF5KnFNDJwJEU2+xZSQpDRmrrdhe/q6cI eqklDU7i3lpeWc4Xcy9D22ZZoS/gIjsf5KJAH+U0/oTqD+uMRF7IVAbjBpaDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDBJC7RlWJY6KcxRVoynBK+SZatIwHwYDVR0j BBgwFoAUp3fwgCd1Z3AcfvRk2ac1GtsLU44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmY0NzY3ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC9BNzc3RjA4MDI3 NzU2NzcwMUM3RUY0NjREOUE3MzUxQURCMEI1MzhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFEQjBC NTM4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1 MUFEQjBCNTM4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJ9dgkZtvdNtZWV1PBZfEj5NAkwrr9rtW5k usiMrZcyu+9xzr2fl/7QU6D2Tvjxy0gtWSNTsWKuQ080NoQhP+csIlpSP1HMdU8g 0iuXUpKYD5LZxnp/lQA++w3aspADEtcHOPklTked4SNjSH7B9hvamwnbns9NGDqu Un2FmQuJEObG3fi2vH5M4qlcuwmma7Uu1t4u3RkFd6CTjiatPEaSL3kXIVb+QAGN iMpwritX4/H1LfBViUmK9UoGLOQwIXTP8XhThk6h6vhL23k0b0isEyB4WKQq2UvK 9RnXjzXJI6wa+inQjuhRPzESCFosq6McNSckVEvMTKiszvK69uU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:17 2025 by rpki-client