$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft File: A777F080277567701C7EF464D9A7351ADB0B538E.mft (raw, json) Hash identifier: 1ETodq3RzZr/jmqcU2zLM+f/PIQyZ0JA/4IfyjClGic= Subject key identifier: 6C:B1:84:C5:AF:76:D0:59:8A:29:A8:9E:5F:67:49:B0:33:FF:07:CA Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E Certificate issuer: /CN=A777F080277567701C7EF464D9A7351ADB0B538E Certificate serial: 15FA6111F4E5FDCD42DEB12168C58290EEFEB7DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft Manifest number: 0110 Signing time: Tue 11 Mar 2025 21:01:19 +0000 Manifest this update: Tue 11 Mar 2025 20:56:19 +0000 Manifest next update: Sat 15 Mar 2025 06:07:19 +0000 Files and hashes: 1: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: h/uy7fDq50r7e+j8rs3WUchCkceLYr7uM1RGCqWPN9Y=) 2: A777F080277567701C7EF464D9A7351ADB0B538E.crl (hash: d4lRoIVnQ6dwUarMLm+ByNoktqcxJ200CqSai7mJlhc=) 3: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: PUWcmLIXqezWohbBydiSBzBMAytj8n2CXdb3MykrfeA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 06:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fa:61:11:f4:e5:fd:cd:42:de:b1:21:68:c5:82:90:ee:fe:b7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E Validity Not Before: Mar 11 20:56:19 2025 GMT Not After : Mar 15 06:07:19 2025 GMT Subject: CN=6CB184C5AF76D0598A29A89E5F6749B033FF07CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6d:ca:b3:81:6c:10:ed:79:d1:42:27:6e:b6: d5:ee:dc:35:9e:61:ee:a1:3b:fb:08:74:c2:e7:af: 1e:e3:22:e3:fe:3f:63:28:f7:15:54:93:e5:c4:dd: cd:8e:63:01:2c:c5:44:10:4a:59:e0:3a:62:98:b9: 29:72:a9:50:4c:d4:ba:c1:ba:c8:58:06:73:d8:a5: 07:61:9c:69:cd:4e:ee:a6:75:03:9e:d3:a1:04:c6: 8a:5e:e5:6e:6d:f4:3e:6a:e0:03:3a:8b:c3:da:d2: 54:f9:2f:6a:ae:58:2f:c6:53:04:44:af:0d:1d:11: 09:2c:d4:ed:46:d0:a3:09:bd:4b:02:50:e2:7b:8f: 6d:f5:5f:07:2b:39:7b:da:6f:d8:f7:f0:56:15:e6: 9a:c6:11:a5:45:2f:a0:8c:b1:bd:b0:22:8c:fc:b0: 27:0b:11:54:32:6c:7f:69:42:ce:b3:cc:4f:79:ff: 8f:cd:5a:0d:3a:df:bb:c0:d5:7e:e7:81:00:83:d9: 68:ec:c5:41:92:69:2b:f0:83:3a:59:a5:d1:f5:93: 3d:3e:c8:15:e4:45:9d:96:03:ba:b6:0e:98:3b:15: 10:d1:15:79:84:8c:6b:39:80:fc:26:61:98:62:97: 6b:3e:cc:2c:5b:d6:61:4c:33:7e:49:d8:bd:cb:6d: e7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B1:84:C5:AF:76:D0:59:8A:29:A8:9E:5F:67:49:B0:33:FF:07:CA X509v3 Authority Key Identifier: keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a5:c1:af:30:08:2d:26:61:2a:28:e8:b4:98:98:b8:ec:62: 75:0a:d5:df:30:da:08:d5:d9:f1:96:e4:ee:05:50:2c:09:a5: 84:9d:fb:b6:90:a7:57:b3:a7:7d:0f:76:01:2e:da:b8:5a:30: 8f:38:0b:2b:03:90:a4:bb:33:88:9b:3c:ea:6f:c5:16:56:ec: 48:34:eb:c3:72:53:6c:58:f9:3f:81:35:ad:71:d5:85:90:29: 0f:04:02:11:96:0b:4e:3f:6b:07:7c:ff:66:6e:40:9c:73:b3: 3e:17:c0:60:6d:42:8c:fe:04:f0:07:08:27:f0:5b:ef:54:df: 5b:12:51:0e:d0:26:e8:36:9f:c2:70:b3:93:5d:a2:f0:b6:aa: ff:f5:03:39:2f:53:f8:f0:0b:fd:c0:d0:cf:ea:ed:3b:2d:6c: a5:88:90:73:e8:92:85:67:60:86:7c:e4:f5:bc:42:41:ae:08: 9d:9b:ad:76:7d:0d:8c:28:98:f7:1e:ed:43:3d:26:b3:3e:76: ab:54:6e:6f:51:d8:7b:6f:57:7b:c9:34:dd:09:a1:c5:9d:5c: 6a:5f:31:71:27:b9:d6:62:6a:44:66:1e:ca:1b:77:f0:43:a8: 28:df:45:06:c2:93:e3:1d:e1:a7:2f:92:fc:00:ae:b7:2b:2b: c7:d8:67:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfphEfTl/c1C3rEhaMWCkO7+t90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFE QjBCNTM4RTAeFw0yNTAzMTEyMDU2MTlaFw0yNTAzMTUwNjA3MTlaMDMxMTAvBgNV BAMTKDZDQjE4NEM1QUY3NkQwNTk4QTI5QTg5RTVGNjc0OUIwMzNGRjA3Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRbcqzgWwQ7XnRQiduttXu3DWe Ye6hO/sIdMLnrx7jIuP+P2Mo9xVUk+XE3c2OYwEsxUQQSlngOmKYuSlyqVBM1LrB ushYBnPYpQdhnGnNTu6mdQOe06EExope5W5t9D5q4AM6i8Pa0lT5L2quWC/GUwRE rw0dEQks1O1G0KMJvUsCUOJ7j231XwcrOXvab9j38FYV5prGEaVFL6CMsb2wIoz8 sCcLEVQybH9pQs6zzE95/4/NWg0637vA1X7ngQCD2WjsxUGSaSvwgzpZpdH1kz0+ yBXkRZ2WA7q2Dpg7FRDRFXmEjGs5gPwmYZhil2s+zCxb1mFMM35J2L3LbecPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbLGExa920FmKKaieX2dJsDP/B8owHwYDVR0j BBgwFoAUp3fwgCd1Z3AcfvRk2ac1GtsLU44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmY0NzY3ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC9BNzc3RjA4MDI3 NzU2NzcwMUM3RUY0NjREOUE3MzUxQURCMEI1MzhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFEQjBC NTM4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1 MUFEQjBCNTM4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAalwa8wCC0mYSoo6LSYmLjsYnUK1d8w2gjV 2fGW5O4FUCwJpYSd+7aQp1ezp30PdgEu2rhaMI84CysDkKS7M4ibPOpvxRZW7Eg0 68NyU2xY+T+BNa1x1YWQKQ8EAhGWC04/awd8/2ZuQJxzsz4XwGBtQoz+BPAHCCfw W+9U31sSUQ7QJug2n8Jws5NdovC2qv/1AzkvU/jwC/3A0M/q7TstbKWIkHPokoVn YIZ85PW8QkGuCJ2brXZ9DYwomPce7UM9JrM+dqtUbm9R2HtvV3vJNN0JocWdXGpf MXEnudZiakRmHsobd/BDqCjfRQbCk+Md4acvkvwArrcrK8fYZ6Q= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:43 2025 by rpki-client