$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: 9tMWQH2HvvNB8tLFPo3X2HuUxvbjVA59CTp29O0fQDg= Subject key identifier: 28:C3:12:08:C6:6D:1C:23:73:B2:45:45:10:C9:C7:28:81:BE:E6:70 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 35FEBE75E70726B40350B7561CC6A60E46334639 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: 0134 Signing time: Thu 04 Sep 2025 03:21:25 +0000 Manifest this update: Thu 04 Sep 2025 03:16:25 +0000 Manifest next update: Sun 07 Sep 2025 11:34:25 +0000 Files and hashes: 1: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: aAQ3gTdw9Ba4EyqO5leg/m+5A85FY5W+Vc3itSgQl30=) 2: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: AZoj+0FC7tr+2ZKJboWJyczOYWAwC/zNvBvRBqK06eM=) 3: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: i4ehwTb7ksbHI5qp3CBYY1et1EHigaiJmmC7HbTO1RM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 11:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:fe:be:75:e7:07:26:b4:03:50:b7:56:1c:c6:a6:0e:46:33:46:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Sep 4 03:16:25 2025 GMT Not After : Sep 7 11:34:25 2025 GMT Subject: CN=28C31208C66D1C2373B2454510C9C72881BEE670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:5a:6d:27:3b:6d:97:7d:33:e3:be:40:a2: 50:7f:b3:32:e6:76:75:c7:25:cc:d2:e0:af:3a:4a: 01:09:34:88:7d:ae:01:83:71:39:50:f0:dc:66:46: 3b:ef:0d:b3:11:d1:3c:da:aa:1c:a2:7c:8c:20:6c: 04:a8:31:7a:d4:f0:8e:67:8a:ce:13:17:90:6f:81: 09:fc:72:72:a5:9b:c1:16:68:53:35:69:78:44:49: cb:ae:a6:58:fd:1f:b5:df:e7:01:ef:e4:f4:09:56: bd:e8:1f:d4:14:59:55:7e:89:4a:ec:2f:49:2c:d1: 93:8e:f5:2f:a6:6f:07:0e:05:7c:1c:92:5f:15:4a: c5:ad:e2:ef:40:d9:ed:17:dc:d1:ea:10:83:60:f5: 8a:1e:fc:df:27:e5:f8:f5:af:4e:e3:0e:21:f9:7c: 12:90:6d:44:ba:f1:76:fe:7f:1f:ba:fc:53:e0:ec: 39:77:e4:77:6f:76:91:d7:62:6a:b5:65:ee:eb:a8: 07:80:2e:e0:5f:56:f9:84:2d:71:9e:0d:9f:f4:86: d5:12:4f:ff:b8:c9:a1:e6:a8:47:d5:d6:f7:ce:ff: d1:4d:78:8a:43:f5:f1:b6:7b:eb:fc:24:6b:be:de: 5e:35:93:58:27:07:58:b9:82:2c:9b:12:78:c8:69: fe:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C3:12:08:C6:6D:1C:23:73:B2:45:45:10:C9:C7:28:81:BE:E6:70 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fc:4e:4f:ea:0a:8a:6f:ee:ef:86:a3:ff:f0:47:91:63:5e: d0:34:ff:ce:45:77:37:ff:5d:57:b1:5e:8b:9b:11:ad:7a:1c: e2:a2:2e:74:23:a3:1f:22:54:61:f2:58:41:6c:c9:d5:88:62: bd:a7:8e:ee:c6:5f:22:76:a7:71:89:9d:0a:df:f7:51:c4:81: 81:d8:a1:ea:49:aa:1b:57:68:05:e0:8c:1f:ca:8f:f0:99:1b: ed:a9:a6:5a:c8:2d:06:aa:68:86:01:d7:d1:9a:e6:07:d4:96: bb:0b:3d:0a:cd:f5:75:88:64:a3:be:a1:20:32:a6:8f:11:bd: 0f:c2:20:3f:8a:fb:92:d2:a3:ec:29:67:5e:a8:33:e5:9a:65: 24:e9:e2:3b:23:46:62:35:84:b6:6a:9f:07:d3:d0:4f:2d:3b: 33:0d:65:2f:a4:55:19:65:29:cb:70:f1:7a:54:3e:2b:8c:9c: 69:ea:8e:a0:90:ae:f3:1c:43:7f:9f:e5:f3:25:98:f8:77:08: 47:3b:2f:09:a9:d5:d9:e2:64:a0:b4:52:2f:25:c9:e5:f9:6d: d4:5b:42:33:32:73:6c:7d:7d:0c:4b:2b:af:ff:7b:ba:a5:9b: 15:f9:4f:f5:a4:b5:f1:c5:3e:52:41:24:bc:ee:6b:63:ce:dd: 6a:dd:13:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNf6+decHJrQDULdWHMamDkYzRjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNTA5MDQwMzE2MjVaFw0yNTA5MDcxMTM0MjVaMDMxMTAvBgNV BAMTKDI4QzMxMjA4QzY2RDFDMjM3M0IyNDU0NTEwQzlDNzI4ODFCRUU2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4FptJzttl30z475AolB/szLm dnXHJczS4K86SgEJNIh9rgGDcTlQ8NxmRjvvDbMR0TzaqhyifIwgbASoMXrU8I5n is4TF5BvgQn8cnKlm8EWaFM1aXhEScuuplj9H7Xf5wHv5PQJVr3oH9QUWVV+iUrs L0ks0ZOO9S+mbwcOBXwckl8VSsWt4u9A2e0X3NHqEINg9Yoe/N8n5fj1r07jDiH5 fBKQbUS68Xb+fx+6/FPg7Dl35HdvdpHXYmq1Ze7rqAeALuBfVvmELXGeDZ/0htUS T/+4yaHmqEfV1vfO/9FNeIpD9fG2e+v8JGu+3l41k1gnB1i5giybEnjIaf5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMMSCMZtHCNzskVFEMnHKIG+5nAwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAb8Tk/qCopv7u+Go//wR5FjXtA0/85Fdzf/ XVexXoubEa16HOKiLnQjox8iVGHyWEFsydWIYr2nju7GXyJ2p3GJnQrf91HEgYHY oepJqhtXaAXgjB/Kj/CZG+2pplrILQaqaIYB19Ga5gfUlrsLPQrN9XWIZKO+oSAy po8RvQ/CID+K+5LSo+wpZ16oM+WaZSTp4jsjRmI1hLZqnwfT0E8tOzMNZS+kVRll Kctw8XpUPiuMnGnqjqCQrvMcQ3+f5fMlmPh3CEc7Lwmp1dniZKC0Ui8lyeX5bdRb QjMyc2x9fQxLK6//e7qlmxX5T/WktfHFPlJBJLzua2PO3WrdE7c= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:35 2025 by rpki-client