$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: AjBjkP88AbP+3tzK1gZ6OlhaDlbxY5UDbYfO3rDOvQw= Subject key identifier: 63:A5:E6:5A:ED:5D:53:6B:FC:4A:39:9F:0A:D2:80:03:A1:3A:C7:C4 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 42162046D93E2F6DEF7D36CF633595AADAB22C3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: 010B Signing time: Fri 06 Jun 2025 15:41:24 +0000 Manifest this update: Fri 06 Jun 2025 15:36:24 +0000 Manifest next update: Mon 09 Jun 2025 20:35:24 +0000 Files and hashes: 1: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: njLDRFFjF7RdQnOKuodJS/eYBjB/BCwDTwGswcTPMrc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:16:20:46:d9:3e:2f:6d:ef:7d:36:cf:63:35:95:aa:da:b2:2c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Jun 6 15:36:24 2025 GMT Not After : Jun 9 20:35:24 2025 GMT Subject: CN=63A5E65AED5D536BFC4A399F0AD28003A13AC7C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:47:4c:5a:83:ac:48:8e:2f:27:7b:26:ed:d4: 59:85:0c:77:a7:82:0f:1b:99:ad:70:02:eb:69:ac: 88:b8:ed:44:64:ad:ba:40:02:91:5b:d9:bd:24:2c: 51:fb:e9:6f:35:b5:52:ae:64:75:a0:a0:1a:47:ab: 58:14:88:c1:bd:ce:f7:1e:56:06:1b:ba:b5:f4:39: 2f:93:90:5b:ee:a4:5e:42:68:7e:a6:3b:fa:d7:e1: fc:d3:ca:8d:d2:da:93:ea:e0:f5:40:2b:b5:3e:91: 89:90:a7:09:1a:57:06:d0:23:2d:ed:05:b9:c3:38: 5c:83:28:d3:ed:77:9b:57:1e:9f:c1:5c:12:db:c2: a6:d4:13:b8:fc:c8:bd:65:68:d9:fe:98:19:92:ef: f6:a6:9b:99:97:9d:39:1d:0e:d3:9f:da:e5:e3:3c: 0b:69:28:22:8d:6b:69:38:8b:74:d9:16:36:ae:60: 60:f0:8c:67:6c:73:e1:81:11:46:fe:02:d8:27:38: 56:8c:a3:df:ef:36:16:f0:f3:70:30:4d:9d:17:75: c4:f2:d2:1f:90:ea:d8:27:65:c7:df:2e:21:34:a7: b4:8c:c3:b8:ff:8d:4c:e0:e5:f1:d2:5a:59:d7:58: 66:ec:54:23:b6:ba:68:cc:d2:80:78:00:36:8f:5a: cd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A5:E6:5A:ED:5D:53:6B:FC:4A:39:9F:0A:D2:80:03:A1:3A:C7:C4 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:16:1b:e0:fd:f2:47:1b:f6:e5:29:ac:1f:23:0c:29:3d:88: 0a:dc:f1:a6:c7:f5:4a:cb:8f:71:be:96:44:a5:50:05:24:b6: 0e:0e:22:35:cd:ea:7f:b6:83:20:c0:c3:7b:77:77:36:80:07: 8b:ff:ec:2d:fa:66:e9:66:99:8d:55:ce:0b:f5:b2:e0:77:85: 84:e3:55:0f:6b:a2:9b:e8:55:4c:bc:fb:c0:dd:ce:d5:c7:b3: 84:10:88:86:79:ce:6f:a3:2b:5e:a2:16:9a:9f:ce:22:ef:d9: e2:9c:53:37:f7:d7:cb:cb:56:9f:46:83:66:f9:22:16:4c:30: b8:0e:c4:18:02:ad:23:6d:1a:ad:7e:d6:d4:f2:14:07:03:cd: 2e:c1:65:8c:3d:f9:ca:48:11:ab:94:69:3d:57:41:a3:03:80: 87:47:2a:c4:17:9c:5f:2b:3d:84:50:8c:c2:d6:f4:ef:b6:1a: 31:bb:3b:13:48:55:2f:a4:e9:6f:8e:c1:d9:d7:d6:33:77:13: 2d:b5:49:e6:69:1d:2c:4f:17:16:94:75:95:01:7b:17:19:e4: 34:73:a2:28:0c:2d:d0:83:42:8b:75:6d:5d:02:86:ad:c3:a8: 89:dd:cc:c3:76:11:7e:be:06:bc:8c:df:55:20:93:e2:68:32: 13:df:dd:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhYgRtk+L23vfTbPYzWVqtqyLDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNTA2MDYxNTM2MjRaFw0yNTA2MDkyMDM1MjRaMDMxMTAvBgNV BAMTKDYzQTVFNjVBRUQ1RDUzNkJGQzRBMzk5RjBBRDI4MDAzQTEzQUM3QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTR0xag6xIji8neybt1FmFDHen gg8bma1wAutprIi47URkrbpAApFb2b0kLFH76W81tVKuZHWgoBpHq1gUiMG9zvce VgYburX0OS+TkFvupF5CaH6mO/rX4fzTyo3S2pPq4PVAK7U+kYmQpwkaVwbQIy3t BbnDOFyDKNPtd5tXHp/BXBLbwqbUE7j8yL1laNn+mBmS7/amm5mXnTkdDtOf2uXj PAtpKCKNa2k4i3TZFjauYGDwjGdsc+GBEUb+AtgnOFaMo9/vNhbw83AwTZ0XdcTy 0h+Q6tgnZcffLiE0p7SMw7j/jUzg5fHSWlnXWGbsVCO2umjM0oB4ADaPWs2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY6XmWu1dU2v8SjmfCtKAA6E6x8QwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEWG+D98kcb9uUprB8jDCk9iArc8abH9UrL j3G+lkSlUAUktg4OIjXN6n+2gyDAw3t3dzaAB4v/7C36ZulmmY1Vzgv1suB3hYTj VQ9ropvoVUy8+8DdztXHs4QQiIZ5zm+jK16iFpqfziLv2eKcUzf318vLVp9Gg2b5 IhZMMLgOxBgCrSNtGq1+1tTyFAcDzS7BZYw9+cpIEauUaT1XQaMDgIdHKsQXnF8r PYRQjMLW9O+2GjG7OxNIVS+k6W+OwdnX1jN3Ey21SeZpHSxPFxaUdZUBexcZ5DRz oigMLdCDQot1bV0Chq3DqIndzMN2EX6+BryM31Ugk+JoMhPf3Sc= -----END CERTIFICATE-----Generated at Sun Jun 8 03:37:50 2025 by rpki-client