$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft File: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft (raw, json) Hash identifier: z2QngMOHe5yd77Bmva/PyFbh2IzfqiQDUj8gWd/oV4k= Subject key identifier: 60:4A:1A:DD:79:DD:D9:5E:E5:2F:B7:CE:F6:23:83:18:DD:C8:6F:05 Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA Certificate issuer: /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Certificate serial: 01BFB567BC0AA49FB08222914CECDB7FBD5309FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft Manifest number: 01C5 Signing time: Wed 04 Jun 2025 20:21:38 +0000 Manifest this update: Wed 04 Jun 2025 20:16:38 +0000 Manifest next update: Sun 08 Jun 2025 03:55:38 +0000 Files and hashes: 1: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (hash: CSKpEC89Xk+ogIKfeE+w63/O6M+PoFVrS1+E8+YlhQ4=) 2: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (hash: lMn4B5ZtWuKl1Bl6ww7A6nnwbozYKsT8LQKj0eXDwpU=) 3: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (hash: +zMNXve3byNpT+wVehBbgr8v8+pHPwDEjM4xfLf/Kqc=) 4: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (hash: ZRKz+g747J/H6fTKJrZlO1r26a5SNUHOfQ0zmY6WrCQ=) 5: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl (hash: 1/FICua3n3dSFpKO+vsBF7kGTtyrsc41SdsfoBs4ibw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 03:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bf:b5:67:bc:0a:a4:9f:b0:82:22:91:4c:ec:db:7f:bd:53:09:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Validity Not Before: Jun 4 20:16:38 2025 GMT Not After : Jun 8 03:55:38 2025 GMT Subject: CN=604A1ADD79DDD95EE52FB7CEF6238318DDC86F05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:67:48:18:26:da:4d:3c:7a:f0:d7:6e:aa: 60:1e:5b:e8:c7:83:7d:f0:44:da:40:ad:ab:57:d1: 2c:2b:dc:40:a4:7a:ce:a1:2d:d9:80:5e:94:12:77: 49:dc:fc:ef:2d:6d:b0:a5:ef:47:c2:7e:24:14:73: 5b:d6:37:11:b2:f7:82:6a:33:63:fc:e9:9d:7d:cc: 78:ad:40:0e:15:49:0f:de:b7:b2:99:1f:f3:45:99: 4e:0d:d7:67:93:5e:55:7d:a9:d7:c4:01:29:73:ac: 29:c3:19:12:23:25:31:83:7a:a4:46:3e:ae:a1:64: b5:c1:85:e2:fc:e2:39:f3:82:a3:31:93:a7:d8:97: 28:74:b3:4a:e9:c9:7b:34:59:a6:1e:ab:18:fc:ad: 30:33:b3:2a:e1:71:d0:ce:52:30:62:b1:e2:cf:52: 9a:7d:00:30:4e:7f:c2:53:2f:e5:ab:74:ce:0d:1c: a9:e4:5e:76:f0:31:f0:56:68:02:32:35:2c:f5:18: 11:6a:d2:d1:c1:4e:24:58:9e:b6:2f:66:3c:74:11: 98:89:de:27:d8:98:ea:99:d0:3c:5d:3f:9d:12:3f: 0e:f0:50:30:31:97:db:64:0d:b4:9f:64:90:6f:d8: 5b:78:19:70:d8:ac:33:7e:66:34:d7:ef:1b:9d:37: 88:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4A:1A:DD:79:DD:D9:5E:E5:2F:B7:CE:F6:23:83:18:DD:C8:6F:05 X509v3 Authority Key Identifier: keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:71:a3:2a:fe:24:87:a7:1d:f1:10:a6:7e:98:a9:d7:90:2f: b2:92:8a:fd:de:b2:28:4a:ea:d9:a4:a5:49:ab:9f:65:4f:af: 25:e3:98:75:d5:25:6d:d0:ca:a2:78:8f:99:5e:1e:e5:3d:da: 7d:aa:64:c0:67:cf:7a:37:bb:6a:0a:c9:0b:90:19:cd:e7:a4: c9:4f:dd:92:e1:68:f5:cc:11:e5:3f:09:d1:77:a6:04:3c:89: ad:bf:b4:60:b9:58:89:0a:2c:3b:54:8f:17:a8:1a:bb:67:06: 11:a4:cf:8e:bd:55:07:69:a4:2c:03:cd:02:4e:2f:4f:3c:c2: 43:a6:42:b7:65:ba:00:d0:2b:ba:e2:d3:27:2a:b8:bd:a3:62: c5:f6:76:94:84:f1:fa:83:77:b1:c6:a5:b5:da:5c:3a:43:c1: e1:fe:f0:53:a9:2b:31:93:7a:ef:af:de:1d:2d:b6:c4:35:77: 4b:ba:8e:57:aa:11:35:a9:d6:cf:53:ff:04:45:f2:9e:7b:a9: 04:7b:fb:47:25:b6:90:bf:7c:72:08:45:91:a4:f1:bd:a4:37: b9:e7:60:d7:96:15:06:21:5a:e1:2b:f3:d2:6b:93:88:35:1c: 37:15:53:04:1a:08:74:b1:8b:83:28:46:73:4d:56:72:25:22: db:db:23:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAb+1Z7wKpJ+wgiKRTOzbf71TCfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz OTE3OTJFQTAeFw0yNTA2MDQyMDE2MzhaFw0yNTA2MDgwMzU1MzhaMDMxMTAvBgNV BAMTKDYwNEExQURENzlEREQ5NUVFNTJGQjdDRUY2MjM4MzE4RERDODZGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB92dIGCbaTTx68NduqmAeW+jH g33wRNpAratX0Swr3ECkes6hLdmAXpQSd0nc/O8tbbCl70fCfiQUc1vWNxGy94Jq M2P86Z19zHitQA4VSQ/et7KZH/NFmU4N12eTXlV9qdfEASlzrCnDGRIjJTGDeqRG Pq6hZLXBheL84jnzgqMxk6fYlyh0s0rpyXs0WaYeqxj8rTAzsyrhcdDOUjBiseLP Upp9ADBOf8JTL+WrdM4NHKnkXnbwMfBWaAIyNSz1GBFq0tHBTiRYnrYvZjx0EZiJ 3ifYmOqZ0DxdP50SPw7wUDAxl9tkDbSfZJBv2Ft4GXDYrDN+ZjTX7xudN4hPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYEoa3Xnd2V7lL7fO9iODGN3IbwUwHwYDVR0j BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0 N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3 OTJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUxN2ZlOTgtOGY1OC00OTdmLWJl NTctODY2NWE3YTA0YmIwLzAvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQw QTEzOTE3OTJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtxoyr+JIenHfEQpn6YqdeQL7KSiv3esihK 6tmkpUmrn2VPryXjmHXVJW3QyqJ4j5leHuU92n2qZMBnz3o3u2oKyQuQGc3npMlP 3ZLhaPXMEeU/CdF3pgQ8ia2/tGC5WIkKLDtUjxeoGrtnBhGkz469VQdppCwDzQJO L088wkOmQrdlugDQK7ri0ycquL2jYsX2dpSE8fqDd7HGpbXaXDpDweH+8FOpKzGT eu+v3h0ttsQ1d0u6jleqETWp1s9T/wRF8p57qQR7+0cltpC/fHIIRZGk8b2kN7nn YNeWFQYhWuEr89Jrk4g1HDcVUwQaCHSxi4MoRnNNVnIlItvbI6A= -----END CERTIFICATE-----Generated at Thu Jun 5 19:41:13 2025 by rpki-client