$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft File: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft (raw, json) Hash identifier: wdt0AuuEsieaZeyL0W8604O8W476YMWbfP/c+Uxza5E= Subject key identifier: 17:17:C0:78:D0:F7:A0:C9:B1:7C:7E:D6:94:77:8A:13:F6:1C:16:1B Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 Certificate issuer: /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Certificate serial: 0249AD999F1768996E775629EB5AD6A65A4991C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft Manifest number: 01DF Signing time: Tue 05 Aug 2025 16:40:49 +0000 Manifest this update: Tue 05 Aug 2025 16:35:49 +0000 Manifest next update: Fri 08 Aug 2025 19:34:49 +0000 Files and hashes: 1: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl (hash: oDAl5aowTQSduA8l0U77xN5Y8ASlUaH8OXb14jv568w=) 2: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: 4o94mrc4fRlBDhHzDJcRb+ENMoJpRlPOPsOhrRbyRi4=) 3: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: UB8JtipfosdHlml62Xhk5sLTDI0owepm37Luu+44jy4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 19:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:49:ad:99:9f:17:68:99:6e:77:56:29:eb:5a:d6:a6:5a:49:91:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Validity Not Before: Aug 5 16:35:49 2025 GMT Not After : Aug 8 19:34:49 2025 GMT Subject: CN=1717C078D0F7A0C9B17C7ED694778A13F61C161B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:c7:0c:6c:98:02:97:87:e3:3e:b2:86:8f: 96:45:f2:86:ef:05:c0:35:8f:1b:65:f8:93:f6:cc: 4d:a4:27:31:ec:3f:db:4f:c2:d0:53:6b:b4:63:01: fb:09:38:5f:58:5b:d0:c9:88:91:69:00:d1:1d:15: f8:c5:b3:95:8c:36:a4:30:dc:aa:c5:4d:25:32:a4: bb:e6:7a:b8:e6:ef:b4:67:11:ff:1b:1f:06:1e:ac: 76:5b:90:32:37:1f:57:7e:f9:42:6f:35:2d:30:04: ee:01:0a:e1:91:ab:14:75:b3:f5:4a:ab:d8:6d:f3: ce:e0:99:76:fe:08:30:9b:a8:63:78:1a:fe:a0:aa: 1f:98:00:a4:ce:0e:16:91:6a:0b:f0:57:c0:57:a9: 25:4b:b6:89:3f:c0:81:41:cf:f4:c6:4f:73:0a:78: 9e:b6:89:5d:e4:d2:60:21:02:29:66:b2:a3:94:76: 2f:12:63:c3:01:1d:0e:f0:9e:27:98:df:6d:00:86: e3:b6:e6:c6:05:99:07:bc:07:a6:51:68:20:61:be: da:ad:f2:d8:ae:56:c9:f0:21:80:3f:52:cf:56:80: 1f:79:6f:3e:1e:75:86:fe:86:05:e6:de:59:b2:b3: 21:bb:b7:74:4f:2c:9f:68:f4:b8:d2:91:90:bd:16: 7d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:17:C0:78:D0:F7:A0:C9:B1:7C:7E:D6:94:77:8A:13:F6:1C:16:1B X509v3 Authority Key Identifier: keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a9:7f:12:74:94:38:9a:38:05:57:99:a0:63:03:8c:12:7c: 71:ba:1c:2b:e5:5f:14:bf:34:2b:9b:f1:c8:c4:04:4e:0a:6e: 96:8b:1d:95:d4:0a:35:a4:bc:09:b7:f2:71:15:db:fe:e5:35: d7:70:8f:8e:3d:89:af:1a:d0:ef:7f:9c:1e:53:b5:0a:54:d8: 61:d4:b5:1d:4e:02:a5:58:81:18:4f:f5:eb:ad:25:ee:bd:8e: 87:e5:a9:83:14:d7:68:ed:6d:4d:f9:83:9d:13:06:c3:00:fc: 92:f9:b8:6f:7c:d0:5b:c2:12:92:df:03:39:ab:21:e8:c2:e4: 73:d2:6e:48:87:e0:fd:68:63:ff:b3:30:ce:01:c7:5e:72:66: 92:67:77:13:a5:ed:da:91:df:cc:4e:e2:f9:eb:d4:cc:a1:6f: 8f:df:e9:51:c1:38:fb:e6:4e:27:15:84:3e:07:49:de:3f:ae: dd:a7:e6:3e:d6:85:73:d8:39:37:6e:9f:52:1e:c7:9a:dd:e1: a0:6f:3b:b9:8e:f4:93:61:b0:97:f8:4e:1c:dc:40:95:98:6f: 6e:6f:d4:31:89:ee:e3:38:a8:f2:68:76:34:9e:ba:e4:e3:71: 1d:4d:21:19:1f:52:c8:72:34:99:e5:5d:5e:74:ca:4d:55:48: ae:97:77:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkmtmZ8XaJlud1Yp61rWplpJkcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVE OEJBMzg2MjAeFw0yNTA4MDUxNjM1NDlaFw0yNTA4MDgxOTM0NDlaMDMxMTAvBgNV BAMTKDE3MTdDMDc4RDBGN0EwQzlCMTdDN0VENjk0Nzc4QTEzRjYxQzE2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/8cMbJgCl4fjPrKGj5ZF8obv BcA1jxtl+JP2zE2kJzHsP9tPwtBTa7RjAfsJOF9YW9DJiJFpANEdFfjFs5WMNqQw 3KrFTSUypLvmerjm77RnEf8bHwYerHZbkDI3H1d++UJvNS0wBO4BCuGRqxR1s/VK q9ht887gmXb+CDCbqGN4Gv6gqh+YAKTODhaRagvwV8BXqSVLtok/wIFBz/TGT3MK eJ62iV3k0mAhAilmsqOUdi8SY8MBHQ7wnieY320AhuO25sYFmQe8B6ZRaCBhvtqt 8tiuVsnwIYA/Us9WgB95bz4edYb+hgXm3lmysyG7t3RPLJ9o9LjSkZC9Fn2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFxfAeND3oMmxfH7WlHeKE/YcFhswHwYDVR0j BBgwFoAUdx0KucRFsoyIf9e6GN7FFdi6OGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFkNmEzZi02Y2EwLTQ2NjktOThmNy02ZjM0ODM3ZmFhNjIvMC83NzFEMEFCOUM0 NDVCMjhDODg3RkQ3QkExOERFQzUxNUQ4QkEzODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVEOEJB Mzg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4 ZjctNmYzNDgzN2ZhYTYyLzAvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1 MTVEOEJBMzg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCpfxJ0lDiaOAVXmaBjA4wSfHG6HCvlXxS/ NCub8cjEBE4KbpaLHZXUCjWkvAm38nEV2/7lNddwj449ia8a0O9/nB5TtQpU2GHU tR1OAqVYgRhP9eutJe69joflqYMU12jtbU35g50TBsMA/JL5uG980FvCEpLfAzmr IejC5HPSbkiH4P1oY/+zMM4Bx15yZpJndxOl7dqR38xO4vnr1Myhb4/f6VHBOPvm TicVhD4HSd4/rt2n5j7WhXPYOTdun1Iex5rd4aBvO7mO9JNhsJf4ThzcQJWYb25v 1DGJ7uM4qPJodjSeuuTjcR1NIRkfUshyNJnlXV50yk1VSK6Xdzs= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:52 2025 by rpki-client