$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: 7RBaV5TK0OsFVBxQvONxp9ePilZ+RkTBMdVNEb6dmAU= Subject key identifier: 3C:8F:BA:46:0E:43:ED:38:FF:1E:34:12:22:32:C4:F7:4C:6E:73:BC Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 6D185A2BF2292312C0E8476CCB23314C62C4783A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: 88 Signing time: Sat 26 Apr 2025 15:50:36 +0000 Manifest this update: Sat 26 Apr 2025 15:45:36 +0000 Manifest next update: Tue 29 Apr 2025 16:11:36 +0000 Files and hashes: 1: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: 5omrvujGCX08Sx+T5ENGu5nnfgEdAQGhKNdUREXapZY=) 2: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: YS3oqm1Lbyd0/97yvUW9zyotUoDYQl3GyaLAxHR+Jqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 16:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:18:5a:2b:f2:29:23:12:c0:e8:47:6c:cb:23:31:4c:62:c4:78:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Apr 26 15:45:36 2025 GMT Not After : Apr 29 16:11:36 2025 GMT Subject: CN=3C8FBA460E43ED38FF1E34122232C4F74C6E73BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:33:60:67:b9:ed:eb:d2:76:94:c8:4b:a5: 4a:21:d1:66:15:c2:f4:4a:8d:a6:fa:fc:36:6d:8e: 90:25:3e:4b:24:dc:f4:77:df:ff:fd:f6:63:60:c9: e2:35:83:f9:2f:b4:26:cf:94:17:8f:d9:fa:02:b1: 21:37:27:dc:9d:f2:77:11:73:3e:2d:bf:bd:aa:db: 51:c5:d2:29:8f:90:32:7b:b0:89:bb:75:5b:61:5f: f9:d5:35:07:19:c7:35:a7:b2:ca:1a:64:2f:1e:47: 28:7d:25:bb:06:73:35:16:17:3e:16:f7:c5:a0:d1: 7d:a7:83:8a:91:46:e6:56:da:14:0e:50:e1:17:01: f7:38:43:7c:2a:5a:43:1a:39:91:07:9b:24:3d:f7: d8:f7:89:26:53:37:0c:e8:57:77:96:5c:66:e6:1a: 51:b5:62:2b:40:41:90:2a:9f:7b:37:36:2e:2d:f5: c5:d7:4d:e1:81:b0:94:27:2b:5c:88:bf:f7:4d:6a: 31:34:bc:6b:b9:96:37:5f:77:ce:13:32:aa:2f:ce: 19:45:57:83:ac:63:1d:45:b8:a7:4c:6c:43:8c:f1: 9f:3a:5c:c6:dc:d1:2f:2e:1d:90:19:7b:6c:b5:06: 8a:42:35:23:45:78:e8:2c:4c:b7:e8:f9:d3:b3:81: d8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8F:BA:46:0E:43:ED:38:FF:1E:34:12:22:32:C4:F7:4C:6E:73:BC X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:71:95:95:ee:c8:d7:3b:e8:f2:a8:3c:b6:24:20:8c:a3:3d: b9:14:cf:c9:35:59:97:38:40:e1:96:5c:24:17:38:1e:13:2b: 15:39:5f:c4:a1:85:c5:92:eb:d6:2b:68:ed:8e:46:5f:58:00: f4:68:37:ee:46:32:6a:2c:85:2b:19:f6:67:54:e6:82:b3:9a: 09:26:e2:80:e8:76:f8:a6:bb:83:91:54:7f:79:5f:ec:66:8b: 20:16:00:96:3c:47:57:a1:be:f1:d3:78:a8:51:14:50:92:03: a4:c1:ab:65:74:df:86:e9:40:f5:65:f4:36:e8:97:32:31:62: 0e:03:8d:58:f2:b7:4e:bc:f0:6f:34:91:81:00:5f:16:94:45: 79:ca:50:08:dd:6b:34:95:8c:09:50:3e:d5:5c:fa:30:5f:3b: 33:c8:ea:6b:61:6e:29:ea:ff:d0:d5:3f:8c:34:ff:0d:32:d0: 67:70:19:2a:f2:93:e6:48:fc:00:f8:c9:ad:02:d8:d0:13:4e: 0f:3b:ef:03:74:e7:32:f9:68:55:25:a2:28:fe:d8:32:e4:e4: 11:76:dc:e0:03:5f:3f:b1:2f:db:24:7e:8c:5d:ad:5c:fd:cf: 57:fc:1f:25:c9:0c:a7:58:0e:63:1e:8e:f5:80:fe:46:1b:42: 21:c6:e6:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbRhaK/IpIxLA6EdsyyMxTGLEeDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNTA0MjYxNTQ1MzZaFw0yNTA0MjkxNjExMzZaMDMxMTAvBgNV BAMTKDNDOEZCQTQ2MEU0M0VEMzhGRjFFMzQxMjIyMzJDNEY3NEM2RTczQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8zNgZ7nt69J2lMhLpUoh0WYV wvRKjab6/DZtjpAlPksk3PR33//99mNgyeI1g/kvtCbPlBeP2foCsSE3J9yd8ncR cz4tv72q21HF0imPkDJ7sIm7dVthX/nVNQcZxzWnssoaZC8eRyh9JbsGczUWFz4W 98Wg0X2ng4qRRuZW2hQOUOEXAfc4Q3wqWkMaOZEHmyQ999j3iSZTNwzoV3eWXGbm GlG1YitAQZAqn3s3Ni4t9cXXTeGBsJQnK1yIv/dNajE0vGu5ljdfd84TMqovzhlF V4OsYx1FuKdMbEOM8Z86XMbc0S8uHZAZe2y1BopCNSNFeOgsTLfo+dOzgdh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPI+6Rg5D7Tj/HjQSIjLE90xuc7wwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVxlZXuyNc76PKoPLYkIIyjPbkUz8k1WZc4 QOGWXCQXOB4TKxU5X8ShhcWS69YraO2ORl9YAPRoN+5GMmoshSsZ9mdU5oKzmgkm 4oDodvimu4ORVH95X+xmiyAWAJY8R1ehvvHTeKhRFFCSA6TBq2V034bpQPVl9Dbo lzIxYg4DjVjyt0688G80kYEAXxaURXnKUAjdazSVjAlQPtVc+jBfOzPI6mthbinq /9DVP4w0/w0y0GdwGSryk+ZI/AD4ya0C2NATTg877wN05zL5aFUloij+2DLk5BF2 3OADXz+xL9skfoxdrVz9z1f8HyXJDKdYDmMejvWA/kYbQiHG5gI= -----END CERTIFICATE-----Generated at Mon Apr 28 12:42:05 2025 by rpki-client