$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft File: A777F080277567701C7EF464D9A7351ADB0B538E.mft (raw, json) Hash identifier: VcAhmoLHAOtzF7LXySh604oorW10WLY7iTjFxFhTxJc= Subject key identifier: 10:A2:2B:E2:A8:1B:7E:AE:F5:46:5A:69:4D:D9:91:E4:E1:42:39:9A Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E Certificate issuer: /CN=A777F080277567701C7EF464D9A7351ADB0B538E Certificate serial: 4E3609E05226394FCD5B478AFCBA776838D790A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft Manifest number: 0125 Signing time: Tue 29 Apr 2025 06:21:20 +0000 Manifest this update: Tue 29 Apr 2025 06:16:20 +0000 Manifest next update: Fri 02 May 2025 16:45:20 +0000 Files and hashes: 1: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: h/uy7fDq50r7e+j8rs3WUchCkceLYr7uM1RGCqWPN9Y=) 2: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: PUWcmLIXqezWohbBydiSBzBMAytj8n2CXdb3MykrfeA=) 3: A777F080277567701C7EF464D9A7351ADB0B538E.crl (hash: qSLJpe13k2Vu5qkYkHHD3agDNLLqMTF6iqupGAZEz2o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 16:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:36:09:e0:52:26:39:4f:cd:5b:47:8a:fc:ba:77:68:38:d7:90:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E Validity Not Before: Apr 29 06:16:20 2025 GMT Not After : May 2 16:45:20 2025 GMT Subject: CN=10A22BE2A81B7EAEF5465A694DD991E4E142399A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d1:56:4c:c8:f3:ed:d6:a2:02:be:9f:0e:04: 82:50:ce:7d:da:d6:92:cc:ef:ef:50:ab:d5:ef:6a: f3:34:5c:be:27:d7:b4:41:3f:c1:c9:ce:b0:50:b9: c3:1a:7a:54:62:8c:14:95:eb:5a:b4:b3:29:dc:52: 85:e8:3f:9c:6f:f1:4e:2e:b7:42:e4:aa:3c:4e:37: ea:47:32:5e:6e:2a:d7:12:cb:05:12:bb:2d:a1:94: 3a:00:8e:68:ae:cf:7e:ae:10:7f:61:5a:54:8d:ad: 45:34:64:c2:49:76:60:16:4e:3c:b1:d1:d9:17:64: 15:94:0f:78:95:fa:1e:6b:6a:6b:3b:2d:f6:2f:9b: 5a:a7:c1:39:9d:d2:95:49:8c:bf:7c:2d:f6:60:42: 3a:94:31:67:8d:6f:8a:5a:d5:a0:dd:1e:7a:ca:2a: 3a:d4:42:ad:64:3d:bb:84:37:bc:65:e7:42:00:fa: 6a:ad:28:cd:e0:df:a2:6c:ab:e3:1c:5c:f7:8f:bb: bf:0f:f4:50:3a:9c:ba:d4:55:63:13:52:81:c8:34: dc:32:42:39:38:71:11:9a:fd:13:c6:77:eb:e8:2f: a0:8e:1e:c7:aa:56:19:8f:57:a6:ce:bc:1c:2e:40: 65:75:d9:5e:07:d6:29:30:a7:bb:ea:97:e7:6a:19: 7e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A2:2B:E2:A8:1B:7E:AE:F5:46:5A:69:4D:D9:91:E4:E1:42:39:9A X509v3 Authority Key Identifier: keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:90:78:a2:5b:3e:69:ae:f2:8f:1e:35:94:46:e1:5d:9e:66: d9:7c:33:9c:e0:82:d2:80:45:4f:f6:6f:fb:bd:fc:d3:72:8c: 78:57:58:2a:5e:af:28:7a:79:ed:a9:90:a8:f9:d6:df:60:05: 53:d4:65:98:f7:45:15:af:ef:b1:52:2a:65:e4:38:c4:81:93: 6c:e2:40:63:eb:8a:a9:67:94:65:b1:75:05:91:6d:1f:46:6a: 4a:f1:99:1a:78:98:67:04:7d:13:04:8e:ee:fc:68:e6:15:63: bb:9b:45:e9:a9:90:93:7e:ba:70:23:a0:af:90:27:f4:34:85: 0e:04:7e:9c:1b:6f:53:1c:a7:02:cf:3c:56:64:be:0c:3a:a1: 90:17:5b:ae:b3:e4:c9:e0:db:d7:a0:7e:2c:b6:cb:4d:7c:03: 4c:b2:90:10:06:ca:ed:8c:c2:d3:c5:e8:59:b9:02:6a:b9:d3: b1:7f:87:57:ee:ba:ae:b4:e6:d0:5c:6c:e7:eb:73:9e:e1:42: b5:e6:b5:cd:58:fb:3e:54:63:84:df:f4:d2:cb:8d:21:4b:97: 7d:27:6b:8d:53:3b:a9:46:28:e7:ab:d2:18:10:06:7f:25:d2: b5:8b:b9:63:1c:5d:b8:b4:b4:37:bf:4b:57:6a:36:8b:76:be: 75:35:70:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjYJ4FImOU/NW0eK/Lp3aDjXkKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFE QjBCNTM4RTAeFw0yNTA0MjkwNjE2MjBaFw0yNTA1MDIxNjQ1MjBaMDMxMTAvBgNV BAMTKDEwQTIyQkUyQTgxQjdFQUVGNTQ2NUE2OTRERDk5MUU0RTE0MjM5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ0VZMyPPt1qICvp8OBIJQzn3a 1pLM7+9Qq9XvavM0XL4n17RBP8HJzrBQucMaelRijBSV61q0syncUoXoP5xv8U4u t0LkqjxON+pHMl5uKtcSywUSuy2hlDoAjmiuz36uEH9hWlSNrUU0ZMJJdmAWTjyx 0dkXZBWUD3iV+h5rams7LfYvm1qnwTmd0pVJjL98LfZgQjqUMWeNb4pa1aDdHnrK KjrUQq1kPbuEN7xl50IA+mqtKM3g36Jsq+McXPePu78P9FA6nLrUVWMTUoHINNwy Qjk4cRGa/RPGd+voL6COHseqVhmPV6bOvBwuQGV12V4H1ikwp7vql+dqGX5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEKIr4qgbfq71RlppTdmR5OFCOZowHwYDVR0j BBgwFoAUp3fwgCd1Z3AcfvRk2ac1GtsLU44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmY0NzY3ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC9BNzc3RjA4MDI3 NzU2NzcwMUM3RUY0NjREOUE3MzUxQURCMEI1MzhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFEQjBC NTM4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1 MUFEQjBCNTM4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMeQeKJbPmmu8o8eNZRG4V2eZtl8M5zggtKA RU/2b/u9/NNyjHhXWCperyh6ee2pkKj51t9gBVPUZZj3RRWv77FSKmXkOMSBk2zi QGPriqlnlGWxdQWRbR9GakrxmRp4mGcEfRMEju78aOYVY7ubRempkJN+unAjoK+Q J/Q0hQ4Efpwbb1McpwLPPFZkvgw6oZAXW66z5Mng29egfiy2y018A0yykBAGyu2M wtPF6Fm5Amq507F/h1fuuq605tBcbOfrc57hQrXmtc1Y+z5UY4Tf9NLLjSFLl30n a41TO6lGKOer0hgQBn8l0rWLuWMcXbi0tDe/S1dqNot2vnU1cJw= -----END CERTIFICATE-----Generated at Wed Apr 30 10:28:58 2025 by rpki-client