$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft File: A777F080277567701C7EF464D9A7351ADB0B538E.mft (raw, json) Hash identifier: sWQaM3j6pl7TD+8cjD4aeT7hBZw1gUblK8xjw4pta6w= Subject key identifier: 5F:8F:33:6B:6D:25:D5:0F:45:B8:21:BA:EB:85:DC:42:9E:6F:0C:DC Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E Certificate issuer: /CN=A777F080277567701C7EF464D9A7351ADB0B538E Certificate serial: 3BC721B1DE85DB9CD4F655CD697087A4F669DB19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft Manifest number: 0152 Signing time: Wed 06 Aug 2025 15:01:26 +0000 Manifest this update: Wed 06 Aug 2025 14:56:26 +0000 Manifest next update: Sat 09 Aug 2025 17:04:26 +0000 Files and hashes: 1: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: nww0OvBV7eoF7ccGlEcWlOh6cTNl+JMulSg7kpc2Jzg=) 2: A777F080277567701C7EF464D9A7351ADB0B538E.crl (hash: KTUg+m8d3ceizO4/9FHu+uLWukrq4POQm/nzt+894KA=) 3: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: JBW3MNYcLkvyzbMzPH1digOsTzRoTjkVj2ZYm/AplQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c7:21:b1:de:85:db:9c:d4:f6:55:cd:69:70:87:a4:f6:69:db:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E Validity Not Before: Aug 6 14:56:26 2025 GMT Not After : Aug 9 17:04:26 2025 GMT Subject: CN=5F8F336B6D25D50F45B821BAEB85DC429E6F0CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:92:5f:bf:ce:f7:6f:23:c9:85:6c:03:f4:7a: cb:ae:0d:a0:10:34:3c:d7:bd:21:86:7c:09:7d:22: 5f:e8:a6:5f:57:50:5f:21:11:a0:50:dc:4a:c3:30: d4:72:6a:cb:54:cc:a4:5a:47:ff:b4:dc:32:e5:a4: 11:b5:02:54:66:67:36:5b:3b:59:8b:af:76:cf:a6: 65:82:62:82:54:31:26:63:4a:5e:0c:13:46:85:eb: 92:d2:dd:9a:00:4b:f0:2d:9e:73:bf:51:2c:05:b9: d3:f3:0c:1d:fb:f5:9b:df:3d:db:0e:50:53:fe:dd: 9f:e5:dd:c9:88:1a:85:38:b8:4e:d1:45:09:ae:ab: c6:d0:c9:9b:a1:b1:f9:f3:ab:0f:67:7e:7b:d8:9b: 8a:3b:17:32:93:3e:9b:af:09:aa:d0:b8:a3:55:a6: 30:c5:b6:2e:23:d9:05:c6:95:b0:c2:39:70:a9:84: 7f:90:c1:6c:a7:96:62:00:35:65:06:3f:2e:b8:e8: 6c:a6:5b:8c:c1:a4:79:c1:25:bd:e4:f3:16:7b:b8: ef:9f:89:0d:90:06:76:11:e7:87:0f:ad:e8:b9:a3: 7e:4f:e3:96:26:c0:2d:37:fc:fe:c7:9f:4b:8a:d2: 4f:10:6b:d1:e4:5b:3c:e6:b2:c6:37:ec:4c:8b:38: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8F:33:6B:6D:25:D5:0F:45:B8:21:BA:EB:85:DC:42:9E:6F:0C:DC X509v3 Authority Key Identifier: keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:be:67:42:69:b0:b5:fb:fe:d1:c1:b8:f7:0c:33:01:82:e1: f0:0f:cc:d2:e4:28:1c:ae:14:7c:8c:81:e2:d9:30:c4:d1:22: 3f:4a:ee:8b:5d:3f:5e:d9:7e:8f:c3:86:b9:a8:90:74:1d:41: b7:11:95:ce:a4:57:01:b7:02:d0:29:c3:e7:08:dd:b5:40:53: 0f:67:2c:fe:77:68:8e:32:53:e5:13:26:0f:be:20:51:0f:1b: 67:fa:3d:9d:b1:68:21:8f:ef:35:34:9b:12:1e:f3:9f:76:af: 5a:db:8e:67:91:13:a4:bc:b9:ed:cc:8d:4b:89:da:41:fc:02: 3c:cb:1c:5c:8f:58:ae:eb:80:17:f8:34:e0:ee:9b:b4:ed:0a: 98:51:cc:73:43:e2:7a:6f:05:aa:3b:e8:a9:7c:92:51:96:8a: 44:20:ff:0b:f0:41:15:6e:1c:96:71:88:2c:a0:3c:60:32:f0: 5d:9c:3d:d8:cb:d2:fc:92:49:5d:15:85:1e:60:9c:5e:a7:e8: a1:ec:c1:ff:4e:84:b1:09:2d:79:59:4b:12:d4:ca:7e:36:bf: 6b:d1:4c:82:03:42:26:35:22:1d:c3:7d:3a:83:b2:38:e3:b6: 9a:a5:90:79:e1:29:78:47:22:03:43:8d:d7:0b:f5:9e:38:61: 65:df:ee:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8chsd6F25zU9lXNaXCHpPZp2xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFE QjBCNTM4RTAeFw0yNTA4MDYxNDU2MjZaFw0yNTA4MDkxNzA0MjZaMDMxMTAvBgNV BAMTKDVGOEYzMzZCNkQyNUQ1MEY0NUI4MjFCQUVCODVEQzQyOUU2RjBDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkl+/zvdvI8mFbAP0esuuDaAQ NDzXvSGGfAl9Il/opl9XUF8hEaBQ3ErDMNRyastUzKRaR/+03DLlpBG1AlRmZzZb O1mLr3bPpmWCYoJUMSZjSl4ME0aF65LS3ZoAS/AtnnO/USwFudPzDB379ZvfPdsO UFP+3Z/l3cmIGoU4uE7RRQmuq8bQyZuhsfnzqw9nfnvYm4o7FzKTPpuvCarQuKNV pjDFti4j2QXGlbDCOXCphH+QwWynlmIANWUGPy646GymW4zBpHnBJb3k8xZ7uO+f iQ2QBnYR54cPrei5o35P45YmwC03/P7Hn0uK0k8Qa9HkWzzmssY37EyLOG5NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX48za20l1Q9FuCG664XcQp5vDNwwHwYDVR0j BBgwFoAUp3fwgCd1Z3AcfvRk2ac1GtsLU44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmY0NzY3ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC9BNzc3RjA4MDI3 NzU2NzcwMUM3RUY0NjREOUE3MzUxQURCMEI1MzhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFEQjBC NTM4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1 MUFEQjBCNTM4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHi+Z0JpsLX7/tHBuPcMMwGC4fAPzNLkKByu FHyMgeLZMMTRIj9K7otdP17Zfo/DhrmokHQdQbcRlc6kVwG3AtApw+cI3bVAUw9n LP53aI4yU+UTJg++IFEPG2f6PZ2xaCGP7zU0mxIe8592r1rbjmeRE6S8ue3MjUuJ 2kH8AjzLHFyPWK7rgBf4NODum7TtCphRzHND4npvBao76Kl8klGWikQg/wvwQRVu HJZxiCygPGAy8F2cPdjL0vySSV0VhR5gnF6n6KHswf9OhLEJLXlZSxLUyn42v2vR TIIDQiY1Ih3DfTqDsjjjtpqlkHnhKXhHIgNDjdcL9Z44YWXf7hA= -----END CERTIFICATE-----Generated at Thu Aug 7 07:17:13 2025 by rpki-client