$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: pjzsMq6K2WsOg5+wr0Umf21R3AFF5W/5N3dnNcMVz4Q= Subject key identifier: E4:49:C0:E1:2F:40:36:99:10:16:E0:E6:0C:9D:78:A2:21:6D:53:B7 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 61ABF20C531F9D1F9B1485C5E85814A6B5F42A32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: 0126 Signing time: Thu 07 Aug 2025 10:51:27 +0000 Manifest this update: Thu 07 Aug 2025 10:46:27 +0000 Manifest next update: Sun 10 Aug 2025 18:44:27 +0000 Files and hashes: 1: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: 0U7/GAIfPzx2XS8pAEzUoQVvcMQeIR1X86eK8HTU9Nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 18:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ab:f2:0c:53:1f:9d:1f:9b:14:85:c5:e8:58:14:a6:b5:f4:2a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Aug 7 10:46:27 2025 GMT Not After : Aug 10 18:44:27 2025 GMT Subject: CN=E449C0E12F4036991016E0E60C9D78A2216D53B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:2a:3d:9a:d2:bd:3e:d7:d3:72:de:1b:7b: 56:d4:89:05:8d:b9:33:72:1f:93:9c:19:b1:0f:57: eb:4d:9d:d3:1f:71:c0:fa:6a:ca:43:6d:08:44:96: d4:38:be:c5:91:f9:47:ac:c6:a7:73:77:cf:18:f4: e9:58:37:4e:e2:b2:9e:01:55:21:71:a3:9a:a2:b3: 24:8d:88:bf:dc:7f:7c:8d:22:c0:3f:bd:10:f0:23: d7:54:0d:83:9d:14:da:a6:f6:ac:67:94:1c:6d:9d: 54:2d:eb:bf:4a:04:c8:bc:94:bd:97:f0:36:f2:f5: a5:13:de:df:8e:96:84:aa:85:d8:e1:89:47:67:1a: 1c:ad:cc:6f:22:12:fc:1c:75:8e:9c:af:75:e2:2f: 27:9c:62:46:9b:8e:15:d8:c3:e6:2d:a5:7e:24:61: 56:06:5d:12:c8:f8:56:ed:48:fe:e4:a2:86:b5:ef: 8d:fa:12:36:39:d2:2a:cf:d5:c6:62:25:de:a4:97: 23:f2:81:57:de:83:5c:7a:7c:0d:5f:28:53:76:23: d1:f4:7d:f5:ad:fc:12:88:25:cc:02:b4:ff:99:47: 90:37:11:7c:21:c3:68:43:bb:21:bf:4f:72:f1:5d: c9:ba:d3:49:a5:7a:35:bd:74:30:d9:b4:98:90:7a: 60:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:49:C0:E1:2F:40:36:99:10:16:E0:E6:0C:9D:78:A2:21:6D:53:B7 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0c:79:65:10:e3:f5:fd:3e:b6:fc:e5:39:6c:80:24:8d:69: 49:c1:18:48:e2:b8:85:1f:08:7d:fa:1c:87:bb:11:9c:99:b9: 2f:cc:ba:11:73:fc:2d:3d:73:9c:cc:2e:fe:a4:ae:36:a1:36: c7:80:85:e3:66:62:5c:1f:4f:8d:a7:b9:20:78:c3:0c:05:f6: 74:20:09:fd:b3:69:03:86:e0:67:18:d3:0b:20:86:5b:d1:c1: 00:74:49:8f:fa:65:d8:fc:d6:29:10:eb:29:9d:a5:b6:db:7d: 3b:91:d4:e2:0f:cd:d3:62:55:ca:28:87:f7:c8:92:4d:5b:3f: a3:03:57:15:f9:cd:89:67:c8:a5:de:8e:5b:7f:b4:19:06:79: 21:d4:3c:19:1c:14:18:15:dd:5e:d2:12:b0:f0:5e:9b:a7:a2: 85:85:c9:d1:7e:32:0e:3e:8e:00:47:f5:7b:c3:8c:2c:55:c3: 84:6e:9e:2f:27:c6:18:10:ba:06:17:82:8b:bf:c4:68:be:4b: 75:7b:5a:a9:fd:10:90:48:e0:ba:f2:cb:97:81:61:66:c4:c3: 72:14:fe:1b:e4:b4:ef:6c:f5:b0:39:08:8c:0c:0a:a7:1a:f2: 56:36:ea:81:7f:c7:ef:43:14:9c:cf:38:2a:27:67:73:5a:b2: c5:b4:4c:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYavyDFMfnR+bFIXF6FgUprX0KjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNTA4MDcxMDQ2MjdaFw0yNTA4MTAxODQ0MjdaMDMxMTAvBgNV BAMTKEU0NDlDMEUxMkY0MDM2OTkxMDE2RTBFNjBDOUQ3OEEyMjE2RDUzQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvISo9mtK9PtfTct4be1bUiQWN uTNyH5OcGbEPV+tNndMfccD6aspDbQhEltQ4vsWR+Uesxqdzd88Y9OlYN07isp4B VSFxo5qisySNiL/cf3yNIsA/vRDwI9dUDYOdFNqm9qxnlBxtnVQt679KBMi8lL2X 8Dby9aUT3t+OloSqhdjhiUdnGhytzG8iEvwcdY6cr3XiLyecYkabjhXYw+YtpX4k YVYGXRLI+FbtSP7kooa17436EjY50irP1cZiJd6klyPygVfeg1x6fA1fKFN2I9H0 ffWt/BKIJcwCtP+ZR5A3EXwhw2hDuyG/T3LxXcm600mlejW9dDDZtJiQemBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5EnA4S9ANpkQFuDmDJ14oiFtU7cwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4MeWUQ4/X9Prb85TlsgCSNaUnBGEjiuIUf CH36HIe7EZyZuS/MuhFz/C09c5zMLv6krjahNseAheNmYlwfT42nuSB4wwwF9nQg Cf2zaQOG4GcY0wsghlvRwQB0SY/6Zdj81ikQ6ymdpbbbfTuR1OIPzdNiVcooh/fI kk1bP6MDVxX5zYlnyKXejlt/tBkGeSHUPBkcFBgV3V7SErDwXpunooWFydF+Mg4+ jgBH9XvDjCxVw4Runi8nxhgQugYXgou/xGi+S3V7Wqn9EJBI4Lryy5eBYWbEw3IU /hvktO9s9bA5CIwMCqca8lY26oF/x+9DFJzPOConZ3NassW0TKo= -----END CERTIFICATE-----Generated at Sat Aug 9 05:34:40 2025 by rpki-client