$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: 7FYFCbtzVVdT+amL2+211tM/UxSQQNbfzLNROWFRy9Y= Subject key identifier: F5:CF:44:E8:8C:3E:00:33:EB:1B:7E:F8:3B:BA:CB:CA:C5:68:D6:41 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 5B055248FE00336068FF4734A268E5276ECAD6D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: 010F Signing time: Mon 16 Jun 2025 00:51:24 +0000 Manifest this update: Mon 16 Jun 2025 00:46:24 +0000 Manifest next update: Thu 19 Jun 2025 01:03:24 +0000 Files and hashes: 1: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: tFxOzTRbS8my1lrnA4Et8CKxlU1CqKiOUbg0uSn30Lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 01:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:05:52:48:fe:00:33:60:68:ff:47:34:a2:68:e5:27:6e:ca:d6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Jun 16 00:46:24 2025 GMT Not After : Jun 19 01:03:24 2025 GMT Subject: CN=F5CF44E88C3E0033EB1B7EF83BBACBCAC568D641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:40:41:b3:95:bf:6a:cf:d5:d6:70:77:b1: 34:1f:0b:89:04:1a:81:36:b8:6b:59:23:2c:ec:1d: 3f:d9:e9:63:cc:95:32:93:01:3f:59:8d:77:d2:d1: 7a:75:8d:5b:3d:09:cd:b4:d6:0e:cd:93:f4:87:aa: b6:aa:87:a1:68:0d:86:9c:10:35:f1:7a:75:56:81: fa:38:34:34:ce:5c:72:ad:26:ac:47:0d:88:34:66: f0:ae:86:bb:52:24:d6:5e:4b:d5:59:a6:62:15:c6: d4:28:0a:2f:08:ab:83:e0:5e:bb:7c:df:6e:18:0e: 17:bf:db:df:9a:cc:d0:08:ca:ea:dd:5e:31:20:a1: 3c:ef:50:4f:df:de:e8:58:4e:41:82:fe:32:22:37: 42:f6:d4:aa:30:08:85:2a:38:d0:a6:95:8d:b1:fd: 8b:4d:d4:b0:30:88:77:55:9e:8f:ed:46:4d:c2:bf: e1:11:ce:d4:fe:fc:f8:22:9e:d6:ca:6f:6e:47:78: a1:67:98:c9:83:25:54:87:c1:b7:8c:3b:f1:be:95: 0c:32:9b:cb:0b:43:0e:e1:62:05:af:77:e7:7a:c3: b5:cc:1d:db:f3:76:76:b9:3c:d5:87:67:52:9d:e2: 0b:b4:e2:b0:43:a9:9a:9c:31:56:9a:5e:83:4f:c1: 18:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CF:44:E8:8C:3E:00:33:EB:1B:7E:F8:3B:BA:CB:CA:C5:68:D6:41 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:80:b9:43:ab:ba:3e:93:ed:cf:dd:29:b6:ff:64:59:05:35: ee:8b:77:76:56:aa:d4:c0:1d:d1:8c:eb:5d:07:d0:c3:06:28: 68:39:36:01:ed:70:52:dc:6f:8a:56:77:29:60:b1:5c:4c:d5: 63:7d:b9:dc:b0:49:b4:ae:6e:33:bf:08:63:2d:ff:71:29:ac: 43:cc:ad:db:63:b2:93:be:a9:83:97:45:79:27:09:be:0f:94: eb:68:64:85:ac:75:d1:6f:66:14:e7:64:d2:ca:5e:b3:af:b2: d0:61:f1:c0:27:d2:e1:a1:64:5e:d0:b4:14:93:db:15:1e:29: e0:5b:17:1d:f9:48:0b:1e:88:75:60:ee:57:1f:96:b3:df:98: 56:dc:30:25:33:f3:fb:39:c1:8a:a4:2e:42:91:79:d5:c6:74: af:74:10:f2:6d:8c:e5:3b:ad:6f:42:5c:91:46:d3:f3:b5:05: 91:b8:01:e7:55:e2:78:2d:e9:88:68:24:5e:99:3c:71:08:65: 60:b4:d8:c1:a6:cc:f1:ce:90:0a:8b:1d:92:17:14:5f:56:43: 72:ad:91:aa:8a:0a:38:9e:e5:f9:1c:2c:7c:03:70:2c:bb:3e: cd:86:01:1b:e8:b7:d5:3d:31:47:79:9e:8f:a9:fd:62:b6:d5: 2b:22:df:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWwVSSP4AM2Bo/0c0omjlJ27K1tcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNTA2MTYwMDQ2MjRaFw0yNTA2MTkwMTAzMjRaMDMxMTAvBgNV BAMTKEY1Q0Y0NEU4OEMzRTAwMzNFQjFCN0VGODNCQkFDQkNBQzU2OEQ2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNkBBs5W/as/V1nB3sTQfC4kE GoE2uGtZIyzsHT/Z6WPMlTKTAT9ZjXfS0Xp1jVs9Cc201g7Nk/SHqraqh6FoDYac EDXxenVWgfo4NDTOXHKtJqxHDYg0ZvCuhrtSJNZeS9VZpmIVxtQoCi8Iq4PgXrt8 324YDhe/29+azNAIyurdXjEgoTzvUE/f3uhYTkGC/jIiN0L21KowCIUqONCmlY2x /YtN1LAwiHdVno/tRk3Cv+ERztT+/PgintbKb25HeKFnmMmDJVSHwbeMO/G+lQwy m8sLQw7hYgWvd+d6w7XMHdvzdna5PNWHZ1Kd4gu04rBDqZqcMVaaXoNPwRjtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9c9E6Iw+ADPrG374O7rLysVo1kEwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKAuUOruj6T7c/dKbb/ZFkFNe6Ld3ZWqtTA HdGM610H0MMGKGg5NgHtcFLcb4pWdylgsVxM1WN9udywSbSubjO/CGMt/3EprEPM rdtjspO+qYOXRXknCb4PlOtoZIWsddFvZhTnZNLKXrOvstBh8cAn0uGhZF7QtBST 2xUeKeBbFx35SAseiHVg7lcflrPfmFbcMCUz8/s5wYqkLkKRedXGdK90EPJtjOU7 rW9CXJFG0/O1BZG4AedV4ngt6YhoJF6ZPHEIZWC02MGmzPHOkAqLHZIXFF9WQ3Kt kaqKCjie5fkcLHwDcCy7Ps2GARvot9U9MUd5no+p/WK21Ssi3+I= -----END CERTIFICATE-----Generated at Wed Jun 18 01:54:04 2025 by rpki-client