$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft File: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft (raw, json) Hash identifier: mhFva5x831echD0T0vGVUJcRmlTQruiXHWgqhVY6HUQ= Subject key identifier: A4:6D:A2:5C:EF:77:AA:6A:1C:03:8A:88:44:8D:EE:6B:41:50:97:09 Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA Certificate issuer: /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Certificate serial: 7477AFE9240C707CF4C558B470504C45DE7A50FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft Manifest number: 01E2 Signing time: Wed 06 Aug 2025 13:41:36 +0000 Manifest this update: Wed 06 Aug 2025 13:36:36 +0000 Manifest next update: Sat 09 Aug 2025 20:33:36 +0000 Files and hashes: 1: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl (hash: NRrrhf50Ohyb+ENheJe+c+kUDw3NclL9Yg0YbXFJS/o=) 2: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (hash: VfFxxuazE0SD/9aiBAJNKHpH/m4/DEssj0TquLDvxPg=) 3: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (hash: vAIjmbx3dVuW8GpN3/fZq5ol916CeS6StRg+6uf/1t0=) 4: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (hash: F7Hvn3nr15WKTOMp+UJFZvJVrdndxdoOm2ecLXQTtiA=) 5: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (hash: mgkxr/SuMyMsRvRjiMcUueP3vdh3ZYSiC7xct6qMuK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:77:af:e9:24:0c:70:7c:f4:c5:58:b4:70:50:4c:45:de:7a:50:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Validity Not Before: Aug 6 13:36:36 2025 GMT Not After : Aug 9 20:33:36 2025 GMT Subject: CN=A46DA25CEF77AA6A1C038A88448DEE6B41509709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:3d:65:81:14:15:52:b1:18:fd:fc:71:8e: 69:cc:a8:77:a6:11:50:0c:34:89:05:7c:a1:19:fe: f9:e7:f1:58:cc:bf:34:ed:1d:9d:00:56:90:3e:ed: c7:3d:63:53:40:9f:c5:ef:79:00:87:e4:9a:0d:d4: 35:dc:8a:7c:a9:64:0a:88:a9:bf:4b:4a:db:0f:bd: 9c:9a:13:86:02:c1:9c:6d:fb:7c:54:e4:dd:cc:9b: 52:55:af:a4:e5:b3:c6:d5:9d:a7:be:15:1d:b4:75: 7a:0e:48:1c:b2:cd:d1:d8:4a:8f:42:ba:e4:d5:8b: 58:95:d6:c0:55:03:7c:6c:31:7d:eb:d1:3f:2e:d2: ef:03:ca:21:18:73:00:ef:88:a8:8f:bc:50:97:3a: eb:8e:f7:3b:e5:e4:08:bc:aa:66:36:8b:1f:65:23: f3:16:ae:14:8f:ed:e9:3e:d4:97:47:5d:5c:a8:40: 3a:9f:e4:dc:ef:98:2a:21:7b:5e:9f:6a:82:13:19: 5a:c9:ab:c9:0d:b3:82:37:46:c7:68:4d:e7:f6:28: c0:ca:27:29:d6:25:1a:5f:fd:43:0c:10:3e:e7:c3: 6a:ea:ec:d9:0c:c0:4a:0d:25:53:3d:9c:8f:52:5e: 0d:80:26:84:49:78:de:67:da:17:af:27:e7:b2:d4: b8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6D:A2:5C:EF:77:AA:6A:1C:03:8A:88:44:8D:EE:6B:41:50:97:09 X509v3 Authority Key Identifier: keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:0f:c5:5f:15:ad:dd:09:dc:48:67:2c:47:6b:9f:a8:05:17: 5a:fe:8b:d9:22:65:67:29:cc:d8:1d:ac:ac:78:17:97:39:49: 3a:b7:94:11:5b:63:c3:d9:a3:0b:99:53:1c:80:7c:94:de:f1: db:7e:ae:a9:87:4e:bd:ad:fd:5c:56:49:10:96:b1:00:75:1f: ea:a7:0f:90:6e:cd:9c:d6:6e:54:a1:36:88:8b:a0:6d:b5:69: a5:b2:c2:fe:7d:c6:e4:ac:5a:ea:ac:12:1c:3a:5e:e2:26:0e: c0:8a:39:e9:a3:9f:cf:15:f6:0c:88:96:37:d9:5a:5b:4b:c1: f8:71:c8:22:46:f6:0b:a4:7b:48:49:40:d3:68:ff:72:98:d2: 94:93:ef:3f:56:ad:84:68:76:e2:3b:89:d1:85:b2:09:0b:1c: a4:f0:68:1b:dc:a3:75:39:0a:fb:56:66:53:bb:c0:f7:35:bf: fb:3e:d2:64:2b:fc:24:35:cf:0a:40:39:a5:0e:6f:25:d8:4b: b8:57:43:b7:ee:09:ba:83:c5:e5:a5:0b:1c:af:38:56:8c:5a: 82:e5:32:f3:f8:45:36:19:84:10:b4:ff:af:5a:91:44:f3:63: 38:f9:f7:5c:d2:9d:03:6a:38:e2:bf:7b:4f:4a:92:99:c9:e0: 91:33:7d:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHev6SQMcHz0xVi0cFBMRd56UP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz OTE3OTJFQTAeFw0yNTA4MDYxMzM2MzZaFw0yNTA4MDkyMDMzMzZaMDMxMTAvBgNV BAMTKEE0NkRBMjVDRUY3N0FBNkExQzAzOEE4ODQ0OERFRTZCNDE1MDk3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKfz1lgRQVUrEY/fxxjmnMqHem EVAMNIkFfKEZ/vnn8VjMvzTtHZ0AVpA+7cc9Y1NAn8XveQCH5JoN1DXcinypZAqI qb9LStsPvZyaE4YCwZxt+3xU5N3Mm1JVr6Tls8bVnae+FR20dXoOSByyzdHYSo9C uuTVi1iV1sBVA3xsMX3r0T8u0u8DyiEYcwDviKiPvFCXOuuO9zvl5Ai8qmY2ix9l I/MWrhSP7ek+1JdHXVyoQDqf5NzvmCohe16faoITGVrJq8kNs4I3RsdoTef2KMDK JynWJRpf/UMMED7nw2rq7NkMwEoNJVM9nI9SXg2AJoRJeN5n2hevJ+ey1LgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpG2iXO93qmocA4qIRI3ua0FQlwkwHwYDVR0j BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0 N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3 OTJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUxN2ZlOTgtOGY1OC00OTdmLWJl NTctODY2NWE3YTA0YmIwLzAvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQw QTEzOTE3OTJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMPxV8Vrd0J3EhnLEdrn6gFF1r+i9kiZWcp zNgdrKx4F5c5STq3lBFbY8PZowuZUxyAfJTe8dt+rqmHTr2t/VxWSRCWsQB1H+qn D5BuzZzWblShNoiLoG21aaWywv59xuSsWuqsEhw6XuImDsCKOemjn88V9gyIljfZ WltLwfhxyCJG9guke0hJQNNo/3KY0pST7z9WrYRoduI7idGFsgkLHKTwaBvco3U5 CvtWZlO7wPc1v/s+0mQr/CQ1zwpAOaUObyXYS7hXQ7fuCbqDxeWlCxyvOFaMWoLl MvP4RTYZhBC0/69akUTzYzj591zSnQNqOOK/e09KkpnJ4JEzfU4= -----END CERTIFICATE-----Generated at Thu Aug 7 03:18:45 2025 by rpki-client