$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft File: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft (raw, json) Hash identifier: PyNkfBdThVS5RH8VtQ7bm8KUXwTzcPYlRHuTzZV0JTU= Subject key identifier: 5D:E9:A2:72:B8:D8:A3:18:EB:1B:BE:0D:E1:E9:75:AD:BB:90:B1:C8 Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA Certificate issuer: /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Certificate serial: 42102028886C922407828B409D4DE65674BE80FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft Manifest number: 01B5 Signing time: Tue 29 Apr 2025 16:21:32 +0000 Manifest this update: Tue 29 Apr 2025 16:16:32 +0000 Manifest next update: Fri 02 May 2025 19:57:32 +0000 Files and hashes: 1: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (hash: lMn4B5ZtWuKl1Bl6ww7A6nnwbozYKsT8LQKj0eXDwpU=) 2: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (hash: CSKpEC89Xk+ogIKfeE+w63/O6M+PoFVrS1+E8+YlhQ4=) 3: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (hash: +zMNXve3byNpT+wVehBbgr8v8+pHPwDEjM4xfLf/Kqc=) 4: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (hash: ZRKz+g747J/H6fTKJrZlO1r26a5SNUHOfQ0zmY6WrCQ=) 5: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl (hash: NOHMNvot5t+eq9rcEmDBX8RSC2lXZlSO63MNOefdbJA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:10:20:28:88:6c:92:24:07:82:8b:40:9d:4d:e6:56:74:be:80:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Validity Not Before: Apr 29 16:16:32 2025 GMT Not After : May 2 19:57:32 2025 GMT Subject: CN=5DE9A272B8D8A318EB1BBE0DE1E975ADBB90B1C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:a5:3d:fc:43:79:4b:65:e4:72:f2:19:d7: d1:e3:bb:91:b2:3c:a7:d6:49:35:d6:4f:4d:01:f7: 60:c5:c7:5e:8c:5c:36:5e:e8:72:08:8e:59:91:76: 56:98:5d:ed:00:6b:e6:f6:dc:ee:b5:39:67:28:eb: f5:2e:cc:c8:ae:5f:6a:ee:37:b5:34:89:49:79:0e: fc:e8:07:4e:c0:63:bd:f4:79:a1:74:a5:a6:e4:df: 15:24:eb:aa:64:c6:46:9e:ab:d1:ed:d5:c2:3d:23: 00:cb:a9:ea:3a:c7:f7:0f:b2:c4:32:88:39:87:97: 18:fb:23:f3:bc:dc:14:6b:35:5c:e2:76:ac:85:6f: 08:cf:b9:b7:6f:42:8b:17:39:31:72:dc:6e:a5:77: a3:46:a7:8a:79:a2:ab:f5:10:1b:9e:ef:2f:fe:b0: d7:38:80:65:ce:a5:ac:95:ec:a0:15:2a:27:7b:5c: 0b:51:ba:2c:7b:0d:f6:8f:8a:f1:b6:e1:d4:7f:76: 53:20:e3:87:28:0d:f9:16:2d:58:5f:cc:e5:84:b1: 5d:53:e1:54:e7:c1:82:e8:6f:10:c3:45:12:bc:a3: b6:a3:c9:e3:cf:5f:0e:66:ec:ca:77:2a:45:cc:01: d5:b8:70:12:ba:1f:d3:b1:27:9b:f5:4b:a1:83:e1: f4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E9:A2:72:B8:D8:A3:18:EB:1B:BE:0D:E1:E9:75:AD:BB:90:B1:C8 X509v3 Authority Key Identifier: keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b8:a6:c7:e0:94:48:b3:54:e3:66:be:a5:9d:b9:a7:49:2d: 20:9f:40:5c:88:e2:e3:0e:9f:5b:b2:fa:de:fb:6f:94:9c:2a: 26:44:f4:3f:5f:66:b0:cc:1c:fc:bb:c3:f8:d9:b5:12:c0:01: 83:b8:d1:b9:16:3e:41:db:85:22:74:99:d6:6e:8c:8e:31:fd: 6e:cb:45:6e:f9:c3:f2:80:b0:25:79:3a:a7:08:84:6b:d7:81: 46:e0:d3:01:e8:18:9c:ed:bf:50:54:be:0d:e7:0d:80:de:e7: e6:37:f8:63:60:50:c4:d6:d7:e1:52:e3:ef:84:36:c6:65:6e: a2:12:91:55:fc:e2:d2:81:d8:a3:f8:3e:40:91:32:f4:d0:aa: 18:2b:0e:b3:2a:ca:84:d4:ba:21:f9:c1:90:bb:90:4d:0a:8f: 0c:bc:60:85:89:93:88:95:a0:23:bb:ae:f4:f0:89:51:09:4f: a5:37:b4:71:4e:6f:77:e3:33:52:6d:e0:7f:9c:76:8b:0e:e5: 8f:f4:91:6e:51:63:a6:9b:9a:59:52:0b:9a:df:50:86:b6:94: 24:7d:80:09:99:8f:95:02:01:6d:60:d4:64:f7:22:11:20:e2: eb:7a:73:6f:71:23:dd:39:3d:d2:5e:8a:f2:3c:b0:f3:1e:77: 99:37:1d:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhAgKIhskiQHgotAnU3mVnS+gP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz OTE3OTJFQTAeFw0yNTA0MjkxNjE2MzJaFw0yNTA1MDIxOTU3MzJaMDMxMTAvBgNV BAMTKDVERTlBMjcyQjhEOEEzMThFQjFCQkUwREUxRTk3NUFEQkI5MEIxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ96U9/EN5S2XkcvIZ19Hju5Gy PKfWSTXWT00B92DFx16MXDZe6HIIjlmRdlaYXe0Aa+b23O61OWco6/UuzMiuX2ru N7U0iUl5DvzoB07AY730eaF0pabk3xUk66pkxkaeq9Ht1cI9IwDLqeo6x/cPssQy iDmHlxj7I/O83BRrNVzidqyFbwjPubdvQosXOTFy3G6ld6NGp4p5oqv1EBue7y/+ sNc4gGXOpayV7KAVKid7XAtRuix7DfaPivG24dR/dlMg44coDfkWLVhfzOWEsV1T 4VTnwYLobxDDRRK8o7ajyePPXw5m7Mp3KkXMAdW4cBK6H9OxJ5v1S6GD4fRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXemicrjYoxjrG74N4el1rbuQscgwHwYDVR0j BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0 N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3 OTJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUxN2ZlOTgtOGY1OC00OTdmLWJl NTctODY2NWE3YTA0YmIwLzAvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQw QTEzOTE3OTJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE24psfglEizVONmvqWduadJLSCfQFyI4uMO n1uy+t77b5ScKiZE9D9fZrDMHPy7w/jZtRLAAYO40bkWPkHbhSJ0mdZujI4x/W7L RW75w/KAsCV5OqcIhGvXgUbg0wHoGJztv1BUvg3nDYDe5+Y3+GNgUMTW1+FS4++E NsZlbqISkVX84tKB2KP4PkCRMvTQqhgrDrMqyoTUuiH5wZC7kE0Kjwy8YIWJk4iV oCO7rvTwiVEJT6U3tHFOb3fjM1Jt4H+cdosO5Y/0kW5RY6abmllSC5rfUIa2lCR9 gAmZj5UCAW1g1GT3IhEg4ut6c29xI905PdJeivI8sPMed5k3HXk= -----END CERTIFICATE-----Generated at Tue Apr 29 18:34:05 2025 by rpki-client