$ rpki-client -vvf repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft File: 7701FBF4A9C9B559888F02656447A3AA1963811C.mft (raw, json) Hash identifier: +gFThTaTIavhOWkUzwJv+wJo3tJd/oeL6xs7X6P6Iv0= Subject key identifier: BB:BE:CC:A3:E1:06:91:D0:E3:1A:30:0E:D9:3A:16:7B:9C:84:B5:B3 Authority key identifier: 77:01:FB:F4:A9:C9:B5:59:88:8F:02:65:64:47:A3:AA:19:63:81:1C Certificate issuer: /CN=7701FBF4A9C9B559888F02656447A3AA1963811C Certificate serial: 92A3BD7A6D0435749529FB29AD07D88A308490 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft Manifest number: 01A4 Signing time: Sat 10 May 2025 16:31:11 +0000 Manifest this update: Sat 10 May 2025 16:26:11 +0000 Manifest next update: Tue 13 May 2025 22:56:11 +0000 Files and hashes: 1: 3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (hash: fsoOWsUyBibaImiYKhZxBHJnOHgYnf/Jgxm4IYhh8Wg=) 2: 3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (hash: IbieO4/N/W9rS3FgHF4sGO9LHQTnOVJqpzjNIH9I5ZY=) 3: 7701FBF4A9C9B559888F02656447A3AA1963811C.crl (hash: /TYAIeEv62M+yZUDTEEKWdodzVmdNWMaSIhjzHnOHkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.crl rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 22:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92:a3:bd:7a:6d:04:35:74:95:29:fb:29:ad:07:d8:8a:30:84:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7701FBF4A9C9B559888F02656447A3AA1963811C Validity Not Before: May 10 16:26:11 2025 GMT Not After : May 13 22:56:11 2025 GMT Subject: CN=BBBECCA3E10691D0E31A300ED93A167B9C84B5B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:ce:84:65:58:d7:8e:59:21:d3:97:b7:ed: 30:eb:f1:31:ca:bb:05:15:a9:5c:46:32:76:8f:41: 96:89:1b:87:06:63:a7:55:ab:6c:09:b0:0c:5a:47: 4a:60:62:07:a3:00:0f:d1:35:34:f2:4e:21:e1:a4: 8f:c8:1f:03:91:6f:e6:c2:b0:62:39:01:48:ce:25: 47:4a:6b:75:03:4d:ab:f3:12:11:eb:d2:ba:87:9d: 8a:e9:86:2b:08:40:9f:8c:4c:dd:84:88:c8:cf:45: 0c:72:b9:3e:c3:7d:00:fe:38:28:7c:9b:52:94:96: 02:ea:73:e0:a1:d8:ac:16:5a:ce:77:48:73:45:76: 49:64:22:2e:c1:5f:43:5c:46:6c:81:97:92:10:9e: 41:9e:52:e5:57:55:46:7d:bf:d9:45:8b:c3:d8:63: 28:b6:1b:97:8a:ff:72:a0:6c:8a:f4:5b:b1:8a:2a: ff:90:01:5b:8c:56:97:1b:23:c6:f1:f6:88:ce:b7: 1d:d9:16:93:b6:28:d8:3a:31:6f:bf:c3:bd:1d:d9: f7:a6:18:5c:d6:75:32:7d:72:e8:ee:4d:3d:14:1a: cb:9b:a4:16:2f:de:aa:d0:5d:06:18:7e:94:0b:80: 78:55:9c:70:00:fa:49:86:27:ad:97:c3:3b:2e:34: fc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BE:CC:A3:E1:06:91:D0:E3:1A:30:0E:D9:3A:16:7B:9C:84:B5:B3 X509v3 Authority Key Identifier: keyid:77:01:FB:F4:A9:C9:B5:59:88:8F:02:65:64:47:A3:AA:19:63:81:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:5b:28:94:fd:c0:0c:a4:6c:9c:31:83:4d:ca:63:f9:ef:c3: da:cf:c2:30:f7:91:7c:f3:6e:b6:1e:f1:c7:42:bb:8a:97:9d: 80:1d:fd:9a:1b:70:b5:7e:73:90:af:4e:3e:67:47:c6:30:0a: 29:96:c4:8a:51:87:ac:a0:09:d6:c7:64:3a:16:4d:c3:d5:ce: fe:37:17:27:b7:63:46:fe:3f:1f:d1:b7:71:25:53:7c:c4:77: 8a:82:84:1b:e9:27:2e:b0:31:ad:b4:a5:29:07:2f:a6:c3:ce: a7:75:3d:49:17:73:1e:e6:96:f2:cc:1a:ed:e6:ba:c5:e5:a7: a2:2c:fd:94:d7:36:d6:36:b5:0b:60:19:37:a5:30:d3:9f:f7: 6c:db:e7:d4:a5:12:ce:bc:d5:b9:ee:e1:dc:10:8d:07:76:ba: 83:b1:83:aa:fa:d9:45:d5:e5:4d:fc:a7:23:29:57:b1:93:29: f1:6d:c1:aa:3d:85:13:d2:b0:91:db:1f:27:74:1d:1b:c3:4a: 02:75:4a:35:a7:8a:55:f3:c6:e2:63:5d:65:72:82:93:03:01: 2c:c7:4b:3b:0c:f4:97:f3:f7:0b:ef:1f:86:2b:17:04:c6:be: 95:32:d3:c5:e8:d1:6f:ac:e7:a6:2d:35:ec:df:30:d7:91:7a: 84:59:65:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJKjvXptBDV0lSn7Ka0H2IowhJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcwMUZCRjRBOUM5QjU1OTg4OEYwMjY1NjQ0N0EzQUEx OTYzODExQzAeFw0yNTA1MTAxNjI2MTFaFw0yNTA1MTMyMjU2MTFaMDMxMTAvBgNV BAMTKEJCQkVDQ0EzRTEwNjkxRDBFMzFBMzAwRUQ5M0ExNjdCOUM4NEI1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Ps6EZVjXjlkh05e37TDr8THK uwUVqVxGMnaPQZaJG4cGY6dVq2wJsAxaR0pgYgejAA/RNTTyTiHhpI/IHwORb+bC sGI5AUjOJUdKa3UDTavzEhHr0rqHnYrphisIQJ+MTN2EiMjPRQxyuT7DfQD+OCh8 m1KUlgLqc+Ch2KwWWs53SHNFdklkIi7BX0NcRmyBl5IQnkGeUuVXVUZ9v9lFi8PY Yyi2G5eK/3KgbIr0W7GKKv+QAVuMVpcbI8bx9ojOtx3ZFpO2KNg6MW+/w70d2fem GFzWdTJ9cujuTT0UGsubpBYv3qrQXQYYfpQLgHhVnHAA+kmGJ62XwzsuNPxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu77Mo+EGkdDjGjAO2ToWe5yEtbMwHwYDVR0j BBgwFoAUdwH79KnJtVmIjwJlZEejqhljgRwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTMyYTc0MC1iZDdkLTQ2YjgtYjEwYS1hN2E3MDNlMzUwZjIvMC83NzAxRkJGNEE5 QzlCNTU5ODg4RjAyNjU2NDQ3QTNBQTE5NjM4MTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzcwMUZCRjRBOUM5QjU1OTg4OEYwMjY1NjQ0N0EzQUExOTYz ODExQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEzMmE3NDAtYmQ3ZC00NmI4LWIx MGEtYTdhNzAzZTM1MGYyLzAvNzcwMUZCRjRBOUM5QjU1OTg4OEYwMjY1NjQ0N0Ez QUExOTYzODExQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBbKJT9wAykbJwxg03KY/nvw9rPwjD3kXzz brYe8cdCu4qXnYAd/ZobcLV+c5CvTj5nR8YwCimWxIpRh6ygCdbHZDoWTcPVzv43 Fye3Y0b+Px/Rt3ElU3zEd4qChBvpJy6wMa20pSkHL6bDzqd1PUkXcx7mlvLMGu3m usXlp6Is/ZTXNtY2tQtgGTelMNOf92zb59SlEs681bnu4dwQjQd2uoOxg6r62UXV 5U38pyMpV7GTKfFtwao9hRPSsJHbHyd0HRvDSgJ1SjWnilXzxuJjXWVygpMDASzH SzsM9Jfz9wvvH4YrFwTGvpUy08Xo0W+s56YtNezfMNeReoRZZfs= -----END CERTIFICATE-----Generated at Sun May 11 20:06:11 2025 by rpki-client