$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft File: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft (raw, json) Hash identifier: PE3r0UnYTaUONXIuk45JEsUyBZHuoEv5ZTQYtaHfCkQ= Subject key identifier: C1:35:F4:32:D5:45:4D:92:57:A1:46:DA:0F:79:1E:43:8A:60:7E:C1 Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 Certificate issuer: /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Certificate serial: 75F16684AE9B70C1315A66AD5D2B9EC19141EA80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft Manifest number: 01AF Signing time: Sat 03 May 2025 16:50:46 +0000 Manifest this update: Sat 03 May 2025 16:45:46 +0000 Manifest next update: Wed 07 May 2025 03:08:46 +0000 Files and hashes: 1: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl (hash: J5HH+fcF1UcKNvI7bmk+QuCRnqkVBlpdS855IcTadVo=) 2: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: DN3LfFZiZkFTfv0ow89vnLboqsNTK14mjnN189aXrDs=) 3: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: FVBFuUrqgSMPY21WdVOmGg4Dr0XlF9EyorL680ZGfxA=) 4: 3130332e3232302e32322e302f32332d3234203d3e20313431363037.roa (hash: SXTACo3iDe+Od7ewPU887kA52s+INFqEHi0Gq+fwibo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 03:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f1:66:84:ae:9b:70:c1:31:5a:66:ad:5d:2b:9e:c1:91:41:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Validity Not Before: May 3 16:45:46 2025 GMT Not After : May 7 03:08:46 2025 GMT Subject: CN=C135F432D5454D9257A146DA0F791E438A607EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:b4:ff:65:e1:68:c9:17:4c:e5:be:ff:9b: 7b:55:6a:4f:9b:ed:93:65:8d:e5:5e:52:0c:65:2f: 8d:8a:5c:65:79:fb:2c:b7:18:7d:43:34:8a:2e:f1: 86:1b:fe:20:d9:95:e3:18:0a:41:53:72:32:5a:74: fc:85:2d:ed:14:c7:c5:c1:5a:d4:78:33:cc:79:e2: 04:78:2d:b5:8c:79:21:41:59:8d:97:56:8e:90:a9: 25:d4:28:7b:19:30:0b:20:78:e8:c6:f9:8c:1e:eb: 99:c5:2f:f0:9c:0a:19:a8:be:f5:ce:10:00:15:05: 3d:85:11:21:65:d1:9c:39:4b:cc:8b:3d:09:44:70: 68:99:67:41:de:3d:f8:d2:e4:a6:d6:fd:7f:c0:49: 9c:3c:0e:a7:f4:ad:01:00:fd:e0:39:9a:3e:9d:2a: 2b:c7:1b:cd:5f:eb:59:d8:72:26:be:e9:c4:d7:df: 9d:e5:c9:68:bf:77:dc:e4:71:09:ec:7b:ba:ad:78: 75:83:e7:42:c5:f1:c6:5d:57:b0:47:f9:8c:d6:3a: 5a:96:a6:f2:7e:90:64:51:a8:43:a6:db:6a:7d:91: 41:6d:29:60:e9:ce:b6:44:f8:ca:c8:c9:77:3b:cd: 3f:66:30:96:5a:3b:5a:69:5f:a9:90:1d:0f:fe:3e: 1f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:35:F4:32:D5:45:4D:92:57:A1:46:DA:0F:79:1E:43:8A:60:7E:C1 X509v3 Authority Key Identifier: keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:d6:b0:ef:12:38:75:18:13:dd:ea:ed:d8:53:45:0a:9c:70: 0d:34:6b:af:74:78:a0:e6:3f:66:8e:a8:70:20:0f:9c:16:7b: a2:2e:12:8e:3b:89:fb:f8:40:69:8e:c5:be:47:4f:72:8e:2c: 50:84:24:77:45:d4:b0:50:bc:e9:66:73:63:6e:67:23:d8:a0: 5c:94:f2:00:a7:47:df:00:1e:d3:e9:96:70:a9:f0:2b:9e:df: 20:71:89:e2:96:d7:82:ca:d2:92:f3:f4:8b:88:f6:f4:a3:cf: 0a:e6:3f:d1:d1:ac:2d:b6:10:2e:90:ef:ef:37:33:93:4a:3d: 8b:41:9a:79:b7:4a:4f:70:7b:8e:85:71:fe:5b:ee:91:e2:72: a0:7f:a4:8a:07:75:bd:78:12:d8:6f:a9:35:4d:3a:3c:7a:89: 85:44:4c:2a:7f:5e:3f:d8:98:a9:9c:ca:26:30:8f:1e:95:31: 00:b5:fa:ea:37:60:de:55:a6:0a:2a:20:37:81:4a:e6:ab:05: a7:2d:fd:62:b1:18:fd:f0:a8:76:85:7a:b9:6e:8c:4e:17:f2: f1:b7:c2:fe:10:74:60:ec:7c:9e:c9:0b:16:17:9a:ee:22:c3: fc:e9:67:72:35:37:e8:1a:fa:62:a5:bf:6b:34:1d:95:77:92: 7f:b8:47:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdfFmhK6bcMExWmatXSuewZFB6oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVE OEJBMzg2MjAeFw0yNTA1MDMxNjQ1NDZaFw0yNTA1MDcwMzA4NDZaMDMxMTAvBgNV BAMTKEMxMzVGNDMyRDU0NTREOTI1N0ExNDZEQTBGNzkxRTQzOEE2MDdFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCa7T/ZeFoyRdM5b7/m3tVak+b 7ZNljeVeUgxlL42KXGV5+yy3GH1DNIou8YYb/iDZleMYCkFTcjJadPyFLe0Ux8XB WtR4M8x54gR4LbWMeSFBWY2XVo6QqSXUKHsZMAsgeOjG+Ywe65nFL/CcChmovvXO EAAVBT2FESFl0Zw5S8yLPQlEcGiZZ0HePfjS5KbW/X/ASZw8Dqf0rQEA/eA5mj6d KivHG81f61nYcia+6cTX353lyWi/d9zkcQnse7qteHWD50LF8cZdV7BH+YzWOlqW pvJ+kGRRqEOm22p9kUFtKWDpzrZE+MrIyXc7zT9mMJZaO1ppX6mQHQ/+Ph/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwTX0MtVFTZJXoUbaD3keQ4pgfsEwHwYDVR0j BBgwFoAUdx0KucRFsoyIf9e6GN7FFdi6OGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFkNmEzZi02Y2EwLTQ2NjktOThmNy02ZjM0ODM3ZmFhNjIvMC83NzFEMEFCOUM0 NDVCMjhDODg3RkQ3QkExOERFQzUxNUQ4QkEzODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVEOEJB Mzg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4 ZjctNmYzNDgzN2ZhYTYyLzAvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1 MTVEOEJBMzg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrWsO8SOHUYE93q7dhTRQqccA00a690eKDm P2aOqHAgD5wWe6IuEo47ifv4QGmOxb5HT3KOLFCEJHdF1LBQvOlmc2NuZyPYoFyU 8gCnR98AHtPplnCp8Cue3yBxieKW14LK0pLz9IuI9vSjzwrmP9HRrC22EC6Q7+83 M5NKPYtBmnm3Sk9we46Fcf5b7pHicqB/pIoHdb14EthvqTVNOjx6iYVETCp/Xj/Y mKmcyiYwjx6VMQC1+uo3YN5VpgoqIDeBSuarBact/WKxGP3wqHaFerlujE4X8vG3 wv4QdGDsfJ7JCxYXmu4iw/zpZ3I1N+ga+mKlv2s0HZV3kn+4R5w= -----END CERTIFICATE-----Generated at Tue May 6 11:44:22 2025 by rpki-client