$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft File: 9B77D523EDC2218C65DAB55B4538140243B7E862.mft (raw, json) Hash identifier: W9NUC2KoisgTehil30IwghJd9AEj3Y86wV0UJrjOjIM= Subject key identifier: 77:F5:B9:C2:4A:05:CC:91:EA:7C:2B:44:C1:E4:35:7C:91:63:98:26 Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 Certificate issuer: /CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Certificate serial: 12FF86AF358C8CBA99A166E5FDBDFBF99B4CC692 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft Manifest number: 01CD Signing time: Sun 04 May 2025 20:01:28 +0000 Manifest this update: Sun 04 May 2025 19:56:28 +0000 Manifest next update: Wed 07 May 2025 21:35:28 +0000 Files and hashes: 1: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: qWPS0N/te+MWks31pquZu9fK7Gl6gv7U+N0yk9Foipw=) 2: 9B77D523EDC2218C65DAB55B4538140243B7E862.crl (hash: GsJdhKE3/VPLba7CtbJ0gea2sv4RJT8/ZmKfU/HF3sg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 21:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ff:86:af:35:8c:8c:ba:99:a1:66:e5:fd:bd:fb:f9:9b:4c:c6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Validity Not Before: May 4 19:56:28 2025 GMT Not After : May 7 21:35:28 2025 GMT Subject: CN=77F5B9C24A05CC91EA7C2B44C1E4357C91639826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7a:01:e6:02:ad:3f:18:05:00:d2:de:b3:ad: 23:47:b4:0f:6c:32:07:3a:ac:23:d1:ba:41:00:43: 2b:75:49:a5:f3:ae:f4:03:6c:37:72:f5:05:9f:3f: 32:23:49:e0:4b:52:12:87:8d:c3:40:44:7c:a5:73: f2:5e:38:02:2f:81:62:1b:0b:21:a5:33:42:27:ff: b4:0e:7a:88:69:43:8a:f6:de:89:09:0d:dc:94:3d: 29:15:57:83:08:47:a5:dc:5b:26:1d:7f:2e:f7:69: 42:db:4e:4b:77:40:cc:cf:c1:03:62:2b:69:61:0c: bd:5a:34:b1:fd:09:5d:c3:40:5d:0e:ad:85:de:e9: e7:2d:b8:0b:4a:eb:46:5e:2d:da:27:33:c8:c2:13: f6:1d:fb:a0:99:27:64:49:7b:f2:22:ec:39:f0:1e: b5:4a:b7:c2:10:fc:a0:8f:ed:74:d0:8f:99:97:10: 0f:d3:7f:34:71:4f:9e:f2:62:0f:f2:d8:53:1d:61: af:aa:35:4c:d2:a7:6f:03:f5:f9:92:f5:f5:39:10: d4:44:28:16:27:fc:a9:b8:8f:be:51:63:73:a0:74: 60:24:2b:c9:2b:35:4e:4c:07:6e:21:20:cb:99:be: cb:12:a4:77:65:d0:0e:cb:6c:68:1a:88:36:3b:01: 2b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F5:B9:C2:4A:05:CC:91:EA:7C:2B:44:C1:E4:35:7C:91:63:98:26 X509v3 Authority Key Identifier: keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f1:f2:bc:6e:9b:55:80:b3:78:74:fa:e3:42:a0:c7:91:50: 1e:a8:70:98:7f:f1:89:5b:f2:3f:d3:01:32:31:a9:d3:3f:6a: a0:64:4d:8f:44:78:5e:d1:7c:bd:e0:a1:ff:24:b0:a2:41:86: fa:2d:70:97:64:d1:6b:3a:ce:56:9f:bd:04:4e:11:30:51:87: 47:f1:42:f5:57:aa:67:cd:1a:97:e7:76:9a:77:3a:94:bb:23: e5:13:ab:1d:1e:ec:15:dd:ec:94:b9:f2:55:80:c5:d1:b0:17: d9:41:7c:10:82:6e:8f:f7:ff:e1:b4:d6:b3:fc:5d:21:f0:15: 82:e7:be:9f:f1:f2:c8:76:88:5c:77:bf:78:78:e5:85:50:cb: 8b:30:b7:36:10:e1:bb:03:d2:9e:c5:7c:4c:63:e8:af:e1:8e: 2a:4e:cb:5e:49:84:16:07:1d:de:3d:45:99:8a:f5:6f:64:87: 1a:07:67:ac:82:31:5f:58:24:77:83:dc:5d:00:0f:41:56:57: dc:61:7e:ae:28:22:75:28:f9:79:51:f3:8e:05:36:ac:e4:23: 9b:ca:f8:3f:a0:46:b6:57:84:00:16:bd:24:8d:f8:b1:ab:dd: cd:8b:a0:7e:e5:05:60:97:a6:cc:01:7a:6b:e9:60:e6:a3:4b: c8:30:49:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEv+GrzWMjLqZoWbl/b37+ZtMxpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0 M0I3RTg2MjAeFw0yNTA1MDQxOTU2MjhaFw0yNTA1MDcyMTM1MjhaMDMxMTAvBgNV BAMTKDc3RjVCOUMyNEEwNUNDOTFFQTdDMkI0NEMxRTQzNTdDOTE2Mzk4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVegHmAq0/GAUA0t6zrSNHtA9s Mgc6rCPRukEAQyt1SaXzrvQDbDdy9QWfPzIjSeBLUhKHjcNARHylc/JeOAIvgWIb CyGlM0In/7QOeohpQ4r23okJDdyUPSkVV4MIR6XcWyYdfy73aULbTkt3QMzPwQNi K2lhDL1aNLH9CV3DQF0OrYXe6ectuAtK60ZeLdonM8jCE/Yd+6CZJ2RJe/Ii7Dnw HrVKt8IQ/KCP7XTQj5mXEA/TfzRxT57yYg/y2FMdYa+qNUzSp28D9fmS9fU5ENRE KBYn/Km4j75RY3OgdGAkK8krNU5MB24hIMuZvssSpHdl0A7LbGgaiDY7ASu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd/W5wkoFzJHqfCtEweQ1fJFjmCYwHwYDVR0j BBgwFoAUm3fVI+3CIYxl2rVbRTgUAkO36GIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzUwZjA3OC1jNTM1LTRmOGUtOTYwZi0zMmMxNjIzYWE0YjEvMC85Qjc3RDUyM0VE QzIyMThDNjVEQUI1NUI0NTM4MTQwMjQzQjdFODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0M0I3 RTg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0 MDI0M0I3RTg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/x8rxum1WAs3h0+uNCoMeRUB6ocJh/8Ylb 8j/TATIxqdM/aqBkTY9EeF7RfL3gof8ksKJBhvotcJdk0Ws6zlafvQROETBRh0fx QvVXqmfNGpfndpp3OpS7I+UTqx0e7BXd7JS58lWAxdGwF9lBfBCCbo/3/+G01rP8 XSHwFYLnvp/x8sh2iFx3v3h45YVQy4swtzYQ4bsD0p7FfExj6K/hjipOy15JhBYH Hd49RZmK9W9khxoHZ6yCMV9YJHeD3F0AD0FWV9xhfq4oInUo+XlR844FNqzkI5vK +D+gRrZXhAAWvSSN+LGr3c2LoH7lBWCXpswBemvpYOajS8gwSe4= -----END CERTIFICATE-----Generated at Wed May 7 13:06:07 2025 by rpki-client