$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft File: A777F080277567701C7EF464D9A7351ADB0B538E.mft (raw, json) Hash identifier: Ct/D5OmORCT68enX3Rxlr4tT5GERT5CSB+bQo8ij2XU= Subject key identifier: 3A:EA:2C:36:B0:2D:1D:26:FE:E8:D5:7C:31:69:6E:78:28:76:D4:34 Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E Certificate issuer: /CN=A777F080277567701C7EF464D9A7351ADB0B538E Certificate serial: 7BCA542DE585334B9C1069C3E43C709AFEED7925 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft Manifest number: 0141 Signing time: Sun 29 Jun 2025 11:41:21 +0000 Manifest this update: Sun 29 Jun 2025 11:36:21 +0000 Manifest next update: Wed 02 Jul 2025 12:00:21 +0000 Files and hashes: 1: A777F080277567701C7EF464D9A7351ADB0B538E.crl (hash: C6pTI+XLvh2FND1mwUGJpSjlu/m8zW7Oxk8lRDWyyEc=) 2: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: nww0OvBV7eoF7ccGlEcWlOh6cTNl+JMulSg7kpc2Jzg=) 3: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: JBW3MNYcLkvyzbMzPH1digOsTzRoTjkVj2ZYm/AplQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ca:54:2d:e5:85:33:4b:9c:10:69:c3:e4:3c:70:9a:fe:ed:79:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E Validity Not Before: Jun 29 11:36:21 2025 GMT Not After : Jul 2 12:00:21 2025 GMT Subject: CN=3AEA2C36B02D1D26FEE8D57C31696E782876D434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:49:39:43:69:05:00:af:7f:f6:0b:92:8e: 76:c9:c3:91:a1:de:f4:dd:f0:c2:c3:38:24:a3:8b: 02:3b:10:08:63:3f:23:b6:c9:9c:84:51:df:6f:45: be:48:33:7a:09:45:a8:59:c8:b1:b8:c5:aa:d3:c2: 5e:13:e3:a5:f0:15:c8:a9:f4:54:b2:d1:7a:9f:a4: e7:b3:31:1b:53:2d:b0:f9:8f:7e:5a:a8:14:05:e8: 80:bc:7e:89:63:30:cc:2a:bf:29:01:aa:5c:40:11: 45:7e:91:13:1b:a2:a3:3a:64:32:e9:54:13:84:f3: eb:a9:f0:90:25:9d:66:a6:ec:3e:61:ce:d6:cf:4c: 6e:c9:6f:dc:5e:8c:f8:94:1c:3b:0c:ed:13:d0:54: 0e:e9:63:2f:b8:51:bd:56:f9:99:fd:77:f7:74:a7: 59:9c:f3:f0:c9:51:55:1c:2e:a7:a5:2d:70:d8:c1: 5a:19:ae:ba:94:7a:51:21:aa:53:f6:6f:b3:92:b3: d8:71:61:50:6d:33:64:01:6d:75:4c:ad:c8:79:4d: 4c:04:4a:3b:f9:6b:e7:e2:82:83:f9:8d:8d:59:e1: 0f:dd:1d:ff:95:f3:49:e5:70:5e:29:3c:eb:9a:b8: 30:42:de:4a:b2:1b:df:fa:db:4c:4c:27:50:3f:04: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EA:2C:36:B0:2D:1D:26:FE:E8:D5:7C:31:69:6E:78:28:76:D4:34 X509v3 Authority Key Identifier: keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d0:8b:c8:18:e1:81:a6:3d:c9:eb:0b:ec:a9:8a:08:06:9b: 43:9d:0f:ce:b1:64:74:d4:8c:38:fb:71:23:71:37:20:fa:cb: dd:ba:a8:a6:8d:fc:27:da:8e:e9:1f:c4:87:08:ba:a7:b5:ec: 9e:a9:ac:e1:e6:20:61:cd:7d:4a:da:c9:52:eb:11:6c:61:15: 54:34:c9:1d:1a:08:9f:8d:af:33:15:f1:49:7f:83:bf:e7:e6: 61:d5:86:22:77:56:22:41:ab:ad:62:ae:23:be:eb:6e:f5:0d: 65:31:6a:78:53:65:41:73:5b:8f:20:88:06:49:c8:82:19:de: b3:9f:e1:42:b2:5e:bc:9f:d5:76:2f:cc:24:88:84:3f:1c:35: be:5a:4b:fa:a1:60:1a:0b:15:22:2d:41:2c:17:51:32:29:66: 81:2a:44:f4:df:4d:63:c1:87:25:39:8f:10:a2:db:1b:56:79: f4:90:49:5f:0b:21:45:9f:a2:70:0d:eb:0e:7d:e0:be:67:c2: d1:67:92:dc:82:fd:29:f0:54:93:f8:a9:b9:9a:02:c8:7d:f0: 88:49:dc:7f:48:d1:6d:4b:1b:36:b8:6c:a2:89:bf:bd:3a:41: d7:40:61:03:b3:2c:13:70:89:b0:83:88:c6:72:88:7f:96:8b: b8:88:d4:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8pULeWFM0ucEGnD5Dxwmv7teSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFE QjBCNTM4RTAeFw0yNTA2MjkxMTM2MjFaFw0yNTA3MDIxMjAwMjFaMDMxMTAvBgNV BAMTKDNBRUEyQzM2QjAyRDFEMjZGRUU4RDU3QzMxNjk2RTc4Mjg3NkQ0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcUk5Q2kFAK9/9guSjnbJw5Gh 3vTd8MLDOCSjiwI7EAhjPyO2yZyEUd9vRb5IM3oJRahZyLG4xarTwl4T46XwFcip 9FSy0XqfpOezMRtTLbD5j35aqBQF6IC8foljMMwqvykBqlxAEUV+kRMboqM6ZDLp VBOE8+up8JAlnWam7D5hztbPTG7Jb9xejPiUHDsM7RPQVA7pYy+4Ub1W+Zn9d/d0 p1mc8/DJUVUcLqelLXDYwVoZrrqUelEhqlP2b7OSs9hxYVBtM2QBbXVMrch5TUwE Sjv5a+figoP5jY1Z4Q/dHf+V80nlcF4pPOuauDBC3kqyG9/620xMJ1A/BDo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOuosNrAtHSb+6NV8MWlueCh21DQwHwYDVR0j BBgwFoAUp3fwgCd1Z3AcfvRk2ac1GtsLU44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmY0NzY3ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC9BNzc3RjA4MDI3 NzU2NzcwMUM3RUY0NjREOUE3MzUxQURCMEI1MzhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFEQjBC NTM4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1 MUFEQjBCNTM4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbQi8gY4YGmPcnrC+ypiggGm0OdD86xZHTU jDj7cSNxNyD6y926qKaN/CfajukfxIcIuqe17J6prOHmIGHNfUrayVLrEWxhFVQ0 yR0aCJ+NrzMV8Ul/g7/n5mHVhiJ3ViJBq61iriO+6271DWUxanhTZUFzW48giAZJ yIIZ3rOf4UKyXryf1XYvzCSIhD8cNb5aS/qhYBoLFSItQSwXUTIpZoEqRPTfTWPB hyU5jxCi2xtWefSQSV8LIUWfonAN6w594L5nwtFnktyC/SnwVJP4qbmaAsh98IhJ 3H9I0W1LGza4bKKJv706QddAYQOzLBNwibCDiMZyiH+Wi7iI1Ok= -----END CERTIFICATE-----Generated at Sun Jun 29 18:36:29 2025 by rpki-client