$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: QUUzv3aDfnkaZuDWSKdJHU+/tctlzpycIkwJ/nLGzCI= Subject key identifier: 08:0F:68:17:73:0A:47:08:DC:FC:AE:96:5A:E9:E2:FE:7F:BB:FA:A5 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 5201F69DAE6E4D115E9E724E14FFEFBF67320521 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: FF Signing time: Sat 10 May 2025 08:21:27 +0000 Manifest this update: Sat 10 May 2025 08:16:27 +0000 Manifest next update: Tue 13 May 2025 16:27:27 +0000 Files and hashes: 1: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: znjG8vBJbneVTxSzTn2SBwv3uingctTxT+PfD/yqt1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 16:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:01:f6:9d:ae:6e:4d:11:5e:9e:72:4e:14:ff:ef:bf:67:32:05:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: May 10 08:16:27 2025 GMT Not After : May 13 16:27:27 2025 GMT Subject: CN=080F6817730A4708DCFCAE965AE9E2FE7FBBFAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:94:04:db:46:f3:00:0b:76:c8:fc:cc:e1: fd:da:aa:d4:67:d3:a4:33:e2:6e:49:50:5e:c2:c6: 09:f1:74:1c:86:84:95:f4:7d:ae:9c:5b:56:f0:3f: 52:26:83:f4:11:b9:cf:e7:d6:65:28:0c:93:7b:8d: d8:86:e6:e5:54:04:38:25:c1:24:cb:17:8f:ed:9f: 64:04:2a:09:b1:84:7a:d6:f6:05:1b:01:2d:3a:46: 1f:43:24:c5:4e:d4:c1:15:f0:c8:17:44:dc:16:bd: 48:cf:cd:1f:23:cb:47:10:ba:25:a3:58:ee:3b:b8: b5:7c:37:e0:64:ed:00:44:cd:35:e2:30:65:be:35: b9:40:27:54:6a:49:c8:e0:9d:84:7a:da:bc:d7:24: b1:ac:f2:19:e8:dd:5e:83:41:05:a4:fa:96:3e:ad: 28:80:c2:ef:e3:92:f8:80:39:60:75:c4:a4:8d:43: 2f:8c:48:29:82:9d:44:f6:c0:8c:e2:b9:d9:e8:15: 62:0c:d4:19:44:f1:e6:03:9d:b4:fd:15:df:77:0b: 00:ed:86:c1:86:b7:af:9e:77:7f:8e:01:c0:04:78: e6:00:4d:74:c2:93:68:25:43:4b:26:3b:f3:c9:79: 4b:1d:56:0f:b6:1e:0d:56:b5:69:79:d7:c7:5f:d8: bc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0F:68:17:73:0A:47:08:DC:FC:AE:96:5A:E9:E2:FE:7F:BB:FA:A5 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:95:f4:04:cc:63:d7:9e:81:91:2c:b9:43:35:33:ea:17:6d: 14:e8:b9:95:f1:d5:87:bd:66:08:d1:cb:ed:02:af:b9:5b:b6: 1a:49:4a:64:57:9e:71:ec:36:f2:6b:fa:2e:08:23:6f:2f:c6: 78:6a:d8:2e:25:f7:d9:28:2a:b0:18:dd:c3:68:3a:41:0a:09: 37:f6:59:0d:61:39:e8:d8:81:6c:d0:66:13:06:ef:ed:e4:69: 4f:36:f2:6e:eb:5a:f4:ad:97:30:18:d7:58:97:1b:6d:23:d3: 92:e1:7b:94:5c:f8:8d:80:60:92:43:c8:ac:ef:5d:84:75:5c: 95:d5:b1:86:8d:64:2a:ff:e4:2a:16:bf:e9:f6:ac:6e:17:66: 0d:8f:2f:d1:b3:12:51:98:55:d0:b0:15:78:07:37:46:3b:c0: ea:df:fd:a2:b5:0b:d3:be:3e:bd:20:dc:ed:ac:b8:3c:63:74: 24:61:ad:1d:fe:6d:15:0d:89:de:f9:df:aa:48:c3:bc:d5:cb: 73:0b:6f:5d:62:16:46:49:e5:e0:fa:b7:26:cc:a4:a9:0e:94: 8f:99:f9:9b:eb:14:eb:e7:b5:a8:c3:0b:84:61:b5:e4:05:6c: f2:cb:2a:9e:bc:62:7b:8c:2c:b1:66:bf:5e:ab:69:aa:84:7a: a9:f3:39:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUgH2na5uTRFennJOFP/vv2cyBSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNTA1MTAwODE2MjdaFw0yNTA1MTMxNjI3MjdaMDMxMTAvBgNV BAMTKDA4MEY2ODE3NzMwQTQ3MDhEQ0ZDQUU5NjVBRTlFMkZFN0ZCQkZBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHpQE20bzAAt2yPzM4f3aqtRn 06Qz4m5JUF7CxgnxdByGhJX0fa6cW1bwP1Img/QRuc/n1mUoDJN7jdiG5uVUBDgl wSTLF4/tn2QEKgmxhHrW9gUbAS06Rh9DJMVO1MEV8MgXRNwWvUjPzR8jy0cQuiWj WO47uLV8N+Bk7QBEzTXiMGW+NblAJ1RqScjgnYR62rzXJLGs8hno3V6DQQWk+pY+ rSiAwu/jkviAOWB1xKSNQy+MSCmCnUT2wIziudnoFWIM1BlE8eYDnbT9Fd93CwDt hsGGt6+ed3+OAcAEeOYATXTCk2glQ0smO/PJeUsdVg+2Hg1WtWl518df2Lw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCA9oF3MKRwjc/K6WWuni/n+7+qUwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmV9ATMY9eegZEsuUM1M+oXbRTouZXx1Ye9 ZgjRy+0Cr7lbthpJSmRXnnHsNvJr+i4II28vxnhq2C4l99koKrAY3cNoOkEKCTf2 WQ1hOejYgWzQZhMG7+3kaU828m7rWvStlzAY11iXG20j05Lhe5Rc+I2AYJJDyKzv XYR1XJXVsYaNZCr/5CoWv+n2rG4XZg2PL9GzElGYVdCwFXgHN0Y7wOrf/aK1C9O+ Pr0g3O2suDxjdCRhrR3+bRUNid7536pIw7zVy3MLb11iFkZJ5eD6tybMpKkOlI+Z +ZvrFOvntajDC4RhteQFbPLLKp68YnuMLLFmv16raaqEeqnzOUA= -----END CERTIFICATE-----Generated at Mon May 12 10:40:58 2025 by rpki-client