$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: FvCISnuuKIbHTdL2hxbimb8lihDRyoIQr9mM7Nnh84w= Subject key identifier: 9C:B8:D7:7A:D2:A7:C0:45:77:17:4C:41:BA:EF:B5:14:D1:D6:44:F7 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 5563246D9245BBF21063225AB4582897338A8BCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: 0117 Signing time: Fri 04 Jul 2025 06:51:23 +0000 Manifest this update: Fri 04 Jul 2025 06:46:23 +0000 Manifest next update: Mon 07 Jul 2025 15:33:23 +0000 Files and hashes: 1: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: 7xtOli3s254qi/CtLK7IVZImolhGqk8c+4wwgynjKsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 12:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:63:24:6d:92:45:bb:f2:10:63:22:5a:b4:58:28:97:33:8a:8b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Jul 4 06:46:23 2025 GMT Not After : Jul 7 15:33:23 2025 GMT Subject: CN=9CB8D77AD2A7C04577174C41BAEFB514D1D644F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:f5:75:aa:9b:e7:e1:4b:2e:0b:33:aa:cc: 14:75:29:f5:d5:a6:cd:81:01:90:df:4b:c2:c1:5b: 92:7f:a8:c4:3d:e7:94:1a:62:82:95:51:02:55:34: 9a:af:63:7e:80:e1:0e:80:09:53:0f:c8:58:0a:88: 4d:44:5a:09:50:38:89:e9:c2:23:f9:46:ae:8f:b0: 18:ba:05:4d:71:48:db:2b:92:7b:bb:db:f7:27:e4: a3:9f:11:c7:7a:d0:6a:79:ea:e3:2f:87:ab:79:05: af:27:b8:2c:a2:61:8e:f5:6c:81:2c:f1:27:7d:61: 5c:9a:e6:51:e0:6f:13:db:04:70:61:db:b2:80:9d: 5c:71:55:d2:2f:ae:2a:a7:f2:91:9d:50:a2:f8:f6: 6f:43:41:e0:80:fd:f1:9f:76:8c:37:bd:14:8d:06: 00:b2:b3:1a:b2:6a:f2:76:00:09:12:1a:a2:70:5b: e0:5d:e1:f7:a7:89:51:e6:19:f6:b6:fd:9f:3f:a8: cf:af:58:bc:0f:13:cc:8f:fd:e5:c4:ec:24:31:8a: b7:56:12:d5:8b:fe:68:4e:00:4f:2e:6e:5f:5e:2f: b5:b9:fb:cc:9a:bd:ee:52:c9:4b:e4:af:c5:21:01: 2d:10:5c:c4:73:21:d8:6a:78:90:78:27:0c:e9:15: f7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B8:D7:7A:D2:A7:C0:45:77:17:4C:41:BA:EF:B5:14:D1:D6:44:F7 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3f:67:45:10:f0:ed:4e:28:34:c1:80:f7:ff:da:59:e6:86: 80:5d:ac:90:53:cb:23:94:7c:3a:d5:69:69:fe:1f:3d:82:4e: 56:21:4d:78:8d:83:65:c8:9d:f4:07:00:ed:d9:fb:c2:f2:98: 47:47:a6:07:a4:38:9b:b3:ae:1a:de:70:f0:2e:8e:0a:58:3b: c1:ad:1c:fe:ea:c4:ff:13:3e:33:1b:8a:dc:11:16:4f:72:9a: e8:da:34:26:66:46:22:a2:d7:97:de:8d:9d:c0:ec:0d:92:d3: 22:40:36:2b:19:81:9a:71:4f:c0:69:d0:91:b5:e5:41:1a:5a: 68:70:62:b3:45:04:21:e7:e8:50:b7:fa:37:9f:56:45:17:03: 9e:19:40:74:cf:ef:4d:68:2f:20:97:ed:c1:02:12:1a:70:2c: 44:77:f8:80:45:38:85:ad:12:23:64:62:22:0c:3b:0d:5e:eb: 1b:9a:43:c3:58:bf:0b:60:71:4d:78:19:cb:95:43:2c:fc:a4: 1a:83:2f:c5:f2:86:17:f0:d8:90:00:d1:36:f9:15:57:94:bc: 0c:00:c9:24:1c:b8:c9:56:c0:c0:05:f4:1e:06:1e:41:a2:ac: 8c:0d:3a:ee:bc:86:06:de:c0:18:c1:f9:79:30:d4:2c:17:80: a0:3f:19:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWMkbZJFu/IQYyJatFgolzOKi8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNTA3MDQwNjQ2MjNaFw0yNTA3MDcxNTMzMjNaMDMxMTAvBgNV BAMTKDlDQjhENzdBRDJBN0MwNDU3NzE3NEM0MUJBRUZCNTE0RDFENjQ0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIl/V1qpvn4UsuCzOqzBR1KfXV ps2BAZDfS8LBW5J/qMQ955QaYoKVUQJVNJqvY36A4Q6ACVMPyFgKiE1EWglQOInp wiP5Rq6PsBi6BU1xSNsrknu72/cn5KOfEcd60Gp56uMvh6t5Ba8nuCyiYY71bIEs 8Sd9YVya5lHgbxPbBHBh27KAnVxxVdIvriqn8pGdUKL49m9DQeCA/fGfdow3vRSN BgCysxqyavJ2AAkSGqJwW+Bd4feniVHmGfa2/Z8/qM+vWLwPE8yP/eXE7CQxirdW EtWL/mhOAE8ubl9eL7W5+8yave5SyUvkr8UhAS0QXMRzIdhqeJB4JwzpFfcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnLjXetKnwEV3F0xBuu+1FNHWRPcwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADs/Z0UQ8O1OKDTBgPf/2lnmhoBdrJBTyyOU fDrVaWn+Hz2CTlYhTXiNg2XInfQHAO3Z+8LymEdHpgekOJuzrhrecPAujgpYO8Gt HP7qxP8TPjMbitwRFk9ymujaNCZmRiKi15fejZ3A7A2S0yJANisZgZpxT8Bp0JG1 5UEaWmhwYrNFBCHn6FC3+jefVkUXA54ZQHTP701oLyCX7cECEhpwLER3+IBFOIWt EiNkYiIMOw1e6xuaQ8NYvwtgcU14GcuVQyz8pBqDL8Xyhhfw2JAA0Tb5FVeUvAwA ySQcuMlWwMAF9B4GHkGirIwNOu68hgbewBjB+Xkw1CwXgKA/Gcw= -----END CERTIFICATE-----Generated at Fri Jul 4 09:47:08 2025 by rpki-client