$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft File: A777F080277567701C7EF464D9A7351ADB0B538E.mft (raw, json) Hash identifier: JbLWZRQJRyyBvGAUoFzMUR3FExfV+s9GyZCstzLa6jg= Subject key identifier: 2D:90:0B:00:61:40:0E:D4:0E:7F:5A:E2:B5:BF:76:77:02:42:0B:F0 Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E Certificate issuer: /CN=A777F080277567701C7EF464D9A7351ADB0B538E Certificate serial: 4CD2ECAFF12034E26C5327B6AEB29B2158158670 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft Manifest number: 0123 Signing time: Thu 24 Apr 2025 14:11:22 +0000 Manifest this update: Thu 24 Apr 2025 14:06:22 +0000 Manifest next update: Sun 27 Apr 2025 22:06:22 +0000 Files and hashes: 1: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: h/uy7fDq50r7e+j8rs3WUchCkceLYr7uM1RGCqWPN9Y=) 2: A777F080277567701C7EF464D9A7351ADB0B538E.crl (hash: 5AbN08/xbH5wFti90zeUkTNZGUJTwFERauiJXzx1n6M=) 3: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: PUWcmLIXqezWohbBydiSBzBMAytj8n2CXdb3MykrfeA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d2:ec:af:f1:20:34:e2:6c:53:27:b6:ae:b2:9b:21:58:15:86:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E Validity Not Before: Apr 24 14:06:22 2025 GMT Not After : Apr 27 22:06:22 2025 GMT Subject: CN=2D900B0061400ED40E7F5AE2B5BF767702420BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:4a:e4:ac:72:88:e8:6d:31:89:15:45:23: 4d:11:49:de:06:01:22:0a:d1:59:77:25:1d:4c:8d: 0f:88:22:fc:94:43:22:04:f6:91:af:13:79:e0:c3: d2:94:41:21:46:62:ea:08:8b:12:e6:4c:d2:91:bb: 0f:bd:2a:0e:6a:97:5a:ed:5f:6d:d7:59:83:10:0f: 01:29:70:0a:c4:1f:52:28:5e:a0:ff:5e:83:d0:bb: f5:57:e8:9b:f2:b6:02:aa:b5:d6:85:52:84:40:7e: 95:21:fa:d2:e6:2b:b1:5f:05:e2:d0:34:d0:8b:ce: 13:1a:34:f7:33:dc:e3:d5:1d:50:80:b1:f1:1b:16: f6:cd:88:e9:b2:4a:93:48:2e:a3:ab:92:aa:36:96: c1:d6:45:ba:51:09:cb:7d:cf:bf:67:06:b8:e8:7e: 5e:db:2b:f0:83:14:6e:ee:c6:8e:cc:28:fb:0a:1f: 45:9e:fc:3d:1c:72:45:0a:98:45:45:73:89:30:78: 2d:73:15:53:64:47:92:d7:7d:31:6a:ea:3c:c7:ce: 20:25:b6:fc:20:ba:65:00:8e:93:2a:e7:a3:1c:c1: bc:2e:09:1f:12:d0:1b:b0:9d:4a:87:a1:11:f0:55: b4:52:24:33:bd:ee:7b:9a:c0:a9:92:e3:9b:c3:cd: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:90:0B:00:61:40:0E:D4:0E:7F:5A:E2:B5:BF:76:77:02:42:0B:F0 X509v3 Authority Key Identifier: keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9b:38:b2:5b:df:15:ca:ed:7b:c4:24:86:c4:e7:12:4e:ff: b9:83:d6:98:65:14:23:31:c4:1c:63:63:45:df:e2:17:bd:54: 84:d7:4d:f4:59:f6:66:83:16:ed:4b:b5:b9:01:65:c7:7b:ac: 90:bb:de:3f:8b:90:51:0b:f0:1a:3b:a1:7f:5e:4c:cc:ac:27: 24:1e:ab:80:d2:35:ec:d3:f5:84:98:30:2f:3f:40:0d:43:22: 0d:78:b8:d9:04:71:3e:22:6e:32:fe:ae:78:9e:14:d6:14:c9: 8d:40:69:dc:27:7a:35:f9:9c:6a:93:3d:76:e0:f3:99:af:bd: 9c:f3:11:56:0c:b0:51:16:01:2b:dc:77:6e:19:6c:90:d3:ef: 70:59:a3:9e:8e:df:f8:5c:f0:1a:09:51:30:82:77:e3:4f:ec: 17:6a:e2:44:e8:7b:e3:7f:2a:5a:2a:be:74:ca:67:45:7b:81: 08:d8:68:d2:b8:69:e5:e8:19:6d:6b:98:ae:62:1e:b3:f8:ec: 1a:7e:98:50:0f:7f:c2:ba:74:26:10:84:ae:89:10:88:1e:6f: dc:4d:e0:65:b3:d2:c6:e3:3c:ba:c9:7b:e3:9f:dc:cb:d8:e4: c2:8c:f1:66:7a:61:71:0b:62:85:1a:ee:d6:71:32:23:78:71: a4:67:21:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNLsr/EgNOJsUye2rrKbIVgVhnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFE QjBCNTM4RTAeFw0yNTA0MjQxNDA2MjJaFw0yNTA0MjcyMjA2MjJaMDMxMTAvBgNV BAMTKDJEOTAwQjAwNjE0MDBFRDQwRTdGNUFFMkI1QkY3Njc3MDI0MjBCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVErkrHKI6G0xiRVFI00RSd4G ASIK0Vl3JR1MjQ+IIvyUQyIE9pGvE3ngw9KUQSFGYuoIixLmTNKRuw+9Kg5ql1rt X23XWYMQDwEpcArEH1IoXqD/XoPQu/VX6JvytgKqtdaFUoRAfpUh+tLmK7FfBeLQ NNCLzhMaNPcz3OPVHVCAsfEbFvbNiOmySpNILqOrkqo2lsHWRbpRCct9z79nBrjo fl7bK/CDFG7uxo7MKPsKH0We/D0cckUKmEVFc4kweC1zFVNkR5LXfTFq6jzHziAl tvwgumUAjpMq56McwbwuCR8S0BuwnUqHoRHwVbRSJDO97nuawKmS45vDzTmnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULZALAGFADtQOf1ritb92dwJCC/AwHwYDVR0j BBgwFoAUp3fwgCd1Z3AcfvRk2ac1GtsLU44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmY0NzY3ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC9BNzc3RjA4MDI3 NzU2NzcwMUM3RUY0NjREOUE3MzUxQURCMEI1MzhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFEQjBC NTM4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1 MUFEQjBCNTM4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2bOLJb3xXK7XvEJIbE5xJO/7mD1phlFCMx xBxjY0Xf4he9VITXTfRZ9maDFu1LtbkBZcd7rJC73j+LkFEL8Bo7oX9eTMysJyQe q4DSNezT9YSYMC8/QA1DIg14uNkEcT4ibjL+rnieFNYUyY1AadwnejX5nGqTPXbg 85mvvZzzEVYMsFEWASvcd24ZbJDT73BZo56O3/hc8BoJUTCCd+NP7Bdq4kToe+N/ KloqvnTKZ0V7gQjYaNK4aeXoGW1rmK5iHrP47Bp+mFAPf8K6dCYQhK6JEIgeb9xN 4GWz0sbjPLrJe+Of3MvY5MKM8WZ6YXELYoUa7tZxMiN4caRnITQ= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:16 2025 by rpki-client on console.sobornost.net