$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft File: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft (raw, json) Hash identifier: JpzCtOhJEhOLenGQ8+DwQJu4K+/qfhk5cWELzaUCpzY= Subject key identifier: 3F:C1:82:91:91:18:95:EA:0E:BE:5C:DF:01:C1:D6:03:06:1C:48:CD Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 Certificate issuer: /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Certificate serial: 1F2CB5E5D10D7A464E8AE042CDF0D0E9F5D206CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft Manifest number: F3 Signing time: Mon 03 Nov 2025 02:51:04 +0000 Manifest this update: Mon 03 Nov 2025 02:46:04 +0000 Manifest next update: Thu 06 Nov 2025 13:55:04 +0000 Files and hashes: 1: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: DWvVDDRpAMOpRUqp8QzsrLlGUPEfbewyxxzSjcofq2U=) 2: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl (hash: XgcKyOt2rDLQQTYQ7XI/QRlwWuE6CRmoyMLaNtXadQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2c:b5:e5:d1:0d:7a:46:4e:8a:e0:42:cd:f0:d0:e9:f5:d2:06:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Validity Not Before: Nov 3 02:46:04 2025 GMT Not After : Nov 6 13:55:04 2025 GMT Subject: CN=3FC18291911895EA0EBE5CDF01C1D603061C48CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:67:a1:ae:2f:80:d2:5e:75:0f:42:23:91:cb: df:b9:84:29:74:d9:30:a5:79:41:08:80:13:9c:3f: cf:84:74:e6:df:c2:6c:d9:de:15:00:2e:e7:34:b8: 24:75:0e:2a:12:83:8d:23:f1:93:5c:0b:83:e6:a3: fd:7d:9d:f1:d1:ae:a9:0d:eb:d0:8e:84:2f:c0:7a: 18:1d:f9:03:4a:54:5e:51:9e:92:9a:10:f3:56:05: b2:92:46:25:4b:1e:4a:10:6c:d0:8f:6b:a7:d0:7e: 33:e2:a3:7c:9a:e8:4c:53:b8:da:cc:bd:55:fa:f1: d5:d7:49:25:88:21:a6:96:14:b8:b2:ac:ed:fc:91: fa:7e:57:9e:28:5d:01:18:8c:ed:f1:26:35:ea:c9: d7:d7:eb:2d:7c:00:13:1c:0b:a8:8b:21:bd:1d:b9: 01:50:76:4e:d6:85:c0:be:9d:de:ed:3d:15:63:e0: af:68:b8:d4:97:08:64:d1:54:c3:31:62:31:d9:0e: c2:4d:75:b4:63:14:e4:59:60:9c:df:2f:16:9d:f0: cc:24:c6:2f:ea:d6:4e:21:1a:f8:31:ca:54:f9:be: 3f:c4:63:10:90:2b:4d:dc:2a:4c:04:79:8b:a6:01: 9e:82:e7:69:6b:8c:f9:f4:85:4b:a4:e8:fe:99:74: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C1:82:91:91:18:95:EA:0E:BE:5C:DF:01:C1:D6:03:06:1C:48:CD X509v3 Authority Key Identifier: keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:03:99:d7:c3:cb:7f:b0:d9:d1:67:ae:7d:1c:43:dc:8e:1e: 48:c0:9b:22:52:d6:15:bc:90:5f:49:1d:34:ea:d6:9d:da:4e: 9b:2d:af:09:1f:86:35:1b:46:5f:86:f5:41:c3:bd:d8:aa:32: 44:ab:3b:22:dc:15:4d:52:df:90:9a:cb:fa:61:85:d4:f2:6e: 4d:c7:3a:8e:1e:c0:23:6c:5b:42:b9:83:a1:e9:01:eb:6c:16: 64:a5:7f:6a:70:6d:af:39:bb:ab:f2:a2:e5:14:6e:64:10:ae: 85:7e:ac:dd:78:70:63:43:0a:3f:6a:ac:94:89:a2:7e:91:ec: 54:6e:c6:f7:fa:e0:37:66:53:4a:02:40:2b:c9:7a:57:d1:9d: 18:eb:c6:fe:a0:c2:16:0a:72:71:a9:68:85:28:7d:e8:91:ad: 1a:cb:41:3f:46:95:10:53:1f:27:c1:64:fb:76:75:16:d7:3c: dd:63:2a:ae:f2:df:4d:28:8d:98:0e:f5:ea:2f:90:b8:39:f0: 9f:6c:b1:df:4b:88:03:f0:f5:c9:32:a5:0c:16:f5:3a:5f:ea: 0c:38:f6:82:e6:cb:7b:78:a8:a5:9b:99:41:dc:be:73:00:fa: ca:9d:a9:5e:d5:6d:55:b3:ab:cb:bc:a9:7a:f1:ff:7d:94:7a: b4:d3:09:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHyy15dENekZOiuBCzfDQ6fXSBswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJF QTg4OEYwNDAeFw0yNTExMDMwMjQ2MDRaFw0yNTExMDYxMzU1MDRaMDMxMTAvBgNV BAMTKDNGQzE4MjkxOTExODk1RUEwRUJFNUNERjAxQzFENjAzMDYxQzQ4Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZ6GuL4DSXnUPQiORy9+5hCl0 2TCleUEIgBOcP8+EdObfwmzZ3hUALuc0uCR1DioSg40j8ZNcC4Pmo/19nfHRrqkN 69COhC/Aehgd+QNKVF5RnpKaEPNWBbKSRiVLHkoQbNCPa6fQfjPio3ya6ExTuNrM vVX68dXXSSWIIaaWFLiyrO38kfp+V54oXQEYjO3xJjXqydfX6y18ABMcC6iLIb0d uQFQdk7WhcC+nd7tPRVj4K9ouNSXCGTRVMMxYjHZDsJNdbRjFORZYJzfLxad8Mwk xi/q1k4hGvgxylT5vj/EYxCQK03cKkwEeYumAZ6C52lrjPn0hUuk6P6ZdCD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP8GCkZEYleoOvlzfAcHWAwYcSM0wHwYDVR0j BBgwFoAUl3dv/wK5D/wXtligsaWY2+qIjwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMS85Nzc3NkZGRjAy QjkwRkZDMTdCNjU4QTBCMUE1OThEQkVBODg4RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJFQTg4 OEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzEvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4 REJFQTg4OEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYDmdfDy3+w2dFnrn0cQ9yOHkjAmyJS1hW8 kF9JHTTq1p3aTpstrwkfhjUbRl+G9UHDvdiqMkSrOyLcFU1S35Cay/phhdTybk3H Oo4ewCNsW0K5g6HpAetsFmSlf2pwba85u6vyouUUbmQQroV+rN14cGNDCj9qrJSJ on6R7FRuxvf64DdmU0oCQCvJelfRnRjrxv6gwhYKcnGpaIUofeiRrRrLQT9GlRBT HyfBZPt2dRbXPN1jKq7y300ojZgO9eovkLg58J9ssd9LiAPw9ckypQwW9Tpf6gw4 9oLmy3t4qKWbmUHcvnMA+sqdqV7VbVWzq8u8qXrx/32UerTTCbw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:43 2025 by rpki-client