$ rpki-client -vvf repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft File: 277D3C0811B597BC22847329E543CCEE7E2449A0.mft (raw, json) Hash identifier: BbS/BjDRUsQtQ8ERAVgjMRJ/PaKcu2fQ8E3b9+HGLa0= Subject key identifier: F1:C5:B2:43:EA:6A:32:E7:B2:29:ED:F3:36:2B:59:11:6C:02:56:00 Authority key identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 Certificate issuer: /CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Certificate serial: 40FF3AF3CA1FC79FF1BFEFE974899AD547DBAB26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft Manifest number: D5 Signing time: Tue 04 Nov 2025 06:50:55 +0000 Manifest this update: Tue 04 Nov 2025 06:45:55 +0000 Manifest next update: Fri 07 Nov 2025 12:21:55 +0000 Files and hashes: 1: 277D3C0811B597BC22847329E543CCEE7E2449A0.crl (hash: cXUcol1lVnIV+tcWT0IRVXxHmwkcYuN1XMGEbxHxYXM=) 2: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: fefCWKXr30YVqWiq342VlH8lfhnIRdZEARC93/LTaB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ff:3a:f3:ca:1f:c7:9f:f1:bf:ef:e9:74:89:9a:d5:47:db:ab:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Validity Not Before: Nov 4 06:45:55 2025 GMT Not After : Nov 7 12:21:55 2025 GMT Subject: CN=F1C5B243EA6A32E7B229EDF3362B59116C025600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5f:c5:16:86:ce:a0:a4:52:ad:1d:b8:e2:9c: 53:59:1b:20:1b:a7:d2:ef:ad:ee:6e:17:e2:21:ac: 32:16:15:b5:6f:7b:be:d2:b2:2f:57:8e:d3:f5:d8: 56:f8:ad:34:3d:26:eb:60:e0:87:2a:4c:ce:26:75: cc:e2:fa:73:89:e7:88:70:e9:f5:e2:83:b4:71:b3: 14:d7:c4:26:a1:17:10:06:45:a4:65:62:2c:39:61: b5:66:2f:bc:54:79:3c:09:19:3b:5a:d4:f4:85:f3: 2e:41:66:85:84:4d:8c:ae:6b:5a:e6:fd:eb:1b:f2: 9f:4b:b6:6e:b3:be:8c:24:99:0d:a8:70:4d:06:56: be:3d:d0:b4:00:2a:28:9b:89:ae:c4:70:f9:4b:17: fe:60:21:fe:90:4a:04:7a:b8:c0:b1:74:ed:06:9b: c6:35:3b:ae:3e:db:e6:3a:73:d9:63:88:44:d2:61: e2:32:93:4c:63:48:ef:c9:ce:b1:1d:ec:1f:47:bd: 46:85:aa:38:12:99:ee:6d:80:71:6d:61:38:07:bb: 09:12:81:d0:df:f3:5c:48:fe:78:97:98:3c:bd:f5: 58:bb:e7:3a:8a:64:c5:cc:73:81:1e:ba:27:38:dd: da:ba:3f:30:71:cb:e6:01:75:0f:8a:13:50:ff:82: 84:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C5:B2:43:EA:6A:32:E7:B2:29:ED:F3:36:2B:59:11:6C:02:56:00 X509v3 Authority Key Identifier: keyid:27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c3:3f:76:4c:97:bf:74:07:fa:2e:0f:0c:3d:ec:cc:16:1c: 05:89:ed:c0:60:5a:1d:35:4b:ca:b7:98:ab:21:f8:0b:83:2d: 64:2d:31:67:37:94:e0:b0:4c:64:a2:b6:a9:e3:f6:21:25:2a: bb:d6:a5:9b:29:b3:83:fb:32:26:9e:1a:31:98:d8:3c:7e:f7: f7:ec:32:ce:a1:ea:a0:7a:a3:ed:5f:93:ba:eb:97:54:bd:ef: c5:13:bf:fb:a7:54:a3:02:36:e2:72:1f:49:b7:e4:86:af:d8: 1c:d9:ff:68:79:45:25:19:ab:06:2a:8c:3b:51:87:8d:ca:68: 73:c2:9b:d2:cb:7a:9d:b6:9c:95:7d:33:97:9f:0f:b5:65:9f: 09:5e:d4:f0:cb:01:67:af:00:85:02:f0:eb:c9:22:05:a2:9b: 07:ee:97:3b:ba:c9:02:53:ad:e6:20:da:7c:ac:16:86:a0:02: fc:07:16:b9:c3:dd:c4:cd:97:74:95:65:9a:2f:f6:a5:78:92: 73:5b:3f:51:e9:04:2a:46:ae:c7:d9:f0:9f:8f:5a:7a:b0:a6: 31:cd:d9:a6:a6:9f:be:28:29:10:94:97:0f:10:94:45:f4:0c: 51:dd:6b:aa:03:84:b9:87:ba:87:b8:4c:87:0f:89:44:f0:84: 44:92:a5:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQP8688ofx5/xv+/pdIma1UfbqyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3 RTI0NDlBMDAeFw0yNTExMDQwNjQ1NTVaFw0yNTExMDcxMjIxNTVaMDMxMTAvBgNV BAMTKEYxQzVCMjQzRUE2QTMyRTdCMjI5RURGMzM2MkI1OTExNkMwMjU2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjX8UWhs6gpFKtHbjinFNZGyAb p9Lvre5uF+IhrDIWFbVve77Ssi9XjtP12Fb4rTQ9Jutg4IcqTM4mdczi+nOJ54hw 6fXig7RxsxTXxCahFxAGRaRlYiw5YbVmL7xUeTwJGTta1PSF8y5BZoWETYyua1rm /esb8p9Ltm6zvowkmQ2ocE0GVr490LQAKiibia7EcPlLF/5gIf6QSgR6uMCxdO0G m8Y1O64+2+Y6c9ljiETSYeIyk0xjSO/JzrEd7B9HvUaFqjgSme5tgHFtYTgHuwkS gdDf81xI/niXmDy99Vi75zqKZMXMc4Eeuic43dq6PzBxy+YBdQ+KE1D/goR5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8cWyQ+pqMueyKe3zNitZEWwCVgAwHwYDVR0j BBgwFoAUJ308CBG1l7wihHMp5UPM7n4kSaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzgyNTlkNi0yNjU1LTQ0MTctYmVjNC04M2VmNjY0NGY1N2UvMC8yNzdEM0MwODEx QjU5N0JDMjI4NDczMjlFNTQzQ0NFRTdFMjQ0OUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3RTI0 NDlBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc4MjU5ZDYtMjY1NS00NDE3LWJl YzQtODNlZjY2NDRmNTdlLzAvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0ND RUU3RTI0NDlBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPDP3ZMl790B/ouDww97MwWHAWJ7cBgWh01 S8q3mKsh+AuDLWQtMWc3lOCwTGSitqnj9iElKrvWpZsps4P7MiaeGjGY2Dx+9/fs Ms6h6qB6o+1fk7rrl1S978UTv/unVKMCNuJyH0m35Iav2BzZ/2h5RSUZqwYqjDtR h43KaHPCm9LLep22nJV9M5efD7Vlnwle1PDLAWevAIUC8OvJIgWimwfulzu6yQJT reYg2nysFoagAvwHFrnD3cTNl3SVZZov9qV4knNbP1HpBCpGrsfZ8J+PWnqwpjHN 2aamn74oKRCUlw8QlEX0DFHda6oDhLmHuoe4TIcPiUTwhESSpTU= -----END CERTIFICATE-----Generated at Wed Nov 5 00:44:24 2025 by rpki-client