$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft File: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft (raw, json) Hash identifier: J0tBijvRuqcPSCbahDG3BnMIH56bNzrvc6hlaK2fdZo= Subject key identifier: 73:3E:A9:BA:CB:18:FF:5E:86:87:87:BD:93:D9:54:77:B2:93:4E:CF Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 Certificate issuer: /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Certificate serial: 60B04B151A234A436EAB61DEBC331B07C9347D55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft Manifest number: 0206 Signing time: Mon 03 Nov 2025 01:00:47 +0000 Manifest this update: Mon 03 Nov 2025 00:55:47 +0000 Manifest next update: Thu 06 Nov 2025 03:54:47 +0000 Files and hashes: 1: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: 4o94mrc4fRlBDhHzDJcRb+ENMoJpRlPOPsOhrRbyRi4=) 2: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl (hash: xojkjWGvHv84rEHwB+069yNoRqHUjGUo4aWZtp8NXhw=) 3: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: UB8JtipfosdHlml62Xhk5sLTDI0owepm37Luu+44jy4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b0:4b:15:1a:23:4a:43:6e:ab:61:de:bc:33:1b:07:c9:34:7d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Validity Not Before: Nov 3 00:55:47 2025 GMT Not After : Nov 6 03:54:47 2025 GMT Subject: CN=733EA9BACB18FF5E868787BD93D95477B2934ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a7:a5:88:84:e3:6f:2c:e4:7d:6c:8b:2c:7c: e5:d0:81:5e:c2:4f:79:54:17:11:6f:4f:a3:bf:6c: aa:12:ba:a5:31:b5:66:c3:f5:8d:78:10:08:9d:74: b7:26:3b:df:55:5c:fd:e1:1a:02:f2:ef:88:d2:8c: 45:59:90:90:74:4b:ee:e2:f9:af:5f:03:4a:cc:4d: 81:c6:ea:c3:62:41:7b:e5:df:ec:69:2b:a7:57:3f: 7f:42:03:1f:d3:da:5d:33:3a:d7:6b:0d:70:ef:d0: a6:34:91:a3:63:bf:5a:ca:66:4f:af:1a:f2:6a:d4: de:86:36:e5:3f:a5:0f:c9:79:52:b2:a2:39:6b:cc: cc:66:3c:7f:37:19:e9:8e:4d:d7:0d:77:d6:8b:a1: 69:65:b8:b9:d3:07:0f:fb:c3:9f:33:69:6a:31:2c: df:3d:51:1e:95:80:aa:b9:53:e4:76:43:11:a9:df: cd:10:f3:5e:a7:05:2f:0b:7c:b0:8f:0a:c5:20:c5: c1:a2:6a:f5:40:2f:55:13:48:cb:b0:5e:97:75:88: 0d:ce:c5:32:8a:5a:97:26:5a:4f:c7:73:75:6e:33: 31:fa:88:4f:d5:fc:86:e7:82:86:27:a6:12:c5:5a: 7f:f6:7d:ba:d1:dc:90:fc:10:09:4d:d0:07:3a:f6: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3E:A9:BA:CB:18:FF:5E:86:87:87:BD:93:D9:54:77:B2:93:4E:CF X509v3 Authority Key Identifier: keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:bc:65:4b:46:38:b2:81:92:f9:a5:68:f9:95:48:78:7b:60: a5:61:2e:5c:98:57:06:1d:5a:14:58:75:45:94:1d:a3:3d:95: 72:ea:60:74:7c:7b:f8:97:49:5b:07:de:69:ee:3d:51:3d:02: 00:65:4e:6c:5d:5f:a2:72:44:b3:e1:a2:20:b4:1c:0f:c1:6b: 9a:cb:09:4a:9c:02:df:b8:eb:02:64:12:69:e0:88:d0:74:a2: 31:75:04:35:5f:7d:3d:16:48:fd:32:ff:41:9c:71:c7:28:e4: 54:d3:d1:b0:f3:cd:33:d8:ad:bb:83:d6:1a:87:d5:5b:d2:a8: 5a:cf:6e:69:2c:b1:33:a2:36:83:c3:01:b0:ec:ac:63:8a:69: ae:78:8d:04:4c:22:22:9d:a0:1f:43:fc:56:08:6a:28:93:2c: 03:f1:f2:d8:0f:26:32:27:06:d0:d4:a3:b6:d4:90:7a:b0:73: ac:04:2d:70:11:77:77:6f:03:0f:d6:81:be:d7:74:aa:3d:75: 91:9e:07:08:48:de:62:b0:53:1e:3d:83:27:98:57:fa:04:3c: 2e:b8:3a:3f:14:f3:08:48:45:b2:23:0f:7a:22:60:bc:6d:2b: 3e:95:9a:db:46:50:4f:64:5f:e1:00:05:75:d6:e7:f5:84:3d: 71:b7:9a:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYLBLFRojSkNuq2HevDMbB8k0fVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVE OEJBMzg2MjAeFw0yNTExMDMwMDU1NDdaFw0yNTExMDYwMzU0NDdaMDMxMTAvBgNV BAMTKDczM0VBOUJBQ0IxOEZGNUU4Njg3ODdCRDkzRDk1NDc3QjI5MzRFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdp6WIhONvLOR9bIssfOXQgV7C T3lUFxFvT6O/bKoSuqUxtWbD9Y14EAiddLcmO99VXP3hGgLy74jSjEVZkJB0S+7i +a9fA0rMTYHG6sNiQXvl3+xpK6dXP39CAx/T2l0zOtdrDXDv0KY0kaNjv1rKZk+v GvJq1N6GNuU/pQ/JeVKyojlrzMxmPH83GemOTdcNd9aLoWlluLnTBw/7w58zaWox LN89UR6VgKq5U+R2QxGp380Q816nBS8LfLCPCsUgxcGiavVAL1UTSMuwXpd1iA3O xTKKWpcmWk/Hc3VuMzH6iE/V/IbngoYnphLFWn/2fbrR3JD8EAlN0Ac69spnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcz6pussY/16Gh4e9k9lUd7KTTs8wHwYDVR0j BBgwFoAUdx0KucRFsoyIf9e6GN7FFdi6OGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFkNmEzZi02Y2EwLTQ2NjktOThmNy02ZjM0ODM3ZmFhNjIvMC83NzFEMEFCOUM0 NDVCMjhDODg3RkQ3QkExOERFQzUxNUQ4QkEzODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVEOEJB Mzg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4 ZjctNmYzNDgzN2ZhYTYyLzAvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1 MTVEOEJBMzg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADi8ZUtGOLKBkvmlaPmVSHh7YKVhLlyYVwYd WhRYdUWUHaM9lXLqYHR8e/iXSVsH3mnuPVE9AgBlTmxdX6JyRLPhoiC0HA/Ba5rL CUqcAt+46wJkEmngiNB0ojF1BDVffT0WSP0y/0Gcccco5FTT0bDzzTPYrbuD1hqH 1VvSqFrPbmkssTOiNoPDAbDsrGOKaa54jQRMIiKdoB9D/FYIaiiTLAPx8tgPJjIn BtDUo7bUkHqwc6wELXARd3dvAw/Wgb7XdKo9dZGeBwhI3mKwUx49gyeYV/oEPC64 Oj8U8whIRbIjD3oiYLxtKz6VmttGUE9kX+EABXXW5/WEPXG3mt0= -----END CERTIFICATE-----Generated at Tue Nov 4 12:53:17 2025 by rpki-client