$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft File: 9B77D523EDC2218C65DAB55B4538140243B7E862.mft (raw, json) Hash identifier: bk3vSzelDRpXbyP2cYpNbmJuFzAQheLG2QZrJ+WDrAI= Subject key identifier: 80:8D:7C:E6:F8:C6:23:21:FD:69:BA:E0:2F:7B:19:EC:C3:9F:EF:83 Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 Certificate issuer: /CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Certificate serial: 02417EB406A0284CE979D0A0350577595E0B16F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft Manifest number: 021E Signing time: Mon 03 Nov 2025 15:11:30 +0000 Manifest this update: Mon 03 Nov 2025 15:06:30 +0000 Manifest next update: Thu 06 Nov 2025 21:43:30 +0000 Files and hashes: 1: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: qWPS0N/te+MWks31pquZu9fK7Gl6gv7U+N0yk9Foipw=) 2: 9B77D523EDC2218C65DAB55B4538140243B7E862.crl (hash: TjIYGHBtwQO93Dd784olN/rvLVWXAvjzqGYHZvrz4xc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:41:7e:b4:06:a0:28:4c:e9:79:d0:a0:35:05:77:59:5e:0b:16:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Validity Not Before: Nov 3 15:06:30 2025 GMT Not After : Nov 6 21:43:30 2025 GMT Subject: CN=808D7CE6F8C62321FD69BAE02F7B19ECC39FEF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:36:59:32:03:4b:21:81:04:0f:85:7e:3b: e0:5c:af:9a:70:99:d1:6f:a0:20:b5:14:78:86:f4: 40:af:1e:ba:2f:be:74:a1:67:4d:ec:d2:48:63:5e: f0:1f:5a:fe:fd:bd:89:10:19:fc:16:dd:c1:3d:55: e5:0c:54:2e:cb:b6:b6:85:63:ea:82:53:e0:9a:a9: 46:5e:e6:c1:f4:49:cf:ae:d3:c7:6c:0f:3d:a9:88: 37:3b:72:d8:64:bd:25:32:75:92:50:00:e6:44:a4: cd:af:ee:8d:ee:8b:ec:c0:43:38:0e:bf:50:3f:48: 17:02:f1:f1:fc:6a:29:48:5d:b7:8a:86:41:b5:b1: f6:95:75:ec:2e:35:bc:c0:ee:23:26:7e:b6:82:9c: 81:b4:08:ef:bb:85:9c:92:76:22:4d:3a:65:c6:46: 52:ff:8d:89:61:3c:14:27:52:dd:74:7d:ed:cb:d8: 1a:76:6b:00:ad:96:a5:15:ad:d5:6e:6e:eb:7f:1b: d6:60:a3:fc:33:b3:ae:68:ed:9e:67:07:f3:a2:18: 86:32:78:34:ce:48:8e:57:24:f5:31:b3:5f:ea:13: 14:5b:6c:1f:8e:d3:e2:1d:ae:5c:eb:0e:6b:d7:db: cb:a6:e8:70:25:df:3a:95:cb:f7:59:ce:a6:a7:e7: 1a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8D:7C:E6:F8:C6:23:21:FD:69:BA:E0:2F:7B:19:EC:C3:9F:EF:83 X509v3 Authority Key Identifier: keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c2:ef:80:92:81:14:b0:7b:ff:bf:e6:54:b9:14:4f:07:3d: b4:68:0c:a7:9c:bc:82:ca:e4:0a:ab:a5:33:47:bc:84:43:09: 4f:7d:d7:fb:92:b8:02:f8:5a:05:05:1f:82:13:0e:c5:5a:5a: 9b:39:7b:56:63:11:d7:3e:93:1b:b5:b2:e8:5c:98:19:f8:55: 71:6c:52:6d:57:4a:8d:7a:0c:ae:7a:97:f2:37:79:eb:46:89: 1c:cf:8c:7a:8f:82:05:e6:67:d4:f8:5a:66:04:16:a0:36:83: 58:0a:44:4b:a6:ff:36:b0:36:40:f6:e1:30:ea:3d:10:32:fc: 78:ac:31:31:34:cf:a4:7c:60:8d:3f:6b:7f:f8:24:e4:83:25: 50:3b:ca:2d:ba:3d:75:04:c1:ae:04:a1:76:71:c4:42:e7:05: 8d:c3:0f:f6:1a:e1:56:3f:0b:21:55:12:06:6d:5b:c7:6f:f3: ad:04:ac:82:c8:7f:05:63:8c:99:47:65:85:d4:6f:15:b2:68: b7:63:c3:40:f0:09:bc:e7:09:f5:20:00:17:22:0e:1f:6f:a5: 5d:a2:16:c3:f7:e0:04:81:49:ee:ea:5f:13:8e:a8:f2:e0:af: bc:b9:5e:de:18:f9:89:ca:8c:8d:53:cc:f8:f2:e4:ad:5a:cf: a6:db:dd:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkF+tAagKEzpedCgNQV3WV4LFvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0 M0I3RTg2MjAeFw0yNTExMDMxNTA2MzBaFw0yNTExMDYyMTQzMzBaMDMxMTAvBgNV BAMTKDgwOEQ3Q0U2RjhDNjIzMjFGRDY5QkFFMDJGN0IxOUVDQzM5RkVGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzzZZMgNLIYEED4V+O+Bcr5pw mdFvoCC1FHiG9ECvHrovvnShZ03s0khjXvAfWv79vYkQGfwW3cE9VeUMVC7LtraF Y+qCU+CaqUZe5sH0Sc+u08dsDz2piDc7cthkvSUydZJQAOZEpM2v7o3ui+zAQzgO v1A/SBcC8fH8ailIXbeKhkG1sfaVdewuNbzA7iMmfraCnIG0CO+7hZySdiJNOmXG RlL/jYlhPBQnUt10fe3L2Bp2awCtlqUVrdVubut/G9Zgo/wzs65o7Z5nB/OiGIYy eDTOSI5XJPUxs1/qExRbbB+O0+IdrlzrDmvX28um6HAl3zqVy/dZzqan5xr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgI185vjGIyH9abrgL3sZ7MOf74MwHwYDVR0j BBgwFoAUm3fVI+3CIYxl2rVbRTgUAkO36GIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzUwZjA3OC1jNTM1LTRmOGUtOTYwZi0zMmMxNjIzYWE0YjEvMC85Qjc3RDUyM0VE QzIyMThDNjVEQUI1NUI0NTM4MTQwMjQzQjdFODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0M0I3 RTg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0 MDI0M0I3RTg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPC74CSgRSwe/+/5lS5FE8HPbRoDKecvILK 5AqrpTNHvIRDCU991/uSuAL4WgUFH4ITDsVaWps5e1ZjEdc+kxu1suhcmBn4VXFs Um1XSo16DK56l/I3eetGiRzPjHqPggXmZ9T4WmYEFqA2g1gKREum/zawNkD24TDq PRAy/HisMTE0z6R8YI0/a3/4JOSDJVA7yi26PXUEwa4EoXZxxELnBY3DD/Ya4VY/ CyFVEgZtW8dv860ErILIfwVjjJlHZYXUbxWyaLdjw0DwCbznCfUgABciDh9vpV2i FsP34ASBSe7qXxOOqPLgr7y5Xt4Y+YnKjI1TzPjy5K1az6bb3XQ= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:07 2025 by rpki-client