$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: IH/Nz7gc5pWzGFZ6Df3vA4GLabVt7Psn7dT1bGtmiJ8= Subject key identifier: AA:50:85:F5:1C:F1:BD:96:9A:98:58:74:D6:2B:F9:66:0B:43:85:86 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 3ABA92E1706CF2E564EDE377A5412F827E5EFBDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: 014E Signing time: Sun 02 Nov 2025 10:51:25 +0000 Manifest this update: Sun 02 Nov 2025 10:46:25 +0000 Manifest next update: Wed 05 Nov 2025 13:03:25 +0000 Files and hashes: 1: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: AZoj+0FC7tr+2ZKJboWJyczOYWAwC/zNvBvRBqK06eM=) 2: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: A0yVkR7d4Eq2R3etoYrYn+jBMeiuhOcYSkT1xKfVv5Y=) 3: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: aAQ3gTdw9Ba4EyqO5leg/m+5A85FY5W+Vc3itSgQl30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 13:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ba:92:e1:70:6c:f2:e5:64:ed:e3:77:a5:41:2f:82:7e:5e:fb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Nov 2 10:46:25 2025 GMT Not After : Nov 5 13:03:25 2025 GMT Subject: CN=AA5085F51CF1BD969A985874D62BF9660B438586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:4a:af:19:06:7e:77:1f:76:6b:84:14:9e: 86:09:08:4c:a3:e4:cd:18:be:f7:e5:a8:71:0f:ac: ed:c0:b5:1c:29:c4:be:d2:95:01:63:cd:03:22:2e: 46:59:30:61:51:e0:7e:eb:f4:44:5f:2f:81:37:eb: 5f:46:e1:d2:1a:56:7d:15:c7:d0:18:c6:e6:b5:c0: 52:c3:35:e4:25:23:ac:4a:4b:0f:0c:2b:fb:bb:91: 15:76:ec:97:ff:36:06:6f:cb:35:52:fb:6e:47:5e: 7b:9d:33:e4:9a:7c:52:6d:7a:3f:47:a0:98:22:e3: 53:d0:15:e3:29:0c:ea:aa:9f:7b:5a:24:46:8d:9f: e8:78:a5:30:ee:f6:0f:7a:90:08:7e:07:4e:8a:16: bc:42:d7:89:b4:02:fc:5e:81:fd:30:d0:5f:90:94: a7:ed:be:92:f7:9b:50:e5:b4:fe:0c:0f:48:ad:a6: b2:ca:4c:e6:5e:71:8d:87:ac:34:7b:27:da:a3:73: fe:01:d2:19:be:a3:5b:74:5f:93:6b:f9:70:ab:3f: f9:85:1f:b9:0b:1b:86:41:6c:ed:8f:56:1a:d9:fe: a3:55:bb:ad:d1:f0:bf:e2:d4:b7:18:3f:85:3a:9d: cc:f9:e6:53:b9:0c:09:c6:52:22:c6:9c:1c:d6:b6: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:50:85:F5:1C:F1:BD:96:9A:98:58:74:D6:2B:F9:66:0B:43:85:86 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:92:c6:fd:8c:56:24:dd:4a:97:68:2d:79:a2:eb:d9:2d:93: 37:f9:6c:18:35:f8:4f:2c:d5:0e:c6:33:7a:93:cc:11:ef:5d: 33:97:97:bc:41:26:8a:09:81:21:28:c5:6f:ad:c7:26:a1:b9: 60:5f:ab:c2:8e:b7:a8:d0:ec:5f:00:00:14:bb:91:d5:fc:5e: 52:56:85:d2:d5:a2:b7:b9:34:d8:38:ae:b3:54:7b:15:b1:59: 98:e6:9c:6d:fc:84:dd:0d:9d:86:fc:aa:38:dd:36:54:ac:fb: d7:8b:2b:26:5b:d5:b6:ec:87:20:b4:e6:6f:96:be:28:f5:56: dd:17:4b:18:45:97:65:ad:77:25:62:b0:a2:79:fb:f6:38:c4: a1:f1:1c:ae:90:5f:09:06:33:5a:11:7e:a6:8b:ed:93:5b:f9: 38:92:b3:d5:be:09:87:1b:de:89:17:45:79:e5:f2:90:90:bb: 01:a6:a5:bc:dc:96:82:68:36:a7:12:61:35:8f:87:45:14:f0: a8:71:f8:dc:0d:1b:22:36:d5:4c:71:80:b2:93:e3:53:a4:d3: a4:25:c2:0a:2b:4f:7e:66:62:3c:df:33:97:01:52:15:e1:be: c8:df:62:a5:57:86:88:1e:b4:54:f8:35:62:7a:aa:41:05:74: 4a:36:4c:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrqS4XBs8uVk7eN3pUEvgn5e+9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNTExMDIxMDQ2MjVaFw0yNTExMDUxMzAzMjVaMDMxMTAvBgNV BAMTKEFBNTA4NUY1MUNGMUJEOTY5QTk4NTg3NEQ2MkJGOTY2MEI0Mzg1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJEqvGQZ+dx92a4QUnoYJCEyj 5M0YvvflqHEPrO3AtRwpxL7SlQFjzQMiLkZZMGFR4H7r9ERfL4E3619G4dIaVn0V x9AYxua1wFLDNeQlI6xKSw8MK/u7kRV27Jf/NgZvyzVS+25HXnudM+SafFJtej9H oJgi41PQFeMpDOqqn3taJEaNn+h4pTDu9g96kAh+B06KFrxC14m0Avxegf0w0F+Q lKftvpL3m1DltP4MD0itprLKTOZecY2HrDR7J9qjc/4B0hm+o1t0X5Nr+XCrP/mF H7kLG4ZBbO2PVhrZ/qNVu63R8L/i1LcYP4U6ncz55lO5DAnGUiLGnBzWttrtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqlCF9RzxvZaamFh01iv5ZgtDhYYwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCSxv2MViTdSpdoLXmi69ktkzf5bBg1+E8s 1Q7GM3qTzBHvXTOXl7xBJooJgSEoxW+txyahuWBfq8KOt6jQ7F8AABS7kdX8XlJW hdLVore5NNg4rrNUexWxWZjmnG38hN0NnYb8qjjdNlSs+9eLKyZb1bbshyC05m+W vij1Vt0XSxhFl2WtdyVisKJ5+/Y4xKHxHK6QXwkGM1oRfqaL7ZNb+TiSs9W+CYcb 3okXRXnl8pCQuwGmpbzcloJoNqcSYTWPh0UU8Khx+NwNGyI21UxxgLKT41Ok06Ql wgorT35mYjzfM5cBUhXhvsjfYqVXhogetFT4NWJ6qkEFdEo2TP0= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:24 2025 by rpki-client