$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft File: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft (raw, json) Hash identifier: ANSsjGbw264NwQJaW8G9jCjzd48gAO8ma91dHxZio90= Subject key identifier: BE:48:86:FD:20:0F:D7:FF:66:D5:10:EF:73:A3:65:71:F0:C0:AC:17 Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA Certificate issuer: /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Certificate serial: 0669FE8FD1CB8184B6BF376D2BA6CCFED0F09920 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft Manifest number: 0209 Signing time: Mon 03 Nov 2025 12:31:36 +0000 Manifest this update: Mon 03 Nov 2025 12:26:36 +0000 Manifest next update: Thu 06 Nov 2025 21:18:36 +0000 Files and hashes: 1: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (hash: mgkxr/SuMyMsRvRjiMcUueP3vdh3ZYSiC7xct6qMuK4=) 2: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (hash: vAIjmbx3dVuW8GpN3/fZq5ol916CeS6StRg+6uf/1t0=) 3: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (hash: F7Hvn3nr15WKTOMp+UJFZvJVrdndxdoOm2ecLXQTtiA=) 4: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl (hash: 0zeROq78ICMrFqBTHO3RV6H/bxQO8JNuR9OrYZ0D2TY=) 5: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (hash: VfFxxuazE0SD/9aiBAJNKHpH/m4/DEssj0TquLDvxPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:69:fe:8f:d1:cb:81:84:b6:bf:37:6d:2b:a6:cc:fe:d0:f0:99:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Validity Not Before: Nov 3 12:26:36 2025 GMT Not After : Nov 6 21:18:36 2025 GMT Subject: CN=BE4886FD200FD7FF66D510EF73A36571F0C0AC17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:61:03:fb:f4:93:f9:33:f6:96:c4:0e:45: 6c:33:52:6a:65:dc:00:df:8d:f4:fd:fa:14:10:a7: f8:34:70:0f:e9:0a:f8:b1:bd:2a:8b:ea:18:7c:a9: 12:5f:60:4c:13:15:d1:ce:af:43:5c:c6:b7:90:01: 7a:de:d5:c7:6a:8a:05:4b:9b:e8:f8:57:05:38:83: f9:8b:52:6c:22:ae:65:76:a1:5b:fe:6b:3f:f1:9f: d0:57:75:71:64:a9:90:84:19:7e:5c:fc:f4:a6:e6: a9:e6:f9:8e:bf:e3:c7:2c:28:6c:4f:f6:b9:31:c0: 1b:92:4c:47:ca:2d:08:26:15:b7:48:dd:5f:55:fa: aa:33:83:67:6f:93:46:20:df:17:e1:82:39:fe:d3: d9:04:87:a3:ad:ea:56:e9:57:57:4d:40:c3:3c:f8: 62:31:f3:29:f0:69:11:91:e3:cd:1c:d3:d8:78:5e: 74:e0:df:81:92:12:d3:33:df:e6:12:51:7b:68:3f: 56:89:bf:6c:fc:16:55:e8:cf:d4:1e:15:56:2a:93: 6c:54:20:9b:6d:cf:e9:6a:dc:65:d3:d6:ab:ae:3c: 02:62:8d:db:4b:60:48:21:45:d3:0b:74:d2:1a:58: 49:76:e0:77:c4:43:ba:eb:a6:b0:8a:76:32:bc:7c: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:48:86:FD:20:0F:D7:FF:66:D5:10:EF:73:A3:65:71:F0:C0:AC:17 X509v3 Authority Key Identifier: keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:7e:b6:55:3d:ca:4e:ec:b8:5b:af:38:3b:3b:7f:d6:9f:9d: 15:18:bf:28:92:12:04:d0:7f:15:ac:0d:49:da:f0:66:5a:ac: b0:7c:13:7c:a8:2d:18:3e:f7:ec:b2:de:f3:ab:41:eb:7c:b7: ff:27:7b:06:e5:0e:9e:ca:63:ca:97:58:1a:72:2d:4d:a0:35: 7b:e2:31:89:a5:38:97:63:14:0f:0c:40:73:b3:99:39:5a:87: 30:ac:30:d4:b4:ec:e4:6f:4f:d7:8d:17:7e:1e:7e:46:81:38: 81:ef:b0:fe:2d:f4:3f:91:ab:5b:a1:6c:22:28:4e:2c:b3:64: 7d:28:b3:70:16:c0:e2:a6:73:c1:1f:45:d8:99:f4:91:ac:60: 85:d1:e2:02:c8:df:91:12:74:71:cf:82:e1:ba:2e:df:67:a5: 4e:85:bc:0f:5e:d5:31:b7:ec:24:6e:54:83:65:ce:21:ce:0b: 58:1e:34:3d:79:79:13:11:e4:85:94:4c:e5:16:d0:92:cd:af: 2d:ad:ff:36:82:9a:f9:c6:64:63:eb:f8:5c:56:01:5a:60:46: 07:1e:8d:b6:29:a0:5d:5e:d7:e4:34:5f:1f:8d:60:ab:b9:8e: 73:b6:4d:9b:12:2c:30:48:0c:97:30:c6:4b:64:45:ee:85:51: 50:be:8d:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBmn+j9HLgYS2vzdtK6bM/tDwmSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz OTE3OTJFQTAeFw0yNTExMDMxMjI2MzZaFw0yNTExMDYyMTE4MzZaMDMxMTAvBgNV BAMTKEJFNDg4NkZEMjAwRkQ3RkY2NkQ1MTBFRjczQTM2NTcxRjBDMEFDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQoWED+/ST+TP2lsQORWwzUmpl 3ADfjfT9+hQQp/g0cA/pCvixvSqL6hh8qRJfYEwTFdHOr0NcxreQAXre1cdqigVL m+j4VwU4g/mLUmwirmV2oVv+az/xn9BXdXFkqZCEGX5c/PSm5qnm+Y6/48csKGxP 9rkxwBuSTEfKLQgmFbdI3V9V+qozg2dvk0Yg3xfhgjn+09kEh6Ot6lbpV1dNQMM8 +GIx8ynwaRGR480c09h4XnTg34GSEtMz3+YSUXtoP1aJv2z8FlXoz9QeFVYqk2xU IJttz+lq3GXT1quuPAJijdtLYEghRdMLdNIaWEl24HfEQ7rrprCKdjK8fCJbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvkiG/SAP1/9m1RDvc6NlcfDArBcwHwYDVR0j BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0 N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3 OTJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUxN2ZlOTgtOGY1OC00OTdmLWJl NTctODY2NWE3YTA0YmIwLzAvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQw QTEzOTE3OTJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHd+tlU9yk7suFuvODs7f9afnRUYvyiSEgTQ fxWsDUna8GZarLB8E3yoLRg+9+yy3vOrQet8t/8newblDp7KY8qXWBpyLU2gNXvi MYmlOJdjFA8MQHOzmTlahzCsMNS07ORvT9eNF34efkaBOIHvsP4t9D+Rq1uhbCIo TiyzZH0os3AWwOKmc8EfRdiZ9JGsYIXR4gLI35ESdHHPguG6Lt9npU6FvA9e1TG3 7CRuVINlziHOC1geND15eRMR5IWUTOUW0JLNry2t/zaCmvnGZGPr+FxWAVpgRgce jbYpoF1e1+Q0Xx+NYKu5jnO2TZsSLDBIDJcwxktkRe6FUVC+jWU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:43:27 2025 by rpki-client