$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: RwCHQA2jZJAsLlbMEJPSliZ1SncU54rCDbXhTuLVhvs= Subject key identifier: 1F:00:FB:CF:F2:8F:8D:85:95:C7:E1:E4:69:4B:45:8A:F1:00:70:8F Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 263C0F1FAD0722C5DFEC174970CBA17203AB6871 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 01E2 Signing time: Tue 04 Nov 2025 15:31:15 +0000 Manifest this update: Tue 04 Nov 2025 15:26:15 +0000 Manifest next update: Sat 08 Nov 2025 01:13:15 +0000 Files and hashes: 1: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: stIIdICFAUmmjPJbZPuus0zTsstOOiSfpPEmNfACiJs=) 2: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: 8mjmpW7RYMOWsSNzxWwOPGXAxzEabqg2kOOaFNtgh7Q=) 3: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: j8MhQFCNNpgWTqqvo4wUA4sj1OS1sCETyG/kmulGJXY=) 4: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3c:0f:1f:ad:07:22:c5:df:ec:17:49:70:cb:a1:72:03:ab:68:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Nov 4 15:26:15 2025 GMT Not After : Nov 8 01:13:15 2025 GMT Subject: CN=1F00FBCFF28F8D8595C7E1E4694B458AF100708F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:10:ef:8b:4f:12:49:3e:f2:2c:c2:1a:aa: 2a:eb:f6:7e:84:99:04:75:96:bf:2c:ff:82:9f:29: ee:32:51:a7:1d:53:e9:d9:40:07:93:a8:d2:56:49: 47:2e:55:2c:5b:bf:86:7b:a9:05:de:12:51:55:e3: f9:02:77:14:97:18:f7:4f:92:f4:fc:27:2c:09:21: 82:90:63:02:dd:c0:71:61:11:4a:d5:28:6f:53:6d: c3:aa:84:75:f6:0b:b2:1d:c6:59:ac:39:c7:97:f7: 70:7f:73:e4:b3:0e:5e:05:4b:d1:e4:d6:3a:bb:db: 88:ae:7f:d8:20:14:d0:f5:e5:16:b4:66:bd:84:56: 89:8c:c2:1e:cd:ae:7a:e4:46:8e:2e:ef:13:b6:15: 05:7a:f2:7e:8e:75:59:65:15:35:b7:21:ef:a5:30: c9:0a:30:88:28:ec:42:67:2d:08:52:ee:7c:c8:6d: e9:b6:50:a0:93:37:c7:77:56:0e:38:12:41:0d:25: d2:fe:04:ae:4a:28:23:e4:8b:f6:dd:2c:f5:f4:77: d0:45:82:0f:ce:10:2e:7b:22:a5:c3:3c:1e:78:85: 7e:af:de:cf:9b:e0:57:bc:fa:f1:4f:37:6d:77:90: 7a:49:b8:3e:e0:32:f1:6a:b5:5c:4f:cc:a8:e5:b6: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:FB:CF:F2:8F:8D:85:95:C7:E1:E4:69:4B:45:8A:F1:00:70:8F X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:7f:a3:d8:08:38:c4:5c:76:be:57:f4:84:45:c6:c9:1c:ea: 3f:b1:6e:b0:82:89:39:8d:c7:7e:7d:d0:13:47:9e:1d:33:8d: 51:48:8c:31:96:eb:87:e0:32:7f:7f:76:b5:b1:de:62:18:f6: 40:cb:da:bb:7e:2a:05:c7:14:5b:0e:78:8d:f3:9b:b8:8b:9b: 4a:4b:05:35:88:7b:95:70:b1:3d:77:6a:b2:1a:20:bf:dc:43: 51:11:6e:10:eb:7d:05:02:79:b1:03:f8:89:0a:25:97:2c:2c: 17:f9:c7:53:e4:fb:67:e6:9d:21:78:14:0a:ef:c3:a8:ee:27: 43:8f:28:2c:f4:29:95:40:be:f2:80:3c:53:36:d5:0a:9f:7c: 80:fb:45:30:14:17:56:7b:8a:a5:6a:ef:84:3b:60:e5:f5:7f: 90:0e:fc:ad:59:11:e0:7e:09:a0:9f:fa:16:43:b2:bb:e1:25: bf:e4:66:d2:00:aa:ba:55:db:e1:a1:56:88:78:e0:a9:b9:c2: 98:49:26:25:5e:b4:db:d0:78:9c:2d:c6:96:d1:d1:46:35:37: d3:49:25:e7:b6:78:7e:55:55:0e:b1:da:88:5c:b2:39:2a:6c: 00:ae:8b:fb:10:b4:f0:89:bb:78:a3:26:6b:ef:e1:b6:ea:c2: bf:4c:d2:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjwPH60HIsXf7BdJcMuhcgOraHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNTExMDQxNTI2MTVaFw0yNTExMDgwMTEzMTVaMDMxMTAvBgNV BAMTKDFGMDBGQkNGRjI4RjhEODU5NUM3RTFFNDY5NEI0NThBRjEwMDcwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+jxDvi08SST7yLMIaqirr9n6E mQR1lr8s/4KfKe4yUacdU+nZQAeTqNJWSUcuVSxbv4Z7qQXeElFV4/kCdxSXGPdP kvT8JywJIYKQYwLdwHFhEUrVKG9TbcOqhHX2C7IdxlmsOceX93B/c+SzDl4FS9Hk 1jq724iuf9ggFND15Ra0Zr2EVomMwh7NrnrkRo4u7xO2FQV68n6OdVllFTW3Ie+l MMkKMIgo7EJnLQhS7nzIbem2UKCTN8d3Vg44EkENJdL+BK5KKCPki/bdLPX0d9BF gg/OEC57IqXDPB54hX6v3s+b4Fe8+vFPN213kHpJuD7gMvFqtVxPzKjltjJHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHwD7z/KPjYWVx+HkaUtFivEAcI8wHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANh/o9gIOMRcdr5X9IRFxskc6j+xbrCCiTmN x3590BNHnh0zjVFIjDGW64fgMn9/drWx3mIY9kDL2rt+KgXHFFsOeI3zm7iLm0pL BTWIe5VwsT13arIaIL/cQ1ERbhDrfQUCebED+IkKJZcsLBf5x1Pk+2fmnSF4FArv w6juJ0OPKCz0KZVAvvKAPFM21QqffID7RTAUF1Z7iqVq74Q7YOX1f5AO/K1ZEeB+ CaCf+hZDsrvhJb/kZtIAqrpV2+GhVoh44Km5wphJJiVetNvQeJwtxpbR0UY1N9NJ Jee2eH5VVQ6x2ohcsjkqbACui/sQtPCJu3ijJmvv4bbqwr9M0k0= -----END CERTIFICATE-----Generated at Tue Nov 4 20:19:34 2025 by rpki-client