$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft File: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft (raw, json) Hash identifier: K+OIX01TfW0x7UWDbWjKHQRw7zzHzlK8YxRXTNWb7CM= Subject key identifier: D9:43:C1:25:F4:66:96:B2:92:E8:F9:36:67:F0:A0:95:C3:C4:32:75 Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 Certificate issuer: /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Certificate serial: 7E150DBFB49C5FA3A02EC33B55A2EF3BEE33AB78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft Manifest number: EC Signing time: Sat 18 Oct 2025 05:31:03 +0000 Manifest this update: Sat 18 Oct 2025 05:26:03 +0000 Manifest next update: Tue 21 Oct 2025 12:13:03 +0000 Files and hashes: 1: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl (hash: 5iQxwdwanb6YESPfd6oJZ68sy0eeeWE9eSSxpqnIYrA=) 2: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: DWvVDDRpAMOpRUqp8QzsrLlGUPEfbewyxxzSjcofq2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:15:0d:bf:b4:9c:5f:a3:a0:2e:c3:3b:55:a2:ef:3b:ee:33:ab:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Validity Not Before: Oct 18 05:26:03 2025 GMT Not After : Oct 21 12:13:03 2025 GMT Subject: CN=D943C125F46696B292E8F93667F0A095C3C43275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:cc:91:bd:05:0c:b6:3a:3d:05:7a:03:4d: 3e:42:e6:ca:aa:0e:a4:46:28:e6:e6:0f:5b:1b:59: 2b:46:30:87:20:3d:65:cd:2c:62:1e:58:1d:cd:13: 0c:ba:e3:d5:a4:94:6a:c6:98:c8:57:88:fd:46:68: 37:4b:2b:81:60:98:e0:50:07:f8:ac:46:e0:6b:8d: c5:26:6d:0a:f0:65:05:9b:c4:b7:b2:74:3e:aa:52: 4e:d4:4b:67:bb:28:39:33:01:af:83:24:96:45:77: 73:7b:e2:d5:62:13:76:8e:19:5b:4a:1c:e5:91:b3: 09:fc:a6:2f:63:62:f6:89:e4:d2:e1:b1:26:1c:be: f9:12:dd:b2:2b:3d:17:b6:3d:f2:db:fb:c5:11:ff: 95:1f:41:df:ad:2d:09:f8:e1:0d:5f:d7:43:a7:78: f3:ff:65:a7:41:27:8e:a5:ac:d1:f5:0c:8c:82:4d: 10:aa:dd:32:a7:77:20:cd:34:50:8d:6f:90:e3:01: 05:a7:50:54:ef:00:12:87:36:30:8f:f5:02:60:0d: b2:94:5a:82:23:f8:7c:7d:77:7d:2d:49:43:94:51: c5:31:f9:46:c4:24:44:30:79:55:73:3e:49:32:c2: d8:f2:08:c8:08:3d:99:43:10:9b:09:41:12:86:ab: a1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:43:C1:25:F4:66:96:B2:92:E8:F9:36:67:F0:A0:95:C3:C4:32:75 X509v3 Authority Key Identifier: keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:05:89:79:7e:6c:8a:17:ea:11:31:9b:c2:a5:ef:bf:43:8f: f7:b5:c0:8f:55:98:bf:84:ed:2a:59:c6:e0:fc:bb:1c:83:8f: 19:41:f8:09:12:6f:29:84:14:d4:4b:14:24:5a:81:35:88:d6: 6e:a8:03:fc:0d:10:4f:07:52:00:38:5d:78:fd:97:36:a8:ee: 66:59:b2:fb:fe:2f:2b:d8:ac:83:b7:3c:11:f7:cb:0f:d6:44: 67:65:63:ce:08:47:1b:e7:55:23:8a:ba:eb:35:f4:d3:26:79: aa:a3:79:b9:a0:89:59:a2:c8:01:3d:c9:e3:7c:55:76:2d:3e: 85:d8:27:ae:fd:42:78:cb:2e:94:28:b2:52:ad:b3:0e:f9:2c: 30:2c:c1:f7:50:48:39:42:d0:ed:f1:0a:3b:86:dd:10:8a:f5: 19:76:eb:c6:bf:13:76:b5:04:9b:ff:15:52:77:1e:97:1e:2d: 4b:65:f3:c8:8c:9a:a8:79:8f:e1:8d:8a:9b:78:47:b4:07:72: c9:fb:ee:3b:e4:09:28:46:1e:2e:3a:ef:b5:2d:bf:c2:60:f1: cd:78:2c:19:f3:b0:00:6a:08:e3:d5:47:8c:5f:3a:ff:15:a5: 19:06:c2:e4:1d:16:80:a0:c4:65:05:eb:32:63:28:95:f7:33: 91:64:d4:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhUNv7ScX6OgLsM7VaLvO+4zq3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJF QTg4OEYwNDAeFw0yNTEwMTgwNTI2MDNaFw0yNTEwMjExMjEzMDNaMDMxMTAvBgNV BAMTKEQ5NDNDMTI1RjQ2Njk2QjI5MkU4RjkzNjY3RjBBMDk1QzNDNDMyNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAsyRvQUMtjo9BXoDTT5C5sqq DqRGKObmD1sbWStGMIcgPWXNLGIeWB3NEwy649WklGrGmMhXiP1GaDdLK4FgmOBQ B/isRuBrjcUmbQrwZQWbxLeydD6qUk7US2e7KDkzAa+DJJZFd3N74tViE3aOGVtK HOWRswn8pi9jYvaJ5NLhsSYcvvkS3bIrPRe2PfLb+8UR/5UfQd+tLQn44Q1f10On ePP/ZadBJ46lrNH1DIyCTRCq3TKndyDNNFCNb5DjAQWnUFTvABKHNjCP9QJgDbKU WoIj+Hx9d30tSUOUUcUx+UbEJEQweVVzPkkywtjyCMgIPZlDEJsJQRKGq6ElAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2UPBJfRmlrKS6Pk2Z/CglcPEMnUwHwYDVR0j BBgwFoAUl3dv/wK5D/wXtligsaWY2+qIjwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMS85Nzc3NkZGRjAy QjkwRkZDMTdCNjU4QTBCMUE1OThEQkVBODg4RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJFQTg4 OEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzEvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4 REJFQTg4OEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsFiXl+bIoX6hExm8Kl779Dj/e1wI9VmL+E 7SpZxuD8uxyDjxlB+AkSbymEFNRLFCRagTWI1m6oA/wNEE8HUgA4XXj9lzao7mZZ svv+LyvYrIO3PBH3yw/WRGdlY84IRxvnVSOKuus19NMmeaqjebmgiVmiyAE9yeN8 VXYtPoXYJ679QnjLLpQoslKtsw75LDAswfdQSDlC0O3xCjuG3RCK9Rl268a/E3a1 BJv/FVJ3HpceLUtl88iMmqh5j+GNipt4R7QHcsn77jvkCShGHi4677Utv8Jg8c14 LBnzsABqCOPVR4xfOv8VpRkGwuQdFoCgxGUF6zJjKJX3M5Fk1EA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:51 2025 by rpki-client