$ rpki-client -vvf repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft File: 277D3C0811B597BC22847329E543CCEE7E2449A0.mft (raw, json) Hash identifier: zFsNMbdTBLMo2LZnI75t/ra1GXZYVy0hs40x936sWXU= Subject key identifier: F5:61:CA:37:B7:26:23:2C:64:BA:41:C0:17:CA:31:46:41:18:66:B7 Authority key identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 Certificate issuer: /CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Certificate serial: 1155B85B69924446AC98FFCA40B9CF4F37AAB925 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft Manifest number: CE Signing time: Sun 19 Oct 2025 13:50:55 +0000 Manifest this update: Sun 19 Oct 2025 13:45:55 +0000 Manifest next update: Wed 22 Oct 2025 15:37:55 +0000 Files and hashes: 1: 277D3C0811B597BC22847329E543CCEE7E2449A0.crl (hash: fH3ed4RX0QJQ6CaCPyCMtgcp/N+/6gNgbu/D02HujNE=) 2: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: fefCWKXr30YVqWiq342VlH8lfhnIRdZEARC93/LTaB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:55:b8:5b:69:92:44:46:ac:98:ff:ca:40:b9:cf:4f:37:aa:b9:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Validity Not Before: Oct 19 13:45:55 2025 GMT Not After : Oct 22 15:37:55 2025 GMT Subject: CN=F561CA37B726232C64BA41C017CA3146411866B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:c8:7c:55:16:d9:48:bf:1f:0a:c6:70:a6: 41:a3:16:6f:fa:cc:6c:b5:f4:37:12:33:c6:b6:3d: c4:c2:8c:66:2b:da:15:cb:40:cb:67:b5:63:5f:c8: 7f:76:be:bd:93:9c:0f:f1:bc:12:9f:ef:80:87:44: 9d:6d:db:1a:79:0f:96:3e:33:6a:7b:0f:3c:62:cf: ff:fa:79:6b:76:ed:6d:d4:ce:30:84:14:f0:da:c0: 05:89:46:e4:84:7c:ea:3b:0b:4f:2c:b5:f6:ca:da: c6:da:eb:78:75:db:8d:f3:81:5a:e6:63:25:d5:33: 94:cf:af:e4:35:fd:68:e9:1a:ed:54:d4:86:a4:90: 9f:ca:03:67:a8:81:14:d1:51:fe:ac:be:f6:47:1e: 79:7b:57:78:c1:0a:03:22:db:54:c5:86:78:be:28: 75:2f:ee:68:c7:3f:a3:e2:24:00:0d:0f:db:83:2d: 3a:30:1a:88:f9:cb:d0:70:e9:02:45:e3:a4:f3:49: e3:99:23:f2:6a:0d:ba:fa:5b:e9:cb:16:14:6a:46: 28:01:f3:d6:2b:d4:c5:68:24:94:a6:8e:da:83:2f: ed:b3:ee:b6:57:6b:db:7b:58:88:ec:4e:f6:23:3a: 63:d3:8e:85:d0:07:45:01:ae:b9:9d:2b:01:6d:87: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:61:CA:37:B7:26:23:2C:64:BA:41:C0:17:CA:31:46:41:18:66:B7 X509v3 Authority Key Identifier: keyid:27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:67:fb:53:a4:1a:bd:b8:29:95:c3:1e:05:26:b1:44:83:45: 1f:d2:57:74:9b:0d:46:b4:f1:7f:95:dc:93:fa:e8:0e:24:79: 2d:2a:ae:49:18:e1:7b:47:f0:d5:f4:30:3a:54:bc:7e:02:52: 04:85:6d:e3:73:98:11:d9:2a:b0:d2:f1:36:6c:ed:7e:35:73: 18:c9:9d:28:38:d5:11:f6:d0:3f:84:5e:27:97:37:37:d7:2f: ce:0b:16:67:a4:c9:7e:e3:d6:d1:9c:41:66:7b:23:a3:06:21: 7f:21:bf:32:ac:8e:98:4e:f7:bf:54:33:b8:64:17:0e:f8:f1: 02:00:43:b2:aa:e1:d8:53:aa:ae:dd:50:3c:c5:8c:2b:28:4e: 44:cd:d5:bb:9a:f0:ad:70:a5:73:00:4b:f6:4b:13:b6:79:79: a7:7f:1d:e0:2f:ec:a3:f6:b3:68:b1:09:1e:6e:42:c2:03:65: 7a:b2:d6:7b:5a:b1:5f:a5:9d:7d:0c:39:26:98:38:81:28:74: ac:1c:c2:a9:ef:f3:b8:a5:72:1a:f0:7e:23:e0:9c:35:3e:fc: 3c:8f:e5:50:7f:77:f2:68:f5:e9:c9:5a:6b:8e:1b:17:ae:35: 1d:77:0c:d2:5f:6c:78:63:9e:fb:42:d4:f6:d1:ff:9d:ff:66: a9:df:95:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVW4W2mSREasmP/KQLnPTzequSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3 RTI0NDlBMDAeFw0yNTEwMTkxMzQ1NTVaFw0yNTEwMjIxNTM3NTVaMDMxMTAvBgNV BAMTKEY1NjFDQTM3QjcyNjIzMkM2NEJBNDFDMDE3Q0EzMTQ2NDExODY2QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOWch8VRbZSL8fCsZwpkGjFm/6 zGy19DcSM8a2PcTCjGYr2hXLQMtntWNfyH92vr2TnA/xvBKf74CHRJ1t2xp5D5Y+ M2p7Dzxiz//6eWt27W3UzjCEFPDawAWJRuSEfOo7C08stfbK2sba63h1243zgVrm YyXVM5TPr+Q1/WjpGu1U1IakkJ/KA2eogRTRUf6svvZHHnl7V3jBCgMi21TFhni+ KHUv7mjHP6PiJAAND9uDLTowGoj5y9Bw6QJF46TzSeOZI/JqDbr6W+nLFhRqRigB 89Yr1MVoJJSmjtqDL+2z7rZXa9t7WIjsTvYjOmPTjoXQB0UBrrmdKwFth45PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9WHKN7cmIyxkukHAF8oxRkEYZrcwHwYDVR0j BBgwFoAUJ308CBG1l7wihHMp5UPM7n4kSaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzgyNTlkNi0yNjU1LTQ0MTctYmVjNC04M2VmNjY0NGY1N2UvMC8yNzdEM0MwODEx QjU5N0JDMjI4NDczMjlFNTQzQ0NFRTdFMjQ0OUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3RTI0 NDlBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc4MjU5ZDYtMjY1NS00NDE3LWJl YzQtODNlZjY2NDRmNTdlLzAvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0ND RUU3RTI0NDlBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhn+1OkGr24KZXDHgUmsUSDRR/SV3SbDUa0 8X+V3JP66A4keS0qrkkY4XtH8NX0MDpUvH4CUgSFbeNzmBHZKrDS8TZs7X41cxjJ nSg41RH20D+EXieXNzfXL84LFmekyX7j1tGcQWZ7I6MGIX8hvzKsjphO979UM7hk Fw748QIAQ7Kq4dhTqq7dUDzFjCsoTkTN1bua8K1wpXMAS/ZLE7Z5ead/HeAv7KP2 s2ixCR5uQsIDZXqy1ntasV+lnX0MOSaYOIEodKwcwqnv87ilchrwfiPgnDU+/DyP 5VB/d/Jo9enJWmuOGxeuNR13DNJfbHhjnvtC1PbR/53/ZqnfldU= -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:28 2025 by rpki-client