$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft File: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft (raw, json) Hash identifier: N/JgSQbT75fsflDot+XiTkHc8MJn5qNAtsV4QZKKhqE= Subject key identifier: 67:C8:AF:C5:96:1D:A7:21:F1:9C:61:28:C6:19:04:12:0B:59:B6:5E Authority key identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B Certificate issuer: /CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Certificate serial: 11B82FF222C0646409D799E7E2B2B4AB0F933125 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft Manifest number: FB Signing time: Sat 18 Oct 2025 21:21:40 +0000 Manifest this update: Sat 18 Oct 2025 21:16:40 +0000 Manifest next update: Wed 22 Oct 2025 09:17:40 +0000 Files and hashes: 1: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl (hash: mdUT+WndYGqh16l1bDc1R0n+5R876kbOFwnuRsDpOqM=) 2: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: mBt52f39yB2WTMjY8yTiBWW7j1vK6aWMbOkMPXZ1lgU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b8:2f:f2:22:c0:64:64:09:d7:99:e7:e2:b2:b4:ab:0f:93:31:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Validity Not Before: Oct 18 21:16:40 2025 GMT Not After : Oct 22 09:17:40 2025 GMT Subject: CN=67C8AFC5961DA721F19C6128C61904120B59B65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:72:e3:7b:2f:92:6c:20:c1:5e:8e:bc:02: b6:59:73:d0:af:3c:78:8f:35:e3:0e:58:5e:dc:e2: 02:54:1b:02:c3:91:a3:be:c5:d8:60:ed:5e:e0:fd: e3:c2:a7:ce:3d:c0:af:9c:fc:10:71:02:2b:18:9e: 1c:73:7e:0e:2c:28:cc:8e:ea:13:28:f5:e4:31:3b: 7e:a4:95:65:03:f9:24:73:a9:63:c7:13:cd:c1:43: b0:a8:8b:ab:85:76:56:43:50:8d:0a:a5:85:dd:43: 0c:ef:4a:d1:25:0a:66:07:40:c3:ae:87:d0:c7:1a: e2:33:e6:7f:55:c4:32:7b:85:af:cd:b2:19:98:dc: 96:cd:aa:1b:0d:7e:12:de:21:fb:11:1f:a3:b3:16: f4:91:15:44:41:15:29:83:13:a7:43:2a:8a:cf:69: 30:d1:98:c4:2e:9c:a0:d2:b6:13:ab:1d:2d:aa:a6: 4c:79:0e:d0:89:6a:70:47:71:39:44:73:dd:45:86: 6b:8b:86:9f:05:a6:34:aa:30:28:80:cc:27:c3:2d: fb:ac:78:97:11:5e:fb:e0:8b:2d:b9:c7:7d:19:64: 12:36:d7:0c:ad:18:42:bb:de:d4:7e:58:1a:dd:3e: ce:69:03:38:66:ae:ac:0c:f7:85:40:39:df:2e:40: fd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C8:AF:C5:96:1D:A7:21:F1:9C:61:28:C6:19:04:12:0B:59:B6:5E X509v3 Authority Key Identifier: keyid:77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:1a:8c:9a:df:b0:b4:1b:43:40:92:2c:fd:b5:63:bc:c7:12: 68:64:e7:ce:de:aa:e4:ef:fa:d2:71:11:b0:1f:55:90:e3:f5: 01:4a:24:19:2f:ba:61:01:cd:66:9b:3c:4a:73:58:b3:ad:64: fb:d2:96:b7:b7:0a:ac:46:1f:19:27:79:5a:b9:81:17:91:91: ee:1e:3f:56:b4:d5:84:ff:ef:32:40:98:50:7a:0d:70:a5:2e: 8e:31:74:ac:7f:cb:35:7e:cb:31:ea:ae:68:ed:77:c5:f6:58: 49:23:e4:3d:07:55:70:9e:d5:e0:fa:1e:12:5c:fc:21:b6:32: 47:0f:41:9d:8a:4c:dc:6f:d6:a4:ea:24:2f:bc:be:2f:f6:1c: 76:01:e7:d5:d2:f7:15:97:52:9c:f2:69:e5:aa:2d:4c:f2:ff: 6b:9a:19:2c:c0:79:ee:cf:6d:a4:d6:34:9b:54:28:93:1b:ba: d9:25:cd:c3:00:31:60:ee:a5:fc:69:ba:9c:7a:52:86:d2:bb: 6c:35:71:e9:3a:31:1f:67:5c:bd:aa:f9:37:d1:e2:6a:02:96: df:91:18:a2:ae:ed:2b:da:fc:3e:52:f5:3c:cd:ca:d5:3a:d3: 9c:88:2f:73:d3:e5:49:22:ea:1c:d4:64:43:10:b3:f3:d8:64: 87:4a:1c:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbgv8iLAZGQJ15nn4rK0qw+TMSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIz NEZBMkQ4QjAeFw0yNTEwMTgyMTE2NDBaFw0yNTEwMjIwOTE3NDBaMDMxMTAvBgNV BAMTKDY3QzhBRkM1OTYxREE3MjFGMTlDNjEyOEM2MTkwNDEyMEI1OUI2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYkXLjey+SbCDBXo68ArZZc9Cv PHiPNeMOWF7c4gJUGwLDkaO+xdhg7V7g/ePCp849wK+c/BBxAisYnhxzfg4sKMyO 6hMo9eQxO36klWUD+SRzqWPHE83BQ7Coi6uFdlZDUI0KpYXdQwzvStElCmYHQMOu h9DHGuIz5n9VxDJ7ha/NshmY3JbNqhsNfhLeIfsRH6OzFvSRFURBFSmDE6dDKorP aTDRmMQunKDSthOrHS2qpkx5DtCJanBHcTlEc91FhmuLhp8FpjSqMCiAzCfDLfus eJcRXvvgiy25x30ZZBI21wytGEK73tR+WBrdPs5pAzhmrqwM94VAOd8uQP2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ8ivxZYdpyHxnGEoxhkEEgtZtl4wHwYDVR0j BBgwFoAUd6zxj1MX56IC5YPDxZwiMjT6LYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMC83N0FDRjE4RjUz MTdFN0EyMDJFNTgzQzNDNTlDMjIzMjM0RkEyRDhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIzNEZB MkQ4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzAvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIy MzIzNEZBMkQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgajJrfsLQbQ0CSLP21Y7zHEmhk587equTv +tJxEbAfVZDj9QFKJBkvumEBzWabPEpzWLOtZPvSlre3CqxGHxkneVq5gReRke4e P1a01YT/7zJAmFB6DXClLo4xdKx/yzV+yzHqrmjtd8X2WEkj5D0HVXCe1eD6HhJc /CG2MkcPQZ2KTNxv1qTqJC+8vi/2HHYB59XS9xWXUpzyaeWqLUzy/2uaGSzAee7P baTWNJtUKJMbutklzcMAMWDupfxpupx6UobSu2w1cek6MR9nXL2q+TfR4moClt+R GKKu7Sva/D5S9TzNytU605yIL3PT5Uki6hzUZEMQs/PYZIdKHOI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:16 2025 by rpki-client