$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json) Hash identifier: ry57n0C6lnxoM3HPkH5q0m9PIQl16VgjexVtwIUZCO4= Subject key identifier: ED:6B:1B:13:FC:34:AE:EA:55:22:75:D2:F5:C0:52:58:10:91:D5:2F Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 27C222D1E97DA7133A802EC8029870060BEEE593 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft Manifest number: 0195 Signing time: Sat 18 Oct 2025 04:02:25 +0000 Manifest this update: Sat 18 Oct 2025 03:57:25 +0000 Manifest next update: Tue 21 Oct 2025 15:25:25 +0000 Files and hashes: 1: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: 6YzS+F2/KMxBOaQNagAF7PBVrf1V/uY6J6aAFNQtDzk=) 2: 3131372e3130332e3131362e302f32342d3234203d3e20313339333838.roa (hash: SSiq3G+RuqOFkkVg6s948sz9LneDSoc/8S7pdjqZm9U=) 3: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: GBdm9qQ0p29KR8e28QB9UjrYbB7/EDKaMJEitqFkR/M=) 4: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: Khtj9hE0U7S7GxsTQLAztRkAFMW84uHyWmMZ0EjXpnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c2:22:d1:e9:7d:a7:13:3a:80:2e:c8:02:98:70:06:0b:ee:e5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Oct 18 03:57:25 2025 GMT Not After : Oct 21 15:25:25 2025 GMT Subject: CN=ED6B1B13FC34AEEA552275D2F5C052581091D52F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:a9:5a:e1:b5:55:99:32:b6:99:93:bc:7f: ff:79:33:5a:2b:14:4e:0f:5d:c0:eb:19:c3:5c:2b: 1d:8d:be:63:ae:d8:8b:1d:e6:23:b8:81:5f:57:58: 9e:af:be:74:9b:58:8c:83:e2:c2:77:54:da:51:4b: 1e:20:b3:41:04:88:d5:df:36:5d:ff:73:cb:87:6d: bf:2c:81:f1:14:d6:c1:11:38:c7:7d:0c:25:25:95: 08:16:2c:e8:32:f6:77:98:6a:eb:0e:f3:a5:58:71: 06:c5:4f:f3:36:6c:cc:16:18:fd:92:8c:4e:3d:65: 47:b0:61:de:44:4d:a0:d7:04:76:34:91:46:db:75: 64:3c:f6:9f:35:97:37:5b:0c:e5:df:60:78:20:43: 61:ef:82:c4:e0:45:89:94:f4:75:33:74:2a:0d:89: 10:62:a3:83:3c:cb:f7:0f:f1:f4:f6:8b:5e:79:c5: 78:47:63:b8:72:26:e4:22:ed:ad:85:81:85:17:58: f5:6e:93:64:ac:53:e9:6d:6b:a8:b8:f0:18:f4:2e: f8:4f:ce:c9:0e:52:63:30:b8:eb:b1:4e:64:0a:62: ea:6e:24:23:7a:5d:09:8b:aa:fd:9d:52:d2:41:4e: d2:58:98:21:34:f4:4e:c2:49:ec:87:64:32:ef:07: 52:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6B:1B:13:FC:34:AE:EA:55:22:75:D2:F5:C0:52:58:10:91:D5:2F X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8e:26:b7:d7:f5:0b:a7:1f:52:77:fd:ea:1f:fe:12:4f:e9: 74:79:c2:0c:00:82:97:ff:3f:48:bb:71:f5:0d:7f:6f:ce:e5: 85:be:34:c1:0b:8a:22:9f:0d:ee:74:e0:aa:e3:39:b6:a3:8d: db:0c:f6:1c:3f:db:0b:2d:6e:4b:c7:af:43:b9:fa:dc:6a:a8: e6:d9:4a:7c:ac:28:e4:77:ef:8b:63:ec:79:10:72:f8:73:86: b6:d0:3b:c5:a8:c0:41:b4:2d:59:a6:49:68:3d:a9:cb:83:03: 72:13:da:0e:42:26:c6:7d:eb:40:87:44:af:fa:cc:08:79:bb: 94:99:3c:84:bc:71:7c:82:d6:36:f1:80:42:cd:3d:1a:28:ec: f8:53:be:e5:15:10:7a:ee:db:67:19:eb:95:a7:ca:a8:96:cf: 81:f1:28:67:70:dd:dc:20:0c:fa:32:87:fa:65:b7:04:4e:6b: cd:64:53:8d:b2:6e:de:c0:f6:ff:57:a2:5f:9f:7b:71:fe:57: 82:00:8b:ba:4b:ad:8c:45:fd:9e:59:eb:26:ba:18:30:3b:3b: 69:48:11:8e:f8:37:d4:08:1f:06:35:83:a6:ac:f0:03:e4:e3: 86:b5:d9:79:97:a3:2c:76:d0:4b:c9:9e:26:f0:61:0b:fc:03: 4e:b1:4b:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8Ii0el9pxM6gC7IAphwBgvu5ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNTEwMTgwMzU3MjVaFw0yNTEwMjExNTI1MjVaMDMxMTAvBgNV BAMTKEVENkIxQjEzRkMzNEFFRUE1NTIyNzVEMkY1QzA1MjU4MTA5MUQ1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtKla4bVVmTK2mZO8f/95M1or FE4PXcDrGcNcKx2NvmOu2Isd5iO4gV9XWJ6vvnSbWIyD4sJ3VNpRSx4gs0EEiNXf Nl3/c8uHbb8sgfEU1sEROMd9DCUllQgWLOgy9neYausO86VYcQbFT/M2bMwWGP2S jE49ZUewYd5ETaDXBHY0kUbbdWQ89p81lzdbDOXfYHggQ2HvgsTgRYmU9HUzdCoN iRBio4M8y/cP8fT2i155xXhHY7hyJuQi7a2FgYUXWPVuk2SsU+lta6i48Bj0LvhP zskOUmMwuOuxTmQKYupuJCN6XQmLqv2dUtJBTtJYmCE09E7CSeyHZDLvB1LZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7WsbE/w0rupVInXS9cBSWBCR1S8wHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlC ODU3RTkzNzZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6OJrfX9QunH1J3/eof/hJP6XR5wgwAgpf/ P0i7cfUNf2/O5YW+NMELiiKfDe504KrjObajjdsM9hw/2wstbkvHr0O5+txqqObZ SnysKOR374tj7HkQcvhzhrbQO8WowEG0LVmmSWg9qcuDA3IT2g5CJsZ960CHRK/6 zAh5u5SZPIS8cXyC1jbxgELNPRoo7PhTvuUVEHru22cZ65WnyqiWz4HxKGdw3dwg DPoyh/pltwROa81kU42ybt7A9v9Xol+fe3H+V4IAi7pLrYxF/Z5Z6ya6GDA7O2lI EY74N9QIHwY1g6as8APk44a12XmXoyx20EvJnibwYQv8A06xS/A= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:12 2025 by rpki-client