$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft File: A777F080277567701C7EF464D9A7351ADB0B538E.mft (raw, json) Hash identifier: 1csfJXzQlZNRx7exdrK7i0OURCMAdIW+Z0SUl3xjynA= Subject key identifier: 8D:E5:A4:7E:75:D1:F1:B2:12:64:AB:AE:D2:CD:46:AC:5A:D9:6F:5E Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E Certificate issuer: /CN=A777F080277567701C7EF464D9A7351ADB0B538E Certificate serial: 7136E8E4613F94D1486D2C694DF388CAD6BB246B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft Manifest number: 0172 Signing time: Fri 17 Oct 2025 22:41:23 +0000 Manifest this update: Fri 17 Oct 2025 22:36:23 +0000 Manifest next update: Tue 21 Oct 2025 09:39:23 +0000 Files and hashes: 1: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: JBW3MNYcLkvyzbMzPH1digOsTzRoTjkVj2ZYm/AplQ8=) 2: A777F080277567701C7EF464D9A7351ADB0B538E.crl (hash: +IHzfaaTEK3fFe9Tr83O/i8j5+fo/3JsjJIRpNNsX8s=) 3: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: nww0OvBV7eoF7ccGlEcWlOh6cTNl+JMulSg7kpc2Jzg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 09:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:36:e8:e4:61:3f:94:d1:48:6d:2c:69:4d:f3:88:ca:d6:bb:24:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E Validity Not Before: Oct 17 22:36:23 2025 GMT Not After : Oct 21 09:39:23 2025 GMT Subject: CN=8DE5A47E75D1F1B21264ABAED2CD46AC5AD96F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:f6:5e:4d:b1:4f:09:83:8c:31:1f:7d:38: 59:aa:fa:18:8a:a1:ee:0f:04:ed:3c:c7:65:cb:d3: 10:61:84:8c:ae:5f:bf:b9:21:66:77:a6:df:7e:47: 1e:3a:2a:9f:a6:e9:9f:c3:47:db:71:82:6e:bd:1e: 24:14:c6:66:db:7d:bd:f0:7c:a6:ae:98:d2:69:fc: dc:2a:a0:83:2d:1b:9c:fe:bc:f3:db:d1:4f:5b:c6: be:5b:ac:6a:77:d2:3d:68:3c:2a:6f:2c:4f:4e:3b: c5:45:46:bd:aa:3f:3a:a3:bf:23:7d:c7:f8:7b:7b: 9a:b9:f4:db:1c:17:78:96:96:4b:cc:a1:c1:a3:5f: 53:e8:c9:8d:77:c6:90:ee:cb:19:67:85:22:c3:34: 2b:06:e3:d8:f3:06:61:52:5f:2e:10:26:12:f5:7c: 73:3f:27:3e:20:51:29:6e:75:b6:19:2a:15:ee:e2: c8:58:de:94:74:9f:0a:3b:34:bb:c3:35:4c:3d:d8: b2:c8:c9:47:28:b1:24:b1:11:d5:e2:fb:d3:ad:fa: 7e:28:af:bd:52:3e:96:32:ba:2e:1e:37:37:80:41: 02:71:a2:d1:d4:e4:56:eb:af:75:b7:a9:10:23:f2: ad:44:dd:a5:7e:09:26:1c:9a:f2:ff:10:04:ab:77: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E5:A4:7E:75:D1:F1:B2:12:64:AB:AE:D2:CD:46:AC:5A:D9:6F:5E X509v3 Authority Key Identifier: keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ba:fc:39:4e:d2:ac:11:2c:f7:ba:6a:c7:e5:c3:58:8f:64: b3:cd:60:14:e7:46:10:af:2b:2c:27:2d:02:fc:d7:5b:e4:f9: fe:e9:e4:fd:10:37:da:35:95:30:84:8e:08:81:9b:60:41:38: 73:30:af:a5:09:e9:62:0a:56:a8:91:8a:04:57:92:92:a2:41: ac:02:73:35:3a:1b:c5:30:a6:70:0a:c3:c7:8d:9a:82:59:c0: 43:25:6c:e4:24:4a:d0:a2:d3:f4:f0:43:8f:33:3f:6d:3a:bf: 49:a8:b7:8b:94:b5:07:1f:7d:da:18:54:53:82:79:14:d3:68: 8e:4d:4e:10:36:5c:e0:dd:1b:10:09:fa:09:64:ac:0f:ba:ed: 31:b2:dc:78:c0:c5:01:26:d9:78:fd:3d:28:80:1e:a9:56:09: d9:21:99:77:9c:09:b9:65:5e:31:96:14:0f:c6:e7:e8:dc:6e: 2a:07:0f:4b:ef:e5:1f:5b:1b:99:14:2a:67:ac:a5:66:8a:8a: 2a:18:f5:ec:f8:2b:bd:f2:05:7f:66:b5:7a:f6:7a:e6:30:90: d1:d6:f1:1c:26:da:29:2b:18:04:39:b3:c5:dd:f0:c8:6c:fc: cd:3e:35:39:ca:af:35:de:17:8d:4e:94:1b:a6:e2:f3:10:8d: 63:ef:6f:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTbo5GE/lNFIbSxpTfOIyta7JGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFE QjBCNTM4RTAeFw0yNTEwMTcyMjM2MjNaFw0yNTEwMjEwOTM5MjNaMDMxMTAvBgNV BAMTKDhERTVBNDdFNzVEMUYxQjIxMjY0QUJBRUQyQ0Q0NkFDNUFEOTZGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMX/ZeTbFPCYOMMR99OFmq+hiK oe4PBO08x2XL0xBhhIyuX7+5IWZ3pt9+Rx46Kp+m6Z/DR9txgm69HiQUxmbbfb3w fKaumNJp/NwqoIMtG5z+vPPb0U9bxr5brGp30j1oPCpvLE9OO8VFRr2qPzqjvyN9 x/h7e5q59NscF3iWlkvMocGjX1PoyY13xpDuyxlnhSLDNCsG49jzBmFSXy4QJhL1 fHM/Jz4gUSludbYZKhXu4shY3pR0nwo7NLvDNUw92LLIyUcosSSxEdXi+9Ot+n4o r71SPpYyui4eNzeAQQJxotHU5Fbrr3W3qRAj8q1E3aV+CSYcmvL/EASrd14JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjeWkfnXR8bISZKuu0s1GrFrZb14wHwYDVR0j BBgwFoAUp3fwgCd1Z3AcfvRk2ac1GtsLU44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmY0NzY3ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC9BNzc3RjA4MDI3 NzU2NzcwMUM3RUY0NjREOUE3MzUxQURCMEI1MzhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFEQjBC NTM4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1 MUFEQjBCNTM4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFK6/DlO0qwRLPe6asflw1iPZLPNYBTnRhCv KywnLQL811vk+f7p5P0QN9o1lTCEjgiBm2BBOHMwr6UJ6WIKVqiRigRXkpKiQawC czU6G8UwpnAKw8eNmoJZwEMlbOQkStCi0/TwQ48zP206v0mot4uUtQcffdoYVFOC eRTTaI5NThA2XODdGxAJ+glkrA+67TGy3HjAxQEm2Xj9PSiAHqlWCdkhmXecCbll XjGWFA/G5+jcbioHD0vv5R9bG5kUKmespWaKiioY9ez4K73yBX9mtXr2euYwkNHW 8Rwm2ikrGAQ5s8Xd8Mhs/M0+NTnKrzXeF41OlBum4vMQjWPvb3E= -----END CERTIFICATE-----Generated at Mon Oct 20 09:27:16 2025 by rpki-client