$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: fwcsHijmpqRSCvg3ytxrCw4M8g2C1Iz8LXdnJ4/pkpw= Subject key identifier: 9B:1A:78:58:CC:D8:96:44:FA:47:C3:B0:EB:40:59:A0:E8:1B:89:51 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 7A5FCB2747BDE40A00432E4F72C39A9975578DB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: 0148 Signing time: Sun 19 Oct 2025 22:21:26 +0000 Manifest this update: Sun 19 Oct 2025 22:16:26 +0000 Manifest next update: Wed 22 Oct 2025 23:10:26 +0000 Files and hashes: 1: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: aAQ3gTdw9Ba4EyqO5leg/m+5A85FY5W+Vc3itSgQl30=) 2: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: AZoj+0FC7tr+2ZKJboWJyczOYWAwC/zNvBvRBqK06eM=) 3: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: veA0FHh2dmVTqPFATjSQYidZYnxglLeFvdgcZanLIlA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:5f:cb:27:47:bd:e4:0a:00:43:2e:4f:72:c3:9a:99:75:57:8d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Oct 19 22:16:26 2025 GMT Not After : Oct 22 23:10:26 2025 GMT Subject: CN=9B1A7858CCD89644FA47C3B0EB4059A0E81B8951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:89:de:8c:d7:35:06:90:d9:7a:75:62:7a:43: 9f:e2:f7:da:92:71:58:5f:47:82:ee:6c:d0:74:a2: 4e:8b:fa:14:61:b9:41:a7:e6:62:5a:11:e0:0a:a5: 55:c6:0a:0d:17:ce:19:de:1d:6d:8b:91:e9:ce:b3: 6e:10:0f:7a:70:e3:6e:ae:6c:e0:36:46:cd:da:00: 26:0b:c7:4a:c9:2b:d4:f6:e5:ca:f1:be:1d:76:35: ee:05:0f:16:03:9b:b7:50:95:25:bc:28:05:d0:ab: a1:28:cf:02:8d:5d:cb:e0:0b:8b:b2:c9:4c:05:82: 68:48:29:23:46:1b:e3:59:a4:e2:0c:4d:51:4b:95: 26:cd:63:9a:35:94:b6:ab:24:69:e2:b0:33:88:9d: f3:51:96:1a:53:7e:17:51:6e:a9:c7:db:32:80:9f: fa:46:76:57:db:e6:54:8c:9a:d1:ac:f8:35:0b:2e: 2a:73:d6:cf:82:eb:8a:a0:06:90:be:8f:d1:ac:b8: 5f:0e:94:c4:60:6a:8c:61:81:88:f6:b6:97:98:13: 1d:83:ae:fc:07:ff:e3:1b:19:2d:83:d5:24:a0:39: fc:5b:c5:39:ef:b8:0e:f9:5e:3b:86:34:26:f0:0c: cb:92:7d:c5:99:b6:46:69:29:c1:91:44:ad:25:1b: 0c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1A:78:58:CC:D8:96:44:FA:47:C3:B0:EB:40:59:A0:E8:1B:89:51 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1d:0d:9d:89:48:5c:77:05:7c:65:76:15:d4:fa:83:64:af: b9:0b:3a:20:f8:7f:dd:85:30:54:ad:30:f8:b3:07:76:38:1a: 5b:d1:c4:f7:a7:77:b6:e3:ab:ae:f9:a6:4e:93:fd:3d:24:f2: 63:0d:de:32:a5:ac:a2:e1:b7:f6:56:96:9f:8c:ff:2d:bc:6e: d9:f2:0c:e6:52:2e:00:81:62:13:ec:55:39:0a:63:39:89:0d: bd:7b:87:8b:63:ab:a6:f8:81:6f:42:cb:af:93:20:de:9d:9c: c6:83:a7:d1:f1:55:2c:50:47:07:1b:a4:e0:f2:b0:61:c2:b5: 3e:47:b5:ad:5d:dd:f1:21:36:e1:2c:82:a3:7d:e3:e4:3c:7b: 72:5f:e7:5b:ce:38:6a:dc:f5:da:47:10:b6:b0:b9:2c:ab:58: 6d:02:10:e5:63:dc:91:82:d8:89:08:c4:e6:06:f6:82:34:a5: 82:07:8f:0d:de:73:66:8e:cd:45:b6:f3:b4:0f:dc:22:74:6f: 40:81:cd:c5:ed:df:90:2c:45:ce:6a:b2:e8:4f:25:79:d7:f9: ec:59:f0:ee:a2:50:89:d8:4c:77:d4:6d:e3:c4:83:b5:47:b6: 5a:df:fd:86:a6:1c:27:1a:74:50:1f:d6:c2:29:86:06:cf:a0: 9e:d2:1c:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUel/LJ0e95AoAQy5PcsOamXVXjbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNTEwMTkyMjE2MjZaFw0yNTEwMjIyMzEwMjZaMDMxMTAvBgNV BAMTKDlCMUE3ODU4Q0NEODk2NDRGQTQ3QzNCMEVCNDA1OUEwRTgxQjg5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUid6M1zUGkNl6dWJ6Q5/i99qS cVhfR4LubNB0ok6L+hRhuUGn5mJaEeAKpVXGCg0XzhneHW2LkenOs24QD3pw426u bOA2Rs3aACYLx0rJK9T25crxvh12Ne4FDxYDm7dQlSW8KAXQq6EozwKNXcvgC4uy yUwFgmhIKSNGG+NZpOIMTVFLlSbNY5o1lLarJGnisDOInfNRlhpTfhdRbqnH2zKA n/pGdlfb5lSMmtGs+DULLipz1s+C64qgBpC+j9GsuF8OlMRgaoxhgYj2tpeYEx2D rvwH/+MbGS2D1SSgOfxbxTnvuA75XjuGNCbwDMuSfcWZtkZpKcGRRK0lGwy/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmxp4WMzYlkT6R8Ow60BZoOgbiVEwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0dDZ2JSFx3BXxldhXU+oNkr7kLOiD4f92F MFStMPizB3Y4GlvRxPend7bjq675pk6T/T0k8mMN3jKlrKLht/ZWlp+M/y28btny DOZSLgCBYhPsVTkKYzmJDb17h4tjq6b4gW9Cy6+TIN6dnMaDp9HxVSxQRwcbpODy sGHCtT5Hta1d3fEhNuEsgqN94+Q8e3Jf51vOOGrc9dpHELawuSyrWG0CEOVj3JGC 2IkIxOYG9oI0pYIHjw3ec2aOzUW287QP3CJ0b0CBzcXt35AsRc5qsuhPJXnX+exZ 8O6iUInYTHfUbePEg7VHtlrf/YamHCcadFAf1sIphgbPoJ7SHK8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:22:53 2025 by rpki-client