$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft File: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft (raw, json) Hash identifier: jPkP270Hh57/ULTuVftiByRNFoV+yqVbMCJhuvGkQfM= Subject key identifier: 7A:1A:5D:EC:11:54:7B:A7:C9:F8:37:AF:04:62:E0:48:24:B6:B8:82 Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA Certificate issuer: /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Certificate serial: 4B518CA95E4324DCFE3F06202BF29289C17DA298 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft Manifest number: 0202 Signing time: Sat 18 Oct 2025 12:11:35 +0000 Manifest this update: Sat 18 Oct 2025 12:06:35 +0000 Manifest next update: Tue 21 Oct 2025 20:41:35 +0000 Files and hashes: 1: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (hash: mgkxr/SuMyMsRvRjiMcUueP3vdh3ZYSiC7xct6qMuK4=) 2: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (hash: vAIjmbx3dVuW8GpN3/fZq5ol916CeS6StRg+6uf/1t0=) 3: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl (hash: KL/M54SlXdfQD3lZoVPrbZQKXP4xV/PrWqZxOuAeh/Y=) 4: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (hash: F7Hvn3nr15WKTOMp+UJFZvJVrdndxdoOm2ecLXQTtiA=) 5: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (hash: VfFxxuazE0SD/9aiBAJNKHpH/m4/DEssj0TquLDvxPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:51:8c:a9:5e:43:24:dc:fe:3f:06:20:2b:f2:92:89:c1:7d:a2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Validity Not Before: Oct 18 12:06:35 2025 GMT Not After : Oct 21 20:41:35 2025 GMT Subject: CN=7A1A5DEC11547BA7C9F837AF0462E04824B6B882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f1:80:e2:e9:cf:09:f1:93:08:d0:fd:4e:25: 8d:67:87:bf:b6:ee:ad:79:c6:5a:ef:b3:25:39:ae: 4e:db:93:fb:ae:2e:a4:f3:ba:cb:d7:4b:13:64:db: 72:9d:17:b2:e9:83:e5:cc:d7:d6:35:86:24:57:ba: e9:23:00:32:b6:a4:9a:d6:ec:c5:0c:f2:6b:76:1b: 35:41:bd:36:1d:e1:c8:74:22:b8:6f:b9:2d:de:f0: 3c:14:ff:a6:d6:1c:e3:cc:42:9d:5a:b0:c5:88:ac: fa:24:72:db:54:77:89:70:9e:c0:33:62:ea:d5:a7: 6b:c1:80:a1:00:37:d5:00:c5:03:7e:2f:dd:05:34: 7a:f0:c9:f3:d0:da:ff:3d:dc:2c:7a:65:9a:0b:2f: 53:85:e5:f0:d7:aa:e1:00:88:16:15:a8:70:92:2c: 6f:13:6d:e3:dc:c3:ca:42:05:87:95:d9:78:f5:41: ca:f7:3c:c4:a2:6b:1d:00:bf:d1:e8:42:af:3e:90: bf:56:d0:7c:7c:93:cf:3c:d1:57:19:82:d9:03:19: 4d:11:cc:81:51:e4:a2:74:ca:39:97:83:c4:4c:89: d2:23:28:1a:1b:4c:75:92:29:25:67:c1:86:ac:b6: 80:71:55:c7:0e:3a:f4:35:17:7a:b0:b6:a8:da:80: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1A:5D:EC:11:54:7B:A7:C9:F8:37:AF:04:62:E0:48:24:B6:B8:82 X509v3 Authority Key Identifier: keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8d:05:6b:36:a5:b7:a0:06:e4:1c:16:ca:6d:1d:8d:d2:0f: 4d:24:46:40:b6:10:16:e4:1e:1a:cb:8e:19:5f:44:3e:91:c3: e5:1b:94:f6:ab:63:42:d9:a1:0c:cd:e1:86:9e:44:03:3f:23: a2:3c:06:44:d3:a2:9f:cd:93:60:59:c4:d1:e4:41:2c:df:84: 1e:e0:5e:af:75:9d:dd:40:88:17:c0:a9:1d:7d:d5:bc:81:58: ff:9d:d3:d0:4e:65:c8:40:ea:56:1c:c2:69:96:25:31:a2:5f: b4:ca:a8:59:64:cd:76:fb:16:34:7f:7f:05:08:d2:20:f6:2a: 79:d4:4b:15:80:12:9b:7c:78:a2:50:71:f7:31:06:19:60:cb: 9e:b8:d3:13:e4:cf:a4:2a:ef:73:60:20:43:2c:33:93:ce:4e: 0d:10:47:b2:39:f6:31:e5:52:b2:bc:fc:0e:10:e9:1f:2c:a1: 6f:4c:f6:40:22:27:aa:69:dc:2e:4c:ab:22:73:81:ee:9b:9d: 46:d8:17:e6:25:bd:8b:7e:23:4c:ca:9b:3c:ce:f2:9f:ec:b4: 5f:25:10:fa:09:56:16:5d:58:e7:a7:26:62:07:a7:b4:8e:51: 51:4a:42:dd:d9:7b:cc:b4:20:1e:a6:95:15:4e:55:50:1e:a1: 1f:35:25:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS1GMqV5DJNz+PwYgK/KSicF9opgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz OTE3OTJFQTAeFw0yNTEwMTgxMjA2MzVaFw0yNTEwMjEyMDQxMzVaMDMxMTAvBgNV BAMTKDdBMUE1REVDMTE1NDdCQTdDOUY4MzdBRjA0NjJFMDQ4MjRCNkI4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ8YDi6c8J8ZMI0P1OJY1nh7+2 7q15xlrvsyU5rk7bk/uuLqTzusvXSxNk23KdF7Lpg+XM19Y1hiRXuukjADK2pJrW 7MUM8mt2GzVBvTYd4ch0IrhvuS3e8DwU/6bWHOPMQp1asMWIrPokcttUd4lwnsAz YurVp2vBgKEAN9UAxQN+L90FNHrwyfPQ2v893Cx6ZZoLL1OF5fDXquEAiBYVqHCS LG8TbePcw8pCBYeV2Xj1Qcr3PMSiax0Av9HoQq8+kL9W0Hx8k8880VcZgtkDGU0R zIFR5KJ0yjmXg8RMidIjKBobTHWSKSVnwYastoBxVccOOvQ1F3qwtqjagBSxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUehpd7BFUe6fJ+DevBGLgSCS2uIIwHwYDVR0j BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0 N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3 OTJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUxN2ZlOTgtOGY1OC00OTdmLWJl NTctODY2NWE3YTA0YmIwLzAvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQw QTEzOTE3OTJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6NBWs2pbegBuQcFsptHY3SD00kRkC2EBbk HhrLjhlfRD6Rw+UblParY0LZoQzN4YaeRAM/I6I8BkTTop/Nk2BZxNHkQSzfhB7g Xq91nd1AiBfAqR191byBWP+d09BOZchA6lYcwmmWJTGiX7TKqFlkzXb7FjR/fwUI 0iD2KnnUSxWAEpt8eKJQcfcxBhlgy5640xPkz6Qq73NgIEMsM5POTg0QR7I59jHl UrK8/A4Q6R8soW9M9kAiJ6pp3C5MqyJzge6bnUbYF+YlvYt+I0zKmzzO8p/stF8l EPoJVhZdWOenJmIHp7SOUVFKQt3Ze8y0IB6mlRVOVVAeoR81Jec= -----END CERTIFICATE-----Generated at Mon Oct 20 06:26:59 2025 by rpki-client