$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: bMDIb70l4FEtqdr3hpNkVrwFdMK2K+m9P8zRSXbxVKI= Subject key identifier: 05:94:97:EE:79:A1:C6:90:5E:04:62:37:F9:D0:2A:3C:B0:F6:DB:C6 Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 3ADB7D8DA4FBE85CFCF9424E06B948E278434037 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 01DB Signing time: Sun 19 Oct 2025 20:41:17 +0000 Manifest this update: Sun 19 Oct 2025 20:36:17 +0000 Manifest next update: Thu 23 Oct 2025 00:06:17 +0000 Files and hashes: 1: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: 5/gQ9z8wfIkLCjqNOP41Kc9tzLqMCT2VYzb/UmL+NCc=) 2: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: j8MhQFCNNpgWTqqvo4wUA4sj1OS1sCETyG/kmulGJXY=) 3: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=) 4: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: stIIdICFAUmmjPJbZPuus0zTsstOOiSfpPEmNfACiJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:db:7d:8d:a4:fb:e8:5c:fc:f9:42:4e:06:b9:48:e2:78:43:40:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Oct 19 20:36:17 2025 GMT Not After : Oct 23 00:06:17 2025 GMT Subject: CN=059497EE79A1C6905E046237F9D02A3CB0F6DBC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:e3:37:ea:92:cb:ff:c7:22:17:bb:0c:d3: ba:d8:ab:c0:f6:74:6b:91:c3:60:d7:31:41:51:fe: e2:85:7d:1f:68:69:e1:d0:50:01:52:d1:80:1f:f6: 54:f7:f8:0c:88:6a:f1:a7:ce:97:22:9f:c6:88:52: cc:f9:54:c7:ad:bc:70:f7:e7:b9:f9:58:17:2f:05: 71:de:35:20:02:fd:7f:d1:2e:71:c9:11:81:50:8b: c8:1c:24:20:55:8a:86:7a:4c:a9:aa:2f:c4:03:bf: a5:7c:30:17:9c:61:66:fc:e5:da:89:8f:4a:a7:cb: 66:4c:12:c7:4b:48:18:10:6f:62:f8:df:73:69:53: f5:b2:31:4b:c7:e0:10:84:14:7e:9a:7c:ef:ca:b3: 08:ce:f2:dd:e3:c7:4f:27:1e:0a:6d:0e:02:1d:ce: af:53:af:0c:aa:b6:08:5d:f6:c1:76:89:79:87:97: 7e:11:f1:1a:43:7b:48:d2:ce:c8:8c:4f:0e:92:09: f0:4b:af:21:65:7d:4a:44:fd:a6:00:97:80:a9:d0: 9f:81:60:a2:bb:6c:7e:12:aa:e6:f8:4d:90:d1:46: 1a:ad:84:3b:2e:0a:ad:0e:b2:6a:32:bf:68:4c:de: 1c:52:16:cd:f4:c1:fe:bb:5a:be:72:d7:89:15:ec: a9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:94:97:EE:79:A1:C6:90:5E:04:62:37:F9:D0:2A:3C:B0:F6:DB:C6 X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:fa:34:9a:42:d1:cc:be:49:63:77:50:f0:79:21:54:de:a1: 9b:90:9d:8d:9c:ad:23:23:c1:bf:49:94:ce:9d:fd:55:28:f7: 79:3d:93:93:1a:44:aa:38:f6:96:a7:30:c0:b5:35:3f:a5:84: 4b:06:a5:66:f6:c6:11:18:e9:bd:a1:ca:2b:72:40:7e:ab:12: 2e:60:6b:c3:74:91:82:81:cf:45:ba:eb:1f:6e:97:43:e6:a5: 57:ad:8c:49:e6:7b:53:be:99:8d:fd:fa:0f:ba:06:3c:e3:fe: 35:86:04:b5:eb:70:d9:37:85:ab:6d:e4:3b:39:64:c4:dd:2b: fc:68:6d:65:e8:9c:93:01:12:6a:9c:ba:51:c0:93:86:aa:f6: 5c:db:80:d6:d6:f4:8d:01:1e:29:43:94:94:46:e0:3d:d7:dc: 55:f6:71:e4:11:ca:8e:f7:32:c0:b3:8d:b9:e1:98:cf:af:8d: cc:45:a9:cb:6e:5a:24:2c:ee:b7:d0:d4:31:cc:0b:7b:5e:ae: f4:9d:7c:b8:88:60:ea:16:4d:91:c7:48:57:5e:aa:5a:41:3b: bf:94:84:43:a1:3f:b2:14:e8:de:a9:4d:8a:62:c2:99:d5:33: cc:7b:56:b8:18:4d:e3:52:d4:e7:b1:12:2e:3e:f6:42:0f:e1: 10:ed:17:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtt9jaT76Fz8+UJOBrlI4nhDQDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNTEwMTkyMDM2MTdaFw0yNTEwMjMwMDA2MTdaMDMxMTAvBgNV BAMTKDA1OTQ5N0VFNzlBMUM2OTA1RTA0NjIzN0Y5RDAyQTNDQjBGNkRCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBh+M36pLL/8ciF7sM07rYq8D2 dGuRw2DXMUFR/uKFfR9oaeHQUAFS0YAf9lT3+AyIavGnzpcin8aIUsz5VMetvHD3 57n5WBcvBXHeNSAC/X/RLnHJEYFQi8gcJCBVioZ6TKmqL8QDv6V8MBecYWb85dqJ j0qny2ZMEsdLSBgQb2L433NpU/WyMUvH4BCEFH6afO/KswjO8t3jx08nHgptDgId zq9Trwyqtghd9sF2iXmHl34R8RpDe0jSzsiMTw6SCfBLryFlfUpE/aYAl4Cp0J+B YKK7bH4Squb4TZDRRhqthDsuCq0Osmoyv2hM3hxSFs30wf67Wr5y14kV7KndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBZSX7nmhxpBeBGI3+dAqPLD228YwHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKz6NJpC0cy+SWN3UPB5IVTeoZuQnY2crSMj wb9JlM6d/VUo93k9k5MaRKo49panMMC1NT+lhEsGpWb2xhEY6b2hyityQH6rEi5g a8N0kYKBz0W66x9ul0PmpVetjEnme1O+mY39+g+6Bjzj/jWGBLXrcNk3hatt5Ds5 ZMTdK/xobWXonJMBEmqculHAk4aq9lzbgNbW9I0BHilDlJRG4D3X3FX2ceQRyo73 MsCzjbnhmM+vjcxFqctuWiQs7rfQ1DHMC3tervSdfLiIYOoWTZHHSFdeqlpBO7+U hEOhP7IU6N6pTYpiwpnVM8x7VrgYTeNS1OexEi4+9kIP4RDtF1c= -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:05 2025 by rpki-client