
$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
File: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft (raw, json)
Hash identifier: e05xQzM9twEKCTi36XzQ0rpmv8BIJfUqYivGe+FHwJg=
Subject key identifier: 7D:FF:44:F0:E4:9E:78:4D:BE:84:DF:69:18:FF:AC:B4:81:46:5B:99
Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
Certificate issuer: /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Certificate serial: 35319E11C32FC885FD4BA2D9D9A02AFC427BC9EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
Manifest number: 0206
Signing time: Mon 27 Oct 2025 19:01:36 +0000
Manifest this update: Mon 27 Oct 2025 18:56:36 +0000
Manifest next update: Fri 31 Oct 2025 00:52:36 +0000
Files and hashes: 1: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (hash: mgkxr/SuMyMsRvRjiMcUueP3vdh3ZYSiC7xct6qMuK4=)
2: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl (hash: eA/N41mDWKNTOu8Pgwfroy9+k/8CDYnZONp81X9SezE=)
3: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (hash: F7Hvn3nr15WKTOMp+UJFZvJVrdndxdoOm2ecLXQTtiA=)
4: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (hash: VfFxxuazE0SD/9aiBAJNKHpH/m4/DEssj0TquLDvxPg=)
5: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (hash: vAIjmbx3dVuW8GpN3/fZq5ol916CeS6StRg+6uf/1t0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 00:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:31:9e:11:c3:2f:c8:85:fd:4b:a2:d9:d9:a0:2a:fc:42:7b:c9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Validity
Not Before: Oct 27 18:56:36 2025 GMT
Not After : Oct 31 00:52:36 2025 GMT
Subject: CN=7DFF44F0E49E784DBE84DF6918FFACB481465B99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:58:da:ee:26:d4:4f:2a:e9:81:ef:43:f5:a1:
4d:60:ad:95:89:3a:87:d8:45:e4:a3:a0:18:3e:3b:
e3:f7:7a:69:15:b5:37:30:e5:58:61:3b:62:18:4b:
80:f2:0e:f4:e8:4a:1b:ea:51:45:92:c7:6c:f4:b4:
5e:e6:c6:9a:5f:56:8f:3f:1f:f0:c7:09:be:4f:67:
dd:03:18:1b:06:5c:71:72:aa:70:be:56:70:5a:e7:
61:45:65:49:cb:57:55:7d:ec:52:d0:4f:51:14:84:
69:be:19:0b:cf:3a:c5:b8:b6:92:d0:75:67:45:7f:
f3:b9:1e:6b:e8:e0:ae:8b:27:70:91:0a:bc:bb:59:
94:d2:cd:e0:58:7f:f2:d2:b6:45:37:5e:dc:7d:96:
86:99:a3:48:1f:e2:bb:f0:52:de:48:6b:b7:18:4d:
4c:0c:1a:de:c2:02:d6:ba:2a:1f:1f:71:7a:80:bf:
7b:03:6c:e2:55:9e:a8:8b:a3:01:59:6f:e2:cd:f2:
aa:5b:31:71:f0:e3:ad:4c:20:5c:57:4e:f2:82:97:
18:31:7f:b4:cf:6e:c5:ee:05:67:b8:39:92:d7:f7:
a1:48:c6:08:fb:38:0b:af:96:49:2d:c2:3a:06:ad:
42:3c:43:36:c3:11:a5:7f:84:34:54:7c:b4:fb:b8:
d3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FF:44:F0:E4:9E:78:4D:BE:84:DF:69:18:FF:AC:B4:81:46:5B:99
X509v3 Authority Key Identifier:
keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ef:50:e7:4b:59:62:d3:00:e8:04:53:01:08:05:35:79:8a:
28:7b:a3:da:74:63:3d:40:aa:dd:a4:df:73:f8:f4:49:93:04:
c5:ca:f2:b6:a8:22:d8:57:e7:2d:21:06:05:6d:6d:ef:e9:a9:
3a:75:5f:20:29:0f:f7:9e:b2:97:00:77:d9:26:6e:a7:72:47:
5d:a0:14:7a:94:ed:18:89:ab:52:f1:71:af:20:e8:92:19:ed:
d9:ce:02:9c:52:09:0b:87:60:60:14:55:25:9d:66:fb:dc:80:
38:4a:aa:db:22:f5:06:5f:bd:0e:fc:45:2a:66:66:d3:dd:7e:
9a:71:02:f4:c3:fb:25:8d:e5:9e:66:ed:34:15:ea:15:d8:85:
6a:de:eb:42:e5:ec:df:ac:5d:96:7b:78:1d:aa:ef:2f:e6:61:
00:80:f8:e9:b6:e2:af:9c:f2:ab:93:52:76:b5:38:04:0c:da:
e0:1b:5a:65:0f:fd:15:a0:ed:55:58:44:fc:30:ba:ba:33:9e:
7d:a9:82:75:d5:53:a8:3b:42:f5:fb:b7:85:af:04:42:27:d1:
ef:a3:17:a9:a4:13:f5:fa:27:d9:64:02:ac:3d:14:11:96:61:
af:0f:66:2e:82:b8:81:c4:bd:5a:84:55:62:92:08:21:a7:08:
b8:0b:57:72
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNTGeEcMvyIX9S6LZ2aAq/EJ7ye8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz
OTE3OTJFQTAeFw0yNTEwMjcxODU2MzZaFw0yNTEwMzEwMDUyMzZaMDMxMTAvBgNV
BAMTKDdERkY0NEYwRTQ5RTc4NERCRTg0REY2OTE4RkZBQ0I0ODE0NjVCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtWNruJtRPKumB70P1oU1grZWJ
OofYReSjoBg+O+P3emkVtTcw5VhhO2IYS4DyDvToShvqUUWSx2z0tF7mxppfVo8/
H/DHCb5PZ90DGBsGXHFyqnC+VnBa52FFZUnLV1V97FLQT1EUhGm+GQvPOsW4tpLQ
dWdFf/O5Hmvo4K6LJ3CRCry7WZTSzeBYf/LStkU3Xtx9loaZo0gf4rvwUt5Ia7cY
TUwMGt7CAta6Kh8fcXqAv3sDbOJVnqiLowFZb+LN8qpbMXHw461MIFxXTvKClxgx
f7TPbsXuBWe4OZLX96FIxgj7OAuvlkktwjoGrUI8QzbDEaV/hDRUfLT7uNPxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUff9E8OSeeE2+hN9pGP+stIFGW5kwHwYDVR0j
BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0
N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3
OTJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUxN2ZlOTgtOGY1OC00OTdmLWJl
NTctODY2NWE3YTA0YmIwLzAvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQw
QTEzOTE3OTJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADPvUOdLWWLTAOgEUwEIBTV5iih7o9p0Yz1A
qt2k33P49EmTBMXK8raoIthX5y0hBgVtbe/pqTp1XyApD/eespcAd9kmbqdyR12g
FHqU7RiJq1Lxca8g6JIZ7dnOApxSCQuHYGAUVSWdZvvcgDhKqtsi9QZfvQ78RSpm
ZtPdfppxAvTD+yWN5Z5m7TQV6hXYhWre60Ll7N+sXZZ7eB2q7y/mYQCA+Om24q+c
8quTUna1OAQM2uAbWmUP/RWg7VVYRPwwuroznn2pgnXVU6g7QvX7t4WvBEIn0e+j
F6mkE/X6J9lkAqw9FBGWYa8PZi6CuIHEvVqEVWKSCCGnCLgLV3I=
-----END CERTIFICATE-----
Generated at Wed Oct 29 21:52:08 2025 by rpki-client