$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft File: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft (raw, json) Hash identifier: JxQM4XQ9obHPwoglAt4nwsaNyrcp3Q3wHBnv+iIWe7M= Subject key identifier: F7:6A:0D:03:A3:D1:B9:E6:1A:F5:C8:75:D0:92:47:76:E5:F5:D9:BF Authority key identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B Certificate issuer: /CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Certificate serial: 204D41B80EBFC02E92B3129C072C34F46BECCA95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft Manifest number: E5 Signing time: Fri 29 Aug 2025 20:41:48 +0000 Manifest this update: Fri 29 Aug 2025 20:36:48 +0000 Manifest next update: Tue 02 Sep 2025 07:14:48 +0000 Files and hashes: 1: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: mBt52f39yB2WTMjY8yTiBWW7j1vK6aWMbOkMPXZ1lgU=) 2: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl (hash: GPo+0Tk7drILNQO8actmDPHjDy6c4815dg45YMwy+WM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4d:41:b8:0e:bf:c0:2e:92:b3:12:9c:07:2c:34:f4:6b:ec:ca:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Validity Not Before: Aug 29 20:36:48 2025 GMT Not After : Sep 2 07:14:48 2025 GMT Subject: CN=F76A0D03A3D1B9E61AF5C875D0924776E5F5D9BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:da:09:02:88:4c:70:22:9e:49:78:7c:de: 32:a0:3c:34:12:99:79:cc:a7:b5:39:7c:09:7b:a1: a5:2e:04:d5:25:be:9f:f2:d6:2e:00:ed:51:43:a8: 81:21:b0:22:d2:0e:e1:15:22:0d:de:f9:9f:17:6b: 70:2e:7c:01:f3:58:2e:24:43:dd:9b:f0:3a:89:03: 84:49:1a:4f:78:eb:ef:8e:40:57:e6:d9:19:aa:85: 61:0b:04:70:26:e5:7d:ac:b8:4e:84:8d:e3:96:a0: 0a:d1:6e:80:b1:86:c2:51:21:b3:e4:47:08:8f:80: 1f:44:17:42:1b:d4:67:06:6d:0e:33:56:aa:d2:05: af:2f:83:c8:5d:7e:ce:e4:d9:02:b0:93:e5:79:63: c3:be:57:19:7d:00:78:d0:4a:2f:78:2b:49:3f:8c: 66:2e:94:67:79:88:7d:4a:f7:c5:d3:81:6a:54:49: 51:8c:dc:09:c2:fb:fb:31:64:38:08:4e:08:34:0c: c1:16:2c:cd:9d:d9:ad:be:cd:e6:3f:72:48:da:34: 0f:0b:f3:a0:51:29:b1:41:bd:aa:ad:12:fa:d4:df: 4d:b1:f6:b9:50:7e:d2:50:6d:2e:cc:0c:a4:8e:af: ba:88:21:98:e4:77:dc:06:18:61:ed:7e:53:ea:c0: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6A:0D:03:A3:D1:B9:E6:1A:F5:C8:75:D0:92:47:76:E5:F5:D9:BF X509v3 Authority Key Identifier: keyid:77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:56:a6:b2:cb:c5:b4:36:f3:48:4c:08:6a:c6:56:51:f7:9e: 39:2b:66:40:e6:9d:f6:6a:dc:9c:b0:28:25:62:a1:11:03:a1: 78:ae:5f:05:33:14:44:6e:7a:b3:0f:22:63:56:88:c5:70:c3: 2e:b2:85:50:41:4b:29:8a:7a:41:ac:fd:74:62:9f:b0:b6:2f: e7:f1:d7:55:33:ed:34:7e:63:56:fd:c9:2f:1c:7d:f6:11:94: a3:a4:60:3a:b7:59:d6:66:a9:d3:6f:17:bc:00:a8:6d:6f:10: 43:91:9b:6b:4b:d0:05:6b:fb:d5:36:91:51:53:8a:6c:9b:5a: 8f:5e:32:66:0d:e3:00:91:06:00:e2:f7:7f:76:a4:e1:eb:70: c8:47:f8:e1:d9:85:10:e5:bd:c7:4a:a1:fd:db:cf:e8:b6:65: 7d:db:7a:98:1c:2a:92:fa:4f:89:50:60:d7:d0:8a:f6:5b:4e: 8e:7e:e4:dd:2f:b5:32:f9:81:e0:25:12:2f:53:de:9d:6e:7f: ed:fb:12:63:33:23:da:84:8c:b7:a0:a7:50:7c:20:fc:ea:34: 44:c4:12:f1:15:f6:0f:cd:09:2c:bb:ee:35:54:9a:4a:f4:14: bf:d5:84:0b:20:f5:af:0b:b3:08:1c:79:81:d1:d6:6b:86:ea: 83:74:da:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIE1BuA6/wC6SsxKcByw09GvsypUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIz NEZBMkQ4QjAeFw0yNTA4MjkyMDM2NDhaFw0yNTA5MDIwNzE0NDhaMDMxMTAvBgNV BAMTKEY3NkEwRDAzQTNEMUI5RTYxQUY1Qzg3NUQwOTI0Nzc2RTVGNUQ5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDg9oJAohMcCKeSXh83jKgPDQS mXnMp7U5fAl7oaUuBNUlvp/y1i4A7VFDqIEhsCLSDuEVIg3e+Z8Xa3AufAHzWC4k Q92b8DqJA4RJGk946++OQFfm2RmqhWELBHAm5X2suE6EjeOWoArRboCxhsJRIbPk RwiPgB9EF0Ib1GcGbQ4zVqrSBa8vg8hdfs7k2QKwk+V5Y8O+Vxl9AHjQSi94K0k/ jGYulGd5iH1K98XTgWpUSVGM3AnC+/sxZDgITgg0DMEWLM2d2a2+zeY/ckjaNA8L 86BRKbFBvaqtEvrU302x9rlQftJQbS7MDKSOr7qIIZjkd9wGGGHtflPqwPsZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU92oNA6PRueYa9ch10JJHduX12b8wHwYDVR0j BBgwFoAUd6zxj1MX56IC5YPDxZwiMjT6LYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMC83N0FDRjE4RjUz MTdFN0EyMDJFNTgzQzNDNTlDMjIzMjM0RkEyRDhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIzNEZB MkQ4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzAvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIy MzIzNEZBMkQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9WprLLxbQ280hMCGrGVlH3njkrZkDmnfZq 3JywKCVioREDoXiuXwUzFERuerMPImNWiMVwwy6yhVBBSymKekGs/XRin7C2L+fx 11Uz7TR+Y1b9yS8cffYRlKOkYDq3WdZmqdNvF7wAqG1vEEORm2tL0AVr+9U2kVFT imybWo9eMmYN4wCRBgDi9392pOHrcMhH+OHZhRDlvcdKof3bz+i2ZX3bepgcKpL6 T4lQYNfQivZbTo5+5N0vtTL5geAlEi9T3p1uf+37EmMzI9qEjLegp1B8IPzqNETE EvEV9g/NCSy77jVUmkr0FL/VhAsg9a8LswgceYHR1muG6oN02io= -----END CERTIFICATE-----Generated at Sun Aug 31 07:04:27 2025 by rpki-client