$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft File: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json) Hash identifier: LjBJ1INL+RdinwQJIjfTJPoujZc8u8TzPUesB868NOc= Subject key identifier: 5A:54:43:19:72:E8:6A:19:D8:3E:DB:E3:7E:90:89:C3:D8:74:B8:7F Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA Certificate issuer: /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Certificate serial: 33E91BA2374E1BE063177734E4C585102D23BB2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft Manifest number: 0518 Signing time: Sun 19 Oct 2025 13:21:10 +0000 Manifest this update: Sun 19 Oct 2025 13:16:10 +0000 Manifest next update: Wed 22 Oct 2025 13:36:10 +0000 Files and hashes: 1: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: q9pcjfkInqPcGghxGeh0wF/8x9n+wp0JshUKi76J40w=) 2: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: WZy/UAy9CupPGqAIBNjYvXPyrb3aRRfpz66WyI9M1yQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e9:1b:a2:37:4e:1b:e0:63:17:77:34:e4:c5:85:10:2d:23:bb:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Validity Not Before: Oct 19 13:16:10 2025 GMT Not After : Oct 22 13:36:10 2025 GMT Subject: CN=5A54431972E86A19D83EDBE37E9089C3D874B87F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:18:2b:5d:67:6b:81:1e:3e:72:93:52:8a:f9: 36:5b:0e:1e:c6:e8:81:f7:9e:fb:22:1d:2e:de:f8: f5:99:1f:fb:1c:26:0c:41:6d:b3:2b:0e:56:1d:a6: 85:bf:2c:cc:53:d2:a5:9d:a9:ab:3e:88:20:bb:b4: f1:de:17:88:7b:4b:39:e7:66:30:34:dd:cf:92:29: 6c:a5:01:a4:bb:35:ff:b6:35:8a:e7:82:d8:d9:da: 02:09:e8:af:08:d3:13:7b:0e:6d:91:79:2d:33:d2: 1a:04:77:23:19:9f:71:49:9a:88:8c:58:9e:07:1d: 90:cc:67:93:98:70:98:e9:27:07:a3:ba:d4:3b:14: 3c:53:9f:41:e0:cd:6f:a7:2c:20:fc:af:b0:c4:0d: 86:89:d0:c8:98:75:f3:1f:fa:52:eb:7d:94:6b:aa: 6c:4f:5d:73:92:08:cd:0a:18:5c:e8:f0:cb:c8:43: ac:c7:13:6c:4a:b0:be:33:ae:82:48:d1:59:5f:b0: cc:9d:a6:f9:6e:1c:70:9a:c2:77:04:8d:d8:a4:a3: ea:b3:69:ae:23:20:a0:b7:9a:91:4f:33:99:23:ec: c9:fc:13:1c:e4:f2:dd:3c:05:8a:a9:84:45:4b:41: 22:e4:c2:52:a5:e0:06:bd:c1:72:03:32:75:f2:9b: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:54:43:19:72:E8:6A:19:D8:3E:DB:E3:7E:90:89:C3:D8:74:B8:7F X509v3 Authority Key Identifier: keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:76:6c:ed:1b:e3:73:4c:51:38:e2:a0:cd:9c:ce:85:48:4c: 1d:dd:9d:e8:18:f3:ea:6c:d0:95:13:d5:72:af:b5:2b:c1:1c: 7f:63:dd:56:ad:ad:c5:66:48:e0:30:46:0f:79:f0:7b:82:90: a1:06:51:e1:a9:02:06:12:59:59:b8:2c:35:5c:a0:27:12:8d: 05:79:42:10:d9:78:c9:8c:d0:b6:93:03:68:f6:40:5f:d7:1e: 82:1a:5d:9b:46:77:2d:6b:5f:4b:9d:82:59:cf:f5:9a:86:5c: 23:7c:66:61:ff:e4:b3:b7:f4:90:76:15:ef:5e:7e:4b:63:69: 6a:45:6b:36:52:e2:76:e1:72:62:25:64:0d:28:a1:ed:e7:7f: 65:19:fc:d1:a4:00:cf:66:f6:ba:38:f7:32:bb:be:e3:59:2b: ed:41:55:d3:24:40:01:a0:ac:53:b6:9f:c6:2c:30:40:02:aa: 5a:d5:86:aa:cc:ed:00:23:fa:46:5f:7a:d7:a9:3f:00:48:de: f8:a5:90:95:94:9a:e9:2b:a1:76:92:4a:89:b1:04:dc:63:1a: 66:33:99:9d:26:20:41:c9:84:97:bc:09:fe:66:bf:b1:ed:38: 17:f5:7c:d2:a1:d5:97:11:18:d9:28:4e:1c:4a:76:ca:40:41: a0:7f:8d:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+kbojdOG+BjF3c05MWFEC0juy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5 NkQzREVCQTAeFw0yNTEwMTkxMzE2MTBaFw0yNTEwMjIxMzM2MTBaMDMxMTAvBgNV BAMTKDVBNTQ0MzE5NzJFODZBMTlEODNFREJFMzdFOTA4OUMzRDg3NEI4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGCtdZ2uBHj5yk1KK+TZbDh7G 6IH3nvsiHS7e+PWZH/scJgxBbbMrDlYdpoW/LMxT0qWdqas+iCC7tPHeF4h7Sznn ZjA03c+SKWylAaS7Nf+2NYrngtjZ2gIJ6K8I0xN7Dm2ReS0z0hoEdyMZn3FJmoiM WJ4HHZDMZ5OYcJjpJwejutQ7FDxTn0HgzW+nLCD8r7DEDYaJ0MiYdfMf+lLrfZRr qmxPXXOSCM0KGFzo8MvIQ6zHE2xKsL4zroJI0VlfsMydpvluHHCawncEjdiko+qz aa4jIKC3mpFPM5kj7Mn8Exzk8t08BYqphEVLQSLkwlKl4Aa9wXIDMnXym28tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWlRDGXLoahnYPtvjfpCJw9h0uH8wHwYDVR0j BBgwFoAUl36lEYVR6YrqqLsRydmdcZbT3rowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTg4YzBmMi0yODAwLTQ4ZGEtYTgzZS1hYjU0ZGY2NWM1NzQvMC85NzdFQTUxMTg1 NTFFOThBRUFBOEJCMTFDOUQ5OUQ3MTk2RDNERUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5NkQz REVCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlE NzE5NkQzREVCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL92bO0b43NMUTjioM2czoVITB3dnegY8+ps 0JUT1XKvtSvBHH9j3VatrcVmSOAwRg958HuCkKEGUeGpAgYSWVm4LDVcoCcSjQV5 QhDZeMmM0LaTA2j2QF/XHoIaXZtGdy1rX0udglnP9ZqGXCN8ZmH/5LO39JB2Fe9e fktjaWpFazZS4nbhcmIlZA0ooe3nf2UZ/NGkAM9m9ro49zK7vuNZK+1BVdMkQAGg rFO2n8YsMEACqlrVhqrM7QAj+kZfetepPwBI3vilkJWUmukroXaSSomxBNxjGmYz mZ0mIEHJhJe8Cf5mv7HtOBf1fNKh1ZcRGNkoThxKdspAQaB/jXc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:22 2025 by rpki-client