$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft File: 9B77D523EDC2218C65DAB55B4538140243B7E862.mft (raw, json) Hash identifier: GJvTZL1yPdGYDVm86zg74k1AL85qn+YzH0fkB2bx/dU= Subject key identifier: 6C:CC:F1:D1:60:E1:04:46:59:5F:DF:0A:3D:1C:9B:A6:F7:C3:A3:5D Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 Certificate issuer: /CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Certificate serial: 1F15C4461C1406135C7872AE6D2073C7DB9E633F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft Manifest number: 021F Signing time: Wed 05 Nov 2025 21:51:31 +0000 Manifest this update: Wed 05 Nov 2025 21:46:31 +0000 Manifest next update: Sat 08 Nov 2025 22:29:31 +0000 Files and hashes: 1: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: qWPS0N/te+MWks31pquZu9fK7Gl6gv7U+N0yk9Foipw=) 2: 9B77D523EDC2218C65DAB55B4538140243B7E862.crl (hash: SxzyqCcXpfHnKD1qrqsPfhy8Db1Cc+yRzcClT/IpnF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 22:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:15:c4:46:1c:14:06:13:5c:78:72:ae:6d:20:73:c7:db:9e:63:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Validity Not Before: Nov 5 21:46:31 2025 GMT Not After : Nov 8 22:29:31 2025 GMT Subject: CN=6CCCF1D160E10446595FDF0A3D1C9BA6F7C3A35D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:be:e6:d6:b0:0c:da:54:ff:f6:a9:14:63: 28:7b:7d:f3:ff:6f:4e:21:21:68:a8:9e:8b:d2:96: e6:1a:84:c9:c7:61:95:35:5d:2a:9a:e6:bf:72:ab: 73:8b:9e:f3:04:0f:48:63:48:e0:d2:26:46:6e:d0: ab:6b:d3:a1:d1:a6:00:44:49:e7:c7:b3:c5:3a:5c: c8:81:40:9e:45:56:e3:9d:6b:e7:10:3d:bc:98:2d: 6c:8a:f5:df:27:0a:1e:0a:73:17:64:48:7f:bb:a6: 0c:c3:65:34:73:73:e4:de:a5:e9:4f:da:7b:2f:90: 79:57:9f:92:75:0f:8d:7b:6b:25:15:a2:19:43:de: 0b:13:c8:4c:6e:7c:3a:68:36:5e:70:1d:39:95:e7: b0:8e:64:0f:4d:cf:43:f8:23:30:a2:6f:23:22:fd: 13:4a:01:17:ab:02:b7:eb:5d:88:c7:90:c9:0c:e2: 9b:df:d7:af:fb:0c:ff:3a:42:ce:51:d6:fb:69:94: 53:f1:04:97:35:5b:49:8c:5b:d6:d0:95:e5:cf:78: 27:92:b3:19:36:87:e9:cf:96:d8:ee:5e:5a:b8:8f: 70:c2:d1:0f:28:80:23:b4:a4:24:91:90:d8:f9:6a: 00:d6:e9:fc:91:c6:0f:8d:18:3c:f1:44:e4:c4:cc: f6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CC:F1:D1:60:E1:04:46:59:5F:DF:0A:3D:1C:9B:A6:F7:C3:A3:5D X509v3 Authority Key Identifier: keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4c:b4:6b:17:fc:69:95:80:16:89:53:b6:97:0c:d7:82:6c: 61:d0:64:83:95:83:14:7a:11:ef:cc:c8:e2:86:8b:51:0d:2b: 2d:1a:4e:52:15:6d:b4:1a:b5:90:0c:9d:ae:a1:52:10:9c:8c: fc:c3:be:41:17:34:d0:50:3a:15:1d:9d:ba:fe:68:80:8b:49: 23:db:84:b3:bb:30:90:08:23:8e:9e:53:c2:c4:29:02:73:70: 18:a4:10:3b:3c:97:d4:bd:57:cb:22:16:36:ee:25:0f:e1:13: 87:cb:90:29:8f:a1:21:70:94:84:1a:d4:1c:1d:f7:20:db:e5: 6f:2b:da:7c:88:54:c3:fd:8d:3e:28:56:bd:20:3c:5e:6c:e6: 66:11:b6:3b:b5:06:5f:d7:e9:a6:06:35:7a:ec:13:c8:b9:e8: c9:8b:fc:f2:4a:d6:8d:7b:db:4e:d6:a0:e6:30:bb:fd:92:c6: af:b4:33:0f:64:9d:e4:3e:2a:a3:f7:01:5f:b7:27:0a:2e:c2: cc:a9:89:56:b9:c0:a4:6f:98:68:38:2c:36:15:13:c4:4e:e2: 0f:57:63:21:9f:4b:34:b8:08:a6:59:74:7e:7f:5f:31:ae:c7: 66:4f:1d:42:5f:e9:01:23:d8:3c:c0:7d:3a:9b:ee:35:a2:ad: cb:95:f3:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxXERhwUBhNceHKubSBzx9ueYz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0 M0I3RTg2MjAeFw0yNTExMDUyMTQ2MzFaFw0yNTExMDgyMjI5MzFaMDMxMTAvBgNV BAMTKDZDQ0NGMUQxNjBFMTA0NDY1OTVGREYwQTNEMUM5QkE2RjdDM0EzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eL7m1rAM2lT/9qkUYyh7ffP/ b04hIWionovSluYahMnHYZU1XSqa5r9yq3OLnvMED0hjSODSJkZu0Ktr06HRpgBE SefHs8U6XMiBQJ5FVuOda+cQPbyYLWyK9d8nCh4KcxdkSH+7pgzDZTRzc+TepelP 2nsvkHlXn5J1D417ayUVohlD3gsTyExufDpoNl5wHTmV57COZA9Nz0P4IzCibyMi /RNKARerArfrXYjHkMkM4pvf16/7DP86Qs5R1vtplFPxBJc1W0mMW9bQleXPeCeS sxk2h+nPltjuXlq4j3DC0Q8ogCO0pCSRkNj5agDW6fyRxg+NGDzxROTEzPbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMzx0WDhBEZZX98KPRybpvfDo10wHwYDVR0j BBgwFoAUm3fVI+3CIYxl2rVbRTgUAkO36GIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzUwZjA3OC1jNTM1LTRmOGUtOTYwZi0zMmMxNjIzYWE0YjEvMC85Qjc3RDUyM0VE QzIyMThDNjVEQUI1NUI0NTM4MTQwMjQzQjdFODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0M0I3 RTg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0 MDI0M0I3RTg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdMtGsX/GmVgBaJU7aXDNeCbGHQZIOVgxR6 Ee/MyOKGi1ENKy0aTlIVbbQatZAMna6hUhCcjPzDvkEXNNBQOhUdnbr+aICLSSPb hLO7MJAII46eU8LEKQJzcBikEDs8l9S9V8siFjbuJQ/hE4fLkCmPoSFwlIQa1Bwd 9yDb5W8r2nyIVMP9jT4oVr0gPF5s5mYRtju1Bl/X6aYGNXrsE8i56MmL/PJK1o17 207WoOYwu/2Sxq+0Mw9kneQ+KqP3AV+3JwouwsypiVa5wKRvmGg4LDYVE8RO4g9X YyGfSzS4CKZZdH5/XzGux2ZPHUJf6QEj2DzAfTqb7jWircuV8xg= -----END CERTIFICATE-----Generated at Thu Nov 6 00:09:26 2025 by rpki-client