$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft (raw, json) Hash identifier: jmpU/2yoMYQoDMwb8xaWJKH/fJAzBh/v3qIZtFqMGGk= Subject key identifier: 06:2D:84:98:AC:E2:03:C6:5E:27:F4:61:88:B4:33:60:05:05:0B:F7 Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 6EDCACED4605BE554795239A30996BDCEC9AA0CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft Manifest number: 0124 Signing time: Sat 23 Aug 2025 01:02:07 +0000 Manifest this update: Sat 23 Aug 2025 00:57:07 +0000 Manifest next update: Tue 26 Aug 2025 12:21:07 +0000 Files and hashes: 1: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl (hash: yDNqNRKu6pQZ9HFwfrlHnJwGAB51ugfCpKklC/vmEj4=) 2: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 8JuZ2ebsqDLgMKPt7Z/5NJCA9Jrmu98pAz1BifgGHCc=) 3: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: viE08DL5fFk1bogLaoHfmzCByxNbHXkxctzPEjnVqjA=) 4: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: ombGnLwPgLQ/TaOmQHPipXlZkRsWxFVGNy0cRXRDrpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 12:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:dc:ac:ed:46:05:be:55:47:95:23:9a:30:99:6b:dc:ec:9a:a0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: Aug 23 00:57:07 2025 GMT Not After : Aug 26 12:21:07 2025 GMT Subject: CN=062D8498ACE203C65E27F46188B4336005050BF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0f:f8:52:64:e1:83:6e:dd:d6:b7:92:b1:e5: 64:0f:9d:d6:4d:2d:66:ca:14:05:bf:68:52:8a:64: 57:70:1e:c6:d1:75:da:b7:fa:4a:4f:79:76:02:54: f6:47:dc:24:04:14:4c:0e:4d:a1:25:53:87:c7:09: 8e:15:c8:62:a1:4a:8b:63:17:44:8f:35:90:2f:dc: 4e:8f:d4:97:2e:b1:b7:94:db:c2:93:97:45:ce:03: c0:7d:72:c5:d6:ba:b4:d6:7a:5b:b8:c1:34:90:cc: 23:05:12:96:c5:18:28:9b:eb:67:f7:9b:13:1d:09: 27:c7:a2:d1:ab:4b:cf:1e:0f:0c:e1:d0:58:39:5e: 07:b6:38:e6:9b:18:51:7d:05:3e:2c:74:5c:7d:5f: b6:98:ca:37:6d:a0:3b:b1:91:18:70:9a:88:5a:aa: f0:45:be:cb:ac:d9:35:76:94:4f:50:d0:b5:dd:7d: 0d:53:dd:4b:56:8f:9d:d1:44:6d:08:03:c0:0b:1b: 8f:ef:f7:28:07:e9:be:c5:86:c5:be:ac:b1:2b:97: b6:35:a3:f9:25:1f:01:6e:92:07:d4:2a:e5:5e:eb: fd:5d:0a:83:f4:53:93:97:93:20:b6:df:88:9b:61: 80:1c:0f:36:a6:af:ca:4f:35:70:15:15:2e:16:09: 32:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2D:84:98:AC:E2:03:C6:5E:27:F4:61:88:B4:33:60:05:05:0B:F7 X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:52:b3:31:51:9d:c8:74:d6:86:53:9e:a2:85:cd:54:10:ea: fb:8a:e2:e5:8a:91:1a:73:3c:b0:d6:c0:d7:ae:4e:a9:25:c8: be:37:3c:af:c3:71:ec:6d:fc:78:4e:d5:1d:ba:29:0e:0b:53: ef:92:b7:7a:0a:b6:b8:a7:bf:49:48:cc:d1:d0:00:cb:92:16: 51:8d:e8:b0:ce:49:4f:90:44:a8:d6:79:c3:4b:85:de:4a:00: f3:a0:42:84:b1:c9:d3:03:de:2a:e4:3b:48:72:db:cf:68:6d: d9:a4:6a:fa:df:4c:c4:f7:21:ef:e6:9d:1c:b1:ab:b3:ac:18: 81:c3:f4:2e:03:bb:ad:3f:0c:53:b1:a3:ff:e9:58:0f:30:58: 2c:0b:83:36:62:c8:8a:01:bf:93:b9:92:c1:32:4a:5e:1a:79: 7c:f0:39:f7:e0:89:c2:43:e0:47:b3:c8:50:33:96:15:ab:35: f7:1b:d4:91:88:f1:3a:69:3b:97:45:47:f5:53:ac:20:f6:0b: c4:e3:9f:65:63:df:1e:52:e6:b3:75:8d:53:f5:01:20:f7:1c: 02:5e:75:13:1c:7b:fb:68:32:e2:db:71:1e:02:77:ea:a6:30: 54:19:97:78:dc:31:5c:77:5b:7a:31:d9:5c:8c:65:9f:e6:3b: a3:cd:54:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtys7UYFvlVHlSOaMJlr3OyaoMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG NkVGRjY1RTAeFw0yNTA4MjMwMDU3MDdaFw0yNTA4MjYxMjIxMDdaMDMxMTAvBgNV BAMTKDA2MkQ4NDk4QUNFMjAzQzY1RTI3RjQ2MTg4QjQzMzYwMDUwNTBCRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlD/hSZOGDbt3Wt5Kx5WQPndZN LWbKFAW/aFKKZFdwHsbRddq3+kpPeXYCVPZH3CQEFEwOTaElU4fHCY4VyGKhSotj F0SPNZAv3E6P1JcusbeU28KTl0XOA8B9csXWurTWelu4wTSQzCMFEpbFGCib62f3 mxMdCSfHotGrS88eDwzh0Fg5Xge2OOabGFF9BT4sdFx9X7aYyjdtoDuxkRhwmoha qvBFvsus2TV2lE9Q0LXdfQ1T3UtWj53RRG0IA8ALG4/v9ygH6b7FhsW+rLErl7Y1 o/klHwFukgfUKuVe6/1dCoP0U5OXkyC234ibYYAcDzamr8pPNXAVFS4WCTKvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBi2EmKziA8ZeJ/RhiLQzYAUFC/cwHwYDVR0j BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG RjY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIy Q0NGNkVGRjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9SszFRnch01oZTnqKFzVQQ6vuK4uWKkRpz PLDWwNeuTqklyL43PK/Dcext/HhO1R26KQ4LU++St3oKtrinv0lIzNHQAMuSFlGN 6LDOSU+QRKjWecNLhd5KAPOgQoSxydMD3irkO0hy289obdmkavrfTMT3Ie/mnRyx q7OsGIHD9C4Du60/DFOxo//pWA8wWCwLgzZiyIoBv5O5ksEySl4aeXzwOffgicJD 4EezyFAzlhWrNfcb1JGI8TppO5dFR/VTrCD2C8Tjn2Vj3x5S5rN1jVP1ASD3HAJe dRMce/toMuLbcR4Cd+qmMFQZl3jcMVx3W3ox2VyMZZ/mO6PNVCY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:39 2025 by rpki-client