$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft File: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft (raw, json) Hash identifier: kmld0DXQ0pr/7JTydHfAWYFOiZcrxv3DIu5PC+3xWYQ= Subject key identifier: 1D:50:21:A7:45:D6:1C:2A:7C:BC:E3:50:C0:47:11:3E:AB:25:97:FD Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 0D442BD4B4C0BF547B75918EA82F24C929E15458 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft Manifest number: 01F4 Signing time: Thu 21 Aug 2025 06:31:25 +0000 Manifest this update: Thu 21 Aug 2025 06:26:25 +0000 Manifest next update: Sun 24 Aug 2025 10:06:25 +0000 Files and hashes: 1: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl (hash: WPPOnRxjsBU/HXeyWIExe+Xwq7Bxr3eIMvhtHlxMj68=) 2: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: MSA3Izjg6KzN5Q+MKwDBM7mghQbhoAUxxHKShKe7LT0=) 3: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: umdrRzgp8Ciqeng1bs/crkT4xOCEEqpUSt3z8J2SnuY=) 4: 3130332e3135372e36322e302f32332d3234203d3e20313439393736.roa (hash: UqzHREfMZRSfOR8nYb3XR77CjtG93BxmjJaVVwgwsiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 10:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:44:2b:d4:b4:c0:bf:54:7b:75:91:8e:a8:2f:24:c9:29:e1:54:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: Aug 21 06:26:25 2025 GMT Not After : Aug 24 10:06:25 2025 GMT Subject: CN=1D5021A745D61C2A7CBCE350C047113EAB2597FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:c1:5a:89:c9:6b:46:f1:df:a5:3f:59:12: de:53:6e:4c:7e:65:fd:77:70:7b:69:40:e9:bb:90: 0c:e8:31:be:07:1d:ab:5d:d9:f0:3e:7d:8c:da:fb: ca:97:1b:14:c5:17:5c:cb:54:f6:d0:4d:99:d9:55: 20:98:79:6d:7d:43:6c:0a:ed:0d:b0:e2:d9:f5:a4: a3:39:bb:d4:1c:7e:7c:06:fa:f1:6b:0d:bc:b1:ab: c1:cd:30:f7:ec:df:73:8e:bb:aa:4f:87:f8:b9:bf: b1:c3:7b:93:ac:fb:e0:77:51:17:d8:39:58:94:37: e1:6d:79:f6:a4:dd:ce:79:88:9d:d3:46:82:76:1a: 6b:53:c7:48:ef:0e:78:8b:a7:69:a6:d2:5d:34:b7: 7a:29:28:5e:c1:e1:62:0c:e3:49:de:c5:e6:5d:dd: e4:01:53:ba:cc:93:25:7f:bd:d4:17:08:5b:3c:2e: f1:3e:82:56:1c:c2:fa:38:93:00:d5:53:29:38:0f: 27:f5:9e:de:37:8d:70:bb:6b:4f:77:b4:77:60:d0: 25:31:46:24:4b:55:51:e7:63:7b:b2:09:f8:d3:f9: 5f:aa:7a:7f:0a:20:76:55:7d:42:68:22:02:86:37: 26:d2:dd:90:b5:48:a4:ae:80:19:fc:79:92:f7:0f: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:50:21:A7:45:D6:1C:2A:7C:BC:E3:50:C0:47:11:3E:AB:25:97:FD X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:c3:61:8e:54:d4:f9:01:74:99:0d:4a:30:03:e7:ea:b0:88: b0:c7:e2:d2:16:f2:4d:7b:81:14:8e:b2:99:ae:bc:f4:fb:8a: 8a:13:ee:fe:43:fb:41:78:62:c7:a8:a6:3a:40:14:04:05:83: 65:24:cc:9b:6d:15:8b:d5:13:30:ee:22:5c:08:1d:87:60:3d: 2d:51:9e:01:5e:fd:3e:18:6d:e5:02:13:6e:15:0b:14:0f:65: fc:b6:11:65:1b:f6:be:bd:f4:44:7f:14:f3:e8:94:2a:93:4a: 18:88:66:29:a9:89:dc:75:b4:c7:46:6f:36:f5:9c:1f:ca:37: b7:e4:c0:2a:eb:8b:1f:4d:c6:53:08:6e:80:bc:49:d3:34:a3: 0c:00:4b:9e:67:d1:db:55:0c:18:50:b4:b9:0f:98:c6:c7:d7: cf:26:c7:fb:47:1c:ef:ce:a6:6f:a0:7a:80:37:ae:5e:71:9e: 5f:1c:a4:5f:4d:2c:e1:98:d0:fc:79:c2:3e:cc:7b:02:43:a2: ad:f2:4c:13:cc:93:78:68:45:89:47:ea:01:53:2e:20:2e:a5: 8e:70:41:51:d0:34:c6:be:15:15:e2:c5:6b:a2:c8:2e:33:32: c3:f5:b7:84:36:06:e8:1d:36:3c:fc:d3:1f:c5:ab:22:29:8b: c9:d4:93:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUQr1LTAv1R7dZGOqC8kySnhVFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNTA4MjEwNjI2MjVaFw0yNTA4MjQxMDA2MjVaMDMxMTAvBgNV BAMTKDFENTAyMUE3NDVENjFDMkE3Q0JDRTM1MEMwNDcxMTNFQUIyNTk3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1TsFaiclrRvHfpT9ZEt5Tbkx+ Zf13cHtpQOm7kAzoMb4HHatd2fA+fYza+8qXGxTFF1zLVPbQTZnZVSCYeW19Q2wK 7Q2w4tn1pKM5u9QcfnwG+vFrDbyxq8HNMPfs33OOu6pPh/i5v7HDe5Os++B3URfY OViUN+Ftefak3c55iJ3TRoJ2GmtTx0jvDniLp2mm0l00t3opKF7B4WIM40nexeZd 3eQBU7rMkyV/vdQXCFs8LvE+glYcwvo4kwDVUyk4Dyf1nt43jXC7a093tHdg0CUx RiRLVVHnY3uyCfjT+V+qen8KIHZVfUJoIgKGNybS3ZC1SKSugBn8eZL3D8/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHVAhp0XWHCp8vONQwEcRPqsll/0wHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJE NzNDQUQyNkRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANjDYY5U1PkBdJkNSjAD5+qwiLDH4tIW8k17 gRSOspmuvPT7iooT7v5D+0F4YseopjpAFAQFg2UkzJttFYvVEzDuIlwIHYdgPS1R ngFe/T4YbeUCE24VCxQPZfy2EWUb9r699ER/FPPolCqTShiIZimpidx1tMdGbzb1 nB/KN7fkwCrrix9NxlMIboC8SdM0owwAS55n0dtVDBhQtLkPmMbH188mx/tHHO/O pm+geoA3rl5xnl8cpF9NLOGY0Px5wj7MewJDoq3yTBPMk3hoRYlH6gFTLiAupY5w QVHQNMa+FRXixWuiyC4zMsP1t4Q2BugdNjz80x/FqyIpi8nUk90= -----END CERTIFICATE-----Generated at Sat Aug 23 10:24:11 2025 by rpki-client