$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft File: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft (raw, json) Hash identifier: hA4U7HSczPJ6epjyRiutdhBcD7Xl40h0eBOwOQPqxxI= Subject key identifier: 9F:17:7F:03:04:E4:65:6F:88:23:3D:7D:9A:3F:92:F4:12:3C:F4:E5 Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 35F84DE3E740723FD7BD187D74302B5D5D8AA188 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft Manifest number: 0210 Signing time: Mon 20 Oct 2025 13:11:24 +0000 Manifest this update: Mon 20 Oct 2025 13:06:24 +0000 Manifest next update: Thu 23 Oct 2025 13:36:24 +0000 Files and hashes: 1: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl (hash: +BbPIdvsnaqupdLU/X9IhRfpOZH9OXIRsUtYyBWEFTg=) 2: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: umdrRzgp8Ciqeng1bs/crkT4xOCEEqpUSt3z8J2SnuY=) 3: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: Z+uPltjZGSJJVlVHwNz2NCUXUIEBHK05ylu6rUY+FMs=) 4: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: MSA3Izjg6KzN5Q+MKwDBM7mghQbhoAUxxHKShKe7LT0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f8:4d:e3:e7:40:72:3f:d7:bd:18:7d:74:30:2b:5d:5d:8a:a1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: Oct 20 13:06:24 2025 GMT Not After : Oct 23 13:36:24 2025 GMT Subject: CN=9F177F0304E4656F88233D7D9A3F92F4123CF4E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:fe:88:2f:d3:5a:49:39:af:cc:ae:17:ed: 35:eb:3c:42:7a:a5:30:09:65:c9:0a:2b:1f:0f:60: 1e:72:0c:da:c1:83:39:37:bf:b3:a9:e3:b2:f0:25: 2d:65:e4:20:4f:62:5f:02:86:db:75:76:9d:8c:5b: c4:40:86:71:a8:f4:64:19:3f:ef:05:bf:e8:4c:01: 5c:18:25:6c:e4:15:28:2a:93:b8:32:90:6d:8e:e9: 47:4e:aa:5c:9f:03:bd:af:4d:91:1c:de:53:15:51: b7:08:6a:dd:7d:9f:9a:82:a1:7a:03:ca:b5:d2:da: 4b:e1:14:c4:a0:86:40:ad:4e:23:a8:2e:7e:7f:55: e1:19:00:2e:ac:3a:db:c5:69:f5:b0:13:34:3b:1f: 42:98:67:37:71:49:a6:33:dc:57:0e:99:57:6c:5c: 00:b4:db:c3:47:7d:54:e3:b4:4e:c4:c7:34:fe:2a: b1:f2:e5:fe:c8:6f:1e:b7:1c:b0:c5:8f:6a:81:15: 21:fc:65:18:9f:00:84:49:87:f2:92:33:87:69:f1: 94:81:5c:95:b1:4b:36:43:d4:bb:21:cc:03:06:70: d4:3b:1f:66:56:23:f5:f6:e3:ca:61:9c:5d:e0:22: 11:36:2b:7c:bb:20:65:1e:d8:04:bd:dd:2b:d3:3a: 6b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:17:7F:03:04:E4:65:6F:88:23:3D:7D:9A:3F:92:F4:12:3C:F4:E5 X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c6:84:da:7d:47:c5:1e:f5:05:fb:ab:ee:de:2f:c9:27:e2: d1:ff:bc:1f:a0:35:89:3a:75:c9:f0:af:4d:81:28:b5:45:4b: 18:09:fc:48:4c:b8:b6:61:04:f5:e7:30:04:3c:62:f8:8a:8e: d9:84:67:93:11:ef:14:dc:5c:a2:7f:3b:3f:dd:a8:fe:b8:4d: eb:72:42:36:78:95:4b:79:dc:e9:3a:0d:0a:f8:11:16:4d:b0: e3:32:22:71:1e:ff:e3:35:b8:4f:9f:74:3a:e2:13:27:0a:28: a7:29:d3:a2:37:5a:11:44:c4:7e:52:95:d7:62:c5:c1:47:d5: 54:93:0c:38:a1:00:d2:83:ef:ed:86:c0:a5:b8:9c:75:c7:e5: 96:b6:e5:cb:fc:62:25:5f:94:b1:a9:c3:2b:f0:ea:4e:ff:23: 5e:27:ef:ce:c9:45:0d:c3:4d:bf:b7:9f:ec:1f:38:15:9b:59: d1:9a:c3:fc:3a:21:f1:c6:81:04:27:f7:ef:f2:94:6d:57:26: 21:2c:ed:62:1b:cb:68:d7:22:09:b7:05:e2:4d:de:79:c4:e7: a1:f5:a9:91:19:af:7d:7c:da:7a:15:d8:fd:87:dc:d7:d4:87: ca:d2:fe:76:09:fc:f7:fc:82:42:ae:a8:64:13:fb:ea:a5:2c: 89:4e:2a:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfhN4+dAcj/XvRh9dDArXV2KoYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNTEwMjAxMzA2MjRaFw0yNTEwMjMxMzM2MjRaMDMxMTAvBgNV BAMTKDlGMTc3RjAzMDRFNDY1NkY4ODIzM0Q3RDlBM0Y5MkY0MTIzQ0Y0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Wv6IL9NaSTmvzK4X7TXrPEJ6 pTAJZckKKx8PYB5yDNrBgzk3v7Op47LwJS1l5CBPYl8Chtt1dp2MW8RAhnGo9GQZ P+8Fv+hMAVwYJWzkFSgqk7gykG2O6UdOqlyfA72vTZEc3lMVUbcIat19n5qCoXoD yrXS2kvhFMSghkCtTiOoLn5/VeEZAC6sOtvFafWwEzQ7H0KYZzdxSaYz3FcOmVds XAC028NHfVTjtE7ExzT+KrHy5f7Ibx63HLDFj2qBFSH8ZRifAIRJh/KSM4dp8ZSB XJWxSzZD1LshzAMGcNQ7H2ZWI/X248phnF3gIhE2K3y7IGUe2AS93SvTOms5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnxd/AwTkZW+IIz19mj+S9BI89OUwHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJE NzNDQUQyNkRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHGhNp9R8Ue9QX7q+7eL8kn4tH/vB+gNYk6 dcnwr02BKLVFSxgJ/EhMuLZhBPXnMAQ8YviKjtmEZ5MR7xTcXKJ/Oz/dqP64Tety QjZ4lUt53Ok6DQr4ERZNsOMyInEe/+M1uE+fdDriEycKKKcp06I3WhFExH5Slddi xcFH1VSTDDihANKD7+2GwKW4nHXH5Za25cv8YiVflLGpwyvw6k7/I14n787JRQ3D Tb+3n+wfOBWbWdGaw/w6IfHGgQQn9+/ylG1XJiEs7WIby2jXIgm3BeJN3nnE56H1 qZEZr3182noV2P2H3NfUh8rS/nYJ/Pf8gkKuqGQT++qlLIlOKok= -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:41 2025 by rpki-client