$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json) Hash identifier: Dhk+mGAFwhbRimTIS94gyxJpAmZGldEQNAGx7iK1TLg= Subject key identifier: 80:12:D6:AB:2B:5C:89:17:FD:04:88:83:AE:97:BD:2E:73:47:2B:06 Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419 Certificate serial: 3DF880039D4139DE6CE61AEAF094C265CDEBFD09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft Manifest number: DD Signing time: Sun 19 Oct 2025 23:32:11 +0000 Manifest this update: Sun 19 Oct 2025 23:27:11 +0000 Manifest next update: Thu 23 Oct 2025 11:04:11 +0000 Files and hashes: 1: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: KZd+tPDvIqMLWCKqIb86RzAU9DVHtcXRgbnmF6Vp/40=) 2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: VG6+4O5llgQnLe8B6hYlDtcuv5x9Z/46JdLy5SPzH+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f8:80:03:9d:41:39:de:6c:e6:1a:ea:f0:94:c2:65:cd:eb:fd:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419 Validity Not Before: Oct 19 23:27:11 2025 GMT Not After : Oct 23 11:04:11 2025 GMT Subject: CN=8012D6AB2B5C8917FD048883AE97BD2E73472B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:28:1a:4d:48:51:c5:32:ca:3c:fd:9c:57: 79:ad:2b:9d:5b:0a:00:2c:65:83:30:6e:d0:ff:d9: a8:31:79:5d:74:6a:3e:db:ad:85:f5:20:cc:a1:5a: d7:6c:13:a2:b1:32:ca:95:33:69:5f:e6:e3:b1:b3: f7:20:f4:68:ca:bb:eb:4b:54:6d:8f:d9:2f:6b:fc: 21:03:7e:47:e1:62:bd:22:fe:68:d7:e0:11:8d:12: 14:07:79:3d:ed:5e:d1:67:f9:af:5a:e6:0c:0e:5b: c4:a4:2a:14:09:55:ea:86:43:13:f8:d3:24:a4:ae: 5c:a6:a8:f1:c2:56:53:0a:53:d9:c9:af:37:12:d2: 77:9d:26:cc:9d:de:2a:a9:0a:76:4f:71:5a:51:63: 90:f5:f6:81:89:df:33:81:6a:74:d1:41:62:80:5e: 14:d7:a2:be:27:d4:1e:45:e0:13:34:36:23:76:44: 81:e0:e8:e8:aa:48:67:21:64:42:98:06:24:bc:a4: 36:b1:d5:48:a7:f1:db:d3:81:3f:5d:9d:76:b4:7f: 29:b6:b9:57:04:cd:2a:44:f7:0b:72:15:7b:b7:46: db:94:8b:a6:fb:4b:19:72:20:14:b4:9c:ca:59:86: 7e:de:3e:e0:3c:38:80:4f:26:b1:fe:e2:1d:40:7a: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:12:D6:AB:2B:5C:89:17:FD:04:88:83:AE:97:BD:2E:73:47:2B:06 X509v3 Authority Key Identifier: keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a6:63:5f:00:a3:23:01:c9:26:5e:b0:c7:34:02:1e:fb:43: 8f:00:04:69:c0:b4:2d:88:b4:0c:2c:47:90:73:a5:6f:07:ac: ae:09:1d:11:e3:f0:c5:3e:e2:4e:9f:1f:44:5a:53:08:79:f7: 1d:df:49:11:58:d7:5d:18:61:b1:08:2c:da:05:e6:7a:11:2c: 2a:c4:59:29:9e:f3:54:35:ba:5b:f1:36:ac:01:3b:0d:23:6c: 32:ad:ee:51:af:da:a0:9f:aa:e0:bc:61:56:f9:ee:6f:b4:f6: 91:62:64:c3:d8:cc:86:95:2f:bf:e6:dc:27:cd:78:5d:11:b9: c2:ac:95:88:41:d0:5f:5f:60:f5:b0:f4:80:ec:8b:0f:7d:ca: 6b:07:e1:cd:a1:6b:10:5e:71:d2:06:71:56:bd:3d:eb:68:17: fb:68:30:d3:ca:89:29:99:cb:a9:38:51:d6:8f:3d:a8:8d:4c: 1f:ef:43:2d:44:2a:b1:c4:47:06:4c:90:06:95:b9:cd:45:69: 21:98:84:04:0b:71:e8:87:58:a8:d1:71:39:c1:2a:9b:36:b2: 10:d4:11:7b:c1:45:d4:c1:5b:4a:9e:5b:ee:c6:8f:9b:04:c3: d7:a0:03:d5:2e:a4:63:b6:a6:ae:d2:74:3b:df:de:92:e4:e5: e3:37:99:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPfiAA51BOd5s5hrq8JTCZc3r/QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIz NzVEMDQxOTAeFw0yNTEwMTkyMzI3MTFaFw0yNTEwMjMxMTA0MTFaMDMxMTAvBgNV BAMTKDgwMTJENkFCMkI1Qzg5MTdGRDA0ODg4M0FFOTdCRDJFNzM0NzJCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pigaTUhRxTLKPP2cV3mtK51b CgAsZYMwbtD/2agxeV10aj7brYX1IMyhWtdsE6KxMsqVM2lf5uOxs/cg9GjKu+tL VG2P2S9r/CEDfkfhYr0i/mjX4BGNEhQHeT3tXtFn+a9a5gwOW8SkKhQJVeqGQxP4 0ySkrlymqPHCVlMKU9nJrzcS0nedJsyd3iqpCnZPcVpRY5D19oGJ3zOBanTRQWKA XhTXor4n1B5F4BM0NiN2RIHg6OiqSGchZEKYBiS8pDax1Uin8dvTgT9dnXa0fym2 uVcEzSpE9wtyFXu3RtuUi6b7SxlyIBS0nMpZhn7ePuA8OIBPJrH+4h1AekrpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgBLWqytciRf9BIiDrpe9LnNHKwYwHwYDVR0j BBgwFoAUeYoinELaVNBpAGTSZKp6ojddBBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMS83OThBMjI5QzQy REE1NEQwNjkwMDY0RDI2NEFBN0FBMjM3NUQwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIzNzVE MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdB QTIzNzVEMDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGmY18AoyMBySZesMc0Ah77Q48ABGnAtC2I tAwsR5BzpW8HrK4JHRHj8MU+4k6fH0RaUwh59x3fSRFY110YYbEILNoF5noRLCrE WSme81Q1ulvxNqwBOw0jbDKt7lGv2qCfquC8YVb57m+09pFiZMPYzIaVL7/m3CfN eF0RucKslYhB0F9fYPWw9IDsiw99ymsH4c2haxBecdIGcVa9PetoF/toMNPKiSmZ y6k4UdaPPaiNTB/vQy1EKrHERwZMkAaVuc1FaSGYhAQLceiHWKjRcTnBKps2shDU EXvBRdTBW0qeW+7Gj5sEw9egA9UupGO2pq7SdDvf3pLk5eM3mb0= -----END CERTIFICATE-----Generated at Tue Oct 21 01:57:41 2025 by rpki-client