$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json) Hash identifier: LQg/gwCFdsAHzEkHuEczFPrCxjCGXWS31UehCWfW7UM= Subject key identifier: 8C:EC:95:36:44:17:B0:CC:DE:5B:25:7A:71:3B:97:44:1B:50:0E:64 Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419 Certificate serial: 2844A4CDCACA591A5C9DE0C00FC7DDF774FF3327 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft Manifest number: AC Signing time: Tue 01 Jul 2025 01:22:05 +0000 Manifest this update: Tue 01 Jul 2025 01:17:05 +0000 Manifest next update: Fri 04 Jul 2025 12:23:05 +0000 Files and hashes: 1: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: z6YBhBh5FBRQZGG191hEwmeU6nT7ynPCxki1FaT3T5k=) 2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: VG6+4O5llgQnLe8B6hYlDtcuv5x9Z/46JdLy5SPzH+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 12:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:44:a4:cd:ca:ca:59:1a:5c:9d:e0:c0:0f:c7:dd:f7:74:ff:33:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419 Validity Not Before: Jul 1 01:17:05 2025 GMT Not After : Jul 4 12:23:05 2025 GMT Subject: CN=8CEC95364417B0CCDE5B257A713B97441B500E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:77:8f:09:b9:9a:5d:f1:1a:b4:1b:5f:82: b9:cf:72:de:9a:79:c7:3e:a1:ea:47:73:da:f8:6e: a2:e3:f0:12:c1:b1:cd:a2:fd:af:6f:8c:3a:0a:68: 28:3e:44:b8:ff:85:03:e8:bc:84:06:75:22:d9:3c: 10:8c:b2:ea:bf:9d:2f:e5:3b:a9:cc:24:19:9a:de: 58:74:4b:3e:20:30:a1:92:63:fa:5a:87:bd:44:e7: 81:66:f5:cc:3a:a9:13:8f:6b:95:30:3b:7d:fc:c3: 7e:15:26:ab:de:aa:9c:9a:56:03:19:f0:09:fc:60: dc:37:10:a1:9c:51:9e:43:d8:93:78:fc:cc:e1:3e: 45:e8:17:c5:4a:67:2a:59:bd:52:9d:d9:8b:e3:f4: 3a:fe:b4:95:6c:2e:8f:70:8a:86:29:0a:e8:cb:4b: cb:96:3a:0a:54:ad:57:2e:49:4d:c3:63:2e:4f:12: f3:72:b7:dd:7b:c6:79:60:26:a7:63:9a:f2:e8:c0: 1d:e0:62:46:a4:21:8f:51:71:99:26:a4:7c:cb:9b: 01:2d:93:8c:f3:be:6b:86:57:8d:b0:76:4f:d7:1d: c6:c0:dd:d9:c5:32:e0:c7:d2:ad:e4:f9:a1:65:57: 8a:ac:d1:ed:e8:ef:c1:58:dd:1e:40:e3:8d:6b:bd: 0c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EC:95:36:44:17:B0:CC:DE:5B:25:7A:71:3B:97:44:1B:50:0E:64 X509v3 Authority Key Identifier: keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b3:b2:5c:58:86:f9:2f:2a:50:d6:98:2d:e7:93:78:00:bc: 17:a8:82:4c:fb:8f:e9:56:c4:43:eb:7b:f7:bd:cf:29:5c:aa: da:d9:bd:77:a1:70:c2:09:f4:fd:5b:de:f4:a4:21:3d:0d:a6: 85:14:d2:8c:95:b9:54:c0:b2:bb:3f:21:c8:fd:da:58:00:84: c6:6d:34:d0:c1:64:63:3e:ce:61:1d:17:4d:84:fb:46:75:ce: e7:45:ba:4d:a9:d3:37:bc:75:2c:97:0f:43:a8:73:b8:6a:a8: 49:af:fb:45:0a:13:c6:ca:bc:85:a9:9d:d0:ba:fb:c3:72:3c: 5f:05:9a:09:a0:79:bf:83:bd:a2:d4:c0:dc:ff:85:f2:38:b3: d1:1c:2f:d4:10:f7:2c:f5:73:4f:ba:b4:8f:35:23:09:62:9e: 33:f0:3f:83:66:e6:33:59:e9:92:cf:65:7e:ac:bf:57:2f:b0: 6d:0c:21:f5:a8:15:28:6f:e7:ea:9b:5a:f2:01:65:3c:51:f2: b8:cd:01:ff:5f:f6:a0:80:b3:45:12:41:b9:5a:a2:b6:ec:9b: ac:a3:ac:52:d7:3f:93:c0:2b:1d:95:f8:be:95:e3:af:46:a5: 13:3c:b8:03:b9:0b:9e:00:16:08:bf:9f:fa:e8:d9:5b:61:b9: 59:32:91:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKESkzcrKWRpcneDAD8fd93T/MycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIz NzVEMDQxOTAeFw0yNTA3MDEwMTE3MDVaFw0yNTA3MDQxMjIzMDVaMDMxMTAvBgNV BAMTKDhDRUM5NTM2NDQxN0IwQ0NERTVCMjU3QTcxM0I5NzQ0MUI1MDBFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YXePCbmaXfEatBtfgrnPct6a ecc+oepHc9r4bqLj8BLBsc2i/a9vjDoKaCg+RLj/hQPovIQGdSLZPBCMsuq/nS/l O6nMJBma3lh0Sz4gMKGSY/pah71E54Fm9cw6qROPa5UwO338w34VJqveqpyaVgMZ 8An8YNw3EKGcUZ5D2JN4/MzhPkXoF8VKZypZvVKd2Yvj9Dr+tJVsLo9wioYpCujL S8uWOgpUrVcuSU3DYy5PEvNyt917xnlgJqdjmvLowB3gYkakIY9RcZkmpHzLmwEt k4zzvmuGV42wdk/XHcbA3dnFMuDH0q3k+aFlV4qs0e3o78FY3R5A441rvQzDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjOyVNkQXsMzeWyV6cTuXRBtQDmQwHwYDVR0j BBgwFoAUeYoinELaVNBpAGTSZKp6ojddBBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMS83OThBMjI5QzQy REE1NEQwNjkwMDY0RDI2NEFBN0FBMjM3NUQwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIzNzVE MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdB QTIzNzVEMDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+zslxYhvkvKlDWmC3nk3gAvBeogkz7j+lW xEPre/e9zylcqtrZvXehcMIJ9P1b3vSkIT0NpoUU0oyVuVTAsrs/Icj92lgAhMZt NNDBZGM+zmEdF02E+0Z1zudFuk2p0ze8dSyXD0Ooc7hqqEmv+0UKE8bKvIWpndC6 +8NyPF8Fmgmgeb+DvaLUwNz/hfI4s9EcL9QQ9yz1c0+6tI81IwlinjPwP4Nm5jNZ 6ZLPZX6sv1cvsG0MIfWoFShv5+qbWvIBZTxR8rjNAf9f9qCAs0USQblaorbsm6yj rFLXP5PAKx2V+L6V469GpRM8uAO5C54AFgi/n/ro2VthuVkykew= -----END CERTIFICATE-----Generated at Tue Jul 1 11:55:35 2025 by rpki-client