$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json) Hash identifier: 6bc3y3f6Ntb7sxWpaqLRoLIZnhyen7QcGUiQ2A0y3nk= Subject key identifier: 41:C6:2B:DB:98:2B:36:88:13:F7:1B:18:7D:6A:FA:A2:B0:6E:35:72 Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419 Certificate serial: 540EC2E6703D38F07EE76AB8CFF4B636007DBEFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft Manifest number: C3 Signing time: Fri 22 Aug 2025 14:22:08 +0000 Manifest this update: Fri 22 Aug 2025 14:17:08 +0000 Manifest next update: Tue 26 Aug 2025 00:13:08 +0000 Files and hashes: 1: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: VG6+4O5llgQnLe8B6hYlDtcuv5x9Z/46JdLy5SPzH+0=) 2: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: AmXsslmlrHCzoBkU/ZQkaz2nRHRCvtYpJgWj7aF5NZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0e:c2:e6:70:3d:38:f0:7e:e7:6a:b8:cf:f4:b6:36:00:7d:be:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419 Validity Not Before: Aug 22 14:17:08 2025 GMT Not After : Aug 26 00:13:08 2025 GMT Subject: CN=41C62BDB982B368813F71B187D6AFAA2B06E3572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:fb:c8:ce:df:80:60:36:e3:93:35:f3:90: 36:a3:08:49:09:9e:31:af:c7:ac:f3:38:ed:71:11: 17:b8:56:93:b8:9c:7c:7e:9f:05:34:7c:84:f9:73: ea:2b:7d:d9:38:a4:20:0b:f7:26:57:f2:42:3b:0f: 23:2c:41:cd:67:a8:c6:ab:3f:8e:38:be:20:58:3d: 86:db:c8:6b:95:a7:e8:dc:37:5a:10:a9:a4:a7:34: 82:54:94:3e:69:b5:49:21:8e:f0:11:b2:e6:3a:1d: 38:70:dc:bf:95:49:25:6a:e2:58:45:32:63:f8:12: 1a:83:af:f0:ff:fe:69:7c:41:22:9b:10:15:15:c1: 5b:f3:84:19:00:bb:d2:c2:6e:e5:62:0e:31:79:02: 64:5a:bb:9d:a3:80:e2:b0:8f:71:a5:a8:5d:fd:2e: c5:1c:fc:d2:ef:d6:ed:7b:f5:7b:80:37:77:73:e3: 2c:44:23:d2:0b:a1:11:b0:75:8c:97:34:17:78:9f: fa:cb:8c:cb:ce:18:5b:dc:b2:64:47:6a:3d:30:a0: 96:d5:bb:dd:f2:44:f0:ad:7d:3c:e0:83:d0:2f:b6: 11:de:f4:7f:84:57:bc:00:33:6f:3f:14:9d:6e:f3: af:bd:de:23:00:a3:a0:49:46:f4:30:15:7c:5e:ac: 61:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C6:2B:DB:98:2B:36:88:13:F7:1B:18:7D:6A:FA:A2:B0:6E:35:72 X509v3 Authority Key Identifier: keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5e:43:17:f6:16:4b:de:6c:a3:fd:fd:0f:81:c0:c2:e1:67: 22:ef:fa:52:d3:8a:c9:70:86:c7:0f:3b:a4:d8:8f:a0:54:6b: 42:f9:a9:1a:c5:87:75:bd:21:dd:cd:94:91:f4:7b:98:e8:94: 19:81:fe:b7:8d:e6:75:dd:26:71:a4:96:98:82:83:85:9b:20: c3:51:97:fa:69:c5:af:ae:9b:7c:96:aa:4b:30:de:7f:34:3c: cb:6e:04:a3:30:ac:2a:37:04:d8:c9:4e:67:86:95:4d:fa:9f: 6e:e8:66:ad:12:db:2b:cd:87:7f:bc:04:7e:a5:6f:8e:c6:76: da:53:be:56:b0:3d:53:c2:78:6e:0d:48:27:82:aa:9b:57:5d: 62:dc:61:ae:4d:99:40:0e:13:28:9b:5e:2b:2f:b6:e0:ff:62: f3:fa:69:02:36:c3:8b:68:c9:4f:3b:b6:ad:5d:d0:62:31:e4: 9f:81:52:9e:59:f0:fa:bb:c1:58:be:80:d6:2c:19:a7:cb:1d: 1e:35:bb:c2:31:3c:5c:fc:92:8d:ae:bd:54:db:84:2e:2b:e3: 1e:dc:dd:b7:01:51:cc:b0:bc:75:92:c0:b7:19:b2:ec:c6:18: 99:1c:d9:6e:62:48:34:78:3f:7a:1b:ac:39:67:fa:c1:fc:79: 3c:cb:ed:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVA7C5nA9OPB+52q4z/S2NgB9vvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIz NzVEMDQxOTAeFw0yNTA4MjIxNDE3MDhaFw0yNTA4MjYwMDEzMDhaMDMxMTAvBgNV BAMTKDQxQzYyQkRCOTgyQjM2ODgxM0Y3MUIxODdENkFGQUEyQjA2RTM1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uPvIzt+AYDbjkzXzkDajCEkJ njGvx6zzOO1xERe4VpO4nHx+nwU0fIT5c+orfdk4pCAL9yZX8kI7DyMsQc1nqMar P444viBYPYbbyGuVp+jcN1oQqaSnNIJUlD5ptUkhjvARsuY6HThw3L+VSSVq4lhF MmP4EhqDr/D//ml8QSKbEBUVwVvzhBkAu9LCbuViDjF5AmRau52jgOKwj3GlqF39 LsUc/NLv1u179XuAN3dz4yxEI9ILoRGwdYyXNBd4n/rLjMvOGFvcsmRHaj0woJbV u93yRPCtfTzgg9AvthHe9H+EV7wAM28/FJ1u86+93iMAo6BJRvQwFXxerGE1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQcYr25grNogT9xsYfWr6orBuNXIwHwYDVR0j BBgwFoAUeYoinELaVNBpAGTSZKp6ojddBBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMS83OThBMjI5QzQy REE1NEQwNjkwMDY0RDI2NEFBN0FBMjM3NUQwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIzNzVE MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdB QTIzNzVEMDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9eQxf2FkvebKP9/Q+BwMLhZyLv+lLTislw hscPO6TYj6BUa0L5qRrFh3W9Id3NlJH0e5jolBmB/reN5nXdJnGklpiCg4WbIMNR l/ppxa+um3yWqksw3n80PMtuBKMwrCo3BNjJTmeGlU36n27oZq0S2yvNh3+8BH6l b47GdtpTvlawPVPCeG4NSCeCqptXXWLcYa5NmUAOEyibXisvtuD/YvP6aQI2w4to yU87tq1d0GIx5J+BUp5Z8Pq7wVi+gNYsGafLHR41u8IxPFz8ko2uvVTbhC4r4x7c 3bcBUcywvHWSwLcZsuzGGJkc2W5iSDR4P3obrDln+sH8eTzL7a4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:02:19 2025 by rpki-client