$ rpki-client -vvf repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft File: 79204255412F26FC4519CA94E35B93EF4E47BC73.mft (raw, json) Hash identifier: RM4UI3CFRArk9vR6hTUzotcWymLniZ4MfcZWzAEA9sc= Subject key identifier: EA:94:54:5D:BF:CE:B3:15:97:35:60:7A:57:62:84:46:9C:AE:CD:02 Authority key identifier: 79:20:42:55:41:2F:26:FC:45:19:CA:94:E3:5B:93:EF:4E:47:BC:73 Certificate issuer: /CN=79204255412F26FC4519CA94E35B93EF4E47BC73 Certificate serial: 653A22E5B68970B44D4CA442465754F1B6BC2AC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft Manifest number: 0397 Signing time: Sat 18 Oct 2025 12:41:08 +0000 Manifest this update: Sat 18 Oct 2025 12:36:08 +0000 Manifest next update: Tue 21 Oct 2025 18:06:08 +0000 Files and hashes: 1: 3130332e3136342e32322e302f32332d3234203d3e203137393935.roa (hash: sTN/8QbT7vMBdY4lWuaimWErVYuLZoinw920451use8=) 2: 79204255412F26FC4519CA94E35B93EF4E47BC73.crl (hash: /DkEALg+Bqka6hJimcuWwWY45LC9CZVNQ5yb4yLnjCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.crl rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:3a:22:e5:b6:89:70:b4:4d:4c:a4:42:46:57:54:f1:b6:bc:2a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79204255412F26FC4519CA94E35B93EF4E47BC73 Validity Not Before: Oct 18 12:36:08 2025 GMT Not After : Oct 21 18:06:08 2025 GMT Subject: CN=EA94545DBFCEB3159735607A576284469CAECD02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:e8:6a:dc:b3:d3:c7:8c:c4:ac:71:3d:f9: 90:b2:1a:ec:d6:20:5c:23:4b:fe:14:c0:71:79:37: c3:4c:33:ca:d9:e4:e6:79:3a:01:88:2e:f9:8f:1d: 9b:18:f2:85:00:1c:26:90:69:b7:43:30:ba:6e:b5: e0:95:34:80:23:45:4b:86:9e:9a:e7:c6:fd:3f:86: 4e:23:58:04:4f:bb:a1:bc:66:5a:9c:27:fd:c9:35: cf:7c:58:dc:2c:ed:9a:1c:e4:24:da:42:73:8f:42: 4d:c3:0b:a0:57:ef:50:bf:c7:1e:a2:62:3d:95:e8: 0c:c2:ec:3f:cb:95:08:56:65:12:23:1a:e2:be:29: 43:5c:b7:fb:88:91:a2:1f:db:1b:33:06:69:a7:a6: 22:12:5e:5b:a2:49:62:86:5f:45:19:de:84:98:ba: 5d:f6:97:30:77:46:40:8f:97:e5:7f:23:de:a8:2d: c8:31:e9:80:c1:dd:5d:24:d5:86:20:df:95:8a:22: 6e:75:6a:da:92:59:85:12:94:ac:78:39:b1:b8:df: ee:3d:c6:dd:36:21:ea:72:a7:79:f7:08:1d:df:2d: e7:8f:d9:52:46:27:f7:3b:f4:01:a4:48:a3:c0:b6: 9c:db:29:1c:37:22:3a:07:f0:a1:0b:97:e2:cb:4c: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:94:54:5D:BF:CE:B3:15:97:35:60:7A:57:62:84:46:9C:AE:CD:02 X509v3 Authority Key Identifier: keyid:79:20:42:55:41:2F:26:FC:45:19:CA:94:E3:5B:93:EF:4E:47:BC:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:dd:ac:56:d0:17:c1:19:9f:c4:aa:a1:aa:20:f5:67:7a:80: ff:2b:94:7a:63:18:0f:d7:0e:b1:5b:2d:ec:b3:0e:cc:06:14: 88:1c:37:25:d3:61:d4:a5:f4:5f:1d:1f:f7:48:01:37:0f:93: 75:3f:c8:4f:94:c5:7f:06:ca:16:62:b0:b1:8b:a1:be:63:56: 05:5c:44:a9:d1:8b:0b:36:f9:10:9d:bc:d4:18:96:8f:21:e9: 20:9e:84:9b:ce:de:f8:b2:9d:22:a7:63:26:38:52:20:0c:d4: 20:47:42:dc:db:6c:db:b9:9f:ba:86:6d:91:9e:84:3c:0a:a4: ed:fe:18:c6:b1:19:2a:e2:27:7e:56:65:1e:49:66:f0:31:36: 91:5e:8d:f0:9c:b9:d9:73:86:83:f9:34:fb:40:54:d3:74:33: 5b:bb:6c:b3:dd:e5:ab:14:01:e3:fa:0e:17:5c:e3:04:ed:03: 75:35:31:ba:73:53:dc:8a:d5:f1:de:e5:28:6f:0a:90:e2:5a: 5b:2b:b4:af:c8:f3:fb:6a:95:6c:18:f8:aa:0c:df:c2:2d:dc: e2:ac:4a:8e:84:d2:b5:9b:ad:a7:d3:5f:08:1d:48:c3:06:01: 8c:87:c9:96:d1:65:4a:97:e8:f8:53:2b:a8:39:a5:05:be:c8: a4:65:d7:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZToi5baJcLRNTKRCRldU8ba8KsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkyMDQyNTU0MTJGMjZGQzQ1MTlDQTk0RTM1QjkzRUY0 RTQ3QkM3MzAeFw0yNTEwMTgxMjM2MDhaFw0yNTEwMjExODA2MDhaMDMxMTAvBgNV BAMTKEVBOTQ1NDVEQkZDRUIzMTU5NzM1NjA3QTU3NjI4NDQ2OUNBRUNEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBkehq3LPTx4zErHE9+ZCyGuzW IFwjS/4UwHF5N8NMM8rZ5OZ5OgGILvmPHZsY8oUAHCaQabdDMLputeCVNIAjRUuG nprnxv0/hk4jWARPu6G8ZlqcJ/3JNc98WNws7Zoc5CTaQnOPQk3DC6BX71C/xx6i Yj2V6AzC7D/LlQhWZRIjGuK+KUNct/uIkaIf2xszBmmnpiISXluiSWKGX0UZ3oSY ul32lzB3RkCPl+V/I96oLcgx6YDB3V0k1YYg35WKIm51atqSWYUSlKx4ObG43+49 xt02Iepyp3n3CB3fLeeP2VJGJ/c79AGkSKPAtpzbKRw3IjoH8KELl+LLTKFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6pRUXb/OsxWXNWB6V2KERpyuzQIwHwYDVR0j BBgwFoAUeSBCVUEvJvxFGcqU41uT705HvHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2RjN2VlNS1jZTY3LTQ1Y2QtOTg4MS00MzQ4OWFiMmIxYTUvMC83OTIwNDI1NTQx MkYyNkZDNDUxOUNBOTRFMzVCOTNFRjRFNDdCQzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzkyMDQyNTU0MTJGMjZGQzQ1MTlDQTk0RTM1QjkzRUY0RTQ3 QkM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkYzdlZTUtY2U2Ny00NWNkLTk4 ODEtNDM0ODlhYjJiMWE1LzAvNzkyMDQyNTU0MTJGMjZGQzQ1MTlDQTk0RTM1Qjkz RUY0RTQ3QkM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvdrFbQF8EZn8Sqoaog9Wd6gP8rlHpjGA/X DrFbLeyzDswGFIgcNyXTYdSl9F8dH/dIATcPk3U/yE+UxX8GyhZisLGLob5jVgVc RKnRiws2+RCdvNQYlo8h6SCehJvO3viynSKnYyY4UiAM1CBHQtzbbNu5n7qGbZGe hDwKpO3+GMaxGSriJ35WZR5JZvAxNpFejfCcudlzhoP5NPtAVNN0M1u7bLPd5asU AeP6Dhdc4wTtA3U1MbpzU9yK1fHe5ShvCpDiWlsrtK/I8/tqlWwY+KoM38It3OKs So6E0rWbrafTXwgdSMMGAYyHyZbRZUqX6PhTK6g5pQW+yKRl1zQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:10:21 2025 by rpki-client