$ rpki-client -vvf repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft File: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft (raw, json) Hash identifier: Buqyz06lRe6JY6Mq1sqmn44/RC2F1efdGs4tUM105yM= Subject key identifier: BA:7D:1B:98:C4:51:12:26:7E:C4:F7:91:E8:65:BE:27:15:EC:8D:57 Authority key identifier: A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D Certificate issuer: /CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Certificate serial: 2C20CFC1579FEA14BDA16CA860817B0043725CC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft Manifest number: 0517 Signing time: Sat 18 Oct 2025 17:51:30 +0000 Manifest this update: Sat 18 Oct 2025 17:46:30 +0000 Manifest next update: Tue 21 Oct 2025 23:46:30 +0000 Files and hashes: 1: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl (hash: sMn5eItZhzCq+aJFYLGNGiFFXfifOhodjFhO3oU9eyg=) 2: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: Go0CPlPcssjZzIiCTnTf40YOYb6lhMvP1qODXAMUZSM=) 3: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: m9TQ4kbiWJ7wAU6DJc4l1m4yIYMItzDNgLT+tillKjs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:20:cf:c1:57:9f:ea:14:bd:a1:6c:a8:60:81:7b:00:43:72:5c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Validity Not Before: Oct 18 17:46:30 2025 GMT Not After : Oct 21 23:46:30 2025 GMT Subject: CN=BA7D1B98C45112267EC4F791E865BE2715EC8D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:19:b7:50:87:5f:bb:ea:fb:20:c6:79:d5:4f: e2:e4:17:3f:f4:71:ac:4f:b4:2c:ae:18:fc:94:1c: 51:b0:63:f6:e0:11:ef:ac:50:eb:00:7a:18:3c:7c: 43:40:bb:5f:dd:11:8c:9e:87:44:15:7a:13:05:a8: 19:16:ed:9a:bb:d3:d9:cb:f4:f8:b3:9e:7d:f4:85: 9c:d7:6a:a4:e2:37:8a:ee:c1:39:cb:34:a8:65:4e: 23:d4:44:83:94:e1:2b:d6:99:7c:52:c8:ed:93:0d: 22:17:e4:0e:03:4d:91:2f:82:a8:70:d8:2d:f2:d2: 30:b1:09:5b:21:b3:a8:91:65:9c:42:14:57:37:20: 87:b4:51:30:3f:85:8e:b5:b3:f7:06:1f:4f:2e:c3: 7b:55:d6:73:59:5c:d5:3f:05:7c:df:e8:9e:f2:9a: ef:7a:54:b8:c5:7b:2a:05:7c:79:e0:e3:6a:90:4d: bb:64:b9:1e:95:a7:f5:b3:4d:33:78:33:40:7d:1e: 10:74:b3:f2:e3:d8:69:bd:8d:9f:46:77:a9:d5:56: 76:b1:8e:74:71:57:91:d9:19:46:07:01:22:dd:ab: d1:79:72:bc:6a:be:09:3f:ba:0c:35:60:ba:7c:65: 45:c4:3c:c1:88:ee:7a:9a:13:33:e9:20:40:53:6d: 54:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7D:1B:98:C4:51:12:26:7E:C4:F7:91:E8:65:BE:27:15:EC:8D:57 X509v3 Authority Key Identifier: keyid:A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8d:35:e4:b8:61:46:f2:f6:0c:d0:01:01:28:78:4d:8a:f8: 50:22:10:f8:74:df:60:3e:7b:61:f7:b3:af:a7:b7:7b:4e:82: 5d:8b:cf:5c:17:8a:f9:d4:08:5f:2d:b6:13:d9:21:48:50:3e: 61:be:41:3e:c6:8d:e3:1e:9a:1b:9f:2c:6d:7b:03:55:48:32: b2:00:b9:2f:fa:87:54:3c:77:bd:de:6e:cd:07:61:3c:53:2f: 61:80:6f:38:6d:61:88:65:c8:c4:51:36:f8:28:2a:e7:40:b3: 41:f3:ea:a1:e3:2a:e1:7b:cf:0e:ad:f5:95:ec:f7:a5:ba:7f: 23:0d:e0:af:d4:ef:ed:5c:f5:f5:12:86:03:b4:37:e4:cd:01: 74:60:8d:82:ea:89:f6:12:33:64:24:48:49:39:19:fb:54:fe: a6:24:f0:c3:98:4a:4b:bc:82:16:b1:1f:e5:33:0b:de:10:68: 5c:68:aa:8f:92:a3:47:e7:78:78:96:0d:37:a5:ad:a3:df:08: bd:82:d5:a5:2a:88:4d:4b:64:71:70:b4:2e:2e:7b:4e:90:a6: ba:65:22:93:1b:37:80:dd:9d:10:7a:60:66:b1:8a:92:01:ad: 8a:43:0e:9f:35:1e:7a:3d:98:82:1b:2d:5d:e3:37:bf:6f:70: 98:f2:0f:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCDPwVef6hS9oWyoYIF7AENyXMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUy NjZGOEE2RDAeFw0yNTEwMTgxNzQ2MzBaFw0yNTEwMjEyMzQ2MzBaMDMxMTAvBgNV BAMTKEJBN0QxQjk4QzQ1MTEyMjY3RUM0Rjc5MUU4NjVCRTI3MTVFQzhENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGGbdQh1+76vsgxnnVT+LkFz/0 caxPtCyuGPyUHFGwY/bgEe+sUOsAehg8fENAu1/dEYyeh0QVehMFqBkW7Zq709nL 9Piznn30hZzXaqTiN4ruwTnLNKhlTiPURIOU4SvWmXxSyO2TDSIX5A4DTZEvgqhw 2C3y0jCxCVshs6iRZZxCFFc3IIe0UTA/hY61s/cGH08uw3tV1nNZXNU/BXzf6J7y mu96VLjFeyoFfHng42qQTbtkuR6Vp/WzTTN4M0B9HhB0s/Lj2Gm9jZ9Gd6nVVnax jnRxV5HZGUYHASLdq9F5crxqvgk/ugw1YLp8ZUXEPMGI7nqaEzPpIEBTbVQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUun0bmMRREiZ+xPeR6GW+JxXsjVcwHwYDVR0j BBgwFoAUp5/TB8N+jFWfZaWOyc6VviZvim0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGY2YmViOC1lNGU4LTRlMzktODI3NS0xYzZkNzdjM2VlZjgvMC9BNzlGRDMwN0Mz N0U4QzU1OUY2NUE1OEVDOUNFOTVCRTI2NkY4QTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUyNjZG OEE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1 QkUyNjZGOEE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2NNeS4YUby9gzQAQEoeE2K+FAiEPh032A+ e2H3s6+nt3tOgl2Lz1wXivnUCF8tthPZIUhQPmG+QT7GjeMemhufLG17A1VIMrIA uS/6h1Q8d73ebs0HYTxTL2GAbzhtYYhlyMRRNvgoKudAs0Hz6qHjKuF7zw6t9ZXs 96W6fyMN4K/U7+1c9fUShgO0N+TNAXRgjYLqifYSM2QkSEk5GftU/qYk8MOYSku8 ghaxH+UzC94QaFxoqo+So0fneHiWDTelraPfCL2C1aUqiE1LZHFwtC4ue06Qprpl IpMbN4DdnRB6YGaxipIBrYpDDp81Hno9mIIbLV3jN79vcJjyDwE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:39 2025 by rpki-client