$ rpki-client -vvf repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft File: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft (raw, json) Hash identifier: bGNWnsyfJXHJLsESTeiBRTmSD2eDBt5OWf5wbLaYXfE= Subject key identifier: 83:5E:13:9C:C1:65:FA:42:DF:9D:5F:5D:3A:E1:00:62:B9:CD:E8:5B Authority key identifier: 97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE Certificate issuer: /CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Certificate serial: 5590D7AE5071ED5E031A6184FFBB8B8347FCBAE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft Manifest number: 01D3 Signing time: Fri 22 Aug 2025 02:10:49 +0000 Manifest this update: Fri 22 Aug 2025 02:05:49 +0000 Manifest next update: Mon 25 Aug 2025 10:04:49 +0000 Files and hashes: 1: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl (hash: IKiqKnGsbREg6Aze289SBrSLcZxIt63IACyfBiUC+EU=) 2: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: 9EURxrNrlf7XNa4qBRBWmt6iAklp2ZexfAnaMIzL06c=) 3: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: VMR23vWqztgF5Q/iMRDhZJFW6rkTGEBU0HHkzSi1LgY=) 4: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: pdPZa1hqVrYPWZYkmw/3L6oJ44J+aMpGpranP7CjD4s=) 5: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: A0Wh8osPNi8zZWQ36AcLaUjDaG9uaq4xPw9QuzcvUH4=) 6: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: zP2/xMyoKaZs6fiqSMcfKqk4R7UXbhBp7PEh6lL8fdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:90:d7:ae:50:71:ed:5e:03:1a:61:84:ff:bb:8b:83:47:fc:ba:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Validity Not Before: Aug 22 02:05:49 2025 GMT Not After : Aug 25 10:04:49 2025 GMT Subject: CN=835E139CC165FA42DF9D5F5D3AE10062B9CDE85B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b2:bb:54:6a:1f:cb:b5:b1:1b:c2:5b:d1:48: 91:69:38:8e:a3:0a:e7:06:ec:39:e2:d4:7a:96:43: c3:bd:be:28:23:9a:a1:b7:fe:8b:5a:27:30:32:9b: 38:99:a9:f1:fd:ef:ee:54:a7:e2:f1:8e:d1:43:06: 49:0a:7d:e4:14:f5:ed:ab:56:07:10:16:1b:eb:f1: 81:1d:10:9d:5a:67:bd:c8:8b:26:09:8a:bb:1c:42: e8:80:7d:ef:19:5e:ed:0e:27:77:85:6d:82:d2:87: b9:af:f6:03:28:70:79:9b:8b:da:d9:6a:5c:91:c7: 85:b1:d9:20:01:4a:3c:d1:91:0e:04:d7:7e:2e:b2: cb:20:a1:05:35:09:31:77:4f:e9:ec:0e:2b:bd:a4: 5b:d0:ee:34:eb:b8:41:81:b3:3e:6d:87:db:f4:23: 31:f3:3b:65:cd:9b:13:54:d0:57:52:7b:1c:56:96: fc:04:a6:50:d9:cf:ed:9b:21:af:14:29:9b:c3:68: b7:ca:0a:5a:35:4c:04:de:e0:a9:6b:2c:02:01:49: 8f:9e:35:d0:3b:13:d9:4d:03:d1:31:67:1a:00:f9: c7:24:83:c3:a0:0f:b0:02:7e:aa:d9:37:6b:83:0a: 8f:85:02:cc:8b:9b:6a:ee:7d:23:a6:6e:56:4e:37: 59:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5E:13:9C:C1:65:FA:42:DF:9D:5F:5D:3A:E1:00:62:B9:CD:E8:5B X509v3 Authority Key Identifier: keyid:97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:8d:76:6e:0d:5b:53:c4:d6:41:91:3c:44:2c:64:28:29:14: 20:91:34:f0:85:36:e9:6d:e3:72:79:ec:ac:79:1b:f3:3d:db: 31:0f:3f:88:80:2b:b6:23:06:29:8d:75:8f:af:45:75:e6:fa: b4:e3:fb:ee:fb:0a:82:62:0b:49:91:1a:36:e4:9c:94:55:a6: 6b:aa:76:23:66:06:d6:d5:b7:fc:a3:b6:09:0c:3d:c3:06:f7: 22:e4:44:71:c1:97:1d:e2:9d:c5:b4:ce:0b:6a:ce:1d:91:87: 69:57:79:ac:70:b3:86:6c:bc:33:e8:78:1f:6a:28:de:3d:07: f3:45:9b:77:eb:75:89:40:b3:a1:e3:2a:1e:2e:78:cd:e8:10: a3:a5:73:44:12:93:ed:cb:bd:6b:2a:6e:2b:31:b1:c6:98:ff: 46:0d:75:9f:ea:91:69:c2:90:d9:f9:46:e1:33:08:ec:f2:7c: 90:e4:60:bd:7a:3f:f9:95:f9:c1:6d:49:93:34:02:fa:41:3f: 89:c7:4e:bf:ca:8c:19:93:9f:2f:db:a2:65:53:b1:48:2d:75: f1:68:2f:84:0c:9d:69:b6:f0:19:84:31:b8:7e:99:3c:ee:ef: e5:c9:d7:2b:8e:8b:30:bf:8d:97:ea:3a:ce:ba:9a:d3:85:50: 54:00:2b:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZDXrlBx7V4DGmGE/7uLg0f8uuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdC NDlENEVGRTAeFw0yNTA4MjIwMjA1NDlaFw0yNTA4MjUxMDA0NDlaMDMxMTAvBgNV BAMTKDgzNUUxMzlDQzE2NUZBNDJERjlENUY1RDNBRTEwMDYyQjlDREU4NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsrtUah/LtbEbwlvRSJFpOI6j CucG7Dni1HqWQ8O9vigjmqG3/otaJzAymziZqfH97+5Up+LxjtFDBkkKfeQU9e2r VgcQFhvr8YEdEJ1aZ73IiyYJirscQuiAfe8ZXu0OJ3eFbYLSh7mv9gMocHmbi9rZ alyRx4Wx2SABSjzRkQ4E134usssgoQU1CTF3T+nsDiu9pFvQ7jTruEGBsz5th9v0 IzHzO2XNmxNU0FdSexxWlvwEplDZz+2bIa8UKZvDaLfKClo1TATe4KlrLAIBSY+e NdA7E9lNA9ExZxoA+cckg8OgD7ACfqrZN2uDCo+FAsyLm2rufSOmblZON1n/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg14TnMFl+kLfnV9dOuEAYrnN6FswHwYDVR0j BBgwFoAUl5syk16/otptywp52zl/17SdTv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGU3MTQzNy04NWZjLTQ3YWYtOTY4Ny05MDNiYWZiMmMxNjEvMC85NzlCMzI5MzVF QkZBMkRBNkRDQjBBNzlEQjM5N0ZEN0I0OUQ0RUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdCNDlE NEVGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdG RDdCNDlENEVGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWNdm4NW1PE1kGRPEQsZCgpFCCRNPCFNult 43J57Kx5G/M92zEPP4iAK7YjBimNdY+vRXXm+rTj++77CoJiC0mRGjbknJRVpmuq diNmBtbVt/yjtgkMPcMG9yLkRHHBlx3incW0zgtqzh2Rh2lXeaxws4ZsvDPoeB9q KN49B/NFm3frdYlAs6HjKh4ueM3oEKOlc0QSk+3LvWsqbisxscaY/0YNdZ/qkWnC kNn5RuEzCOzyfJDkYL16P/mV+cFtSZM0AvpBP4nHTr/KjBmTny/bomVTsUgtdfFo L4QMnWm28BmEMbh+mTzu7+XJ1yuOizC/jZfqOs66mtOFUFQAK0U= -----END CERTIFICATE-----Generated at Sat Aug 23 21:45:23 2025 by rpki-client