$ rpki-client -vvf repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft File: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft (raw, json) Hash identifier: zK/0St4nZqwR07o9AwdIe7o3hf80ElbWpTSEsdQ4heM= Subject key identifier: 16:61:86:B3:19:91:75:6E:48:56:78:19:9F:69:C0:97:89:40:82:2B Authority key identifier: 97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE Certificate issuer: /CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Certificate serial: 54CF0D3E21AF444B24D8FC66BA80AB5A203713F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft Manifest number: 01ED Signing time: Sun 19 Oct 2025 10:30:50 +0000 Manifest this update: Sun 19 Oct 2025 10:25:50 +0000 Manifest next update: Wed 22 Oct 2025 21:55:50 +0000 Files and hashes: 1: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: 9EURxrNrlf7XNa4qBRBWmt6iAklp2ZexfAnaMIzL06c=) 2: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: zP2/xMyoKaZs6fiqSMcfKqk4R7UXbhBp7PEh6lL8fdI=) 3: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: pdPZa1hqVrYPWZYkmw/3L6oJ44J+aMpGpranP7CjD4s=) 4: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl (hash: KJa0LHiJPQJnHc18M47M9mqTHW1UgyU2YxMXabr+arQ=) 5: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: A0Wh8osPNi8zZWQ36AcLaUjDaG9uaq4xPw9QuzcvUH4=) 6: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: VMR23vWqztgF5Q/iMRDhZJFW6rkTGEBU0HHkzSi1LgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:cf:0d:3e:21:af:44:4b:24:d8:fc:66:ba:80:ab:5a:20:37:13:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Validity Not Before: Oct 19 10:25:50 2025 GMT Not After : Oct 22 21:55:50 2025 GMT Subject: CN=166186B31991756E485678199F69C0978940822B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3d:aa:ff:df:0a:5e:af:65:24:ac:1d:d6:41: 4d:29:67:21:74:96:48:c7:69:30:74:fa:f9:90:de: 91:c0:ee:52:c7:11:d5:24:ea:01:f8:f2:63:4e:9f: 16:af:5b:6f:8e:4c:0e:6e:d9:3f:f1:27:85:05:bb: f5:b7:84:ea:c0:6f:22:65:fe:1d:cd:d3:34:91:9d: 79:32:7b:6c:a9:27:58:70:ad:96:85:b2:41:c3:62: 0e:6f:10:90:88:d7:87:f7:f8:7e:d1:76:9f:91:27: 77:0f:27:0c:6e:0c:14:f3:96:43:fd:2f:23:58:68: 22:b9:82:b2:d3:0d:99:5d:31:fc:56:08:30:9c:08: 6d:7c:3f:43:d2:b1:e0:fb:c1:c7:72:16:11:84:a0: d7:41:e5:50:1d:50:e7:03:48:65:30:0a:c2:bd:9d: 50:53:37:23:21:64:cb:b2:5d:d6:97:9f:8f:b6:2c: 9b:c5:07:d4:ff:16:7a:04:be:b4:f7:17:2b:65:e6: 2b:9f:2d:79:83:be:ae:8f:6c:04:44:d1:7a:50:d0: a8:ce:2d:76:e0:71:01:ec:b7:6c:6e:6e:e7:b0:e3: 99:46:6c:5a:49:34:c7:ec:00:7d:75:6d:a6:cf:60: 0f:c0:31:a7:13:70:dd:78:d2:f0:94:cb:5d:1e:52: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:61:86:B3:19:91:75:6E:48:56:78:19:9F:69:C0:97:89:40:82:2B X509v3 Authority Key Identifier: keyid:97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e3:cb:1a:3b:7a:75:6b:b2:b6:ae:5d:43:d9:0c:ad:dd:b2: 10:c6:2b:25:f8:77:a6:46:84:bf:0c:3a:66:69:d4:68:e1:72: 93:07:bd:0b:a1:cb:79:f6:08:c4:a4:37:e4:30:83:bd:58:10: 00:11:3e:a4:ea:5e:10:9d:b6:09:a8:47:6c:97:1b:fd:5a:a1: 7a:cb:1f:80:71:49:fd:a3:f7:45:26:6d:0a:09:19:21:4a:1b: c6:89:bb:49:3b:17:e7:79:86:a9:e6:be:b7:6f:f1:e4:a4:3e: 19:d3:fb:49:a5:ba:76:41:d1:3b:f8:55:c2:24:14:ca:fd:a1: d2:d9:5b:a7:58:4d:23:be:9a:ee:f3:da:0f:0f:3a:ed:82:3e: b0:3c:4f:ed:b1:7b:3c:0a:bb:92:f0:2f:31:90:f0:dd:c1:d8: a4:04:06:24:d5:55:dc:c6:be:1c:56:69:7e:ba:04:cb:75:82: cc:1d:f2:eb:3b:b8:cf:94:1b:48:0e:0d:20:00:46:e2:6d:3d: 6d:a7:9d:14:93:e9:85:e7:b3:32:f8:b5:dd:1d:90:07:73:68: 05:2a:24:16:1a:d8:d3:36:ed:fb:3d:33:8d:9f:a4:94:fa:17: 4b:00:87:2b:e4:0a:35:fd:03:94:e2:82:04:b8:d8:5b:bd:84: 3b:f5:5d:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVM8NPiGvREsk2PxmuoCrWiA3E/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdC NDlENEVGRTAeFw0yNTEwMTkxMDI1NTBaFw0yNTEwMjIyMTU1NTBaMDMxMTAvBgNV BAMTKDE2NjE4NkIzMTk5MTc1NkU0ODU2NzgxOTlGNjlDMDk3ODk0MDgyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjPar/3wper2UkrB3WQU0pZyF0 lkjHaTB0+vmQ3pHA7lLHEdUk6gH48mNOnxavW2+OTA5u2T/xJ4UFu/W3hOrAbyJl /h3N0zSRnXkye2ypJ1hwrZaFskHDYg5vEJCI14f3+H7Rdp+RJ3cPJwxuDBTzlkP9 LyNYaCK5grLTDZldMfxWCDCcCG18P0PSseD7wcdyFhGEoNdB5VAdUOcDSGUwCsK9 nVBTNyMhZMuyXdaXn4+2LJvFB9T/FnoEvrT3Fytl5iufLXmDvq6PbARE0XpQ0KjO LXbgcQHst2xubuew45lGbFpJNMfsAH11babPYA/AMacTcN140vCUy10eUgkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFmGGsxmRdW5IVngZn2nAl4lAgiswHwYDVR0j BBgwFoAUl5syk16/otptywp52zl/17SdTv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGU3MTQzNy04NWZjLTQ3YWYtOTY4Ny05MDNiYWZiMmMxNjEvMC85NzlCMzI5MzVF QkZBMkRBNkRDQjBBNzlEQjM5N0ZEN0I0OUQ0RUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdCNDlE NEVGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdG RDdCNDlENEVGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDjyxo7enVrsrauXUPZDK3dshDGKyX4d6ZG hL8MOmZp1GjhcpMHvQuhy3n2CMSkN+Qwg71YEAARPqTqXhCdtgmoR2yXG/1aoXrL H4BxSf2j90UmbQoJGSFKG8aJu0k7F+d5hqnmvrdv8eSkPhnT+0mlunZB0Tv4VcIk FMr9odLZW6dYTSO+mu7z2g8POu2CPrA8T+2xezwKu5LwLzGQ8N3B2KQEBiTVVdzG vhxWaX66BMt1gswd8us7uM+UG0gODSAARuJtPW2nnRST6YXnszL4td0dkAdzaAUq JBYa2NM27fs9M42fpJT6F0sAhyvkCjX9A5TiggS42Fu9hDv1XeA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:33:25 2025 by rpki-client