$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft File: C79C17C4F5C843791A7028B499932A84B65CD399.mft (raw, json) Hash identifier: k3WSSezZv4Bdmox4G5Lkf87cWm+U8j0QxKhLCQnvdaM= Subject key identifier: 53:1F:E3:12:E8:83:C6:DB:AA:89:5F:15:CE:40:38:A7:00:93:0C:2F Authority key identifier: C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99 Certificate issuer: /CN=C79C17C4F5C843791A7028B499932A84B65CD399 Certificate serial: 73B7291F88B4974989F55FA6E4703A6B9D34EA63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft Manifest number: BC Signing time: Fri 22 Aug 2025 17:21:23 +0000 Manifest this update: Fri 22 Aug 2025 17:16:23 +0000 Manifest next update: Mon 25 Aug 2025 18:49:23 +0000 Files and hashes: 1: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: xoAFKq/o5an6vKaY7+FEI8eF7uN0DJPTXe0V7TuXoIk=) 2: C79C17C4F5C843791A7028B499932A84B65CD399.crl (hash: BikLVYr0IIt7mJkMTxwq3GFPWHm1ppvOQguvuCaNrjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b7:29:1f:88:b4:97:49:89:f5:5f:a6:e4:70:3a:6b:9d:34:ea:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C79C17C4F5C843791A7028B499932A84B65CD399 Validity Not Before: Aug 22 17:16:23 2025 GMT Not After : Aug 25 18:49:23 2025 GMT Subject: CN=531FE312E883C6DBAA895F15CE4038A700930C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e4:f7:a1:e3:04:3f:66:22:c4:68:64:42:d5: ef:2a:ba:02:3c:62:14:c5:aa:4c:df:87:c6:97:fc: 0a:9e:39:0b:bd:e4:d2:19:6b:2b:c8:f7:47:24:ff: d9:34:2f:5c:00:8d:24:18:70:a0:d5:44:e1:83:1c: 80:81:29:d5:b4:34:61:7d:6e:54:bc:b1:24:fa:0f: 2e:70:99:c3:2b:52:bc:a9:14:18:91:6b:42:37:87: 43:97:86:ca:27:2f:fc:a7:cb:a2:55:e0:85:72:b8: 37:fb:9d:e1:4d:be:ef:03:38:af:95:75:a8:c5:c4: fc:a0:72:40:94:c8:55:9f:46:48:02:e6:23:66:18: a2:a9:d5:cb:1a:68:0e:73:7f:11:ea:9c:bf:62:81: e6:68:c2:05:23:5a:24:ad:81:9e:18:ed:da:15:2a: 95:04:1f:2b:75:43:b4:29:1c:ce:d5:f4:d2:2f:ad: 62:4b:aa:36:00:cf:94:b3:b7:f6:f1:c8:64:cf:11: 82:07:c1:d7:7f:6c:1b:19:f5:2e:62:05:a3:98:15: 17:f9:2b:0a:40:42:55:41:08:2a:21:62:b7:59:2a: fc:50:8b:d4:6f:4f:6f:af:81:a4:d1:fb:bc:07:3e: 7f:b1:7f:5d:bb:1f:1d:38:74:79:70:31:8a:f6:cb: ea:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1F:E3:12:E8:83:C6:DB:AA:89:5F:15:CE:40:38:A7:00:93:0C:2F X509v3 Authority Key Identifier: keyid:C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9e:14:ee:18:71:c9:ac:61:90:a7:46:6e:ea:de:61:4a:ac: 06:7f:a5:ba:cf:13:ca:b5:bf:33:1f:1e:3a:a4:e2:dd:6a:6e: 2c:3e:c2:fb:70:17:a2:eb:d7:2a:76:43:1c:ea:86:60:1c:3f: ab:81:e7:2a:dc:6c:fa:50:06:1b:76:37:ab:7d:f6:0d:a1:00: 3e:9f:78:bc:90:f2:de:2e:d7:44:17:82:79:ed:8f:b9:e8:e0: 11:ed:c0:7b:62:d1:5a:f1:9f:74:c3:6a:ed:d7:34:c9:61:9b: 37:b7:19:b2:b5:08:41:4c:8a:06:ca:36:40:5e:96:07:d4:61: 20:ba:43:9e:ee:dc:b5:e4:b6:b8:f8:65:94:43:17:4a:6f:ae: 8c:6a:ca:a2:e7:92:e1:2f:08:6e:5c:30:a3:57:63:52:92:b5: 4f:1f:36:6f:f1:0d:d5:33:55:11:99:60:63:8d:5e:09:4a:29: 57:65:17:76:f4:45:41:35:6b:c0:a3:2b:f7:b3:4d:d8:ec:a9: 12:7d:d5:be:9a:e3:dd:06:bb:43:e4:4e:6e:52:43:ea:f9:98: 4d:3d:35:8d:0e:f3:2d:c0:e4:be:36:0f:a5:64:ba:d4:6e:36: dc:bd:bd:3e:0e:d4:cc:ae:8b:6b:7d:5d:03:7b:4a:35:db:4d: d6:47:bd:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7cpH4i0l0mJ9V+m5HA6a5006mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc5QzE3QzRGNUM4NDM3OTFBNzAyOEI0OTk5MzJBODRC NjVDRDM5OTAeFw0yNTA4MjIxNzE2MjNaFw0yNTA4MjUxODQ5MjNaMDMxMTAvBgNV BAMTKDUzMUZFMzEyRTg4M0M2REJBQTg5NUYxNUNFNDAzOEE3MDA5MzBDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh5Peh4wQ/ZiLEaGRC1e8qugI8 YhTFqkzfh8aX/AqeOQu95NIZayvI90ck/9k0L1wAjSQYcKDVROGDHICBKdW0NGF9 blS8sST6Dy5wmcMrUrypFBiRa0I3h0OXhsonL/yny6JV4IVyuDf7neFNvu8DOK+V dajFxPygckCUyFWfRkgC5iNmGKKp1csaaA5zfxHqnL9igeZowgUjWiStgZ4Y7doV KpUEHyt1Q7QpHM7V9NIvrWJLqjYAz5Szt/bxyGTPEYIHwdd/bBsZ9S5iBaOYFRf5 KwpAQlVBCCohYrdZKvxQi9RvT2+vgaTR+7wHPn+xf127Hx04dHlwMYr2y+qVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUx/jEuiDxtuqiV8VzkA4pwCTDC8wHwYDVR0j BBgwFoAUx5wXxPXIQ3kacCi0mZMqhLZc05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjU2YmJiYS0xODI2LTRkODYtYjg3My0yZjZkZDYzMjU3NzEvMS9DNzlDMTdDNEY1 Qzg0Mzc5MUE3MDI4QjQ5OTkzMkE4NEI2NUNEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc5QzE3QzRGNUM4NDM3OTFBNzAyOEI0OTk5MzJBODRCNjVD RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI1NmJiYmEtMTgyNi00ZDg2LWI4 NzMtMmY2ZGQ2MzI1NzcxLzEvQzc5QzE3QzRGNUM4NDM3OTFBNzAyOEI0OTk5MzJB ODRCNjVDRDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqeFO4YccmsYZCnRm7q3mFKrAZ/pbrPE8q1 vzMfHjqk4t1qbiw+wvtwF6Lr1yp2QxzqhmAcP6uB5yrcbPpQBht2N6t99g2hAD6f eLyQ8t4u10QXgnntj7no4BHtwHti0Vrxn3TDau3XNMlhmze3GbK1CEFMigbKNkBe lgfUYSC6Q57u3LXktrj4ZZRDF0pvroxqyqLnkuEvCG5cMKNXY1KStU8fNm/xDdUz VRGZYGONXglKKVdlF3b0RUE1a8CjK/ezTdjsqRJ91b6a490Gu0PkTm5SQ+r5mE09 NY0O8y3A5L42D6VkutRuNty9vT4O1Myui2t9XQN7SjXbTdZHvcI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:04 2025 by rpki-client