$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft (raw, json) Hash identifier: Uh2dSQKAh3E+aQBO4PtBdLqtIXHVkuDg5+FkXth/3Lg= Subject key identifier: DA:AA:85:EE:73:4C:20:8A:84:42:CC:7C:98:55:83:B4:86:9E:35:48 Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 1C9DA04EEA4A4F9225888415234680A40F1DBE69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft Manifest number: 011C Signing time: Tue 05 Aug 2025 08:56:07 +0000 Manifest this update: Tue 05 Aug 2025 08:51:07 +0000 Manifest next update: Fri 08 Aug 2025 13:23:07 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: ombGnLwPgLQ/TaOmQHPipXlZkRsWxFVGNy0cRXRDrpI=) 2: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl (hash: Nq6jYgB3I1/txGR5x70xuzi7sMV69hdSBUdQNHFJ85g=) 3: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 8JuZ2ebsqDLgMKPt7Z/5NJCA9Jrmu98pAz1BifgGHCc=) 4: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: viE08DL5fFk1bogLaoHfmzCByxNbHXkxctzPEjnVqjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9d:a0:4e:ea:4a:4f:92:25:88:84:15:23:46:80:a4:0f:1d:be:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: Aug 5 08:51:07 2025 GMT Not After : Aug 8 13:23:07 2025 GMT Subject: CN=DAAA85EE734C208A8442CC7C985583B4869E3548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c5:0f:43:5a:81:11:55:f4:99:e0:e9:ad:b2: 5c:39:ce:f2:72:ff:41:d8:e7:9f:06:13:8e:16:4d: 71:ba:3f:81:8c:e7:df:d7:1f:22:c7:a7:82:c0:2c: 4e:f7:36:fd:45:a1:26:5e:03:9f:aa:9b:b7:30:0e: b6:31:ae:25:44:6b:a2:71:64:b9:0c:ae:21:19:d9: 22:db:19:38:03:48:5a:e3:04:7a:6c:9d:1d:e1:71: fe:48:47:85:b0:6f:70:e3:2a:12:a8:da:c4:dc:72: 99:59:8b:23:95:61:af:5c:b4:60:b8:69:fa:00:c7: fd:d0:12:41:a4:17:ab:90:81:fa:4e:f3:2a:01:c5: e9:08:96:30:30:1e:06:71:7b:b0:a1:c0:12:0f:7a: 72:a5:86:60:bf:e3:3d:35:e7:bb:d5:ca:9f:dd:5c: ae:39:5f:58:aa:22:d6:25:ba:dd:ff:95:eb:1c:4c: 3f:26:dd:79:75:37:38:d5:c5:3b:48:7e:74:c2:a4: 32:8a:7b:c0:b2:69:0d:8a:6c:17:48:1d:54:c1:11: 85:ac:12:36:86:3b:1e:43:cb:18:72:53:3b:d3:f6: ea:38:30:d8:f7:2b:97:02:e3:12:e9:81:47:98:81: 73:79:b6:6e:d3:54:52:d1:c6:1b:a2:b5:07:16:d1: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AA:85:EE:73:4C:20:8A:84:42:CC:7C:98:55:83:B4:86:9E:35:48 X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:cf:ce:d5:2f:42:5e:c2:fb:8a:c9:90:3d:72:34:d2:c4:61: 54:29:60:65:72:bf:ba:4d:d1:92:ac:c7:c6:7b:8b:f0:ce:5e: 76:c9:d0:22:fc:61:ba:bd:f1:24:08:64:b3:16:c0:6a:58:ff: 56:3f:25:bb:b9:3c:98:00:69:99:3d:8c:3f:77:46:2c:70:3d: 42:2d:c0:70:b7:f2:27:a9:1b:46:3d:35:0d:1e:ca:b6:d8:11: d6:8b:fc:8c:1f:21:a5:1a:1b:f5:55:41:73:ff:a4:69:3d:06: 14:d0:ca:ee:0b:c4:c3:11:6c:c0:b6:eb:6f:e9:d0:73:13:79: 88:8f:7b:60:3b:29:4a:b3:e9:0f:fb:65:17:6f:9a:8e:71:bf: b3:13:67:30:ec:52:50:3f:7a:ec:7a:ac:3f:09:c0:db:d5:a3: a9:04:c5:80:40:ac:a2:3b:f6:d5:6c:1c:46:b5:e8:cc:71:0b: 1b:a5:9f:a5:93:10:e4:2b:0d:72:62:35:d0:5c:73:82:5a:72: f6:ab:82:83:51:26:4a:54:d1:61:db:2e:8f:fc:81:cc:0c:15: 13:88:9b:d8:7e:33:ea:34:16:03:d6:10:30:0d:7f:69:b1:b9: 1e:8e:ee:49:28:04:7e:de:90:0f:52:47:70:8d:da:1e:74:9a: 49:4f:37:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJ2gTupKT5IliIQVI0aApA8dvmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG NkVGRjY1RTAeFw0yNTA4MDUwODUxMDdaFw0yNTA4MDgxMzIzMDdaMDMxMTAvBgNV BAMTKERBQUE4NUVFNzM0QzIwOEE4NDQyQ0M3Qzk4NTU4M0I0ODY5RTM1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxQ9DWoERVfSZ4Omtslw5zvJy /0HY558GE44WTXG6P4GM59/XHyLHp4LALE73Nv1FoSZeA5+qm7cwDrYxriVEa6Jx ZLkMriEZ2SLbGTgDSFrjBHpsnR3hcf5IR4Wwb3DjKhKo2sTccplZiyOVYa9ctGC4 afoAx/3QEkGkF6uQgfpO8yoBxekIljAwHgZxe7ChwBIPenKlhmC/4z0157vVyp/d XK45X1iqItYlut3/lescTD8m3Xl1NzjVxTtIfnTCpDKKe8CyaQ2KbBdIHVTBEYWs EjaGOx5DyxhyUzvT9uo4MNj3K5cC4xLpgUeYgXN5tm7TVFLRxhuitQcW0WZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2qqF7nNMIIqEQsx8mFWDtIaeNUgwHwYDVR0j BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG RjY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIy Q0NGNkVGRjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfPztUvQl7C+4rJkD1yNNLEYVQpYGVyv7pN 0ZKsx8Z7i/DOXnbJ0CL8Ybq98SQIZLMWwGpY/1Y/Jbu5PJgAaZk9jD93RixwPUIt wHC38iepG0Y9NQ0eyrbYEdaL/IwfIaUaG/VVQXP/pGk9BhTQyu4LxMMRbMC262/p 0HMTeYiPe2A7KUqz6Q/7ZRdvmo5xv7MTZzDsUlA/eux6rD8JwNvVo6kExYBArKI7 9tVsHEa16MxxCxuln6WTEOQrDXJiNdBcc4JacvargoNRJkpU0WHbLo/8gcwMFROI m9h+M+o0FgPWEDANf2mxuR6O7kkoBH7ekA9SR3CN2h50mklPN/E= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:25 2025 by rpki-client