$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft (raw, json) Hash identifier: jpSpP2ZGPTuTm/wSh385BDNxRMv2KaMA+sBd9VL9+zM= Subject key identifier: 42:CE:AA:60:B0:84:EC:33:77:EA:A7:B5:9F:6D:02:38:F2:BF:76:25 Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 34D2C38B6E5AADD95A8E605DDBEC56A1791E6E4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft Manifest number: 0179 Signing time: Sun 01 Mar 2026 19:42:26 +0000 Manifest this update: Sun 01 Mar 2026 19:37:26 +0000 Manifest next update: Wed 04 Mar 2026 23:51:26 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 8JuZ2ebsqDLgMKPt7Z/5NJCA9Jrmu98pAz1BifgGHCc=) 2: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: ombGnLwPgLQ/TaOmQHPipXlZkRsWxFVGNy0cRXRDrpI=) 3: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl (hash: C24tts/GVnSxusWxqrV8lFUzCXsKkoYpjn/FnT4bEoQ=) 4: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: gvo9V/vnXO5MlNpk1yPiU+0sBfoU6SAVYrLdM0QnX0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d2:c3:8b:6e:5a:ad:d9:5a:8e:60:5d:db:ec:56:a1:79:1e:6e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: Mar 1 19:37:26 2026 GMT Not After : Mar 4 23:51:26 2026 GMT Subject: CN=42CEAA60B084EC3377EAA7B59F6D0238F2BF7625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:7e:11:e0:0e:b7:66:8f:f3:fe:28:c9:c0: fe:e4:26:b9:ea:ee:60:99:bd:6e:aa:5f:66:1b:4b: a7:21:31:d1:f2:85:55:7a:43:af:9b:76:a5:99:c3: 3a:95:c3:02:a1:c4:a7:a8:65:a8:e1:ad:c8:c5:74: 58:99:09:ff:b6:0d:d7:88:90:02:99:e8:36:53:5b: c2:8b:f3:1f:14:37:1d:b9:d3:b8:ba:d3:48:d4:11: 7d:46:00:68:d5:d2:aa:51:7b:b7:dd:a6:01:cc:15: db:41:4c:45:cc:cc:80:4a:42:46:9b:b9:ee:06:b2: fb:99:fc:98:64:3f:e4:92:00:ac:60:40:8b:c0:2d: 28:d0:61:0e:3b:80:64:8c:13:c3:11:dc:d6:2a:fd: bd:0a:27:fb:7b:ed:47:d8:76:ea:e7:92:b6:21:0a: 0c:4a:7e:33:aa:0c:a8:f5:f3:72:5f:14:af:be:bd: d8:d3:fd:09:62:ee:8c:d2:88:a5:93:69:60:7d:1f: 16:5d:87:6b:d1:bc:c3:a1:1f:22:1c:a6:c1:9d:de: 0e:b2:ba:10:34:a6:ec:a5:cf:a1:2d:ba:8d:ac:cf: 83:8f:d3:f2:91:4a:73:5b:34:14:34:3d:42:07:9f: 30:a1:6d:6f:06:18:d5:c6:b7:0e:1c:49:c7:f5:ea: 3e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CE:AA:60:B0:84:EC:33:77:EA:A7:B5:9F:6D:02:38:F2:BF:76:25 X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:26:f4:5f:79:b3:eb:61:9f:dc:68:25:41:f4:d7:25:e9:ec: 4d:e1:8d:05:68:e7:0b:ab:e0:b7:c4:62:67:4d:2c:66:90:c7: 10:16:bb:3d:43:38:21:61:81:e9:3a:f4:4d:b2:4e:d5:37:44: 68:78:7a:74:0c:4b:93:4c:4a:33:07:7b:ff:92:47:97:de:40: de:61:51:9a:8c:0b:12:fa:cd:bf:34:03:b8:4e:2c:11:1b:d1: 25:70:55:23:e2:b2:b3:11:59:64:ba:d1:e2:f6:16:4e:dc:8d: 82:cd:12:05:4c:6b:6e:c8:b0:8c:54:ef:9c:be:21:73:fd:4f: b0:75:43:3f:d0:1a:ee:bf:07:90:17:02:fc:64:b3:38:d0:f2: 88:27:c9:96:be:f5:6a:37:58:58:8c:d7:b7:49:c7:ba:88:5e: ee:93:ac:09:63:1f:b7:87:28:e5:c0:91:55:b9:b8:43:df:92: b6:30:b5:b6:cc:35:7a:3f:d6:78:ee:a2:12:dc:bc:a9:78:51: 7e:28:d5:5b:52:41:a9:6b:25:15:4d:b9:77:c8:51:ee:c2:18: 37:d4:d4:6c:28:aa:21:b1:41:df:af:15:25:72:8c:d5:87:fe: a1:f5:20:cf:d5:d7:24:5c:c7:c0:68:76:a0:a1:67:81:be:bf: bc:5a:68:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNNLDi25ardlajmBd2+xWoXkebk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG NkVGRjY1RTAeFw0yNjAzMDExOTM3MjZaFw0yNjAzMDQyMzUxMjZaMDMxMTAvBgNV BAMTKDQyQ0VBQTYwQjA4NEVDMzM3N0VBQTdCNTlGNkQwMjM4RjJCRjc2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs434R4A63Zo/z/ijJwP7kJrnq 7mCZvW6qX2YbS6chMdHyhVV6Q6+bdqWZwzqVwwKhxKeoZajhrcjFdFiZCf+2DdeI kAKZ6DZTW8KL8x8UNx2507i600jUEX1GAGjV0qpRe7fdpgHMFdtBTEXMzIBKQkab ue4GsvuZ/JhkP+SSAKxgQIvALSjQYQ47gGSME8MR3NYq/b0KJ/t77UfYdurnkrYh CgxKfjOqDKj183JfFK++vdjT/Qli7ozSiKWTaWB9HxZdh2vRvMOhHyIcpsGd3g6y uhA0puylz6Etuo2sz4OP0/KRSnNbNBQ0PUIHnzChbW8GGNXGtw4cScf16j7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQs6qYLCE7DN36qe1n20COPK/diUwHwYDVR0j BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG RjY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIy Q0NGNkVGRjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYm9F95s+thn9xoJUH01yXp7E3hjQVo5wur 4LfEYmdNLGaQxxAWuz1DOCFhgek69E2yTtU3RGh4enQMS5NMSjMHe/+SR5feQN5h UZqMCxL6zb80A7hOLBEb0SVwVSPisrMRWWS60eL2Fk7cjYLNEgVMa27IsIxU75y+ IXP9T7B1Qz/QGu6/B5AXAvxkszjQ8ognyZa+9Wo3WFiM17dJx7qIXu6TrAljH7eH KOXAkVW5uEPfkrYwtbbMNXo/1njuohLcvKl4UX4o1VtSQalrJRVNuXfIUe7CGDfU 1GwoqiGxQd+vFSVyjNWH/qH1IM/V1yRcx8BodqChZ4G+v7xaaBE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:37 2026 by rpki-client