$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft File: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft (raw, json) Hash identifier: QRQHYkyJwP50kA3EOqS0xM0SXjKKAH9HDJrBsTKnGIc= Subject key identifier: B7:FE:1A:4E:F1:CE:E8:16:7E:23:E6:C7:3A:0B:E7:4B:8B:E5:4D:4C Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 125957108BC102A5541B6CE01BFC6071A04BFACD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft Manifest number: 01ED Signing time: Tue 05 Aug 2025 11:21:24 +0000 Manifest this update: Tue 05 Aug 2025 11:16:24 +0000 Manifest next update: Fri 08 Aug 2025 19:00:24 +0000 Files and hashes: 1: 3130332e3135372e36322e302f32332d3234203d3e20313439393736.roa (hash: UqzHREfMZRSfOR8nYb3XR77CjtG93BxmjJaVVwgwsiI=) 2: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: MSA3Izjg6KzN5Q+MKwDBM7mghQbhoAUxxHKShKe7LT0=) 3: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: umdrRzgp8Ciqeng1bs/crkT4xOCEEqpUSt3z8J2SnuY=) 4: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl (hash: vJWi5dqod89Jbsxj6TuYVrLm50saVCGCF+ViUUxGSQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 19:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:59:57:10:8b:c1:02:a5:54:1b:6c:e0:1b:fc:60:71:a0:4b:fa:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: Aug 5 11:16:24 2025 GMT Not After : Aug 8 19:00:24 2025 GMT Subject: CN=B7FE1A4EF1CEE8167E23E6C73A0BE74B8BE54D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:48:05:cf:f2:49:3c:39:07:54:ff:87:d0: 93:27:0d:0c:43:91:85:5d:ea:83:83:25:35:dc:a9: 84:63:75:26:e6:6c:4f:9d:9c:3f:26:fa:dd:87:3c: 10:7f:8e:b2:ed:9a:16:e8:06:12:a7:5e:05:63:4c: d0:56:00:53:12:08:5e:6e:6e:00:56:7c:86:f3:3f: 8e:b1:f9:c6:94:f4:6f:5a:56:2d:8d:39:3f:5d:44: ed:82:4f:80:1d:b1:b5:ba:88:4b:b7:91:b2:e7:72: 81:54:7a:57:e7:1c:0a:d7:35:14:5d:2c:4b:85:97: cb:71:df:2f:16:70:28:4f:42:72:47:94:cb:dc:e7: cc:d9:4a:2b:77:fc:11:fe:c8:cf:50:bf:3e:2e:16: 8d:58:53:03:8e:80:e0:92:07:cf:fc:0e:c6:01:78: 55:3f:47:bf:8d:b2:a1:c8:d8:a0:4d:83:02:f3:cc: 75:70:f1:dd:4d:e8:ce:f3:5f:de:04:e1:52:a3:49: 16:1b:bf:c6:ca:8a:21:33:ae:d8:ba:ed:5e:d5:7f: 46:01:4f:4e:70:75:32:8d:74:a0:ff:5e:52:39:ce: 93:29:7f:7f:03:1a:ab:97:3c:23:21:89:f0:63:36: 45:ce:9c:86:ba:3e:d3:ea:b5:9f:a0:26:97:76:97: ed:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FE:1A:4E:F1:CE:E8:16:7E:23:E6:C7:3A:0B:E7:4B:8B:E5:4D:4C X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fa:90:16:6b:ed:cb:54:1a:fe:25:12:5a:81:9a:71:40:96: f6:f1:74:a7:48:8b:f0:72:fc:44:b0:0d:53:9f:ed:14:d5:66: 0c:79:98:54:6a:ba:e3:f4:95:98:24:30:3d:b4:f6:63:a9:a1: 03:c1:8e:6b:00:38:26:fd:28:ee:e3:ea:d3:ca:80:a8:00:0f: b2:de:f8:60:6f:a1:35:d0:7a:53:52:0a:8a:c6:4a:ad:39:4b: 62:ff:63:b7:43:ee:c8:d0:ed:4a:42:8f:9b:c1:dc:33:3b:ae: f4:0b:e3:d8:ce:69:ce:94:11:7c:7f:9c:8b:94:70:e0:1b:0c: 94:61:5f:d0:88:d1:a7:75:43:7d:fe:c4:8e:ff:ee:31:30:bc: 0d:2e:3a:ab:cb:f2:f4:f1:bb:c9:ca:7c:6a:25:a6:32:ac:fc: d1:37:ff:7d:18:4c:11:12:f0:49:b0:0e:f6:1b:b4:24:03:f6: 42:a2:c2:53:09:d5:4b:82:d0:9a:52:b6:7e:e6:d0:14:18:6e: 90:96:58:f1:57:9e:57:40:14:8e:62:14:52:f0:27:4a:f7:63: c7:98:d8:8a:3c:c0:db:9f:77:37:97:bf:05:96:c8:6b:76:74: 19:a4:e1:c0:0b:b8:c4:54:b2:2b:6a:64:06:24:35:01:b3:5f: a0:4a:99:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEllXEIvBAqVUG2zgG/xgcaBL+s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNTA4MDUxMTE2MjRaFw0yNTA4MDgxOTAwMjRaMDMxMTAvBgNV BAMTKEI3RkUxQTRFRjFDRUU4MTY3RTIzRTZDNzNBMEJFNzRCOEJFNTRENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykUgFz/JJPDkHVP+H0JMnDQxD kYVd6oODJTXcqYRjdSbmbE+dnD8m+t2HPBB/jrLtmhboBhKnXgVjTNBWAFMSCF5u bgBWfIbzP46x+caU9G9aVi2NOT9dRO2CT4AdsbW6iEu3kbLncoFUelfnHArXNRRd LEuFl8tx3y8WcChPQnJHlMvc58zZSit3/BH+yM9Qvz4uFo1YUwOOgOCSB8/8DsYB eFU/R7+NsqHI2KBNgwLzzHVw8d1N6M7zX94E4VKjSRYbv8bKiiEzrti67V7Vf0YB T05wdTKNdKD/XlI5zpMpf38DGquXPCMhifBjNkXOnIa6PtPqtZ+gJpd2l+2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/4aTvHO6BZ+I+bHOgvnS4vlTUwwHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJE NzNDQUQyNkRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACT6kBZr7ctUGv4lElqBmnFAlvbxdKdIi/By /ESwDVOf7RTVZgx5mFRquuP0lZgkMD209mOpoQPBjmsAOCb9KO7j6tPKgKgAD7Le +GBvoTXQelNSCorGSq05S2L/Y7dD7sjQ7UpCj5vB3DM7rvQL49jOac6UEXx/nIuU cOAbDJRhX9CI0ad1Q33+xI7/7jEwvA0uOqvL8vTxu8nKfGolpjKs/NE3/30YTBES 8EmwDvYbtCQD9kKiwlMJ1UuC0JpStn7m0BQYbpCWWPFXnldAFI5iFFLwJ0r3Y8eY 2Io8wNufdzeXvwWWyGt2dBmk4cALuMRUsitqZAYkNQGzX6BKmYM= -----END CERTIFICATE-----Generated at Thu Aug 7 13:10:11 2025 by rpki-client