$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json) Hash identifier: a+z9UYbnR0IPTKMR1vKgnrIzlcgfwGN6GxEGvJMe2ZE= Subject key identifier: 61:22:D3:78:51:4C:74:AC:0E:76:04:ED:58:28:BB:49:81:DC:EC:89 Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419 Certificate serial: 3BF9009CE2B25892E4848F6C38EA84607A750E3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft Manifest number: E3 Signing time: Mon 03 Nov 2025 00:12:09 +0000 Manifest this update: Mon 03 Nov 2025 00:07:09 +0000 Manifest next update: Thu 06 Nov 2025 02:20:09 +0000 Files and hashes: 1: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: 8HfIN6WONFJVNCGfKtI3hUUCdCq0Pkb/NF2mjqDW4Xg=) 2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: VG6+4O5llgQnLe8B6hYlDtcuv5x9Z/46JdLy5SPzH+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f9:00:9c:e2:b2:58:92:e4:84:8f:6c:38:ea:84:60:7a:75:0e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419 Validity Not Before: Nov 3 00:07:09 2025 GMT Not After : Nov 6 02:20:09 2025 GMT Subject: CN=6122D378514C74AC0E7604ED5828BB4981DCEC89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6f:56:ca:7a:76:87:c9:2a:22:37:da:d3:e6: 37:af:60:2d:ff:2c:8b:bd:97:3f:97:8c:8e:cc:3d: e7:d0:17:e3:eb:1c:54:a9:79:14:51:42:1f:e4:46: d8:eb:cb:ec:f0:29:3d:c2:50:72:fb:df:a6:af:a9: ca:f7:64:df:96:ee:58:34:c4:96:1a:9c:6c:67:41: b1:72:cd:e6:4e:14:79:c8:9a:1a:43:23:a0:95:9b: e8:24:d1:c4:cf:e7:d2:c1:f7:7e:47:57:6a:70:5d: 03:5c:5f:84:e1:d5:6d:ba:bf:c9:da:39:c1:6f:c0: 55:06:43:7a:ff:e3:da:31:0f:3a:88:7a:e8:26:08: 39:5a:ae:20:a8:b2:76:1d:ba:f8:31:08:c9:51:33: c4:4b:84:11:d3:f9:7c:18:63:bf:06:4f:d9:de:5c: 7b:df:88:10:4b:40:89:b4:b0:39:2a:21:fd:94:30: b8:0d:8e:e5:fe:f7:cb:a6:34:91:f4:82:f6:91:da: 95:81:3a:93:6e:ae:9f:76:28:9b:a0:f3:06:09:44: 50:3b:66:62:1a:16:df:da:48:31:ed:1c:5d:4d:d3: 32:f9:ed:c3:6f:b5:92:ed:01:f8:cd:9d:cc:60:6c: 68:bf:b5:76:01:f8:a8:16:64:58:13:b9:50:39:03: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:22:D3:78:51:4C:74:AC:0E:76:04:ED:58:28:BB:49:81:DC:EC:89 X509v3 Authority Key Identifier: keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cf:2c:9b:0c:3b:e7:35:70:9a:af:8a:d9:f2:fa:84:82:06: cd:59:09:80:c5:d2:12:79:26:a7:3b:34:67:b1:b1:35:61:1c: ed:b1:18:ff:61:7e:e1:22:80:ac:a9:b7:05:89:7d:03:ae:03: 31:34:57:1f:7f:a3:dd:bf:8a:b2:54:5b:f7:69:22:8c:5d:6d: e9:64:a7:e2:9a:cb:88:e6:25:7f:00:66:fb:f7:56:9b:56:3f: 05:ee:83:cd:b2:d4:5d:ab:2e:25:d7:f7:47:ea:f9:fd:2b:b0: 8c:f6:30:ee:c1:65:49:d9:84:da:0c:90:77:58:69:5e:38:cf: 72:94:45:11:46:36:63:90:ee:1e:4e:db:54:c4:53:b0:bb:f1: 56:3a:60:40:c1:87:46:c2:a1:5c:db:5b:8b:a4:dc:09:72:78: 52:36:bb:8e:49:aa:75:a7:c5:77:fc:98:fd:79:27:44:e0:35: 8b:48:5f:37:6a:36:de:5f:0a:03:a1:02:81:0d:c4:26:af:52: 7a:a2:73:99:92:8d:91:00:7c:00:b7:1b:5a:fd:96:91:86:c7: bc:75:0b:f2:7f:7b:cc:56:cc:ec:d0:fc:36:f2:4a:20:6a:fc: eb:f6:ce:90:05:bf:ee:9c:62:41:7d:0b:26:51:46:c8:43:57: c0:d8:11:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/kAnOKyWJLkhI9sOOqEYHp1DjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIz NzVEMDQxOTAeFw0yNTExMDMwMDA3MDlaFw0yNTExMDYwMjIwMDlaMDMxMTAvBgNV BAMTKDYxMjJEMzc4NTE0Qzc0QUMwRTc2MDRFRDU4MjhCQjQ5ODFEQ0VDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRb1bKenaHySoiN9rT5jevYC3/ LIu9lz+XjI7MPefQF+PrHFSpeRRRQh/kRtjry+zwKT3CUHL736avqcr3ZN+W7lg0 xJYanGxnQbFyzeZOFHnImhpDI6CVm+gk0cTP59LB935HV2pwXQNcX4Th1W26v8na OcFvwFUGQ3r/49oxDzqIeugmCDlariCosnYduvgxCMlRM8RLhBHT+XwYY78GT9ne XHvfiBBLQIm0sDkqIf2UMLgNjuX+98umNJH0gvaR2pWBOpNurp92KJug8wYJRFA7 ZmIaFt/aSDHtHF1N0zL57cNvtZLtAfjNncxgbGi/tXYB+KgWZFgTuVA5A3D1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYSLTeFFMdKwOdgTtWCi7SYHc7IkwHwYDVR0j BBgwFoAUeYoinELaVNBpAGTSZKp6ojddBBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMS83OThBMjI5QzQy REE1NEQwNjkwMDY0RDI2NEFBN0FBMjM3NUQwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIzNzVE MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdB QTIzNzVEMDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArPLJsMO+c1cJqvitny+oSCBs1ZCYDF0hJ5 Jqc7NGexsTVhHO2xGP9hfuEigKyptwWJfQOuAzE0Vx9/o92/irJUW/dpIoxdbelk p+Kay4jmJX8AZvv3VptWPwXug82y1F2rLiXX90fq+f0rsIz2MO7BZUnZhNoMkHdY aV44z3KURRFGNmOQ7h5O21TEU7C78VY6YEDBh0bCoVzbW4uk3AlyeFI2u45JqnWn xXf8mP15J0TgNYtIXzdqNt5fCgOhAoENxCavUnqic5mSjZEAfAC3G1r9lpGGx7x1 C/J/e8xWzOzQ/DbySiBq/Ov2zpAFv+6cYkF9CyZRRshDV8DYEUw= -----END CERTIFICATE-----Generated at Tue Nov 4 23:20:41 2025 by rpki-client