$ rpki-client -vvf repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft File: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft (raw, json) Hash identifier: srBRVazBDC2o7Ix8iDd7ids7fmAc16mfz2dTDhMHSsg= Subject key identifier: DF:69:76:1E:EE:66:25:DE:60:84:65:BE:2B:0D:DD:2F:EB:53:CA:DA Authority key identifier: A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D Certificate issuer: /CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Certificate serial: 3B9873B54587C073DA613650D3A926B14FB6E131 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft Manifest number: 04F6 Signing time: Tue 05 Aug 2025 17:41:29 +0000 Manifest this update: Tue 05 Aug 2025 17:36:29 +0000 Manifest next update: Sat 09 Aug 2025 03:41:29 +0000 Files and hashes: 1: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl (hash: /S1MDMx9nrkjDC2+EUkwI5NuKlL8TEEfhHX26knLUGM=) 2: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: Go0CPlPcssjZzIiCTnTf40YOYb6lhMvP1qODXAMUZSM=) 3: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: m9TQ4kbiWJ7wAU6DJc4l1m4yIYMItzDNgLT+tillKjs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:98:73:b5:45:87:c0:73:da:61:36:50:d3:a9:26:b1:4f:b6:e1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Validity Not Before: Aug 5 17:36:29 2025 GMT Not After : Aug 9 03:41:29 2025 GMT Subject: CN=DF69761EEE6625DE608465BE2B0DDD2FEB53CADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:df:db:75:da:80:66:41:22:24:27:06:c8: 6f:2f:12:37:ad:3c:ff:72:c2:0a:c6:7b:e7:3b:a7: 1e:27:54:31:a0:27:f1:8d:90:67:a8:f7:d9:a2:ab: 82:e1:90:6e:28:22:4b:df:69:c7:14:ad:4a:4c:55: 0a:b5:ba:c1:df:80:e6:57:76:9a:3a:cb:ca:88:3c: 32:4a:cc:34:10:dc:fb:b1:bd:fb:7d:10:39:ca:37: 43:7e:ba:68:28:c8:13:f6:2b:0d:df:69:95:04:8a: b6:58:80:90:e3:9a:93:71:ea:f1:88:50:e7:42:26: aa:75:0f:a7:ee:d0:13:e9:8c:6e:36:c6:79:4e:41: 2a:59:c9:87:9a:96:6c:a5:55:16:b7:0e:9f:f5:cc: 09:69:39:8d:9a:8a:c8:09:36:cd:9e:35:6e:5a:2b: bb:e4:80:93:8b:e7:d8:14:52:f5:bd:ab:bb:48:a7: 24:61:82:dc:b5:c6:f2:27:1d:fb:9c:f5:6a:57:3a: 03:5b:49:dc:57:02:e6:33:f7:da:e6:fb:3e:fd:96: 1f:55:d1:a8:74:7f:6f:ec:df:ea:7b:21:62:9b:70: ab:5d:04:4e:55:e6:f2:49:a1:d2:6a:c8:5f:33:29: 36:1c:9d:02:5f:7f:0e:e7:8a:37:b0:89:26:b0:72: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:69:76:1E:EE:66:25:DE:60:84:65:BE:2B:0D:DD:2F:EB:53:CA:DA X509v3 Authority Key Identifier: keyid:A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:48:f9:c1:50:1f:1a:8a:d8:06:a1:3a:d6:b5:eb:8f:c8:6c: e6:9d:73:4d:df:bb:e6:42:88:95:f1:c4:a4:a6:5e:66:16:84: 16:b9:23:72:a7:0c:2e:4d:df:4e:2f:d2:85:b7:fb:60:79:7d: 42:09:94:1d:26:68:30:a7:33:14:e4:cf:0e:ac:db:22:e9:8a: f1:fc:4c:cc:7f:55:1b:23:2d:6c:61:c4:48:00:de:5a:fa:84: f8:89:90:85:8e:9c:84:b6:ce:23:93:7c:33:b2:6b:86:1d:b2: 0d:31:3c:76:ae:23:85:d1:67:ec:97:c3:1c:b2:32:07:a5:b0: 57:0d:ce:48:6e:c6:d5:48:85:21:ef:f4:fa:4a:1d:bb:1e:86: 36:93:29:e3:85:da:f7:6f:46:03:b0:9f:c0:df:a4:01:8a:c2: 2c:99:35:be:30:84:4f:00:d3:00:37:94:e8:09:79:eb:bd:ca: 56:b8:73:7a:e1:28:3c:e9:12:24:d7:4c:ac:3c:b6:d2:ed:bc: 48:1c:fe:34:95:65:6e:2c:a1:14:b9:dc:10:f8:7b:e7:8a:b9: 51:4e:70:a8:94:54:42:a3:06:80:34:bf:0d:11:51:5c:a7:43: f9:e5:49:51:e1:9e:25:57:3d:e4:c9:2a:8e:83:36:78:98:39: 6e:9c:f5:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5hztUWHwHPaYTZQ06kmsU+24TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUy NjZGOEE2RDAeFw0yNTA4MDUxNzM2MjlaFw0yNTA4MDkwMzQxMjlaMDMxMTAvBgNV BAMTKERGNjk3NjFFRUU2NjI1REU2MDg0NjVCRTJCMERERDJGRUI1M0NBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Y9/bddqAZkEiJCcGyG8vEjet PP9ywgrGe+c7px4nVDGgJ/GNkGeo99miq4LhkG4oIkvfaccUrUpMVQq1usHfgOZX dpo6y8qIPDJKzDQQ3Puxvft9EDnKN0N+umgoyBP2Kw3faZUEirZYgJDjmpNx6vGI UOdCJqp1D6fu0BPpjG42xnlOQSpZyYealmylVRa3Dp/1zAlpOY2aisgJNs2eNW5a K7vkgJOL59gUUvW9q7tIpyRhgty1xvInHfuc9WpXOgNbSdxXAuYz99rm+z79lh9V 0ah0f2/s3+p7IWKbcKtdBE5V5vJJodJqyF8zKTYcnQJffw7nijewiSawcv0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU32l2Hu5mJd5ghGW+Kw3dL+tTytowHwYDVR0j BBgwFoAUp5/TB8N+jFWfZaWOyc6VviZvim0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGY2YmViOC1lNGU4LTRlMzktODI3NS0xYzZkNzdjM2VlZjgvMC9BNzlGRDMwN0Mz N0U4QzU1OUY2NUE1OEVDOUNFOTVCRTI2NkY4QTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUyNjZG OEE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1 QkUyNjZGOEE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVI+cFQHxqK2AahOta164/IbOadc03fu+ZC iJXxxKSmXmYWhBa5I3KnDC5N304v0oW3+2B5fUIJlB0maDCnMxTkzw6s2yLpivH8 TMx/VRsjLWxhxEgA3lr6hPiJkIWOnIS2ziOTfDOya4Ydsg0xPHauI4XRZ+yXwxyy MgelsFcNzkhuxtVIhSHv9PpKHbsehjaTKeOF2vdvRgOwn8DfpAGKwiyZNb4whE8A 0wA3lOgJeeu9yla4c3rhKDzpEiTXTKw8ttLtvEgc/jSVZW4soRS53BD4e+eKuVFO cKiUVEKjBoA0vw0RUVynQ/nlSVHhniVXPeTJKo6DNniYOW6c9Sg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:09 2025 by rpki-client