$ rpki-client -vvf repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft File: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft (raw, json) Hash identifier: vJ8JM9U9N4XlPcKv9DcAeyftCJh7xQTa8n9Cwthy0pI= Subject key identifier: E8:56:64:0B:93:7D:D7:5C:B3:91:D9:8D:00:C1:FC:6A:69:D2:68:C7 Authority key identifier: 97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE Certificate issuer: /CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Certificate serial: 78BE5FA0427EE1F5CF72E2325ED0FF18D0B861BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft Manifest number: 01F4 Signing time: Sun 02 Nov 2025 09:02:24 +0000 Manifest this update: Sun 02 Nov 2025 08:57:24 +0000 Manifest next update: Wed 05 Nov 2025 20:33:24 +0000 Files and hashes: 1: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: K7I7X7V48aE6/5u83vWBkZ5nD0P/zd145TmQLmzpqzo=) 2: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: er2/SRYpyB8+9olReTVyWZnJn3PBJ1m2O7TeR4n9VJQ=) 3: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: ud0rm7NJrw3tkHGHEKsf4SnTq3zWIy8EUz6TubCb2Gs=) 4: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: wwz6ba6TxyJFQBFDyZrzQvQsc6tcIn83i8QBsYFEwr4=) 5: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl (hash: nTj2KLkhJjTGJfw1gd4NGlAlUEq9oqNAPVCgH94Govo=) 6: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: D08BFYTRnMd/bNThD9Kffk2jZOcvuFviPOLMtrY2nyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:be:5f:a0:42:7e:e1:f5:cf:72:e2:32:5e:d0:ff:18:d0:b8:61:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Validity Not Before: Nov 2 08:57:24 2025 GMT Not After : Nov 5 20:33:24 2025 GMT Subject: CN=E856640B937DD75CB391D98D00C1FC6A69D268C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:59:15:80:78:18:a6:43:38:e3:49:84:01: ed:39:1d:1d:b4:c1:9a:89:f6:f4:a6:60:01:fb:37: 3a:e5:ef:d1:71:68:62:fe:b5:17:32:ec:dd:eb:7f: 66:7b:c9:08:07:97:5f:08:53:d8:87:2e:0f:5f:c1: a5:d4:61:84:c1:d5:16:af:44:a9:46:c9:31:99:79: 49:27:ff:9b:ab:ee:94:22:5e:37:80:6d:24:97:89: d3:81:c2:22:bc:68:7a:c4:eb:70:45:d4:6d:7a:eb: 94:f4:1c:57:2b:4c:61:38:9b:bb:49:0c:a0:57:3d: cc:86:3b:7d:01:08:2e:2a:e8:05:92:0b:fd:49:f9: 7e:1b:4a:ee:34:2d:b5:5e:db:c0:94:07:4c:21:ad: e7:50:1c:96:6b:73:58:87:d6:47:47:2f:d4:bb:42: 09:12:af:a9:31:7a:6f:21:c1:38:3f:01:15:fd:e7: 5c:2a:23:46:4a:cb:05:9c:5d:5d:7e:4c:ed:9a:c8: 7f:a2:be:75:72:73:eb:b1:c0:4f:80:dd:76:a0:0e: ab:c4:c5:f7:04:c2:f7:71:b0:7b:16:99:10:69:9e: db:6e:b7:47:99:0a:05:29:07:72:c4:1e:76:5d:26: 68:b3:c7:44:3c:96:55:38:a5:15:d9:26:bb:29:94: a8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:56:64:0B:93:7D:D7:5C:B3:91:D9:8D:00:C1:FC:6A:69:D2:68:C7 X509v3 Authority Key Identifier: keyid:97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:08:63:39:da:6c:52:69:c8:5f:9f:26:70:60:04:f2:f3:51: 05:76:32:ad:2b:5b:61:72:a6:aa:71:76:e2:3f:e6:2e:fa:41: 67:de:58:aa:48:d7:25:dd:67:ff:7e:df:4e:e8:ab:17:d9:a5: 97:04:25:06:0b:b7:6d:f7:46:ea:1a:4d:8c:03:de:f6:72:18: c8:61:6f:41:da:2b:f4:d5:8e:4d:ed:34:3f:da:6e:f1:20:d5: 50:6a:4a:31:0e:bd:4c:51:fe:dd:17:7e:54:ad:2f:fe:32:4f: ad:c2:d0:11:04:29:f3:ee:d6:58:5f:31:7c:57:a6:a2:f1:f5: f3:09:cf:8b:4d:a8:0f:a8:b0:06:f6:c2:e9:57:2e:6c:7d:4b: cb:09:84:68:2c:52:44:1b:94:17:29:7b:6c:0d:61:52:b0:32: f4:99:f9:aa:e3:7f:e9:51:25:f3:99:51:ef:d6:aa:f0:60:78: 9b:33:7f:e9:f9:a9:ee:b2:8a:e6:64:eb:40:7a:bb:51:58:c9: aa:0c:04:44:f2:1d:84:38:01:d4:e7:9d:b5:8f:35:53:b0:c0: 40:fe:c3:51:4d:bc:e1:d0:27:2c:c1:f8:cf:55:7f:b2:73:ab: b8:ff:98:39:76:cc:61:3d:27:0c:9b:6b:6e:f4:87:bb:53:8d: 5b:43:a4:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeL5foEJ+4fXPcuIyXtD/GNC4YbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdC NDlENEVGRTAeFw0yNTExMDIwODU3MjRaFw0yNTExMDUyMDMzMjRaMDMxMTAvBgNV BAMTKEU4NTY2NDBCOTM3REQ3NUNCMzkxRDk4RDAwQzFGQzZBNjlEMjY4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe7lkVgHgYpkM440mEAe05HR20 wZqJ9vSmYAH7Nzrl79FxaGL+tRcy7N3rf2Z7yQgHl18IU9iHLg9fwaXUYYTB1Rav RKlGyTGZeUkn/5ur7pQiXjeAbSSXidOBwiK8aHrE63BF1G1665T0HFcrTGE4m7tJ DKBXPcyGO30BCC4q6AWSC/1J+X4bSu40LbVe28CUB0whredQHJZrc1iH1kdHL9S7 QgkSr6kxem8hwTg/ARX951wqI0ZKywWcXV1+TO2ayH+ivnVyc+uxwE+A3XagDqvE xfcEwvdxsHsWmRBpnttut0eZCgUpB3LEHnZdJmizx0Q8llU4pRXZJrsplKjbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6FZkC5N911yzkdmNAMH8amnSaMcwHwYDVR0j BBgwFoAUl5syk16/otptywp52zl/17SdTv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGU3MTQzNy04NWZjLTQ3YWYtOTY4Ny05MDNiYWZiMmMxNjEvMC85NzlCMzI5MzVF QkZBMkRBNkRDQjBBNzlEQjM5N0ZEN0I0OUQ0RUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdCNDlE NEVGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdG RDdCNDlENEVGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMIYznabFJpyF+fJnBgBPLzUQV2Mq0rW2Fy pqpxduI/5i76QWfeWKpI1yXdZ/9+307oqxfZpZcEJQYLt233RuoaTYwD3vZyGMhh b0HaK/TVjk3tND/abvEg1VBqSjEOvUxR/t0XflStL/4yT63C0BEEKfPu1lhfMXxX pqLx9fMJz4tNqA+osAb2wulXLmx9S8sJhGgsUkQblBcpe2wNYVKwMvSZ+arjf+lR JfOZUe/WqvBgeJszf+n5qe6yiuZk60B6u1FYyaoMBETyHYQ4AdTnnbWPNVOwwED+ w1FNvOHQJyzB+M9Vf7Jzq7j/mDl2zGE9Jwyba270h7tTjVtDpLI= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:40 2025 by rpki-client