$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft File: C79C17C4F5C843791A7028B499932A84B65CD399.mft (raw, json) Hash identifier: 8nYCwWnXcWv8A7LPpRZ2vz2iPoTo8sVdPPAS2Lc7SyY= Subject key identifier: 79:8D:8C:66:6D:FF:78:B3:AE:64:92:F4:3A:76:8A:B7:34:DD:AC:C5 Authority key identifier: C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99 Certificate issuer: /CN=C79C17C4F5C843791A7028B499932A84B65CD399 Certificate serial: 44D598BF196B9FF42F4416B32DF40CB40F1D4EE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft Manifest number: DC Signing time: Sun 02 Nov 2025 12:01:22 +0000 Manifest this update: Sun 02 Nov 2025 11:56:22 +0000 Manifest next update: Wed 05 Nov 2025 14:31:22 +0000 Files and hashes: 1: C79C17C4F5C843791A7028B499932A84B65CD399.crl (hash: XF1Ate0fCb15JLdczExszPs7Y/9R/uZn3DPvju+LSbo=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: xoAFKq/o5an6vKaY7+FEI8eF7uN0DJPTXe0V7TuXoIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d5:98:bf:19:6b:9f:f4:2f:44:16:b3:2d:f4:0c:b4:0f:1d:4e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C79C17C4F5C843791A7028B499932A84B65CD399 Validity Not Before: Nov 2 11:56:22 2025 GMT Not After : Nov 5 14:31:22 2025 GMT Subject: CN=798D8C666DFF78B3AE6492F43A768AB734DDACC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:97:b3:99:a4:37:67:eb:86:c0:0e:c1:af:14: 63:80:37:86:7b:ea:c2:ef:4a:31:a3:c2:9e:78:af: 84:38:07:71:1e:ad:79:b2:7c:1e:20:d6:8d:9b:55: f0:47:66:cd:6d:af:b9:bc:a4:02:b4:e2:06:41:fd: aa:6b:96:14:b9:37:10:14:99:12:55:dd:bf:96:7b: f3:fd:50:d5:62:52:b0:10:a1:64:32:de:8b:7b:42: a8:4b:fe:9b:c0:d7:47:da:ff:58:37:c4:2d:74:1f: 30:12:a3:58:c0:e5:ba:3f:fc:64:8b:60:f8:f7:0e: 30:53:29:16:4a:a0:7b:e6:f6:cc:35:c4:8f:e3:8b: 8c:89:eb:d5:09:0f:c4:61:a6:27:f0:30:a0:74:d9: 53:02:fb:f2:dd:a6:5a:32:41:50:dc:a6:cb:04:ed: f5:68:6a:e9:30:17:db:ab:c5:60:06:88:b6:09:8f: 45:e2:f2:f0:9b:55:08:9c:1b:b1:5a:47:94:c3:45: c7:68:ae:06:22:4d:ee:90:11:87:02:5d:96:e1:8a: b8:dc:0f:94:37:40:0f:98:07:90:89:c6:b8:e4:a9: 9c:a6:f6:2d:a0:c9:54:df:5e:06:a6:04:d6:31:39: 49:81:44:47:57:ef:ed:17:b3:3b:d4:63:bc:54:eb: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8D:8C:66:6D:FF:78:B3:AE:64:92:F4:3A:76:8A:B7:34:DD:AC:C5 X509v3 Authority Key Identifier: keyid:C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:eb:2d:64:b4:80:77:e6:75:94:fd:97:b9:b7:36:16:60:6e: b9:46:84:30:17:c1:0e:d1:a5:ae:14:f0:5a:c2:d5:e8:9b:2d: 17:78:68:09:df:c3:63:d2:3e:1f:93:08:5e:54:43:24:eb:40: 0b:b7:92:2b:7f:7c:8c:9e:9f:05:c8:eb:74:51:68:62:12:da: 63:2b:03:35:d1:ae:02:ac:4f:1d:e4:58:78:72:85:d8:23:75: 19:f3:a5:fa:1a:36:25:17:56:0c:a1:f4:e4:6c:5a:2e:64:ba: c0:20:a9:8d:60:1d:e9:10:dc:3e:7f:fe:f1:4c:57:5f:0f:d8: bb:8d:f9:31:b6:94:76:98:5b:d9:c9:7d:fb:f2:b9:10:ec:7a: bb:3f:fc:da:f3:7f:be:1d:a9:a0:24:65:af:e2:07:cc:8e:4d: 6e:9e:1c:a2:d4:f9:1a:2c:93:c0:21:ac:a6:74:a8:c5:66:83: 16:34:63:ad:73:81:8e:47:1b:fb:b1:79:94:1a:4b:d9:24:8e: d5:e3:05:bb:95:37:8a:7c:b0:2a:e4:d2:d1:d2:32:e4:1c:fa: a7:15:c7:e6:ea:08:2a:6c:e1:fa:54:46:e9:00:2e:ba:e6:17: a8:a5:ed:0a:0e:41:61:4e:d9:5f:41:d1:e0:ed:76:df:12:c1: b5:94:cb:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNWYvxlrn/QvRBazLfQMtA8dTucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc5QzE3QzRGNUM4NDM3OTFBNzAyOEI0OTk5MzJBODRC NjVDRDM5OTAeFw0yNTExMDIxMTU2MjJaFw0yNTExMDUxNDMxMjJaMDMxMTAvBgNV BAMTKDc5OEQ4QzY2NkRGRjc4QjNBRTY0OTJGNDNBNzY4QUI3MzREREFDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCol7OZpDdn64bADsGvFGOAN4Z7 6sLvSjGjwp54r4Q4B3EerXmyfB4g1o2bVfBHZs1tr7m8pAK04gZB/aprlhS5NxAU mRJV3b+We/P9UNViUrAQoWQy3ot7QqhL/pvA10fa/1g3xC10HzASo1jA5bo//GSL YPj3DjBTKRZKoHvm9sw1xI/ji4yJ69UJD8RhpifwMKB02VMC+/LdployQVDcpssE 7fVoaukwF9urxWAGiLYJj0Xi8vCbVQicG7FaR5TDRcdorgYiTe6QEYcCXZbhirjc D5Q3QA+YB5CJxrjkqZym9i2gyVTfXgamBNYxOUmBREdX7+0XszvUY7xU66m/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeY2MZm3/eLOuZJL0OnaKtzTdrMUwHwYDVR0j BBgwFoAUx5wXxPXIQ3kacCi0mZMqhLZc05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjU2YmJiYS0xODI2LTRkODYtYjg3My0yZjZkZDYzMjU3NzEvMS9DNzlDMTdDNEY1 Qzg0Mzc5MUE3MDI4QjQ5OTkzMkE4NEI2NUNEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc5QzE3QzRGNUM4NDM3OTFBNzAyOEI0OTk5MzJBODRCNjVD RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI1NmJiYmEtMTgyNi00ZDg2LWI4 NzMtMmY2ZGQ2MzI1NzcxLzEvQzc5QzE3QzRGNUM4NDM3OTFBNzAyOEI0OTk5MzJB ODRCNjVDRDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXrLWS0gHfmdZT9l7m3NhZgbrlGhDAXwQ7R pa4U8FrC1eibLRd4aAnfw2PSPh+TCF5UQyTrQAu3kit/fIyenwXI63RRaGIS2mMr AzXRrgKsTx3kWHhyhdgjdRnzpfoaNiUXVgyh9ORsWi5kusAgqY1gHekQ3D5//vFM V18P2LuN+TG2lHaYW9nJffvyuRDsers//Nrzf74dqaAkZa/iB8yOTW6eHKLU+Ros k8AhrKZ0qMVmgxY0Y61zgY5HG/uxeZQaS9kkjtXjBbuVN4p8sCrk0tHSMuQc+qcV x+bqCCps4fpURukALrrmF6il7QoOQWFO2V9B0eDtdt8SwbWUy9g= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:35 2025 by rpki-client