$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft (raw, json) Hash identifier: i7Cg1wYnK9aEfKBUmALiDAvG2Ebfs54f88m/N6lRY2U= Subject key identifier: CE:22:A3:85:81:B0:C3:F9:9E:FB:D8:60:57:12:11:F9:6F:5A:23:3D Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 170CA61B39B556DF4859D59161BF0E659892CD52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft Manifest number: 014B Signing time: Sun 16 Nov 2025 19:32:13 +0000 Manifest this update: Sun 16 Nov 2025 19:27:13 +0000 Manifest next update: Wed 19 Nov 2025 23:41:13 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 8JuZ2ebsqDLgMKPt7Z/5NJCA9Jrmu98pAz1BifgGHCc=) 2: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: ombGnLwPgLQ/TaOmQHPipXlZkRsWxFVGNy0cRXRDrpI=) 3: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl (hash: 3S6zOPBc9jV40bqN9SoLJ7Ci++2FynZHQuwhs1VF7/U=) 4: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: gvo9V/vnXO5MlNpk1yPiU+0sBfoU6SAVYrLdM0QnX0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Nov 2025 23:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0c:a6:1b:39:b5:56:df:48:59:d5:91:61:bf:0e:65:98:92:cd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: Nov 16 19:27:13 2025 GMT Not After : Nov 19 23:41:13 2025 GMT Subject: CN=CE22A38581B0C3F99EFBD860571211F96F5A233D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:2e:f0:29:b7:29:9c:6a:20:45:9c:a0:48: 6d:bb:62:ec:d5:b4:9d:1f:2c:7b:01:e6:9d:a2:c2: f6:ec:a7:b4:26:16:cd:07:cc:cc:f2:a6:f0:c7:ea: 35:9e:c8:6a:fb:94:de:22:1d:e1:c0:1f:14:9d:3a: ef:01:b9:6e:81:bd:0c:bb:90:84:8b:3f:2e:e3:19: 37:8a:55:95:c3:51:5c:be:e7:21:b0:3d:38:23:8c: 4a:8b:8c:b0:e7:54:76:5f:b0:e9:24:9f:c9:97:31: d5:7c:a0:35:c2:c6:68:d0:24:dc:75:7e:27:f8:a1: 11:67:57:33:73:7a:9b:a3:e2:0d:5c:48:47:b0:7c: 20:ca:9d:f6:3c:0b:8e:a1:66:55:93:b8:ea:41:29: e8:35:40:08:f1:36:7d:df:bc:0a:55:c4:5a:4e:4f: a9:49:26:35:fe:6e:39:47:f9:43:0f:73:b2:f3:80: 9a:e9:67:31:7c:8b:8f:7a:63:bf:55:23:1e:ee:4a: 06:eb:34:a7:1a:91:3c:25:ff:a5:fc:eb:4f:a3:2e: 78:f9:9e:63:7c:ca:9e:d1:0d:b1:dd:af:df:69:16: 4b:f9:a2:86:47:d8:07:95:80:0a:af:13:66:75:82: b6:f9:65:ab:29:2b:b2:ab:98:85:c9:bd:fc:44:b0: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:22:A3:85:81:B0:C3:F9:9E:FB:D8:60:57:12:11:F9:6F:5A:23:3D X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2e:81:a6:94:40:33:36:4e:8c:62:1e:a7:70:ba:53:89:30: 30:09:0e:8b:b7:b5:38:3f:07:d9:76:f9:3f:9e:f8:ba:32:86: 26:22:46:7c:74:ba:8c:1e:70:9e:50:b0:30:c2:00:65:9f:87: 35:12:a6:7a:38:2f:c6:ca:58:d6:4a:0b:c7:9b:8b:42:f7:a1: 71:b6:8b:e6:e4:03:2c:c0:96:8c:46:40:d3:83:81:8f:b1:50: c0:90:48:ae:29:d2:fe:66:d5:24:db:78:01:d2:5c:91:05:9b: 49:cb:d3:34:fa:76:ed:25:7f:a5:a0:f7:78:52:47:c5:0c:8e: 16:64:bd:40:b1:60:7e:78:f4:05:1d:1b:bd:40:f5:cf:1f:40: 37:75:22:22:b0:be:d3:0c:34:d1:ad:c9:e6:90:be:bd:3f:21: 24:5b:a8:63:be:8b:40:33:7e:4e:5f:d4:96:b2:94:c3:e6:49: 55:d6:66:fc:3a:f3:b6:38:ea:f7:c2:23:59:57:eb:6a:b8:af: 94:3d:0a:2b:2c:25:ae:0d:fb:c9:01:a7:55:6b:6b:01:0a:e2: 04:43:27:33:de:dc:74:7a:d9:a8:0e:ad:0d:c2:2e:08:86:67: 00:42:54:ed:cc:34:6c:c0:a8:3d:53:81:28:6a:c9:ff:5c:5e: 48:28:cf:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwymGzm1Vt9IWdWRYb8OZZiSzVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG NkVGRjY1RTAeFw0yNTExMTYxOTI3MTNaFw0yNTExMTkyMzQxMTNaMDMxMTAvBgNV BAMTKENFMjJBMzg1ODFCMEMzRjk5RUZCRDg2MDU3MTIxMUY5NkY1QTIzM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMuS7wKbcpnGogRZygSG27YuzV tJ0fLHsB5p2iwvbsp7QmFs0HzMzypvDH6jWeyGr7lN4iHeHAHxSdOu8BuW6BvQy7 kISLPy7jGTeKVZXDUVy+5yGwPTgjjEqLjLDnVHZfsOkkn8mXMdV8oDXCxmjQJNx1 fif4oRFnVzNzepuj4g1cSEewfCDKnfY8C46hZlWTuOpBKeg1QAjxNn3fvApVxFpO T6lJJjX+bjlH+UMPc7LzgJrpZzF8i496Y79VIx7uSgbrNKcakTwl/6X860+jLnj5 nmN8yp7RDbHdr99pFkv5ooZH2AeVgAqvE2Z1grb5ZaspK7KrmIXJvfxEsHJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUziKjhYGww/me+9hgVxIR+W9aIz0wHwYDVR0j BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG RjY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIy Q0NGNkVGRjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMugaaUQDM2ToxiHqdwulOJMDAJDou3tTg/ B9l2+T+e+LoyhiYiRnx0uowecJ5QsDDCAGWfhzUSpno4L8bKWNZKC8ebi0L3oXG2 i+bkAyzAloxGQNODgY+xUMCQSK4p0v5m1STbeAHSXJEFm0nL0zT6du0lf6Wg93hS R8UMjhZkvUCxYH549AUdG71A9c8fQDd1IiKwvtMMNNGtyeaQvr0/ISRbqGO+i0Az fk5f1JaylMPmSVXWZvw687Y46vfCI1lX62q4r5Q9CissJa4N+8kBp1VrawEK4gRD JzPe3HR62agOrQ3CLgiGZwBCVO3MNGzAqD1TgShqyf9cXkgoz6Q= -----END CERTIFICATE-----Generated at Mon Nov 17 12:05:39 2025 by rpki-client