$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json) Hash identifier: XoLlNDRp6oSN/byVy2OGMcByj005KVT3PRWiy3Chrk0= Subject key identifier: D8:B9:14:DB:D6:9D:EB:BE:FD:9A:80:FD:08:1C:21:EB:C4:AB:19:DF Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419 Certificate serial: 2DDE7B64A832E86560FECEEE5A2810D6405FBCFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft Manifest number: B4 Signing time: Sat 19 Jul 2025 04:22:06 +0000 Manifest this update: Sat 19 Jul 2025 04:17:06 +0000 Manifest next update: Tue 22 Jul 2025 07:05:06 +0000 Files and hashes: 1: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: hx9Ypt7mNc+LdGjIxoZd7vs/dAoxGyaQsmKh42ginzI=) 2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: VG6+4O5llgQnLe8B6hYlDtcuv5x9Z/46JdLy5SPzH+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 07:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:de:7b:64:a8:32:e8:65:60:fe:ce:ee:5a:28:10:d6:40:5f:bc:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419 Validity Not Before: Jul 19 04:17:06 2025 GMT Not After : Jul 22 07:05:06 2025 GMT Subject: CN=D8B914DBD69DEBBEFD9A80FD081C21EBC4AB19DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:55:40:bb:8c:9c:ff:f3:5b:0b:fe:f8:13:20: 72:dd:6f:79:9a:19:12:81:00:f4:aa:85:44:dc:ff: c7:fc:6d:10:cb:c3:44:d1:f6:fb:ec:18:31:d4:b3: 9f:e6:53:bf:9b:a8:80:7e:b8:8d:58:4d:c9:bd:7d: 7d:af:1a:d6:d1:be:25:5f:cc:e9:e4:1a:d9:a4:c8: 01:3a:c8:ac:43:10:02:7f:f7:a6:5b:46:f5:62:2e: 1d:e1:73:63:20:1a:8a:12:a6:42:17:9c:93:2f:a3: c6:cf:a0:5c:0d:cd:73:79:e8:0c:63:15:c6:86:9e: 3f:1c:38:67:94:39:26:5f:9c:9b:08:d5:b9:e3:89: 0c:4f:20:6d:0a:44:0a:cf:99:82:bd:37:53:98:8f: d8:c1:94:32:2a:3e:8b:11:09:cd:51:8c:f4:b6:f7: 4d:7a:70:68:ec:80:70:14:bf:05:14:09:1d:65:a8: df:d5:9d:f2:ce:29:5e:73:5c:72:7d:0b:17:29:d3: 67:74:cf:5f:a1:39:dc:c6:56:5b:0d:3f:56:69:a3: b9:6e:99:88:52:86:39:86:30:21:f1:3a:67:b0:50: 91:f5:a2:87:56:4b:73:28:af:a4:6e:56:97:cb:aa: d8:53:20:2e:d2:d0:32:03:d5:a4:97:d6:1c:d3:85: f7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B9:14:DB:D6:9D:EB:BE:FD:9A:80:FD:08:1C:21:EB:C4:AB:19:DF X509v3 Authority Key Identifier: keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:20:d6:74:f6:b1:65:b7:b3:e0:d6:9d:cf:e8:f2:eb:14:ff: 32:d6:ff:be:5b:4a:5d:fd:b1:b1:72:a1:c7:06:94:de:e1:71: f2:42:a7:ad:62:14:f9:38:17:ef:c2:6b:cc:1e:23:da:7a:db: d4:a6:16:44:73:98:8d:3d:d6:a6:63:60:11:d3:39:41:34:3b: ac:90:eb:a3:fd:05:e2:8f:0f:3b:01:f1:db:a2:ca:d1:c3:cc: 59:34:a1:04:99:69:fe:b1:f4:11:1c:e0:95:30:ef:a4:bc:4d: 66:de:06:41:43:85:5d:fd:02:d3:87:5f:8d:dd:2f:5f:e9:46: f9:4a:40:81:9f:df:29:24:53:ed:00:37:ff:d8:e8:a6:8c:15: 7b:01:93:98:ac:ef:21:c5:b6:37:c8:d4:2c:8b:46:a0:c6:c3: 9f:c8:96:bf:f8:51:64:b3:80:b4:2f:36:80:19:45:78:e7:03: ea:e5:75:41:19:ce:a2:95:b9:0a:33:47:9d:63:47:3c:e0:cc: 68:d8:83:0f:a2:f1:2a:f6:f4:96:a1:81:6a:ef:b6:c8:1c:6c: f1:2a:d3:d0:37:b9:58:a9:87:db:a0:21:82:7d:2f:aa:df:06: 7a:82:94:b7:50:a1:bf:19:0f:9e:d8:33:4a:f7:ed:95:9f:bf: d1:84:54:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULd57ZKgy6GVg/s7uWigQ1kBfvP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIz NzVEMDQxOTAeFw0yNTA3MTkwNDE3MDZaFw0yNTA3MjIwNzA1MDZaMDMxMTAvBgNV BAMTKEQ4QjkxNERCRDY5REVCQkVGRDlBODBGRDA4MUMyMUVCQzRBQjE5REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeVUC7jJz/81sL/vgTIHLdb3ma GRKBAPSqhUTc/8f8bRDLw0TR9vvsGDHUs5/mU7+bqIB+uI1YTcm9fX2vGtbRviVf zOnkGtmkyAE6yKxDEAJ/96ZbRvViLh3hc2MgGooSpkIXnJMvo8bPoFwNzXN56Axj FcaGnj8cOGeUOSZfnJsI1bnjiQxPIG0KRArPmYK9N1OYj9jBlDIqPosRCc1RjPS2 9016cGjsgHAUvwUUCR1lqN/VnfLOKV5zXHJ9Cxcp02d0z1+hOdzGVlsNP1Zpo7lu mYhShjmGMCHxOmewUJH1oodWS3Mor6RuVpfLqthTIC7S0DID1aSX1hzThfcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2LkU29ad6779moD9CBwh68SrGd8wHwYDVR0j BBgwFoAUeYoinELaVNBpAGTSZKp6ojddBBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMS83OThBMjI5QzQy REE1NEQwNjkwMDY0RDI2NEFBN0FBMjM3NUQwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIzNzVE MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdB QTIzNzVEMDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8g1nT2sWW3s+DWnc/o8usU/zLW/75bSl39 sbFyoccGlN7hcfJCp61iFPk4F+/Ca8weI9p629SmFkRzmI091qZjYBHTOUE0O6yQ 66P9BeKPDzsB8duiytHDzFk0oQSZaf6x9BEc4JUw76S8TWbeBkFDhV39AtOHX43d L1/pRvlKQIGf3ykkU+0AN//Y6KaMFXsBk5is7yHFtjfI1CyLRqDGw5/Ilr/4UWSz gLQvNoAZRXjnA+rldUEZzqKVuQozR51jRzzgzGjYgw+i8Sr29JahgWrvtsgcbPEq 09A3uViph9ugIYJ9L6rfBnqClLdQob8ZD57YM0r37ZWfv9GEVKk= -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:30 2025 by rpki-client