$ rpki-client -vvf repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft File: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft (raw, json) Hash identifier: YBVwEDuqPWF3Nnzyem6ra9kT7EDzPcpBPYJlWl2gBgI= Subject key identifier: EC:E0:1A:59:B4:AA:62:E5:4C:6D:FE:9F:8B:22:BA:7F:C8:8B:35:F1 Authority key identifier: 97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE Certificate issuer: /CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Certificate serial: 4D455ABF02F6275BBBE547A51EBAAD1D75E5916A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft Manifest number: 01C4 Signing time: Sat 19 Jul 2025 08:10:47 +0000 Manifest this update: Sat 19 Jul 2025 08:05:47 +0000 Manifest next update: Tue 22 Jul 2025 12:33:47 +0000 Files and hashes: 1: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: zP2/xMyoKaZs6fiqSMcfKqk4R7UXbhBp7PEh6lL8fdI=) 2: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: pdPZa1hqVrYPWZYkmw/3L6oJ44J+aMpGpranP7CjD4s=) 3: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: A0Wh8osPNi8zZWQ36AcLaUjDaG9uaq4xPw9QuzcvUH4=) 4: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: VMR23vWqztgF5Q/iMRDhZJFW6rkTGEBU0HHkzSi1LgY=) 5: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: 9EURxrNrlf7XNa4qBRBWmt6iAklp2ZexfAnaMIzL06c=) 6: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl (hash: kwGWmDkF1cfWyz+zekfN0nKx5cO1/NH0lnzdZbs/3HI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:45:5a:bf:02:f6:27:5b:bb:e5:47:a5:1e:ba:ad:1d:75:e5:91:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Validity Not Before: Jul 19 08:05:47 2025 GMT Not After : Jul 22 12:33:47 2025 GMT Subject: CN=ECE01A59B4AA62E54C6DFE9F8B22BA7FC88B35F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:d2:a0:8e:76:ca:89:63:4a:df:37:cc:40: 70:dd:2e:74:d2:7a:0b:a7:02:6c:b4:c0:9a:89:f0: ef:bc:9d:95:a8:92:dc:b4:f6:11:ec:bd:e5:c6:18: ed:44:b0:4a:93:23:15:f0:65:81:ed:da:91:2b:e8: ee:e0:f9:1f:88:5b:b5:cf:67:98:c1:9b:ea:cc:0b: 8a:40:46:40:be:02:4a:a3:47:2d:7e:24:90:09:32: 53:fe:26:c7:8f:40:10:cd:4d:46:38:1e:8b:c6:7b: 1a:54:40:51:d2:8a:a7:de:56:26:c8:8c:3f:1c:21: 58:97:87:8d:91:1f:ba:47:d1:be:62:5e:46:03:fe: 92:b9:01:0e:ef:d7:02:ae:0f:79:01:9f:db:f0:30: e3:80:47:9d:75:2d:d8:91:21:4e:9a:4b:6a:42:20: 54:ea:48:83:30:9d:4f:9e:23:d2:17:f2:18:56:7a: c0:13:d6:43:86:40:31:06:c7:37:74:16:9b:2f:e3: 23:22:bd:14:8b:fc:43:35:d1:be:55:78:e4:c4:27: e8:94:c4:c5:83:b6:ad:46:16:4f:85:07:2b:86:00: 07:fe:ee:9d:e5:2d:23:52:04:f6:f1:2f:2a:94:71: 20:20:42:d4:a8:23:c6:97:9d:2f:d6:30:fb:fa:05: a8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E0:1A:59:B4:AA:62:E5:4C:6D:FE:9F:8B:22:BA:7F:C8:8B:35:F1 X509v3 Authority Key Identifier: keyid:97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:01:c9:7b:0b:28:d5:fc:48:ab:32:59:d5:08:a6:d5:8e:9b: 35:ef:fd:6e:77:19:f8:83:03:ac:69:9b:bf:d8:ca:be:0b:70: 96:1a:50:1f:44:e8:50:07:e6:1e:aa:5a:36:c6:f0:bf:b5:98: 54:5f:10:a4:61:26:b0:f1:3d:ea:0b:8a:dc:f2:b9:0a:a3:47: 8b:04:c8:e7:08:87:4d:c7:a7:92:c4:06:8a:30:03:2e:d6:cb: 85:9b:79:48:ca:fd:31:70:b7:c7:2e:46:b1:3c:85:2c:26:85: 47:7f:cc:f7:0a:e3:e7:71:53:c0:e6:eb:40:79:62:ce:a4:44: bd:71:8b:ee:5a:20:51:66:29:c8:c5:f4:f4:0c:df:87:87:d6: 1e:4b:ba:6c:88:fa:86:65:04:61:d5:ec:9e:bd:1a:ea:ec:54: e9:e8:75:65:0b:a6:4d:30:d6:f3:96:5e:e2:57:cb:25:33:7b: 9b:39:93:8b:f9:20:71:51:e2:eb:b1:c9:2f:5f:a0:01:35:b9: d8:8d:ff:b0:74:f7:e2:12:b5:ea:35:cc:d4:d3:40:01:7a:f2: 65:0c:07:e2:14:db:80:eb:d4:b1:0c:af:f6:42:5c:44:3e:05: 84:5b:b0:2e:00:ef:5b:be:1a:a6:72:70:68:8e:92:a7:a5:f6: 19:64:4c:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTUVavwL2J1u75UelHrqtHXXlkWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdC NDlENEVGRTAeFw0yNTA3MTkwODA1NDdaFw0yNTA3MjIxMjMzNDdaMDMxMTAvBgNV BAMTKEVDRTAxQTU5QjRBQTYyRTU0QzZERkU5RjhCMjJCQTdGQzg4QjM1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFP9KgjnbKiWNK3zfMQHDdLnTS egunAmy0wJqJ8O+8nZWokty09hHsveXGGO1EsEqTIxXwZYHt2pEr6O7g+R+IW7XP Z5jBm+rMC4pARkC+AkqjRy1+JJAJMlP+JsePQBDNTUY4HovGexpUQFHSiqfeVibI jD8cIViXh42RH7pH0b5iXkYD/pK5AQ7v1wKuD3kBn9vwMOOAR511LdiRIU6aS2pC IFTqSIMwnU+eI9IX8hhWesAT1kOGQDEGxzd0Fpsv4yMivRSL/EM10b5VeOTEJ+iU xMWDtq1GFk+FByuGAAf+7p3lLSNSBPbxLyqUcSAgQtSoI8aXnS/WMPv6BajLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7OAaWbSqYuVMbf6fiyK6f8iLNfEwHwYDVR0j BBgwFoAUl5syk16/otptywp52zl/17SdTv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGU3MTQzNy04NWZjLTQ3YWYtOTY4Ny05MDNiYWZiMmMxNjEvMC85NzlCMzI5MzVF QkZBMkRBNkRDQjBBNzlEQjM5N0ZEN0I0OUQ0RUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdCNDlE NEVGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdG RDdCNDlENEVGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEByXsLKNX8SKsyWdUIptWOmzXv/W53GfiD A6xpm7/Yyr4LcJYaUB9E6FAH5h6qWjbG8L+1mFRfEKRhJrDxPeoLitzyuQqjR4sE yOcIh03Hp5LEBoowAy7Wy4WbeUjK/TFwt8cuRrE8hSwmhUd/zPcK4+dxU8Dm60B5 Ys6kRL1xi+5aIFFmKcjF9PQM34eH1h5LumyI+oZlBGHV7J69GursVOnodWULpk0w 1vOWXuJXyyUze5s5k4v5IHFR4uuxyS9foAE1udiN/7B09+ISteo1zNTTQAF68mUM B+IU24Dr1LEMr/ZCXEQ+BYRbsC4A71u+GqZycGiOkqel9hlkTOA= -----END CERTIFICATE-----Generated at Mon Jul 21 09:01:58 2025 by rpki-client