$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft File: C79C17C4F5C843791A7028B499932A84B65CD399.mft (raw, json) Hash identifier: jGDutH96xgict1cskuZicpqhuBNOmVm2UaotOQ/SW94= Subject key identifier: 69:48:EC:DE:31:F6:E4:D2:CC:2C:3F:8A:9E:45:FE:B1:D9:73:4C:AD Authority key identifier: C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99 Certificate issuer: /CN=C79C17C4F5C843791A7028B499932A84B65CD399 Certificate serial: 10CE9C2F19BCDC4AB3144EDD48B509225A680B94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft Manifest number: AD Signing time: Sun 20 Jul 2025 08:31:22 +0000 Manifest this update: Sun 20 Jul 2025 08:26:22 +0000 Manifest next update: Wed 23 Jul 2025 13:04:22 +0000 Files and hashes: 1: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: xoAFKq/o5an6vKaY7+FEI8eF7uN0DJPTXe0V7TuXoIk=) 2: C79C17C4F5C843791A7028B499932A84B65CD399.crl (hash: Bn4jGZKurkSbA1qkCdxosfHH4APy6Ufmq9zx4dJ7m4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ce:9c:2f:19:bc:dc:4a:b3:14:4e:dd:48:b5:09:22:5a:68:0b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C79C17C4F5C843791A7028B499932A84B65CD399 Validity Not Before: Jul 20 08:26:22 2025 GMT Not After : Jul 23 13:04:22 2025 GMT Subject: CN=6948ECDE31F6E4D2CC2C3F8A9E45FEB1D9734CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:97:2d:dc:49:df:2d:d5:de:c1:ec:e8:fa: fc:6e:1b:44:d7:43:53:74:97:bc:f7:84:11:b7:ff: 25:0f:31:e6:06:7f:47:16:74:d0:ef:46:28:18:ed: 8d:23:ec:29:b4:f0:b6:a2:d7:31:5f:49:9e:d2:60: 33:68:67:43:72:d1:25:0b:80:8b:8e:e2:76:30:f2: 20:8d:62:9b:e0:4d:0b:07:02:fb:93:d7:e3:7d:d4: d9:b8:f1:31:33:4a:d4:f1:95:fe:87:2f:0d:82:05: ce:91:e6:8a:f4:a4:ad:d6:0d:12:a2:12:eb:7e:14: 22:28:12:5d:32:f7:f3:bb:1e:28:4b:d1:97:6b:c2: c6:48:5e:47:fa:ac:13:dc:21:bc:3a:3c:1a:dc:b6: fd:c2:74:82:ac:1b:e1:c8:4f:ea:a2:52:07:84:4f: 62:82:30:3b:3d:f2:11:a3:a5:aa:47:bd:8e:ff:c2: fc:53:40:35:74:82:0e:db:cb:3a:ba:a6:2b:e9:38: 70:1c:b7:cb:74:7b:c4:bd:36:70:6a:06:23:24:48: 02:00:6b:07:e1:46:4b:57:19:f8:a4:41:6e:7f:ea: 56:52:13:13:a0:f6:7b:32:e9:f6:6b:e2:a3:35:df: 7f:04:52:de:aa:fb:b0:5b:39:77:43:ea:9a:74:ff: 8f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:48:EC:DE:31:F6:E4:D2:CC:2C:3F:8A:9E:45:FE:B1:D9:73:4C:AD X509v3 Authority Key Identifier: keyid:C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:79:70:8d:63:2a:80:28:9c:b4:7a:15:9d:64:2b:07:4a:7a: 9b:41:4c:d0:f5:72:5a:88:eb:47:7e:e3:5d:20:03:60:fc:9b: 3c:d8:24:87:be:d7:58:ed:f6:d6:02:27:6b:f8:80:d7:6c:e3: 35:bf:47:d7:21:9f:4e:3e:c5:5b:c5:c2:23:6a:48:39:14:82: 8a:58:93:19:ee:b9:a2:2e:ae:3b:79:d6:3a:ed:29:19:a4:81: df:63:86:93:99:89:b7:6e:c2:2e:f2:ed:11:b9:bb:51:6d:b3: 98:22:9f:1f:e0:fa:44:1c:ee:58:51:23:1e:6d:ec:e9:df:9a: 19:95:2b:2f:69:0b:7b:c9:12:e4:4d:a6:f3:b0:a7:66:d2:ae: ee:18:e5:40:40:6b:cb:cd:d1:23:5a:de:2a:0b:f9:b8:ec:f7: 72:0f:51:85:b7:22:b6:d7:7c:09:77:76:d9:61:4b:59:34:bf: 31:f5:5f:8c:4f:61:12:30:0d:f7:5d:ee:4e:7a:ea:91:4f:dd: ec:1a:69:79:18:4e:3c:53:20:05:c2:d9:7a:38:e6:df:ee:35: fb:44:99:21:13:86:94:92:1d:4a:e9:34:c6:c2:e3:10:f5:d6: 12:4e:e6:31:79:46:0e:54:ce:4d:5b:ab:86:a3:6a:6c:08:50: 7e:a7:a0:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEM6cLxm83EqzFE7dSLUJIlpoC5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc5QzE3QzRGNUM4NDM3OTFBNzAyOEI0OTk5MzJBODRC NjVDRDM5OTAeFw0yNTA3MjAwODI2MjJaFw0yNTA3MjMxMzA0MjJaMDMxMTAvBgNV BAMTKDY5NDhFQ0RFMzFGNkU0RDJDQzJDM0Y4QTlFNDVGRUIxRDk3MzRDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Lpct3EnfLdXewezo+vxuG0TX Q1N0l7z3hBG3/yUPMeYGf0cWdNDvRigY7Y0j7Cm08Lai1zFfSZ7SYDNoZ0Ny0SUL gIuO4nYw8iCNYpvgTQsHAvuT1+N91Nm48TEzStTxlf6HLw2CBc6R5or0pK3WDRKi Eut+FCIoEl0y9/O7HihL0ZdrwsZIXkf6rBPcIbw6PBrctv3CdIKsG+HIT+qiUgeE T2KCMDs98hGjpapHvY7/wvxTQDV0gg7byzq6pivpOHAct8t0e8S9NnBqBiMkSAIA awfhRktXGfikQW5/6lZSExOg9nsy6fZr4qM1338EUt6q+7BbOXdD6pp0/4/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaUjs3jH25NLMLD+KnkX+sdlzTK0wHwYDVR0j BBgwFoAUx5wXxPXIQ3kacCi0mZMqhLZc05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjU2YmJiYS0xODI2LTRkODYtYjg3My0yZjZkZDYzMjU3NzEvMS9DNzlDMTdDNEY1 Qzg0Mzc5MUE3MDI4QjQ5OTkzMkE4NEI2NUNEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc5QzE3QzRGNUM4NDM3OTFBNzAyOEI0OTk5MzJBODRCNjVD RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI1NmJiYmEtMTgyNi00ZDg2LWI4 NzMtMmY2ZGQ2MzI1NzcxLzEvQzc5QzE3QzRGNUM4NDM3OTFBNzAyOEI0OTk5MzJB ODRCNjVDRDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJ5cI1jKoAonLR6FZ1kKwdKeptBTND1clqI 60d+410gA2D8mzzYJIe+11jt9tYCJ2v4gNds4zW/R9chn04+xVvFwiNqSDkUgopY kxnuuaIurjt51jrtKRmkgd9jhpOZibduwi7y7RG5u1Fts5ginx/g+kQc7lhRIx5t 7OnfmhmVKy9pC3vJEuRNpvOwp2bSru4Y5UBAa8vN0SNa3ioL+bjs93IPUYW3IrbX fAl3dtlhS1k0vzH1X4xPYRIwDfdd7k566pFP3ewaaXkYTjxTIAXC2Xo45t/uNftE mSEThpSSHUrpNMbC4xD11hJO5jF5Rg5Uzk1bq4ajamwIUH6noFo= -----END CERTIFICATE-----Generated at Mon Jul 21 12:27:19 2025 by rpki-client