$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft (raw, json) Hash identifier: dN4iC1qPIUeuGu6QEVbZd8WPg3BWCDEoFUki+e/E9zo= Subject key identifier: 91:80:E5:B4:9F:9E:67:92:15:BF:63:76:AC:32:BE:1D:02:83:B9:D1 Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 68802B220B2114F8A72FCA39496F433FBE30BC3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft Manifest number: 0101 Signing time: Sat 07 Jun 2025 15:52:05 +0000 Manifest this update: Sat 07 Jun 2025 15:47:05 +0000 Manifest next update: Tue 10 Jun 2025 17:31:05 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: ombGnLwPgLQ/TaOmQHPipXlZkRsWxFVGNy0cRXRDrpI=) 2: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 8JuZ2ebsqDLgMKPt7Z/5NJCA9Jrmu98pAz1BifgGHCc=) 3: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: viE08DL5fFk1bogLaoHfmzCByxNbHXkxctzPEjnVqjA=) 4: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl (hash: h3X3vBz0qdbCo1GyxO2xWmKhlJ4gGdJbwWySu3NGctQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 17:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:80:2b:22:0b:21:14:f8:a7:2f:ca:39:49:6f:43:3f:be:30:bc:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: Jun 7 15:47:05 2025 GMT Not After : Jun 10 17:31:05 2025 GMT Subject: CN=9180E5B49F9E679215BF6376AC32BE1D0283B9D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:3f:3e:9e:27:9b:c2:b5:93:6e:de:81:b1: 21:0a:6c:4e:87:b7:cb:d9:fc:32:b0:25:4d:8b:c0: c3:62:c5:93:de:dd:87:c8:41:b4:ed:10:ac:6c:4f: 66:57:61:0d:0c:b3:63:00:4b:62:6b:3d:83:86:fa: 1e:f5:8b:59:74:7f:3a:61:ce:b1:4f:fc:bf:62:7c: 16:8e:93:e7:b6:d2:4a:79:f3:92:25:7c:e3:b8:cb: 42:ff:3c:b1:00:fd:f4:0f:d5:7d:34:c0:80:5d:5b: ee:5f:6d:d3:3b:46:57:7a:d7:49:24:98:9a:ae:4c: c2:e9:7b:c7:44:e3:02:d9:83:99:d8:85:6e:04:0f: 38:88:e6:21:17:23:a4:b8:99:8c:a8:e4:27:46:16: 57:23:35:e2:4f:e8:e8:30:4b:de:b3:f2:96:2e:a1: 38:ef:e7:76:d0:87:07:03:76:1f:14:5f:56:cf:d9: d2:1c:be:d2:b2:a7:43:a6:5d:26:ab:ce:20:4e:6e: 88:cd:cf:36:e5:01:f4:e3:74:d5:e2:c6:7f:69:1f: af:01:58:51:5d:d3:d4:b8:25:8b:88:b3:10:d8:34: 01:f6:d7:84:2c:34:85:84:5e:1b:09:4c:9d:a9:0b: 40:61:7d:7f:3f:e1:39:cd:e4:f6:a0:74:b2:ef:02: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:80:E5:B4:9F:9E:67:92:15:BF:63:76:AC:32:BE:1D:02:83:B9:D1 X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c9:21:7a:6f:4f:51:92:2c:66:d9:5a:71:14:c8:11:4a:3e: a7:ef:5a:3c:68:e6:48:10:28:2f:e7:d0:02:0f:48:d4:2e:98: 1c:4a:56:6c:d5:ef:ec:eb:49:ae:a9:c7:48:2c:15:52:20:69: ce:19:61:68:d0:20:22:b8:fe:a3:cb:8c:35:87:1f:45:6e:6d: 8e:d3:a1:23:ba:03:6c:71:e4:10:71:26:5d:31:e1:ce:14:69: f0:c9:53:63:e5:77:67:0e:f9:df:a4:28:4f:7b:6c:f6:67:de: 61:09:ec:f6:bd:1f:af:52:59:db:6e:bf:35:03:36:31:05:2f: 8a:c9:a6:98:fa:86:f4:d8:17:ab:94:d8:ca:ba:98:b3:f8:44: 70:a0:ec:88:25:a5:54:15:c5:ff:06:19:42:c7:f7:92:10:2a: e7:08:70:11:a8:bc:ad:a9:52:30:a2:2a:62:34:14:0e:7b:fc: 8d:79:c3:99:fb:e1:69:6f:0d:57:2c:79:ae:f3:56:02:a0:dd: 40:33:5e:ee:22:5e:60:bc:88:3b:b7:75:18:ac:2b:b2:b1:85: 12:d0:0e:ae:19:d9:c9:92:86:2c:d4:73:55:00:d4:e4:e0:cb: cf:99:e2:96:3f:27:92:67:e4:f5:d1:b4:e0:a6:63:db:52:25: ee:5b:4e:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaIArIgshFPinL8o5SW9DP74wvDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG NkVGRjY1RTAeFw0yNTA2MDcxNTQ3MDVaFw0yNTA2MTAxNzMxMDVaMDMxMTAvBgNV BAMTKDkxODBFNUI0OUY5RTY3OTIxNUJGNjM3NkFDMzJCRTFEMDI4M0I5RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtz8+niebwrWTbt6BsSEKbE6H t8vZ/DKwJU2LwMNixZPe3YfIQbTtEKxsT2ZXYQ0Ms2MAS2JrPYOG+h71i1l0fzph zrFP/L9ifBaOk+e20kp585IlfOO4y0L/PLEA/fQP1X00wIBdW+5fbdM7Rld610kk mJquTMLpe8dE4wLZg5nYhW4EDziI5iEXI6S4mYyo5CdGFlcjNeJP6OgwS96z8pYu oTjv53bQhwcDdh8UX1bP2dIcvtKyp0OmXSarziBObojNzzblAfTjdNXixn9pH68B WFFd09S4JYuIsxDYNAH214QsNIWEXhsJTJ2pC0BhfX8/4TnN5PagdLLvAll7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkYDltJ+eZ5IVv2N2rDK+HQKDudEwHwYDVR0j BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG RjY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIy Q0NGNkVGRjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrJIXpvT1GSLGbZWnEUyBFKPqfvWjxo5kgQ KC/n0AIPSNQumBxKVmzV7+zrSa6px0gsFVIgac4ZYWjQICK4/qPLjDWHH0VubY7T oSO6A2xx5BBxJl0x4c4UafDJU2Pld2cO+d+kKE97bPZn3mEJ7Pa9H69SWdtuvzUD NjEFL4rJppj6hvTYF6uU2Mq6mLP4RHCg7IglpVQVxf8GGULH95IQKucIcBGovK2p UjCiKmI0FA57/I15w5n74WlvDVcsea7zVgKg3UAzXu4iXmC8iDu3dRisK7KxhRLQ Dq4Z2cmShizUc1UA1OTgy8+Z4pY/J5Jn5PXRtOCmY9tSJe5bTjs= -----END CERTIFICATE-----Generated at Sat Jun 7 21:12:06 2025 by rpki-client