$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft File: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft (raw, json) Hash identifier: cAhGbzJ/86138VhF4g9oR/HrwBLZymg3B9sXp6585vM= Subject key identifier: 51:19:16:3F:E8:A0:07:3A:D4:FB:D5:BA:9B:36:A2:C4:E2:C5:60:61 Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 36A591EF3694D7FD5FA95546B1DB30A4A427FD78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft Manifest number: 01FB Signing time: Fri 05 Sep 2025 13:51:24 +0000 Manifest this update: Fri 05 Sep 2025 13:46:24 +0000 Manifest next update: Mon 08 Sep 2025 16:07:24 +0000 Files and hashes: 1: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: umdrRzgp8Ciqeng1bs/crkT4xOCEEqpUSt3z8J2SnuY=) 2: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl (hash: Ak9quYEef2Re0j37D2cysZ2Z4ADl+WRj3E1mlsbz+yo=) 3: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: MSA3Izjg6KzN5Q+MKwDBM7mghQbhoAUxxHKShKe7LT0=) 4: 3130332e3135372e36322e302f32332d3234203d3e20313439393736.roa (hash: UqzHREfMZRSfOR8nYb3XR77CjtG93BxmjJaVVwgwsiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a5:91:ef:36:94:d7:fd:5f:a9:55:46:b1:db:30:a4:a4:27:fd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: Sep 5 13:46:24 2025 GMT Not After : Sep 8 16:07:24 2025 GMT Subject: CN=5119163FE8A0073AD4FBD5BA9B36A2C4E2C56061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bd:d6:96:9f:9c:6e:b0:d2:25:73:ad:f0:25: 40:d3:1b:36:4e:8c:09:8e:0e:44:1f:b6:f5:5a:d1: 19:9f:00:e7:41:49:94:86:f1:14:db:fd:61:20:a0: 28:7f:38:90:9e:59:2d:91:74:a3:7b:e8:70:f3:f0: c2:8e:8d:35:f7:e4:ba:e6:bf:cf:0f:ab:65:89:0f: 8c:82:81:eb:37:ea:0f:3e:07:28:01:0c:fc:50:6b: 2a:8a:ee:6c:e1:dd:f6:52:de:3c:a4:31:35:b7:d0: 5d:4a:46:8b:a1:80:40:40:9b:48:03:af:13:99:5d: 70:38:81:6a:de:6d:0b:5a:2d:d5:7a:08:df:ad:63: 58:40:73:c2:39:51:17:bc:09:56:28:79:72:04:8c: 26:92:32:df:50:99:d1:84:b4:33:7f:00:b8:6f:ff: c7:03:87:50:4b:89:1e:65:d1:b4:9e:08:52:e8:8c: 6b:26:61:b2:8d:fd:90:ad:6e:34:b0:f6:ff:61:8d: 27:19:cb:3e:26:a3:98:93:f4:36:92:47:26:61:62: 47:75:6c:13:d5:fa:a7:9d:79:c5:72:c9:f5:1a:93: 96:69:bd:74:a7:52:eb:24:71:9b:a1:32:26:c4:19: 69:e6:83:a1:35:e8:2d:a3:01:0e:70:93:5d:1d:e4: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:19:16:3F:E8:A0:07:3A:D4:FB:D5:BA:9B:36:A2:C4:E2:C5:60:61 X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:cc:b1:c4:b0:da:f6:81:35:eb:a4:9d:02:ab:9a:60:ca:04: 60:6b:40:cf:54:ee:0f:07:89:ff:18:e1:79:4f:d4:5e:0d:aa: 3d:d8:33:8b:c7:e1:5c:88:05:f5:e7:80:45:e2:a7:4a:97:03: c6:ec:71:12:81:33:db:d2:d1:95:54:31:10:51:3e:50:db:dc: d2:ab:20:9e:ed:38:d8:a1:12:05:a7:84:40:6b:42:13:cb:8a: e9:27:e4:3d:16:36:02:5f:66:75:4e:df:ca:1a:bb:d9:6b:83: a9:a9:2f:88:c2:8d:d4:0a:c2:ae:98:8b:5c:18:fb:5e:ca:c4: 29:5e:dc:49:7d:6a:e4:42:4b:32:e4:41:ef:a0:c6:35:db:0c: c3:9c:b8:e7:ee:fd:49:7d:7d:be:f0:cf:12:11:67:89:0c:db: eb:52:c6:6c:c8:2a:5a:eb:8e:96:19:61:d1:53:b4:b2:69:9b: 29:6e:6f:fa:06:c7:ac:e3:2b:e8:a5:fe:b7:58:3e:b6:5e:70: e1:5b:23:f4:0a:c8:ff:e3:be:9e:9b:d4:49:6e:df:7e:ed:cd: af:e7:b2:62:eb:54:93:8d:19:20:5f:53:2a:28:7b:87:ca:1c: 89:43:b7:0e:d9:d5:e6:0c:8e:27:41:e6:6b:71:6c:6e:c6:69: ca:cf:3b:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNqWR7zaU1/1fqVVGsdswpKQn/XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNTA5MDUxMzQ2MjRaFw0yNTA5MDgxNjA3MjRaMDMxMTAvBgNV BAMTKDUxMTkxNjNGRThBMDA3M0FENEZCRDVCQTlCMzZBMkM0RTJDNTYwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhvdaWn5xusNIlc63wJUDTGzZO jAmODkQftvVa0RmfAOdBSZSG8RTb/WEgoCh/OJCeWS2RdKN76HDz8MKOjTX35Lrm v88Pq2WJD4yCges36g8+BygBDPxQayqK7mzh3fZS3jykMTW30F1KRouhgEBAm0gD rxOZXXA4gWrebQtaLdV6CN+tY1hAc8I5URe8CVYoeXIEjCaSMt9QmdGEtDN/ALhv /8cDh1BLiR5l0bSeCFLojGsmYbKN/ZCtbjSw9v9hjScZyz4mo5iT9DaSRyZhYkd1 bBPV+qedecVyyfUak5ZpvXSnUuskcZuhMibEGWnmg6E16C2jAQ5wk10d5BdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUURkWP+igBzrU+9W6mzaixOLFYGEwHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJE NzNDQUQyNkRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfMscSw2vaBNeuknQKrmmDKBGBrQM9U7g8H if8Y4XlP1F4Nqj3YM4vH4VyIBfXngEXip0qXA8bscRKBM9vS0ZVUMRBRPlDb3NKr IJ7tONihEgWnhEBrQhPLiukn5D0WNgJfZnVO38oau9lrg6mpL4jCjdQKwq6Yi1wY +17KxCle3El9auRCSzLkQe+gxjXbDMOcuOfu/Ul9fb7wzxIRZ4kM2+tSxmzIKlrr jpYZYdFTtLJpmylub/oGx6zjK+il/rdYPrZecOFbI/QKyP/jvp6b1Elu337tza/n smLrVJONGSBfUyooe4fKHIlDtw7Z1eYMjidB5mtxbG7GacrPO9U= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:15 2025 by rpki-client