$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft File: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft (raw, json) Hash identifier: y7ZIt4HVfdMrgdRtnSyNiNEY9sTCWepZW1P+QI4XGkI= Subject key identifier: ED:97:76:97:9F:0A:AC:6B:8F:E2:E3:53:19:61:11:44:7E:5B:31:75 Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 4A4C529DC6DF6B3601BA24747EAE6AF56F27A346 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft Manifest number: 01D2 Signing time: Thu 05 Jun 2025 12:11:22 +0000 Manifest this update: Thu 05 Jun 2025 12:06:22 +0000 Manifest next update: Sun 08 Jun 2025 18:16:22 +0000 Files and hashes: 1: 3130332e3135372e36322e302f32332d3234203d3e20313439393736.roa (hash: UqzHREfMZRSfOR8nYb3XR77CjtG93BxmjJaVVwgwsiI=) 2: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl (hash: cb6/2Y8tHycJ9tFBHVZwu6loYYvUWmMIvzShHBuUqzg=) 3: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: wSYZIy/Q8ccBsJqK4uM7q0oCtCAJQMxXc4OdmK06W68=) 4: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: rz//m1AmxOQCkyd1XS4RHRE7cEAFgR3CPVfRkSd+ImY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 18:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4c:52:9d:c6:df:6b:36:01:ba:24:74:7e:ae:6a:f5:6f:27:a3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: Jun 5 12:06:22 2025 GMT Not After : Jun 8 18:16:22 2025 GMT Subject: CN=ED9776979F0AAC6B8FE2E353196111447E5B3175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fb:30:22:93:d8:cc:71:8f:e4:22:00:30:8b: 30:34:c6:f4:a0:af:03:ab:6c:8d:14:59:7e:5c:49: ab:5d:23:2f:4b:26:b0:a1:4e:d6:0d:11:d2:f6:c2: e2:9e:13:69:06:cb:59:f1:85:42:91:0b:9e:94:6a: 54:21:f0:78:0f:c4:b9:de:0c:b8:a4:95:03:71:83: 9b:4e:98:ca:e2:40:11:a4:c7:e9:fa:84:a4:2e:e5: 30:3f:6a:ed:b7:87:39:01:a6:80:62:99:9e:cc:5f: bb:f8:43:0e:3c:d1:53:44:b8:18:78:7a:8a:a9:41: cf:4b:a5:50:8e:0c:e6:c2:b8:84:1a:d4:2d:c0:2c: 2a:c2:b8:7e:d9:07:ab:da:0e:d2:d8:52:8d:69:3a: 4e:b9:2c:ca:93:0b:93:e5:e3:3e:31:1a:96:a8:80: e6:15:a2:32:19:ef:dc:8f:21:02:0f:95:56:0a:cb: 07:82:3b:75:ac:fc:16:0c:75:ed:c1:a9:2a:3e:d7: 7f:77:d0:65:b6:45:34:f2:d3:7e:8e:74:35:44:79: f6:ff:01:0c:43:3b:ff:7d:2e:0a:68:74:4b:55:b1: f5:47:04:6c:2a:58:21:81:51:2c:f1:b1:9b:f7:9f: 78:48:f4:a8:a1:f4:a2:e0:97:5d:a6:8a:8d:64:53: 0f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:97:76:97:9F:0A:AC:6B:8F:E2:E3:53:19:61:11:44:7E:5B:31:75 X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:12:63:ee:3c:85:10:6e:91:47:8a:20:bd:a8:74:5b:0f:84: 33:7f:c5:9a:3e:bf:19:75:2b:d2:24:d5:8b:83:32:f5:20:e8: 9e:aa:99:e1:7b:2a:83:1a:72:c7:e8:84:07:d2:9a:b4:33:d4: 44:55:5e:84:25:d8:55:51:76:cd:5b:4c:15:37:04:59:22:ba: a4:f3:2f:ce:3b:eb:bb:49:69:bf:87:23:d5:4a:3f:71:e7:3e: 8f:6d:e4:9d:06:a9:26:f3:e0:13:03:44:c9:f7:03:e8:8d:d6: 64:84:3a:fa:6e:e1:04:6e:ba:87:1a:30:0b:30:1f:9b:ab:8b: 60:50:9c:b2:c0:9a:04:e5:53:22:ec:28:75:9e:10:62:e8:e8: 35:73:5b:8d:4e:20:70:ed:ab:6c:11:52:15:fe:38:9d:a2:a3: 47:21:6a:c9:0f:c6:83:81:81:48:a5:7a:2f:87:11:d7:23:04: 3e:22:8c:84:09:67:bf:92:37:3e:3e:c9:97:43:af:d2:8d:2d: 93:99:e1:d6:9b:c3:63:5a:8e:d0:82:f2:ea:19:1a:e6:90:43: 37:7e:c7:b2:3c:19:fe:0c:05:c0:e7:af:90:a3:5c:6f:cb:3a: 1a:84:72:5a:58:86:c6:8d:b4:a0:ae:17:75:27:1c:8d:45:bb: 87:85:c8:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSkxSncbfazYBuiR0fq5q9W8no0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNTA2MDUxMjA2MjJaFw0yNTA2MDgxODE2MjJaMDMxMTAvBgNV BAMTKEVEOTc3Njk3OUYwQUFDNkI4RkUyRTM1MzE5NjExMTQ0N0U1QjMxNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+zAik9jMcY/kIgAwizA0xvSg rwOrbI0UWX5cSatdIy9LJrChTtYNEdL2wuKeE2kGy1nxhUKRC56UalQh8HgPxLne DLiklQNxg5tOmMriQBGkx+n6hKQu5TA/au23hzkBpoBimZ7MX7v4Qw480VNEuBh4 eoqpQc9LpVCODObCuIQa1C3ALCrCuH7ZB6vaDtLYUo1pOk65LMqTC5Pl4z4xGpao gOYVojIZ79yPIQIPlVYKyweCO3Ws/BYMde3BqSo+13930GW2RTTy036OdDVEefb/ AQxDO/99LgpodEtVsfVHBGwqWCGBUSzxsZv3n3hI9Kih9KLgl12mio1kUw9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Zd2l58KrGuP4uNTGWERRH5bMXUwHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJE NzNDQUQyNkRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4SY+48hRBukUeKIL2odFsPhDN/xZo+vxl1 K9Ik1YuDMvUg6J6qmeF7KoMacsfohAfSmrQz1ERVXoQl2FVRds1bTBU3BFkiuqTz L84767tJab+HI9VKP3HnPo9t5J0GqSbz4BMDRMn3A+iN1mSEOvpu4QRuuocaMAsw H5uri2BQnLLAmgTlUyLsKHWeEGLo6DVzW41OIHDtq2wRUhX+OJ2io0chaskPxoOB gUilei+HEdcjBD4ijIQJZ7+SNz4+yZdDr9KNLZOZ4dabw2NajtCC8uoZGuaQQzd+ x7I8Gf4MBcDnr5CjXG/LOhqEclpYhsaNtKCuF3UnHI1Fu4eFyNY= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:17 2025 by rpki-client