$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json) Hash identifier: TU0/09ez5juixxQhbOT3cbAdcuBfZsy+bl/3vBFerQo= Subject key identifier: 8A:C3:51:A4:7F:00:EA:FD:5D:0F:5A:E2:06:D4:94:24:9A:30:A8:4B Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419 Certificate serial: 1DB38F3B68740E06B7F3221851EEB5D40B8FB472 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft Manifest number: 9F Signing time: Sun 01 Jun 2025 12:52:07 +0000 Manifest this update: Sun 01 Jun 2025 12:47:07 +0000 Manifest next update: Wed 04 Jun 2025 20:23:07 +0000 Files and hashes: 1: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: KUN1Gdxv+FoRI5kGxrE0uindHU8eqsxIZK+eWK3uVcs=) 2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: VG6+4O5llgQnLe8B6hYlDtcuv5x9Z/46JdLy5SPzH+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 20:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b3:8f:3b:68:74:0e:06:b7:f3:22:18:51:ee:b5:d4:0b:8f:b4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419 Validity Not Before: Jun 1 12:47:07 2025 GMT Not After : Jun 4 20:23:07 2025 GMT Subject: CN=8AC351A47F00EAFD5D0F5AE206D494249A30A84B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:04:90:53:f0:19:5c:58:f5:2d:66:05:49: 9f:6c:39:a1:73:f7:9f:08:a5:41:f9:3e:c7:d1:4a: c9:fa:2e:2e:27:62:03:1d:4f:80:35:92:cf:e2:19: c0:ff:86:ea:d1:79:01:00:36:16:6a:a6:27:ef:f2: f9:7a:64:8c:b7:f1:7c:23:c9:31:7b:af:e6:91:89: 62:3f:e4:e9:4a:b2:7c:1e:00:b8:0c:e7:82:30:2d: 99:ad:96:ac:64:86:5c:57:10:08:b7:0a:b4:e9:fe: c4:e6:ff:d1:2d:a6:ae:e3:f2:39:b7:9c:b1:66:03: 38:19:ff:f9:39:24:0c:b1:18:7d:9d:f4:35:57:2d: f1:38:41:10:55:d5:c9:17:dc:19:4f:8d:da:eb:cf: 05:80:72:c5:28:24:e5:ed:1e:7c:40:8f:38:48:aa: 57:e9:86:51:c5:79:19:4d:37:db:19:ed:3c:98:50: 01:0b:7e:02:5d:a4:b6:83:8c:0a:25:98:62:08:b7: 0d:f0:91:38:72:ea:05:db:36:52:5f:7a:40:10:ab: 06:bc:a9:5d:e2:48:75:cd:fa:6c:2b:07:97:34:d7: 9c:e9:3c:26:96:f3:b1:f2:e7:99:a9:a1:b0:49:b2: c8:e5:b1:bd:66:6e:ec:19:81:b4:e1:b4:fb:d4:9b: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C3:51:A4:7F:00:EA:FD:5D:0F:5A:E2:06:D4:94:24:9A:30:A8:4B X509v3 Authority Key Identifier: keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7d:9d:c6:a3:a4:f6:83:e7:b2:62:ad:5f:b5:c1:99:4a:23: e9:66:3c:4b:46:4e:80:fa:55:37:b9:7c:c8:bb:fc:3d:bb:9a: 95:26:a9:0a:94:83:b7:c2:bf:d1:7a:cd:43:e6:37:45:d6:e6: 3f:87:35:69:bf:ad:1e:66:1f:8a:d1:48:49:62:8f:7d:9a:9d: 9b:32:88:80:78:c0:13:f5:1f:5b:d6:ed:7d:0d:50:24:65:e7: b0:c2:2a:e0:36:a5:0c:10:fe:54:48:a4:c2:98:85:07:91:91: 4e:71:11:ad:4c:ae:94:01:43:d2:25:33:da:5e:7c:4d:19:16: c7:74:0c:61:c7:7b:ad:f1:98:a8:5f:28:9a:2c:6e:91:c1:1f: 72:23:18:aa:f7:4e:eb:98:99:b2:db:97:79:4a:ad:74:f7:2e: b1:49:6a:0c:8f:87:0b:ab:6c:7b:4c:d4:75:8f:5d:f2:50:19: 94:09:cb:eb:e6:d9:50:74:9d:6f:b5:c7:aa:d1:e1:4b:a3:dd: 9a:14:c9:92:b4:3d:57:7c:c1:e1:9f:18:b0:46:8c:43:57:21: 60:89:d4:24:d7:09:b9:55:a3:b6:23:ef:7b:c9:fb:06:bd:0c: 88:fb:bf:de:87:ab:e8:07:43:25:31:86:66:3a:51:fa:14:c3: 63:24:9e:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHbOPO2h0Dga38yIYUe611AuPtHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIz NzVEMDQxOTAeFw0yNTA2MDExMjQ3MDdaFw0yNTA2MDQyMDIzMDdaMDMxMTAvBgNV BAMTKDhBQzM1MUE0N0YwMEVBRkQ1RDBGNUFFMjA2RDQ5NDI0OUEzMEE4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVJQSQU/AZXFj1LWYFSZ9sOaFz 958IpUH5PsfRSsn6Li4nYgMdT4A1ks/iGcD/hurReQEANhZqpifv8vl6ZIy38Xwj yTF7r+aRiWI/5OlKsnweALgM54IwLZmtlqxkhlxXEAi3CrTp/sTm/9Etpq7j8jm3 nLFmAzgZ//k5JAyxGH2d9DVXLfE4QRBV1ckX3BlPjdrrzwWAcsUoJOXtHnxAjzhI qlfphlHFeRlNN9sZ7TyYUAELfgJdpLaDjAolmGIItw3wkThy6gXbNlJfekAQqwa8 qV3iSHXN+mwrB5c015zpPCaW87Hy55mpobBJssjlsb1mbuwZgbThtPvUm3HHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUisNRpH8A6v1dD1riBtSUJJowqEswHwYDVR0j BBgwFoAUeYoinELaVNBpAGTSZKp6ojddBBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMS83OThBMjI5QzQy REE1NEQwNjkwMDY0RDI2NEFBN0FBMjM3NUQwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIzNzVE MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdB QTIzNzVEMDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGB9ncajpPaD57JirV+1wZlKI+lmPEtGToD6 VTe5fMi7/D27mpUmqQqUg7fCv9F6zUPmN0XW5j+HNWm/rR5mH4rRSElij32anZsy iIB4wBP1H1vW7X0NUCRl57DCKuA2pQwQ/lRIpMKYhQeRkU5xEa1MrpQBQ9IlM9pe fE0ZFsd0DGHHe63xmKhfKJosbpHBH3IjGKr3TuuYmbLbl3lKrXT3LrFJagyPhwur bHtM1HWPXfJQGZQJy+vm2VB0nW+1x6rR4Uuj3ZoUyZK0PVd8weGfGLBGjENXIWCJ 1CTXCblVo7Yj73vJ+wa9DIj7v96Hq+gHQyUxhmY6UfoUw2MknnE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:39:42 2025 by rpki-client