$ rpki-client -vvf repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft File: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft (raw, json) Hash identifier: ArpMjBeK26C5X5pN+zlr7B6MjMO3qE7M1bAXC6RUR3M= Subject key identifier: 33:8B:50:B8:83:F7:CD:6A:45:7C:86:2B:6F:DB:AA:49:D8:64:30:70 Authority key identifier: A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D Certificate issuer: /CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Certificate serial: 601F9C470A7F1714087109A364A610F83333102B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft Manifest number: 0504 Signing time: Fri 05 Sep 2025 17:21:30 +0000 Manifest this update: Fri 05 Sep 2025 17:16:30 +0000 Manifest next update: Mon 08 Sep 2025 18:00:30 +0000 Files and hashes: 1: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: Go0CPlPcssjZzIiCTnTf40YOYb6lhMvP1qODXAMUZSM=) 2: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: m9TQ4kbiWJ7wAU6DJc4l1m4yIYMItzDNgLT+tillKjs=) 3: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl (hash: W6iUGHBovf9i6UqLki0E1tXSgpvfzffNqiReeHeko1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1f:9c:47:0a:7f:17:14:08:71:09:a3:64:a6:10:f8:33:33:10:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Validity Not Before: Sep 5 17:16:30 2025 GMT Not After : Sep 8 18:00:30 2025 GMT Subject: CN=338B50B883F7CD6A457C862B6FDBAA49D8643070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:ef:71:55:c3:f8:90:37:85:f4:ac:ad:12: c3:a7:4b:61:95:f8:e1:45:41:d5:4d:85:26:48:7b: 0f:89:44:4f:bb:3e:3d:eb:f5:b5:90:ef:1e:97:53: 8d:53:c6:58:5a:67:b7:88:5e:58:cb:43:91:13:f8: 11:ff:13:35:1a:72:8f:6d:87:62:4a:f8:6e:ff:ae: 0e:6e:e0:21:ec:3f:55:fb:49:09:3a:e6:57:81:8f: 80:5a:5e:72:fd:55:6f:6e:d2:0e:5d:27:cf:22:4b: 75:68:60:3b:f0:62:1b:83:ca:7d:9c:4a:07:78:5d: 3e:7c:e1:86:8f:c2:b9:fe:58:f0:5f:ec:5e:bf:f7: 5c:83:fd:51:f5:e3:bd:8b:5b:0e:ec:eb:2b:40:71: ea:1b:e4:8b:d5:dd:4a:36:74:ad:0e:96:0a:bb:0e: 25:90:b1:d1:79:25:7b:c6:da:14:dc:2e:27:6e:48: eb:46:b7:73:f3:53:0b:de:98:c6:af:96:92:bb:88: c1:8b:8c:b6:a0:2b:79:a1:78:a1:c8:20:1b:05:aa: db:7a:c2:7b:b3:4f:1e:1a:70:7a:c8:d0:0a:11:59: 8f:6f:46:ea:4f:df:cb:33:d3:f9:24:3f:63:1b:a9: 80:51:9f:19:d3:87:80:f6:11:4b:c4:58:d0:83:35: bb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8B:50:B8:83:F7:CD:6A:45:7C:86:2B:6F:DB:AA:49:D8:64:30:70 X509v3 Authority Key Identifier: keyid:A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:94:c0:83:e0:75:f9:ab:65:11:07:8a:ad:95:58:15:b9:36: b8:2a:44:bb:4b:1b:d3:86:17:42:0a:07:22:26:83:d4:3c:fa: 25:6e:f0:1f:6c:3e:d7:97:4e:d4:83:12:b7:0f:be:51:96:23: 63:82:2b:85:54:9d:f1:f1:23:34:91:e9:82:91:42:e0:f9:ee: 88:c8:60:77:85:61:a2:6a:4c:0c:d9:06:74:f1:93:08:12:ab: d7:bd:c8:4e:db:ce:e4:66:80:ae:98:7f:9d:b7:5a:e6:4f:de: 8b:6f:2b:dd:b4:e7:58:5f:d6:f5:e5:d7:ee:19:b7:54:dc:f8: 06:07:aa:dc:30:0e:fa:3d:f6:35:43:29:88:b0:2e:af:1e:ec: c8:c0:48:14:f5:8f:eb:26:2a:70:6d:cf:52:d2:d3:7c:f9:19: 0d:7e:df:89:1e:66:e5:69:ba:74:a6:2c:e4:db:e2:79:b4:82: c7:23:de:b3:af:68:0c:b7:c4:ec:b8:2b:4b:f4:9a:70:2d:38: 29:bf:a9:49:d6:c3:4f:7a:ab:dd:78:f0:c8:4a:3c:3f:8b:08: 64:e4:5c:a5:95:1a:14:bc:98:1b:5b:eb:63:e4:0e:92:90:49: f2:63:e4:d4:94:0d:a6:02:6a:55:a0:9e:55:1e:7e:08:6d:1c: d7:13:34:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYB+cRwp/FxQIcQmjZKYQ+DMzECswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUy NjZGOEE2RDAeFw0yNTA5MDUxNzE2MzBaFw0yNTA5MDgxODAwMzBaMDMxMTAvBgNV BAMTKDMzOEI1MEI4ODNGN0NENkE0NTdDODYyQjZGREJBQTQ5RDg2NDMwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXO9xVcP4kDeF9KytEsOnS2GV +OFFQdVNhSZIew+JRE+7Pj3r9bWQ7x6XU41TxlhaZ7eIXljLQ5ET+BH/EzUaco9t h2JK+G7/rg5u4CHsP1X7SQk65leBj4BaXnL9VW9u0g5dJ88iS3VoYDvwYhuDyn2c Sgd4XT584YaPwrn+WPBf7F6/91yD/VH1472LWw7s6ytAceob5IvV3Uo2dK0Olgq7 DiWQsdF5JXvG2hTcLiduSOtGt3PzUwvemMavlpK7iMGLjLagK3mheKHIIBsFqtt6 wnuzTx4acHrI0AoRWY9vRupP38sz0/kkP2MbqYBRnxnTh4D2EUvEWNCDNbvzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM4tQuIP3zWpFfIYrb9uqSdhkMHAwHwYDVR0j BBgwFoAUp5/TB8N+jFWfZaWOyc6VviZvim0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGY2YmViOC1lNGU4LTRlMzktODI3NS0xYzZkNzdjM2VlZjgvMC9BNzlGRDMwN0Mz N0U4QzU1OUY2NUE1OEVDOUNFOTVCRTI2NkY4QTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUyNjZG OEE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1 QkUyNjZGOEE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmUwIPgdfmrZREHiq2VWBW5NrgqRLtLG9OG F0IKByImg9Q8+iVu8B9sPteXTtSDErcPvlGWI2OCK4VUnfHxIzSR6YKRQuD57ojI YHeFYaJqTAzZBnTxkwgSq9e9yE7bzuRmgK6Yf523WuZP3otvK92051hf1vXl1+4Z t1Tc+AYHqtwwDvo99jVDKYiwLq8e7MjASBT1j+smKnBtz1LS03z5GQ1+34keZuVp unSmLOTb4nm0gscj3rOvaAy3xOy4K0v0mnAtOCm/qUnWw096q9148MhKPD+LCGTk XKWVGhS8mBtb62PkDpKQSfJj5NSUDaYCalWgnlUefghtHNcTNMA= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:24 2025 by rpki-client