$ rpki-client -vvf repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft File: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft (raw, json) Hash identifier: FTdSRKvVt6mLHDHtf2khE4nueHYc8mAwKFvWXvSDTgE= Subject key identifier: 07:55:F6:BE:8E:1B:AA:EF:3F:0B:2F:C9:D8:30:BB:D8:73:03:F0:7B Authority key identifier: 97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE Certificate issuer: /CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Certificate serial: 1CC3CCB9A8AEA684761D46AA3538689C8D5D22D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft Manifest number: 01DA Signing time: Sun 07 Sep 2025 08:20:49 +0000 Manifest this update: Sun 07 Sep 2025 08:15:49 +0000 Manifest next update: Wed 10 Sep 2025 14:11:49 +0000 Files and hashes: 1: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: zP2/xMyoKaZs6fiqSMcfKqk4R7UXbhBp7PEh6lL8fdI=) 2: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: 9EURxrNrlf7XNa4qBRBWmt6iAklp2ZexfAnaMIzL06c=) 3: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl (hash: bJ658Iblt0Zj1zk5akjD86g+PlP8ef3TvmM2kSEdCEc=) 4: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: pdPZa1hqVrYPWZYkmw/3L6oJ44J+aMpGpranP7CjD4s=) 5: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: A0Wh8osPNi8zZWQ36AcLaUjDaG9uaq4xPw9QuzcvUH4=) 6: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: VMR23vWqztgF5Q/iMRDhZJFW6rkTGEBU0HHkzSi1LgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c3:cc:b9:a8:ae:a6:84:76:1d:46:aa:35:38:68:9c:8d:5d:22:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Validity Not Before: Sep 7 08:15:49 2025 GMT Not After : Sep 10 14:11:49 2025 GMT Subject: CN=0755F6BE8E1BAAEF3F0B2FC9D830BBD87303F07B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:26:ef:b4:aa:f7:6a:6a:e6:08:68:7b:84:2c: d5:64:43:33:3a:ac:75:2a:5e:29:27:a6:06:26:d1: 6a:c6:81:d7:67:5d:79:00:8d:09:fe:f7:4e:fb:f1: cc:86:db:37:c0:3e:96:90:3a:7e:88:5f:e2:c0:c3: a4:53:8b:21:e8:f1:c4:55:fd:90:f0:d4:07:f4:c1: 4a:22:44:c5:aa:80:76:d6:66:02:b1:5a:63:d2:65: 34:bd:0a:2e:e7:32:82:5d:85:d0:5f:19:ba:51:26: e9:f5:e8:46:41:8a:9b:77:ca:e4:6d:49:ff:44:10: 14:32:31:06:41:81:04:6a:c2:14:00:02:94:06:bd: d0:bc:1f:14:bb:43:34:35:e4:4d:75:5b:a8:81:c4: 26:1a:04:86:98:26:5e:46:c4:17:79:d1:78:5c:f5: fb:c6:28:56:45:ab:53:d3:9d:51:94:6e:a3:79:db: 5b:6e:97:0d:0b:8a:75:a3:12:b1:17:6c:89:4a:40: 04:1e:6a:83:5e:fd:fb:ec:02:a8:11:81:15:86:b3: eb:a9:a3:39:5b:c8:b0:27:10:b8:80:21:6a:ad:e0: fa:5f:97:25:98:e5:4a:e9:5e:f2:39:c6:82:f0:fa: 90:dd:59:72:28:ef:16:81:47:61:f6:4c:ff:70:81: 21:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:55:F6:BE:8E:1B:AA:EF:3F:0B:2F:C9:D8:30:BB:D8:73:03:F0:7B X509v3 Authority Key Identifier: keyid:97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f3:cb:7b:8b:a0:50:6b:da:86:73:13:bd:79:95:6d:80:fe: 1e:aa:1a:48:16:fe:ff:34:dc:01:ba:f2:94:32:2a:27:17:2a: 8b:90:f6:bf:53:12:bc:e8:98:e7:a7:e6:f8:41:b5:f4:cd:01: d6:b6:4c:58:2a:b4:a5:92:36:9d:81:93:fb:b3:22:fc:d1:42: b2:0a:0f:ec:13:63:f7:4e:e9:22:c6:a6:35:e1:9c:a1:84:db: 0c:bc:99:0f:b3:14:c9:81:91:7c:40:ee:ba:c6:83:b8:93:c4: d8:53:ec:c9:dc:2b:2c:73:db:ad:84:45:33:14:39:a7:04:f3: 4f:a5:ef:43:36:96:ec:c2:2c:41:4a:4f:75:27:bb:aa:30:89: b2:eb:11:70:f6:1a:fc:e5:76:1a:75:2c:21:a6:19:d0:0e:8e: 08:dc:4a:0d:a3:c8:7b:38:a2:ce:10:10:76:17:f3:41:2b:ee: d7:08:57:e5:d1:b8:51:9d:36:46:e0:27:67:21:ce:cb:a7:75: b3:3b:3b:b8:90:59:50:0f:31:3a:d4:b5:20:0f:ec:de:7e:cc: 40:e3:0a:be:07:fe:e6:c8:b2:d9:ef:02:de:a2:74:4b:bf:d4: 43:cd:87:df:56:d9:db:b1:c4:96:d1:b9:cb:43:55:49:7b:41: d6:0b:3e:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMPMuaiupoR2HUaqNThonI1dItcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdC NDlENEVGRTAeFw0yNTA5MDcwODE1NDlaFw0yNTA5MTAxNDExNDlaMDMxMTAvBgNV BAMTKDA3NTVGNkJFOEUxQkFBRUYzRjBCMkZDOUQ4MzBCQkQ4NzMwM0YwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWJu+0qvdqauYIaHuELNVkQzM6 rHUqXiknpgYm0WrGgddnXXkAjQn+90778cyG2zfAPpaQOn6IX+LAw6RTiyHo8cRV /ZDw1Af0wUoiRMWqgHbWZgKxWmPSZTS9Ci7nMoJdhdBfGbpRJun16EZBipt3yuRt Sf9EEBQyMQZBgQRqwhQAApQGvdC8HxS7QzQ15E11W6iBxCYaBIaYJl5GxBd50Xhc 9fvGKFZFq1PTnVGUbqN521tulw0LinWjErEXbIlKQAQeaoNe/fvsAqgRgRWGs+up ozlbyLAnELiAIWqt4PpflyWY5UrpXvI5xoLw+pDdWXIo7xaBR2H2TP9wgSG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB1X2vo4bqu8/Cy/J2DC72HMD8HswHwYDVR0j BBgwFoAUl5syk16/otptywp52zl/17SdTv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGU3MTQzNy04NWZjLTQ3YWYtOTY4Ny05MDNiYWZiMmMxNjEvMC85NzlCMzI5MzVF QkZBMkRBNkRDQjBBNzlEQjM5N0ZEN0I0OUQ0RUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdCNDlE NEVGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdG RDdCNDlENEVGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrzy3uLoFBr2oZzE715lW2A/h6qGkgW/v80 3AG68pQyKicXKouQ9r9TErzomOen5vhBtfTNAda2TFgqtKWSNp2Bk/uzIvzRQrIK D+wTY/dO6SLGpjXhnKGE2wy8mQ+zFMmBkXxA7rrGg7iTxNhT7MncKyxz262ERTMU OacE80+l70M2luzCLEFKT3Unu6owibLrEXD2Gvzldhp1LCGmGdAOjgjcSg2jyHs4 os4QEHYX80Er7tcIV+XRuFGdNkbgJ2chzsundbM7O7iQWVAPMTrUtSAP7N5+zEDj Cr4H/ubIstnvAt6idEu/1EPNh99W2duxxJbRuctDVUl7QdYLPiE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:12 2025 by rpki-client