$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: c5ge8TUFxucdEPTNYpb0p775IjxsI1I/nVWYAdnDnms= Subject key identifier: 7D:DF:58:AF:07:C6:48:44:C1:9C:9A:2F:4E:E0:6B:28:CA:41:86:11 Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 22B65E223337BA15E1313E8B463543C66B1D10E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 0424 Signing time: Sun 29 Jun 2025 02:21:18 +0000 Manifest this update: Sun 29 Jun 2025 02:16:18 +0000 Manifest next update: Wed 02 Jul 2025 11:10:18 +0000 Files and hashes: 1: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: WW7W6Yj2G/47WPhY9FaJiFfRCgajmearKgt2Y7lE/bA=) 2: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: xRlBwn/ylbNqDQnxNpok/c+r+TBfmcLkWzfq2kAdFqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b6:5e:22:33:37:ba:15:e1:31:3e:8b:46:35:43:c6:6b:1d:10:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Jun 29 02:16:18 2025 GMT Not After : Jul 2 11:10:18 2025 GMT Subject: CN=7DDF58AF07C64844C19C9A2F4EE06B28CA418611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:63:2d:fd:be:bf:db:d5:88:c7:eb:c0:a9:f8: 9a:28:1b:42:32:0f:9d:ed:ca:72:1a:f3:5c:39:8b: a3:b6:a8:93:2f:a0:c5:b2:a6:84:e7:6f:14:e5:7e: 8c:4a:16:97:00:4c:f4:1e:f6:98:90:c4:46:6e:ec: 5f:85:c5:97:74:db:37:4d:79:dd:b6:b3:28:a9:18: d9:87:76:19:c9:9e:69:60:09:b9:b1:1e:f1:37:d5: ba:28:41:45:db:18:8b:5a:bc:80:f5:a5:aa:d9:4e: c8:c3:7c:b2:64:bf:86:e4:0f:60:4d:51:d0:ef:a1: 4f:ab:0a:cb:d3:19:e8:26:d9:19:80:e8:e2:79:b3: ab:5b:e9:da:c7:35:20:42:84:6f:a8:25:3c:26:51: 04:59:28:f5:71:b5:8e:e6:b4:f8:2f:f1:d2:cb:77: 52:13:55:47:8a:58:84:95:c6:05:7a:a2:17:c3:4b: 44:cc:de:98:ec:69:6f:d1:6c:1b:33:39:36:71:9f: f9:6c:0a:43:7b:e9:97:29:e2:58:99:cd:72:1f:ae: 47:50:2c:e9:7d:fc:c2:41:a6:f0:1c:c1:a0:fc:54: 76:60:cb:9d:99:b0:cd:d6:c8:66:b6:28:a1:7e:50: 07:eb:9d:67:ba:84:10:78:c2:92:68:76:ba:f8:43: f5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DF:58:AF:07:C6:48:44:C1:9C:9A:2F:4E:E0:6B:28:CA:41:86:11 X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b3:43:1e:96:3e:c6:45:31:48:4d:d7:af:11:4f:a9:43:89: 01:3e:90:b9:b1:8b:cf:df:e0:1f:dc:f2:02:98:2d:56:3a:02: 55:a5:0c:c0:f7:7f:68:61:21:f9:e0:74:1d:5b:e4:f8:80:17: fc:84:fb:7e:9d:d5:50:02:fd:19:9e:89:98:99:ea:96:5f:7d: cb:de:b9:f3:49:7f:c7:30:3f:c0:ec:ea:e3:cc:5e:cc:98:45: 36:38:32:71:1a:81:97:d6:0a:2c:b0:31:e1:0d:64:b1:31:1b: 92:0f:e2:2d:49:93:8d:65:00:9e:ab:d4:61:4f:a7:18:f5:75: 28:cf:c3:2b:9d:ae:e9:6e:4b:68:50:0b:f0:25:9b:26:1c:c3: 7c:aa:aa:31:77:8d:29:fa:7e:a4:69:87:10:78:f1:83:cb:46: 29:64:f8:de:43:81:af:6a:2e:ec:52:a8:4e:76:e8:67:df:06: 5a:c5:8b:11:c0:49:9f:34:33:e0:9c:cf:90:22:8a:ff:f1:be: 3a:5b:f4:8a:e3:da:86:90:45:cd:25:48:0c:52:ae:8c:b3:f0: df:c8:9a:19:1f:bc:2b:b7:3b:b1:92:d3:d0:85:69:2f:34:98: d5:02:3c:dc:5b:c1:5a:72:41:f0:3d:2e:49:72:f4:9e:c2:d3: 61:aa:5f:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIrZeIjM3uhXhMT6LRjVDxmsdEOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTA2MjkwMjE2MThaFw0yNTA3MDIxMTEwMThaMDMxMTAvBgNV BAMTKDdEREY1OEFGMDdDNjQ4NDRDMTlDOUEyRjRFRTA2QjI4Q0E0MTg2MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuYy39vr/b1YjH68Cp+JooG0Iy D53tynIa81w5i6O2qJMvoMWypoTnbxTlfoxKFpcATPQe9piQxEZu7F+FxZd02zdN ed22syipGNmHdhnJnmlgCbmxHvE31booQUXbGItavID1parZTsjDfLJkv4bkD2BN UdDvoU+rCsvTGegm2RmA6OJ5s6tb6drHNSBChG+oJTwmUQRZKPVxtY7mtPgv8dLL d1ITVUeKWISVxgV6ohfDS0TM3pjsaW/RbBszOTZxn/lsCkN76Zcp4liZzXIfrkdQ LOl9/MJBpvAcwaD8VHZgy52ZsM3WyGa2KKF+UAfrnWe6hBB4wpJodrr4Q/XRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfd9YrwfGSETBnJovTuBrKMpBhhEwHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABezQx6WPsZFMUhN168RT6lDiQE+kLmxi8/f 4B/c8gKYLVY6AlWlDMD3f2hhIfngdB1b5PiAF/yE+36d1VAC/RmeiZiZ6pZffcve ufNJf8cwP8Ds6uPMXsyYRTY4MnEagZfWCiywMeENZLExG5IP4i1Jk41lAJ6r1GFP pxj1dSjPwyudruluS2hQC/AlmyYcw3yqqjF3jSn6fqRphxB48YPLRilk+N5Dga9q LuxSqE526GffBlrFixHASZ80M+Ccz5Aiiv/xvjpb9Irj2oaQRc0lSAxSroyz8N/I mhkfvCu3O7GS09CFaS80mNUCPNxbwVpyQfA9Lkly9J7C02GqX+Y= -----END CERTIFICATE-----Generated at Sun Jun 29 20:03:52 2025 by rpki-client