$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: v7A72jm3mEhCgGBUKTPgQwRfE6vxtkvr8BBGD28B0lw= Subject key identifier: 65:11:F2:85:5E:73:8A:AB:1D:21:41:87:48:6A:99:9D:83:F4:33:53 Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 76A374AD20E5ED6BE8F5BB3CDFBF44D3FE7BEEF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 0456 Signing time: Sun 19 Oct 2025 16:41:18 +0000 Manifest this update: Sun 19 Oct 2025 16:36:18 +0000 Manifest next update: Thu 23 Oct 2025 02:14:18 +0000 Files and hashes: 1: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: RilepfAb8NzdMIOiXkSh/MZbwUqkFlJCvkYnkbU297Y=) 2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: Y0HTNIxciTP1JYEk53UJRfKBr5bisZIo+A6n6oiY4Hg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a3:74:ad:20:e5:ed:6b:e8:f5:bb:3c:df:bf:44:d3:fe:7b:ee:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Oct 19 16:36:18 2025 GMT Not After : Oct 23 02:14:18 2025 GMT Subject: CN=6511F2855E738AAB1D214187486A999D83F43353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d0:2b:80:f5:59:b1:ef:1f:08:f2:20:3a:68: 29:6d:f3:7f:40:7b:d0:f9:66:b6:51:2e:d4:3c:d3: e4:37:21:0b:ce:1e:f2:d6:df:9c:e5:2b:63:9e:f1: a8:50:ab:61:f9:e0:dd:4c:ec:0f:6b:cf:b0:7f:a8: 8f:53:e6:6a:25:3f:ef:f6:5a:fe:d5:82:94:76:21: 3d:ad:1d:26:54:24:ab:0c:d5:d2:cd:f3:16:a5:16: 41:5a:c8:6f:92:47:18:0f:4a:29:f9:7a:1b:9c:8d: b5:7a:4c:55:e3:e4:c9:1e:e9:1c:49:a3:34:be:da: 4b:e4:8b:cb:9e:21:95:15:a4:45:42:47:a9:b9:62: 90:00:60:e0:c0:64:4b:09:0d:98:f5:70:8c:0a:37: 61:e9:11:e2:ea:f0:1d:80:f1:29:2a:14:aa:cf:c9: 60:b5:ee:cc:35:78:45:f7:6d:3e:2b:b1:d5:45:db: 46:26:b1:7a:06:94:27:4c:d1:43:22:b1:b8:ac:18: f0:2e:aa:d7:b4:49:36:6c:be:35:4c:53:9b:be:e8: 3d:8d:57:ab:b7:7c:b6:d2:4f:99:7a:cd:04:00:b1: 0f:ef:14:be:5a:ff:85:cf:61:fd:e1:b0:62:d6:a5: 2d:a8:5f:90:cf:5a:6b:27:e5:7d:ea:22:99:b2:62: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:11:F2:85:5E:73:8A:AB:1D:21:41:87:48:6A:99:9D:83:F4:33:53 X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f4:12:fd:91:c0:bf:1c:1f:1f:53:11:d7:1c:c4:06:e1:b9: 7c:24:17:30:8a:38:46:66:51:80:8a:bf:d1:3a:6e:b5:c8:87: dc:3d:3a:d6:53:4a:3b:48:c8:39:ce:8b:dc:41:38:9c:cb:ca: d5:f3:e2:d4:08:c2:b4:b9:2d:60:63:b9:49:01:50:ba:44:c3: ad:6e:e9:cc:ef:01:fe:4d:29:33:98:0e:95:25:85:a0:66:b4: 65:c9:4f:bc:d2:bf:7c:9c:c3:8a:e4:1b:36:ff:28:8f:c1:b1: ae:30:de:18:b1:23:0d:07:91:ab:50:0c:66:45:b1:8e:0d:6c: 79:89:b8:db:6b:de:fd:c6:c6:c1:51:35:e7:79:9e:17:3e:98: 8a:c6:61:d1:c3:a3:0f:91:fd:6d:c0:51:9f:73:50:4a:13:72: a3:eb:b8:c7:f4:fb:00:3f:13:d8:e7:fb:82:e8:c9:c4:77:10: f3:de:32:62:60:49:63:5e:f7:10:4c:7b:5e:af:70:14:f6:1b: 04:32:78:99:ef:65:cf:10:69:81:42:bf:e1:e9:1d:77:5a:77: 37:8d:8e:d0:4d:ae:e3:4f:87:e9:98:14:b1:40:7e:ea:ed:7e: 8d:48:46:2e:a2:80:0a:9e:b0:42:d2:2e:c6:5f:26:b6:9d:c7: 60:b8:e5:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqN0rSDl7Wvo9bs8379E0/577vQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTEwMTkxNjM2MThaFw0yNTEwMjMwMjE0MThaMDMxMTAvBgNV BAMTKDY1MTFGMjg1NUU3MzhBQUIxRDIxNDE4NzQ4NkE5OTlEODNGNDMzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0CuA9Vmx7x8I8iA6aClt839A e9D5ZrZRLtQ80+Q3IQvOHvLW35zlK2Oe8ahQq2H54N1M7A9rz7B/qI9T5molP+/2 Wv7VgpR2IT2tHSZUJKsM1dLN8xalFkFayG+SRxgPSin5ehucjbV6TFXj5Mke6RxJ ozS+2kvki8ueIZUVpEVCR6m5YpAAYODAZEsJDZj1cIwKN2HpEeLq8B2A8SkqFKrP yWC17sw1eEX3bT4rsdVF20YmsXoGlCdM0UMisbisGPAuqte0STZsvjVMU5u+6D2N V6u3fLbST5l6zQQAsQ/vFL5a/4XPYf3hsGLWpS2oX5DPWmsn5X3qIpmyYr6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZRHyhV5ziqsdIUGHSGqZnYP0M1MwHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAr0Ev2RwL8cHx9TEdccxAbhuXwkFzCKOEZm UYCKv9E6brXIh9w9OtZTSjtIyDnOi9xBOJzLytXz4tQIwrS5LWBjuUkBULpEw61u 6czvAf5NKTOYDpUlhaBmtGXJT7zSv3ycw4rkGzb/KI/Bsa4w3hixIw0HkatQDGZF sY4NbHmJuNtr3v3GxsFRNed5nhc+mIrGYdHDow+R/W3AUZ9zUEoTcqPruMf0+wA/ E9jn+4LoycR3EPPeMmJgSWNe9xBMe16vcBT2GwQyeJnvZc8QaYFCv+HpHXdadzeN jtBNruNPh+mYFLFAfurtfo1IRi6igAqesELSLsZfJradx2C45Uk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:55 2025 by rpki-client