$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: 6UE8ilycVI/5VHBPLG+/hC0cog3iv31lGHGNenvV/+U= Subject key identifier: 56:B5:34:B4:70:D7:9B:0D:EC:1C:3D:B6:44:3A:3C:FF:0A:AE:93:CA Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 238A3399D8228341598B9A3CE0476368DB45CB65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 043C Signing time: Sat 23 Aug 2025 10:21:27 +0000 Manifest this update: Sat 23 Aug 2025 10:16:27 +0000 Manifest next update: Tue 26 Aug 2025 14:02:27 +0000 Files and hashes: 1: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: +hiI1KJQrvSosPrP+FZjZPNSQdgANYVAgoQ1dqaSro4=) 2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: WW7W6Yj2G/47WPhY9FaJiFfRCgajmearKgt2Y7lE/bA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:8a:33:99:d8:22:83:41:59:8b:9a:3c:e0:47:63:68:db:45:cb:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Aug 23 10:16:27 2025 GMT Not After : Aug 26 14:02:27 2025 GMT Subject: CN=56B534B470D79B0DEC1C3DB6443A3CFF0AAE93CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:98:87:38:34:4f:06:1e:de:24:08:54:19: 57:85:00:54:3b:e2:6b:84:8e:52:5e:eb:25:df:70: 24:b3:d0:a0:7d:6b:72:bf:6d:94:9d:03:0a:f0:15: f8:1a:31:e6:41:ea:90:44:48:03:0d:aa:31:3e:0d: eb:f2:cb:d1:29:18:ab:13:3b:ea:a8:ed:63:b2:4b: e9:76:cd:51:1c:a0:07:ba:4a:74:54:17:2f:dc:b0: 13:16:7d:7a:7d:32:2f:b4:5a:3c:55:d2:d0:52:c1: 1f:fe:1a:bd:c5:f3:91:c3:8f:39:81:34:ac:bf:a1: 78:45:0c:fb:57:56:7d:a3:15:8b:2e:2c:c1:f6:44: cf:b7:56:ad:87:a8:c1:d6:c2:61:8c:3e:aa:43:08: 41:b8:d6:f4:aa:ed:00:df:0a:c8:b5:71:a3:ce:22: c1:10:d3:c1:11:b5:3a:a3:af:5c:18:bd:00:3c:a9: 7d:3b:35:ca:a9:db:53:17:8e:84:cf:e6:1c:8a:18: 4d:64:8d:3e:22:17:68:56:75:5b:5b:62:f5:da:77: d3:52:f3:ae:aa:78:f9:90:76:8e:44:4c:1a:68:c6: b2:c4:d8:06:00:8c:09:5a:e3:10:58:e0:0e:7e:f7: 1b:14:ae:10:49:f4:3c:16:22:8d:0c:be:4c:07:b5: 8a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B5:34:B4:70:D7:9B:0D:EC:1C:3D:B6:44:3A:3C:FF:0A:AE:93:CA X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:9e:a5:4f:e9:10:36:7a:0b:72:2b:40:1e:be:d3:7e:fa:51: e7:04:ad:d9:81:b2:f1:51:f8:fd:1f:63:72:2e:6c:ed:92:01: 59:e8:7f:e4:8c:14:5e:04:b8:07:dc:4c:e5:0e:c2:3c:e6:7b: 39:f7:7d:08:bf:f8:ef:6f:e4:36:ac:a8:ad:19:bb:0f:76:ec: 01:5c:62:e3:82:fe:7a:f2:c6:f7:05:79:70:42:1f:1a:fc:b1: 13:7c:48:69:df:9b:d7:47:10:8e:a0:19:65:94:30:72:0d:7e: ee:33:ba:0a:0e:25:64:eb:e4:af:84:b7:a2:d9:c8:37:88:de: 87:54:34:af:7e:aa:d9:d6:3e:1a:9e:56:e3:14:66:bd:09:89: 19:a8:f4:e5:60:fb:61:2e:bd:5e:30:22:19:91:a4:92:57:b0: 41:a0:48:29:02:89:3a:95:6e:8c:54:21:89:0f:7a:fa:46:25: 39:68:e4:34:6d:23:64:d6:bf:77:ef:e2:89:66:65:ea:82:be: f0:26:a3:4a:e9:7a:93:29:a9:a6:b2:ec:b7:1c:5e:e1:8a:6c: 3b:8c:7b:9e:55:17:61:d8:a1:20:e3:94:4d:a2:9e:75:ff:59: b0:87:c8:e6:28:93:d7:5b:74:78:40:8b:a1:de:a4:b9:1b:5b: b2:17:11:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4ozmdgig0FZi5o84EdjaNtFy2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTA4MjMxMDE2MjdaFw0yNTA4MjYxNDAyMjdaMDMxMTAvBgNV BAMTKDU2QjUzNEI0NzBENzlCMERFQzFDM0RCNjQ0M0EzQ0ZGMEFBRTkzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqvpiHODRPBh7eJAhUGVeFAFQ7 4muEjlJe6yXfcCSz0KB9a3K/bZSdAwrwFfgaMeZB6pBESAMNqjE+Devyy9EpGKsT O+qo7WOyS+l2zVEcoAe6SnRUFy/csBMWfXp9Mi+0WjxV0tBSwR/+Gr3F85HDjzmB NKy/oXhFDPtXVn2jFYsuLMH2RM+3Vq2HqMHWwmGMPqpDCEG41vSq7QDfCsi1caPO IsEQ08ERtTqjr1wYvQA8qX07Ncqp21MXjoTP5hyKGE1kjT4iF2hWdVtbYvXad9NS 866qePmQdo5ETBpoxrLE2AYAjAla4xBY4A5+9xsUrhBJ9DwWIo0MvkwHtYr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVrU0tHDXmw3sHD22RDo8/wquk8owHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKepU/pEDZ6C3IrQB6+0376UecErdmBsvFR +P0fY3IubO2SAVnof+SMFF4EuAfcTOUOwjzmezn3fQi/+O9v5DasqK0Zuw927AFc YuOC/nryxvcFeXBCHxr8sRN8SGnfm9dHEI6gGWWUMHINfu4zugoOJWTr5K+Et6LZ yDeI3odUNK9+qtnWPhqeVuMUZr0JiRmo9OVg+2EuvV4wIhmRpJJXsEGgSCkCiTqV boxUIYkPevpGJTlo5DRtI2TWv3fv4olmZeqCvvAmo0rpepMpqaay7LccXuGKbDuM e55VF2HYoSDjlE2innX/WbCHyOYok9dbdHhAi6HepLkbW7IXEXk= -----END CERTIFICATE-----Generated at Sat Aug 23 16:10:10 2025 by rpki-client