$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: yR7FEVA7xmY3xCyydednBlOP7CRxAgETCaQMnAhVqPU= Subject key identifier: E0:34:73:82:AF:59:4E:73:DC:0C:4F:C2:E3:83:E6:64:42:AC:DA:A5 Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 2EA63B5BDE5D4F239AC29F4341D94FC3BFCB030A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 0350 Signing time: Sun 29 Jun 2025 20:42:23 +0000 Manifest this update: Sun 29 Jun 2025 20:37:23 +0000 Manifest next update: Wed 02 Jul 2025 23:36:23 +0000 Files and hashes: 1: 3130332e3135382e35392e302f32342d3234203d3e203137393935.roa (hash: 7iBHgGYKAoLVfSVzVrtATYUKOYKKHRSz7KTZsrE7P78=) 2: 3130332e3135382e35382e302f32342d3234203d3e203137393935.roa (hash: nEX5obMx7c1O0Mt16rHdamjU/vyDUmneghPgPs1dpHY=) 3: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: xR76WW/n5tVe43p1kYHmHFy0HGOhLkDUKABv+QryTCw=) 4: 3130332e3135382e35382e302f32332d3233203d3e203137393935.roa (hash: +8egnZEvXKWcwk+V4p3Tes+84K8cdSV9e+Lhzfpak6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 23:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a6:3b:5b:de:5d:4f:23:9a:c2:9f:43:41:d9:4f:c3:bf:cb:03:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: Jun 29 20:37:23 2025 GMT Not After : Jul 2 23:36:23 2025 GMT Subject: CN=E0347382AF594E73DC0C4FC2E383E66442ACDAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:b0:31:f7:cb:e6:50:0b:d9:3a:b6:cd:d8: de:53:cf:a7:f6:5b:f3:05:ff:bb:1a:4d:7b:9d:41: e7:97:e1:1a:a4:f3:d5:1d:a3:16:5e:5e:2f:24:aa: ff:21:16:69:73:31:de:dc:cf:69:44:ac:56:84:c1: ce:87:49:5e:b7:ff:40:53:96:1a:3d:c3:bf:c1:6c: dc:d6:b0:e1:44:93:a2:24:55:6a:57:25:a6:81:f5: 65:ae:3a:cb:d3:1c:ce:ef:bd:c7:a3:04:38:8f:5a: a2:f2:d2:78:ad:7a:63:2c:6a:99:80:f3:9f:ec:52: 3a:10:d6:f8:31:e7:fb:ea:8e:de:60:31:f9:71:09: c1:22:39:c8:59:02:99:5e:e9:18:4c:aa:a0:60:5a: 17:84:ab:48:2b:18:fe:02:c1:3b:76:ca:d6:70:f9: aa:a1:82:03:4e:e5:cb:db:99:f6:64:44:f2:3e:0d: 76:0b:ea:4a:3a:b4:0b:a1:17:0f:27:a2:98:c4:4f: 7d:42:41:63:1e:1b:df:25:ed:65:8c:66:45:6a:5a: e5:9b:d8:32:da:12:fc:04:13:cf:59:78:df:11:53: ea:50:a0:14:15:96:69:fe:d4:da:ce:b2:62:62:54: 74:c4:9f:86:3d:47:4b:06:18:0a:e9:1d:3d:e1:84: 42:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:34:73:82:AF:59:4E:73:DC:0C:4F:C2:E3:83:E6:64:42:AC:DA:A5 X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c8:3a:8a:c8:5b:8b:cc:3b:17:34:31:8d:30:3f:d7:3a:43: a0:56:84:fc:df:92:15:39:93:b1:89:01:a3:ce:32:76:2b:b3: 4b:36:52:31:1b:0d:51:72:b4:f7:4e:14:47:80:ba:2e:0a:7e: ed:2f:ea:11:c6:8a:c9:1c:1e:8d:14:36:7a:70:b9:e0:0e:66: 77:fc:94:62:49:37:22:7f:81:fb:06:b3:b0:6e:ca:92:18:f1: 72:6b:10:9d:98:ff:d1:c7:08:c0:f6:fc:6e:1f:24:fc:15:10: 91:7f:da:82:37:f4:8a:4b:53:9a:e7:26:50:28:52:8c:a7:9f: 16:49:0e:4f:d1:a8:5d:84:fc:6b:3b:27:f5:8e:75:62:22:81: fb:75:51:35:e3:9a:a0:38:bd:29:20:17:b7:45:1b:ad:0c:46: 8f:81:98:05:aa:c8:b9:0e:df:59:31:40:7b:8a:8d:8c:97:d9: d7:2b:00:4c:24:88:4e:0b:c0:2d:f5:68:02:37:db:70:33:90: ca:ec:df:d6:09:63:5e:19:28:cc:3f:ef:c1:60:2e:44:26:98: 05:d2:02:f6:32:a8:9f:a8:ae:75:da:cc:32:5f:7c:c8:a3:81: 74:02:34:b4:a7:7c:01:fb:c6:37:4e:b6:c6:f1:93:72:5c:42: 47:60:81:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULqY7W95dTyOawp9DQdlPw7/LAwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNTA2MjkyMDM3MjNaFw0yNTA3MDIyMzM2MjNaMDMxMTAvBgNV BAMTKEUwMzQ3MzgyQUY1OTRFNzNEQzBDNEZDMkUzODNFNjY0NDJBQ0RBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5drAx98vmUAvZOrbN2N5Tz6f2 W/MF/7saTXudQeeX4Rqk89UdoxZeXi8kqv8hFmlzMd7cz2lErFaEwc6HSV63/0BT lho9w7/BbNzWsOFEk6IkVWpXJaaB9WWuOsvTHM7vvcejBDiPWqLy0nitemMsapmA 85/sUjoQ1vgx5/vqjt5gMflxCcEiOchZAple6RhMqqBgWheEq0grGP4CwTt2ytZw +aqhggNO5cvbmfZkRPI+DXYL6ko6tAuhFw8nopjET31CQWMeG98l7WWMZkVqWuWb 2DLaEvwEE89ZeN8RU+pQoBQVlmn+1NrOsmJiVHTEn4Y9R0sGGArpHT3hhEITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4DRzgq9ZTnPcDE/C44PmZEKs2qUwHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHIOorIW4vMOxc0MY0wP9c6Q6BWhPzfkhU5 k7GJAaPOMnYrs0s2UjEbDVFytPdOFEeAui4Kfu0v6hHGiskcHo0UNnpwueAOZnf8 lGJJNyJ/gfsGs7BuypIY8XJrEJ2Y/9HHCMD2/G4fJPwVEJF/2oI39IpLU5rnJlAo UoynnxZJDk/RqF2E/Gs7J/WOdWIigft1UTXjmqA4vSkgF7dFG60MRo+BmAWqyLkO 31kxQHuKjYyX2dcrAEwkiE4LwC31aAI323AzkMrs39YJY14ZKMw/78FgLkQmmAXS AvYyqJ+ornXazDJffMijgXQCNLSnfAH7xjdOtsbxk3JcQkdggeI= -----END CERTIFICATE-----Generated at Mon Jun 30 07:19:02 2025 by rpki-client