$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: ycUXhO8jo/i/yD+qNdNNR/NJxGQISZggO2VdYGKRFGc= Subject key identifier: DA:44:5C:4B:17:8A:B4:D8:D1:2A:7A:3E:FA:51:E5:88:42:35:08:EC Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 4B9DC542B3D6894DB09C0BAEF366BCFD5AF91E51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 036A Signing time: Thu 21 Aug 2025 11:52:17 +0000 Manifest this update: Thu 21 Aug 2025 11:47:17 +0000 Manifest next update: Sun 24 Aug 2025 16:04:17 +0000 Files and hashes: 1: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: 6WaN7onuSlFvKfDuB2UAqo3PNMPx9F6onDHp6sQo30o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9d:c5:42:b3:d6:89:4d:b0:9c:0b:ae:f3:66:bc:fd:5a:f9:1e:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: Aug 21 11:47:17 2025 GMT Not After : Aug 24 16:04:17 2025 GMT Subject: CN=DA445C4B178AB4D8D12A7A3EFA51E588423508EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:6f:28:2b:77:b3:8f:50:e4:d1:00:96:dc: 41:83:0a:f7:bf:53:54:fc:02:fb:c0:e1:7e:2c:a1: 45:8e:05:b3:b2:05:c9:37:10:18:7a:9d:b5:1a:f8: 78:2d:29:08:47:dc:e9:e4:d6:0f:c9:30:ad:fe:c5: ec:c4:5b:67:df:ae:5d:cf:32:7d:9a:4f:84:fb:aa: a3:d3:a2:b1:e9:00:29:90:90:2b:75:5c:14:2a:ad: 51:51:80:e9:b4:90:fd:7f:15:5e:f6:3d:33:52:f7: bc:37:de:02:b1:ae:5b:70:67:da:36:85:e0:37:c6: 41:b9:b7:84:b2:e9:26:1b:ce:1e:7d:d3:56:78:19: 36:0f:b4:11:af:cd:cd:a6:27:a0:08:33:6f:28:d3: 1d:1a:32:78:e6:c5:d3:2d:88:2e:6d:e8:2b:f7:01: 67:bc:06:8b:c7:79:3a:37:46:88:f1:ea:67:f8:c7: 86:c2:c1:70:13:f2:5b:37:ea:36:1b:0d:08:9f:8b: 71:a5:7d:b8:09:07:32:2f:af:dd:c2:d5:42:c7:06: 5f:09:78:13:6b:4f:40:27:75:3c:66:1a:a8:bc:dd: 6b:c7:97:7f:52:0a:5b:a2:1a:b4:ff:19:bb:15:8a: 68:51:3b:83:d3:76:e6:ea:0b:49:2d:70:10:d0:3c: 9f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:44:5C:4B:17:8A:B4:D8:D1:2A:7A:3E:FA:51:E5:88:42:35:08:EC X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:20:84:f5:cc:6c:06:dc:e0:d4:f4:14:e9:7a:48:78:43:fe: 60:90:34:9e:15:6b:fb:91:23:3d:4c:54:23:2b:56:98:8b:9b: 1a:71:50:24:12:2a:f9:77:b4:08:86:9c:4e:49:17:19:fb:ae: 65:ca:f6:71:04:a5:0c:42:9b:6e:1c:f0:be:76:2b:35:fc:88: 83:5b:78:c0:ed:d4:7e:42:68:b0:3e:66:dc:d2:30:aa:f2:57: 75:0c:82:3c:40:3a:8f:cd:56:91:2c:95:dd:6e:73:d6:8f:0b: af:8a:ae:ca:47:05:ba:ef:c4:99:c9:3b:78:fe:0f:6e:43:e6: 45:81:b6:fe:21:86:7b:f1:ca:28:cc:a8:a8:4b:0e:c4:1f:b5: 58:df:b1:4f:c3:c8:ec:d3:db:d0:90:e4:0d:35:e5:72:bf:af: c3:e0:64:fd:65:13:59:a4:df:0b:21:dd:81:70:d7:68:21:70: 34:1e:e8:08:e9:f1:c6:c5:ed:0d:73:15:f0:44:04:ab:16:52: b6:d4:2e:01:e5:37:73:91:d5:9b:bf:ea:86:b1:bf:6f:5c:9b: c0:ff:21:2f:2c:bf:ff:aa:ad:9a:e4:a9:5f:ee:97:cd:c4:f6: ca:09:2b:8a:42:8a:ca:3f:3b:cc:73:f5:e9:5a:f5:e0:e7:39: 2f:c4:57:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS53FQrPWiU2wnAuu82a8/Vr5HlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNTA4MjExMTQ3MTdaFw0yNTA4MjQxNjA0MTdaMDMxMTAvBgNV BAMTKERBNDQ1QzRCMTc4QUI0RDhEMTJBN0EzRUZBNTFFNTg4NDIzNTA4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWlW8oK3ezj1Dk0QCW3EGDCve/ U1T8AvvA4X4soUWOBbOyBck3EBh6nbUa+HgtKQhH3Onk1g/JMK3+xezEW2ffrl3P Mn2aT4T7qqPTorHpACmQkCt1XBQqrVFRgOm0kP1/FV72PTNS97w33gKxrltwZ9o2 heA3xkG5t4Sy6SYbzh5901Z4GTYPtBGvzc2mJ6AIM28o0x0aMnjmxdMtiC5t6Cv3 AWe8BovHeTo3Rojx6mf4x4bCwXAT8ls36jYbDQifi3GlfbgJBzIvr93C1ULHBl8J eBNrT0AndTxmGqi83WvHl39SCluiGrT/GbsVimhRO4PTdubqC0ktcBDQPJ+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2kRcSxeKtNjRKno++lHliEI1COwwHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsghPXMbAbc4NT0FOl6SHhD/mCQNJ4Va/uR Iz1MVCMrVpiLmxpxUCQSKvl3tAiGnE5JFxn7rmXK9nEEpQxCm24c8L52KzX8iINb eMDt1H5CaLA+ZtzSMKryV3UMgjxAOo/NVpEsld1uc9aPC6+KrspHBbrvxJnJO3j+ D25D5kWBtv4hhnvxyijMqKhLDsQftVjfsU/DyOzT29CQ5A015XK/r8PgZP1lE1mk 3wsh3YFw12ghcDQe6Ajp8cbF7Q1zFfBEBKsWUrbULgHlN3OR1Zu/6oaxv29cm8D/ IS8sv/+qrZrkqV/ul83E9soJK4pCiso/O8xz9ela9eDnOS/EV4U= -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:02 2025 by rpki-client