$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: +5Udmznr61U8Beet2Yp6rOqit3wC19r3oh7GUh1A4Ok= Subject key identifier: EE:34:17:B3:56:12:31:F7:44:0A:5C:BF:32:6F:76:10:5A:3A:E2:60 Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 6E6B66B57B33EDBCFC024C10EB2B56C915CC9275 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 0384 Signing time: Sun 19 Oct 2025 10:12:18 +0000 Manifest this update: Sun 19 Oct 2025 10:07:18 +0000 Manifest next update: Wed 22 Oct 2025 21:24:18 +0000 Files and hashes: 1: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: ZxlvzspdsnFSmbE9bFUI5S+cZhkyPDQiD/BHabTlQKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:6b:66:b5:7b:33:ed:bc:fc:02:4c:10:eb:2b:56:c9:15:cc:92:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: Oct 19 10:07:18 2025 GMT Not After : Oct 22 21:24:18 2025 GMT Subject: CN=EE3417B3561231F7440A5CBF326F76105A3AE260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:78:19:d2:9d:6b:d8:bd:9d:97:21:58:3e:0c: c3:f7:11:ff:0b:66:17:72:bc:bb:6d:ba:2c:7d:f3: 47:b8:7e:94:2f:ab:5f:07:b1:69:2e:ae:8f:98:bf: 3b:6d:f1:20:4e:a1:c5:6b:2b:70:1f:3c:46:86:7e: 03:81:c2:fb:f1:ff:85:b7:da:52:ac:e7:a9:07:4d: cd:87:79:69:f1:07:68:a3:65:c0:ee:62:49:66:3c: 42:66:ea:34:4d:ce:08:31:99:20:9f:18:bf:76:a5: ab:d4:d9:7e:ae:93:25:ff:32:8f:e0:32:46:cc:d4: 14:33:19:6f:2b:85:01:58:34:46:88:2b:5e:d8:fc: 0f:a1:0f:89:55:bd:df:f0:92:b1:4a:12:49:91:0d: ae:01:c9:2c:07:a9:1c:96:da:47:98:d0:f6:cd:d1: 8f:30:75:b9:40:f6:14:97:05:b5:93:7c:8f:f0:5b: a2:07:cf:9a:e5:4c:3e:c0:90:fa:90:d4:49:38:0c: 52:54:c8:76:9a:71:fd:30:36:1b:05:d6:c4:82:f2: a9:bd:c8:31:90:ba:3c:e8:00:5c:d4:1b:99:9a:1e: 03:1e:7b:c2:be:f7:29:b9:86:77:bd:8c:e1:34:4d: 9f:d1:99:30:e0:62:2f:8e:60:2e:36:60:85:dc:32: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:34:17:B3:56:12:31:F7:44:0A:5C:BF:32:6F:76:10:5A:3A:E2:60 X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ab:d0:da:ed:b8:c5:5c:b9:9a:52:5e:4f:35:e6:d9:df:84: 03:51:ed:bb:35:84:e5:ca:98:75:c1:7e:ec:e4:40:49:ea:8f: 99:5f:3d:7d:3e:2a:77:b0:43:45:0d:87:7d:70:09:e7:2f:6e: 68:f0:eb:be:ba:a5:10:62:43:48:3c:81:40:f7:0b:62:fa:05: e0:95:10:74:62:63:23:98:3f:84:87:49:6e:93:0e:82:d3:18: 92:3f:59:60:d1:de:18:a1:2e:aa:1d:51:7e:99:91:cf:68:92: 75:e0:c7:98:a3:04:05:a8:ed:79:e9:6a:f6:e5:2b:6d:e5:21: 48:0f:b9:74:7c:2e:fa:ff:2a:72:79:80:da:e0:eb:35:cc:76: 7a:62:11:54:b0:89:11:80:cc:a3:e3:d1:d9:38:12:5a:6e:c6: ca:a4:5c:21:81:48:dc:eb:fe:20:99:45:b1:d8:d3:fa:6d:6c: 62:f3:10:6b:75:99:cd:4b:53:62:11:ff:45:a7:16:ee:0a:a0: 6b:17:4a:d5:97:51:50:9e:0f:2a:65:aa:b4:8f:57:ed:5e:25: d3:79:c5:c2:2b:0d:f4:9a:8b:fd:19:fd:58:9a:6e:f8:43:f3: 61:1d:e4:89:2a:af:d5:d5:af:51:5f:a9:f9:cf:00:d1:cd:74: 1a:16:df:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmtmtXsz7bz8AkwQ6ytWyRXMknUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNTEwMTkxMDA3MThaFw0yNTEwMjIyMTI0MThaMDMxMTAvBgNV BAMTKEVFMzQxN0IzNTYxMjMxRjc0NDBBNUNCRjMyNkY3NjEwNUEzQUUyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCweBnSnWvYvZ2XIVg+DMP3Ef8L ZhdyvLttuix980e4fpQvq18HsWkuro+Yvztt8SBOocVrK3AfPEaGfgOBwvvx/4W3 2lKs56kHTc2HeWnxB2ijZcDuYklmPEJm6jRNzggxmSCfGL92pavU2X6ukyX/Mo/g MkbM1BQzGW8rhQFYNEaIK17Y/A+hD4lVvd/wkrFKEkmRDa4BySwHqRyW2keY0PbN 0Y8wdblA9hSXBbWTfI/wW6IHz5rlTD7AkPqQ1Ek4DFJUyHaacf0wNhsF1sSC8qm9 yDGQujzoAFzUG5maHgMee8K+9ym5hne9jOE0TZ/RmTDgYi+OYC42YIXcMjPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7jQXs1YSMfdECly/Mm92EFo64mAwHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACur0NrtuMVcuZpSXk815tnfhANR7bs1hOXK mHXBfuzkQEnqj5lfPX0+KnewQ0UNh31wCecvbmjw6766pRBiQ0g8gUD3C2L6BeCV EHRiYyOYP4SHSW6TDoLTGJI/WWDR3hihLqodUX6Zkc9oknXgx5ijBAWo7Xnpavbl K23lIUgPuXR8Lvr/KnJ5gNrg6zXMdnpiEVSwiRGAzKPj0dk4ElpuxsqkXCGBSNzr /iCZRbHY0/ptbGLzEGt1mc1LU2IR/0WnFu4KoGsXStWXUVCeDyplqrSPV+1eJdN5 xcIrDfSai/0Z/ViabvhD82Ed5Ikqr9XVr1FfqfnPANHNdBoW3wo= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:43 2025 by rpki-client