$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json) Hash identifier: wsD9fa8/N+0CdnZ1TD57+CwjiO0cgn55rKeDnG3oox8= Subject key identifier: CC:83:C3:A3:47:42:0A:DA:1D:0D:82:8F:02:DA:1A:7A:A4:3E:A5:F1 Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 1690577A4A02C9190EDF76C1B15BD79E459F13F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft Manifest number: 0200 Signing time: Fri 04 Jul 2025 05:11:08 +0000 Manifest this update: Fri 04 Jul 2025 05:06:08 +0000 Manifest next update: Mon 07 Jul 2025 05:50:08 +0000 Files and hashes: 1: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: 1Afcuere/yw3E7sJO2XN3eAcLEpFfxK14fRK3CVcQhA=) 2: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: QqyJNASMZtjn96t+A2cpl22xR0g97zOoHQCrnEWX+Fo=) 3: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: DxhHqoUAAMdaWjOHEj/Le98DcBLSN3wsgkEpHqCel+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 05:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:90:57:7a:4a:02:c9:19:0e:df:76:c1:b1:5b:d7:9e:45:9f:13:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: Jul 4 05:06:08 2025 GMT Not After : Jul 7 05:50:08 2025 GMT Subject: CN=CC83C3A347420ADA1D0D828F02DA1A7AA43EA5F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:91:ae:b4:5d:2e:4d:e9:ea:2c:10:75:4f: 17:ae:2a:70:7e:c6:f1:cf:6f:e1:63:52:ed:69:dc: 63:0f:65:65:9b:69:cc:70:01:b5:ac:26:cb:6b:dd: 90:36:75:81:18:36:25:63:60:4e:14:e0:2d:fd:3b: 6f:fc:d3:95:b5:54:be:2a:68:09:26:01:d3:50:44: ae:81:4d:60:4e:cf:bc:b3:cc:23:90:cd:ea:de:de: b5:01:d5:fa:1a:d1:af:b6:c7:16:86:89:fd:94:78: f9:a3:fd:15:4e:89:f1:48:84:fc:94:2d:ae:4d:c0: d6:30:6b:65:d0:b6:6d:de:98:ce:e2:fe:6e:54:8e: b5:be:2d:42:cb:29:c9:93:b7:9f:d0:12:a4:78:52: f9:57:47:2d:29:8a:60:96:bd:ab:56:5a:4d:7f:55: a2:ba:a5:62:7c:a3:94:74:c2:a9:21:53:0c:44:0b: b6:40:10:e3:6f:6b:1d:2b:61:20:db:37:14:4c:19: cd:a5:34:1c:6b:e3:73:2d:b2:e2:f1:a2:76:07:b1: 2b:4a:7b:ac:36:b5:76:b0:e1:f8:c7:02:cb:66:ee: 15:1b:59:8e:ec:ce:90:0e:31:8a:8d:0d:37:b7:e9: 6c:1a:93:6b:fb:dc:80:a8:34:78:10:19:44:7b:6e: 23:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:83:C3:A3:47:42:0A:DA:1D:0D:82:8F:02:DA:1A:7A:A4:3E:A5:F1 X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:1f:66:58:b8:f0:f3:0e:32:0b:37:51:ca:d5:08:31:9f:95: c1:c8:e2:7f:bf:82:ad:8d:ed:95:53:f2:2d:65:ca:da:fa:87: 5d:c2:4c:b5:80:24:f8:3b:ee:4d:74:df:67:92:3b:80:f7:96: 8c:26:ec:09:2e:6e:b3:dc:a5:9a:0f:f5:5a:e9:27:8f:6d:15: 9a:53:40:e0:3f:1c:6f:58:ed:f0:a2:e9:35:a7:49:03:a8:e6: f3:8b:71:0c:5b:42:3b:3e:d8:3e:00:8c:8c:65:a9:84:29:32: f8:31:1a:d2:e6:ac:f9:2a:e2:f8:f8:7e:07:d6:aa:15:f7:a1: 84:5e:49:b9:44:5d:99:cf:6f:08:bf:03:53:b8:3b:3b:4f:17: 31:14:f2:24:f6:db:a2:25:d7:97:6b:97:f2:62:eb:f1:d6:0c: bb:0b:27:a1:53:94:26:fd:76:cb:5e:3c:8a:a0:85:16:fe:86: 6c:82:9a:4d:87:53:da:fe:16:af:87:ac:2c:45:40:79:f4:4b: 8b:df:31:bf:1f:81:0d:bc:08:e1:0d:50:fe:bb:4c:bd:15:c3: b6:0c:3f:08:40:09:8f:78:8f:b7:8f:9b:3b:7e:21:a0:d7:3a: ec:c7:88:fa:22:12:d9:65:af:99:58:4a:75:5c:2e:e4:d8:c8: cf:95:a5:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFpBXekoCyRkO33bBsVvXnkWfE/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNTA3MDQwNTA2MDhaFw0yNTA3MDcwNTUwMDhaMDMxMTAvBgNV BAMTKENDODNDM0EzNDc0MjBBREExRDBEODI4RjAyREExQTdBQTQzRUE1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8JGutF0uTenqLBB1TxeuKnB+ xvHPb+FjUu1p3GMPZWWbacxwAbWsJstr3ZA2dYEYNiVjYE4U4C39O2/805W1VL4q aAkmAdNQRK6BTWBOz7yzzCOQzere3rUB1foa0a+2xxaGif2UePmj/RVOifFIhPyU La5NwNYwa2XQtm3emM7i/m5UjrW+LULLKcmTt5/QEqR4UvlXRy0pimCWvatWWk1/ VaK6pWJ8o5R0wqkhUwxEC7ZAEONvax0rYSDbNxRMGc2lNBxr43MtsuLxonYHsStK e6w2tXaw4fjHAstm7hUbWY7szpAOMYqNDTe36Wwak2v73ICoNHgQGUR7biNpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzIPDo0dCCtodDYKPAtoaeqQ+pfEwHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0 M0IzMjY0RkY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcfZli48PMOMgs3UcrVCDGflcHI4n+/gq2N 7ZVT8i1lytr6h13CTLWAJPg77k1032eSO4D3lowm7AkubrPcpZoP9VrpJ49tFZpT QOA/HG9Y7fCi6TWnSQOo5vOLcQxbQjs+2D4AjIxlqYQpMvgxGtLmrPkq4vj4fgfW qhX3oYReSblEXZnPbwi/A1O4OztPFzEU8iT226Il15drl/Ji6/HWDLsLJ6FTlCb9 dstePIqghRb+hmyCmk2HU9r+Fq+HrCxFQHn0S4vfMb8fgQ28COENUP67TL0Vw7YM PwhACY94j7ePmzt+IaDXOuzHiPoiEtllr5lYSnVcLuTYyM+Vpdc= -----END CERTIFICATE-----Generated at Sat Jul 5 23:58:49 2025 by rpki-client