$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json) Hash identifier: ee20MumANMTHtXzM4s7KdChWUp8tncQ320xslNJZvjo= Subject key identifier: 6A:B6:7E:92:53:20:38:3C:38:93:50:A1:02:6F:92:30:30:A6:16:4F Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 1E47327309C109D54C7E9FA58244A45768AC2AA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft Manifest number: 01E7 Signing time: Thu 08 May 2025 10:41:07 +0000 Manifest this update: Thu 08 May 2025 10:36:07 +0000 Manifest next update: Sun 11 May 2025 17:27:07 +0000 Files and hashes: 1: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: d6Ecb7Kc2gbz+hcgLqGMRIGXHo25OlJG0HWsQPiF5RE=) 2: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: QqyJNASMZtjn96t+A2cpl22xR0g97zOoHQCrnEWX+Fo=) 3: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: DxhHqoUAAMdaWjOHEj/Le98DcBLSN3wsgkEpHqCel+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:47:32:73:09:c1:09:d5:4c:7e:9f:a5:82:44:a4:57:68:ac:2a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: May 8 10:36:07 2025 GMT Not After : May 11 17:27:07 2025 GMT Subject: CN=6AB67E925320383C389350A1026F923030A6164F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:57:a7:28:e7:f7:1f:be:67:02:61:c5:00:14: 7b:74:a1:0f:2c:f7:37:2b:fe:d9:d7:61:00:21:e3: e7:b3:85:9e:c9:90:1a:ec:fc:90:e5:26:a5:d8:22: 4f:28:54:e6:7c:ef:a8:a9:77:4e:dc:63:31:69:46: 4f:81:18:48:e0:81:8f:25:77:29:6e:c4:fb:1b:79: 79:33:35:8d:ca:0a:20:54:9a:24:92:8e:38:2f:47: 8c:32:42:e6:09:0c:35:67:89:49:4b:0c:66:34:36: 8d:9b:19:ad:c0:ed:e2:e9:0e:95:3b:3d:ee:0f:ec: a7:95:fd:c3:c0:6d:a6:70:ac:c9:88:43:bd:16:0c: 19:1d:e0:43:44:12:1b:b2:74:c7:b8:51:56:29:f0: 2b:e2:ce:96:14:06:e4:eb:61:ac:3e:29:66:5b:23: dc:f8:d6:4c:c9:10:21:1f:6b:38:34:4e:91:08:78: e0:69:85:f7:5d:26:75:aa:dd:db:e9:3b:73:96:8c: 62:ce:6b:4d:49:22:72:ac:28:cc:47:a4:19:ce:b9: 90:fc:b8:10:8c:3b:d8:18:92:61:51:c5:0a:65:d7: 34:15:c5:fd:73:60:09:dc:d6:52:d5:a7:28:f0:1f: 50:c8:e7:e2:ae:82:1b:17:3e:33:7b:ed:38:60:d3: d7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B6:7E:92:53:20:38:3C:38:93:50:A1:02:6F:92:30:30:A6:16:4F X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f7:17:e8:7a:c0:1d:f2:23:cf:2b:6a:68:4c:60:d1:f0:2d: de:30:b8:13:25:9f:6d:21:dd:ff:58:c8:9a:56:e4:e7:4c:e9: 2e:28:dc:cc:f6:69:03:cf:3d:37:70:9b:9f:ea:8d:d6:be:57: 14:90:ce:61:6f:2b:a9:31:a1:18:0c:70:a4:fe:6b:97:e9:cd: 2d:89:75:47:74:71:19:7e:20:aa:7e:bc:ec:66:5a:9d:c4:dc: 08:cc:42:d0:2d:8d:fe:e4:52:ba:64:55:c8:b7:c1:61:cf:52: 59:b1:93:d8:41:d5:9b:fc:d0:47:aa:ad:4e:a2:1a:ee:ec:2a: d2:74:1f:58:8b:25:62:ab:82:9b:65:a5:e8:10:bb:fc:46:60: 4a:f2:3d:d6:f7:64:e9:61:0b:bb:3f:61:ff:f3:f7:bd:19:af: 5b:0b:fd:fc:11:7c:a4:08:d1:fc:09:73:ba:bb:bd:a4:1c:f0: 2a:88:b7:d0:c1:6d:82:20:8c:ac:0b:d6:44:0c:fa:39:d3:c7: fe:16:31:89:11:0a:6d:2e:84:dc:da:83:66:f8:c3:69:5e:6f: c4:a8:cd:c2:3b:30:23:94:2d:ce:95:a5:ae:a1:dd:a0:35:ff: f0:da:20:a4:ac:1c:82:d3:86:10:d9:bd:24:7f:54:1e:07:41: c0:e7:10:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHkcycwnBCdVMfp+lgkSkV2isKqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNTA1MDgxMDM2MDdaFw0yNTA1MTExNzI3MDdaMDMxMTAvBgNV BAMTKDZBQjY3RTkyNTMyMDM4M0MzODkzNTBBMTAyNkY5MjMwMzBBNjE2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWV6co5/cfvmcCYcUAFHt0oQ8s 9zcr/tnXYQAh4+ezhZ7JkBrs/JDlJqXYIk8oVOZ876ipd07cYzFpRk+BGEjggY8l dyluxPsbeXkzNY3KCiBUmiSSjjgvR4wyQuYJDDVniUlLDGY0No2bGa3A7eLpDpU7 Pe4P7KeV/cPAbaZwrMmIQ70WDBkd4ENEEhuydMe4UVYp8CvizpYUBuTrYaw+KWZb I9z41kzJECEfazg0TpEIeOBphfddJnWq3dvpO3OWjGLOa01JInKsKMxHpBnOuZD8 uBCMO9gYkmFRxQpl1zQVxf1zYAnc1lLVpyjwH1DI5+KughsXPjN77Thg09f7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUarZ+klMgODw4k1ChAm+SMDCmFk8wHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0 M0IzMjY0RkY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD3F+h6wB3yI88ramhMYNHwLd4wuBMln20h 3f9YyJpW5OdM6S4o3Mz2aQPPPTdwm5/qjda+VxSQzmFvK6kxoRgMcKT+a5fpzS2J dUd0cRl+IKp+vOxmWp3E3AjMQtAtjf7kUrpkVci3wWHPUlmxk9hB1Zv80EeqrU6i Gu7sKtJ0H1iLJWKrgptlpegQu/xGYEryPdb3ZOlhC7s/Yf/z970Zr1sL/fwRfKQI 0fwJc7q7vaQc8CqIt9DBbYIgjKwL1kQM+jnTx/4WMYkRCm0uhNzag2b4w2leb8So zcI7MCOULc6Vpa6h3aA1//DaIKSsHILThhDZvSR/VB4HQcDnENc= -----END CERTIFICATE-----Generated at Sat May 10 13:19:56 2025 by rpki-client