$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json) Hash identifier: Gs9pRPJbIyqsdhZy4WSfE6wth90vHndj+UsCBygtaDE= Subject key identifier: 7E:AA:30:B5:32:DB:AE:DF:69:FE:3F:E1:BE:0F:57:CF:BD:6A:9D:B8 Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 0A71BA04D4F48866AC3F6D759E6EF519ECF4DE24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft Manifest number: 0216 Signing time: Fri 22 Aug 2025 09:41:09 +0000 Manifest this update: Fri 22 Aug 2025 09:36:09 +0000 Manifest next update: Mon 25 Aug 2025 10:30:09 +0000 Files and hashes: 1: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: DxhHqoUAAMdaWjOHEj/Le98DcBLSN3wsgkEpHqCel+c=) 2: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: a3j9Kvd9Hs1IQ7Ly0zrSb+dcFjDHySqa7wtfOzyMTM0=) 3: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: QqyJNASMZtjn96t+A2cpl22xR0g97zOoHQCrnEWX+Fo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:71:ba:04:d4:f4:88:66:ac:3f:6d:75:9e:6e:f5:19:ec:f4:de:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: Aug 22 09:36:09 2025 GMT Not After : Aug 25 10:30:09 2025 GMT Subject: CN=7EAA30B532DBAEDF69FE3FE1BE0F57CFBD6A9DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:14:5a:83:36:2e:35:7d:6c:f8:e9:c4:12: 15:9f:1a:d0:95:f3:e0:94:8b:b6:d5:ef:94:1a:b5: 3b:25:d9:2d:f9:6a:84:ba:75:57:e7:36:ec:5a:37: 5a:23:de:8a:82:a8:13:56:97:61:43:b0:9a:75:80: 9f:b8:ec:24:e0:85:c1:a6:54:62:30:27:69:f6:94: ec:ea:c7:8f:6a:16:1f:c2:b7:fd:09:66:43:20:a7: c7:e5:56:a2:49:9b:c8:22:f8:5c:f2:f5:aa:2d:38: fc:7d:53:f0:16:f6:37:eb:7f:16:5c:47:5f:28:53: 0b:b2:29:61:37:90:99:21:06:21:f5:17:fc:87:86: 3b:ab:e0:da:e7:55:0e:78:33:8f:3d:09:c8:ec:52: 95:d6:1c:f7:c1:ce:4c:8f:96:b3:87:87:b8:98:84: 92:76:9c:99:96:36:3f:13:40:2f:8d:57:18:8b:42: a1:02:a9:25:17:36:0f:41:e9:f1:6c:5e:e3:1c:0a: 84:72:bf:5d:c3:f6:8e:0c:64:fb:7e:66:f4:21:0b: 42:fb:e0:77:65:bf:d4:c3:04:8c:b7:57:d8:88:a1: ce:a0:44:fa:eb:45:b5:da:65:e0:19:67:2a:2e:5c: f3:6b:53:f6:6e:26:2c:00:14:4c:e2:bc:6f:fa:79: 20:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AA:30:B5:32:DB:AE:DF:69:FE:3F:E1:BE:0F:57:CF:BD:6A:9D:B8 X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0f:72:24:83:04:92:df:dc:47:9b:f7:74:5f:6f:cd:5a:c4: a3:2f:a5:42:9d:32:5a:fb:ac:90:26:2d:28:99:6f:d5:7c:1b: 89:21:4e:37:8e:aa:8b:3c:1a:e6:4e:38:ea:2a:d3:b8:8a:4f: dd:ac:b3:60:d6:16:ec:ff:27:7b:82:49:39:c0:f8:86:b6:4b: 74:67:da:15:67:5f:96:5b:0b:fe:66:82:7b:b5:56:d5:4f:a3: 61:59:18:2c:bb:7d:76:22:85:fb:12:ee:72:cb:a0:55:5d:ec: 29:73:6b:00:06:97:6c:83:65:3a:92:36:07:14:e9:a2:db:a7: 56:4d:d0:d6:11:ca:1c:13:a0:00:02:3c:57:ab:8a:cd:a4:61: 5c:31:d0:8c:72:a9:8b:99:04:f5:db:cb:f7:67:11:b4:e2:c7: 87:40:3e:24:b7:e5:b9:14:f7:e6:95:de:ce:00:51:1c:3b:90: 05:94:40:95:c3:47:16:22:ab:5d:9c:bb:45:a6:b1:1d:5c:fa: 81:f6:c4:6c:3d:45:65:e3:88:4e:62:92:a1:f2:69:ee:7e:16: 87:dd:51:bb:e2:54:f9:55:1e:c2:d2:0a:a2:5e:11:17:25:f5: ca:43:03:81:85:cf:f0:a3:b2:dc:fe:2b:59:7f:0f:36:0b:a6: 51:4b:ab:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnG6BNT0iGasP211nm71Gez03iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNTA4MjIwOTM2MDlaFw0yNTA4MjUxMDMwMDlaMDMxMTAvBgNV BAMTKDdFQUEzMEI1MzJEQkFFREY2OUZFM0ZFMUJFMEY1N0NGQkQ2QTlEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xxRagzYuNX1s+OnEEhWfGtCV 8+CUi7bV75QatTsl2S35aoS6dVfnNuxaN1oj3oqCqBNWl2FDsJp1gJ+47CTghcGm VGIwJ2n2lOzqx49qFh/Ct/0JZkMgp8flVqJJm8gi+Fzy9aotOPx9U/AW9jfrfxZc R18oUwuyKWE3kJkhBiH1F/yHhjur4NrnVQ54M489CcjsUpXWHPfBzkyPlrOHh7iY hJJ2nJmWNj8TQC+NVxiLQqECqSUXNg9B6fFsXuMcCoRyv13D9o4MZPt+ZvQhC0L7 4Hdlv9TDBIy3V9iIoc6gRPrrRbXaZeAZZyouXPNrU/ZuJiwAFEzivG/6eSA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfqowtTLbrt9p/j/hvg9Xz71qnbgwHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0 M0IzMjY0RkY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQPciSDBJLf3Eeb93Rfb81axKMvpUKdMlr7 rJAmLSiZb9V8G4khTjeOqos8GuZOOOoq07iKT92ss2DWFuz/J3uCSTnA+Ia2S3Rn 2hVnX5ZbC/5mgnu1VtVPo2FZGCy7fXYihfsS7nLLoFVd7ClzawAGl2yDZTqSNgcU 6aLbp1ZN0NYRyhwToAACPFeris2kYVwx0IxyqYuZBPXby/dnEbTix4dAPiS35bkU 9+aV3s4AURw7kAWUQJXDRxYiq12cu0WmsR1c+oH2xGw9RWXjiE5ikqHyae5+Fofd UbviVPlVHsLSCqJeERcl9cpDA4GFz/Cjstz+K1l/DzYLplFLqxw= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:49 2025 by rpki-client