$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json) Hash identifier: QHlhKa55/LxySpVk4H2MiSqDbk0HZjZ9PacHswytHGE= Subject key identifier: C9:1D:9F:34:FC:D9:A7:61:3C:2A:1C:C6:F0:2F:1E:9F:E0:C3:3E:29 Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 3008B2DAE9F27CEB6CD31A665AE166690C600197 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft Manifest number: 022F Signing time: Sun 19 Oct 2025 07:21:10 +0000 Manifest this update: Sun 19 Oct 2025 07:16:10 +0000 Manifest next update: Wed 22 Oct 2025 10:20:10 +0000 Files and hashes: 1: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: udYExdo4yCu71nCUz210VASDb/UmMJ+CZ15awO6SRJI=) 2: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: QqyJNASMZtjn96t+A2cpl22xR0g97zOoHQCrnEWX+Fo=) 3: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: DxhHqoUAAMdaWjOHEj/Le98DcBLSN3wsgkEpHqCel+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:08:b2:da:e9:f2:7c:eb:6c:d3:1a:66:5a:e1:66:69:0c:60:01:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: Oct 19 07:16:10 2025 GMT Not After : Oct 22 10:20:10 2025 GMT Subject: CN=C91D9F34FCD9A7613C2A1CC6F02F1E9FE0C33E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3b:13:34:65:9d:3f:14:0a:b9:4f:96:b4:90: 56:c2:f8:7a:cf:54:74:73:4c:83:d1:17:b6:01:8f: cf:1a:71:62:fb:cc:6d:ee:b1:73:91:fe:da:f3:1b: 2c:1c:6c:8b:e9:19:19:7d:05:7c:15:7e:ab:3c:23: 0f:5a:76:0e:16:64:92:68:8e:ad:50:cf:29:50:b1: 85:8b:d9:65:c1:49:4e:fe:41:d2:88:cc:5f:b9:4e: 3c:f9:25:b3:d5:e0:0c:28:34:d8:c1:bc:26:fe:02: 66:29:a9:ac:af:e3:8b:af:86:5a:b7:88:c1:8d:62: 77:ef:08:c9:ec:b7:b7:a8:31:07:e5:0b:d6:be:5e: 66:1a:67:cd:bd:25:11:df:f4:ab:09:e2:21:75:8f: 46:02:17:3a:33:d9:3b:74:5c:33:24:8f:f1:04:6b: f8:7a:56:ee:79:e8:fd:13:b7:88:b4:e7:c4:3b:91: 5e:a1:5c:54:ec:11:52:8e:80:95:7b:4b:44:c4:83: e8:3d:4a:98:9f:26:9b:e5:72:02:1b:d3:7e:ae:10: 1e:92:9d:05:c9:15:54:92:99:1f:27:05:7f:2c:28: d6:be:cf:54:b6:8a:64:74:fe:ef:82:5e:e7:e5:8b: 38:44:9e:c3:6c:52:f8:93:89:6b:f7:4b:b3:6d:0d: f0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1D:9F:34:FC:D9:A7:61:3C:2A:1C:C6:F0:2F:1E:9F:E0:C3:3E:29 X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:be:bd:10:f8:d2:97:58:70:6f:c4:7d:a9:d7:ed:38:97:e5: 4d:4f:4f:28:d5:0b:41:82:d2:73:ce:0a:90:3d:7d:d4:e1:6e: f9:bf:84:03:d0:e8:c1:ea:ac:0f:fe:25:c4:8f:84:1a:e7:7c: 0d:ef:51:07:d2:ee:77:72:7b:ca:d2:01:e4:96:08:9d:73:bd: d9:a4:a5:84:f4:99:83:c4:a4:77:6f:7e:8a:0f:2d:c5:80:67: b8:ea:49:5e:8b:12:c7:a4:2e:c9:98:0d:42:a8:3f:3b:7d:f1: 46:48:0c:cd:67:91:af:7f:9a:97:8d:ac:f5:15:c6:7f:4d:ac: 8f:67:e6:e1:ce:58:8a:8d:c9:c1:60:4f:9a:d5:76:b2:0d:eb: b1:f5:76:4c:34:9e:d0:78:93:87:1e:d7:47:ea:3e:84:e9:ef: 9f:c9:cd:2d:37:90:35:e8:98:80:ca:d2:66:f3:b7:5a:25:ed: 04:5d:9c:71:3d:e1:07:0a:11:05:38:0c:07:91:ab:6a:08:53: 03:5c:27:8c:fd:b1:14:a4:6b:f9:d3:af:c3:b1:73:12:4f:7a: 2c:e2:6f:3a:ef:59:ff:1c:47:4b:cb:f7:ff:b4:70:c8:f6:72: 00:90:5a:68:56:ab:ab:2a:26:a2:36:12:ca:69:19:43:66:e4: 01:39:5b:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAiy2unyfOts0xpmWuFmaQxgAZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNTEwMTkwNzE2MTBaFw0yNTEwMjIxMDIwMTBaMDMxMTAvBgNV BAMTKEM5MUQ5RjM0RkNEOUE3NjEzQzJBMUNDNkYwMkYxRTlGRTBDMzNFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0OxM0ZZ0/FAq5T5a0kFbC+HrP VHRzTIPRF7YBj88acWL7zG3usXOR/trzGywcbIvpGRl9BXwVfqs8Iw9adg4WZJJo jq1QzylQsYWL2WXBSU7+QdKIzF+5Tjz5JbPV4AwoNNjBvCb+AmYpqayv44uvhlq3 iMGNYnfvCMnst7eoMQflC9a+XmYaZ829JRHf9KsJ4iF1j0YCFzoz2Tt0XDMkj/EE a/h6Vu556P0Tt4i058Q7kV6hXFTsEVKOgJV7S0TEg+g9SpifJpvlcgIb036uEB6S nQXJFVSSmR8nBX8sKNa+z1S2imR0/u+CXuflizhEnsNsUviTiWv3S7NtDfBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyR2fNPzZp2E8KhzG8C8en+DDPikwHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0 M0IzMjY0RkY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEC+vRD40pdYcG/EfanX7TiX5U1PTyjVC0GC 0nPOCpA9fdThbvm/hAPQ6MHqrA/+JcSPhBrnfA3vUQfS7ndye8rSAeSWCJ1zvdmk pYT0mYPEpHdvfooPLcWAZ7jqSV6LEsekLsmYDUKoPzt98UZIDM1nka9/mpeNrPUV xn9NrI9n5uHOWIqNycFgT5rVdrIN67H1dkw0ntB4k4ce10fqPoTp75/JzS03kDXo mIDK0mbzt1ol7QRdnHE94QcKEQU4DAeRq2oIUwNcJ4z9sRSka/nTr8OxcxJPeizi bzrvWf8cR0vL9/+0cMj2cgCQWmhWq6sqJqI2EsppGUNm5AE5W28= -----END CERTIFICATE-----Generated at Tue Oct 21 00:58:36 2025 by rpki-client