$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: BhkwnVp0dwVU6NcnSiPu3daeWpocAqOfdReXDlkxZ8Q= Subject key identifier: D8:F2:71:44:E4:8D:CB:32:6B:6F:86:2B:A8:2F:11:29:1B:A8:DB:17 Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 03C42B2A9CD218A1E999C42519A6563A1C5FDEB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 042D Signing time: Sun 20 Jul 2025 07:11:16 +0000 Manifest this update: Sun 20 Jul 2025 07:06:16 +0000 Manifest next update: Wed 23 Jul 2025 07:20:16 +0000 Files and hashes: 1: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: k4ayBkPGVRKLElc/9S71S4NfO2AenbzoAe/P5Wq5t0w=) 2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: WW7W6Yj2G/47WPhY9FaJiFfRCgajmearKgt2Y7lE/bA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c4:2b:2a:9c:d2:18:a1:e9:99:c4:25:19:a6:56:3a:1c:5f:de:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Jul 20 07:06:16 2025 GMT Not After : Jul 23 07:20:16 2025 GMT Subject: CN=D8F27144E48DCB326B6F862BA82F11291BA8DB17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:4b:08:51:e8:32:27:ab:d5:84:26:72:64: 0c:55:d2:14:b2:83:5e:4d:c8:0e:55:6d:b8:f5:6b: 77:4f:84:b8:15:27:e5:6c:2b:48:c5:6d:61:3f:52: ba:53:9b:72:c0:fd:01:06:c3:a1:1b:c9:46:ff:ba: 68:59:d4:ea:18:cb:f8:28:50:dc:36:a8:b9:3b:76: d1:9a:1b:d6:6e:fb:22:7b:8f:0e:ad:0d:e5:54:7d: 93:7f:ca:61:f3:4c:6a:09:98:02:06:37:7c:17:39: d8:c6:e8:37:e7:e6:87:55:bf:de:43:23:1c:f7:f1: 41:56:ec:b2:94:f4:c3:b9:47:b9:e7:f3:3d:f0:3f: 34:b6:be:db:82:9a:e8:21:f7:20:3c:4d:0a:79:66: 87:e0:b3:3e:e0:f6:f8:ba:05:f3:27:d6:45:84:0a: 31:7c:1b:2d:76:9a:39:4a:12:98:9f:16:1c:6f:67: 52:a2:6b:04:08:2b:33:d5:b5:df:a3:7f:9f:8c:01: 4c:7c:6a:c8:5d:63:44:bc:4a:11:ef:24:f6:b5:36: 54:3e:34:4c:34:95:0f:59:28:c1:b1:c9:a8:09:a0: 6e:7c:fc:df:6a:05:e3:ab:d8:ea:72:29:82:c9:5c: 09:54:c3:f6:f3:e5:8c:58:6e:e2:eb:2c:79:7c:8b: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F2:71:44:E4:8D:CB:32:6B:6F:86:2B:A8:2F:11:29:1B:A8:DB:17 X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:40:f8:a0:ec:52:18:dc:1e:bf:10:dd:54:84:63:ee:71:65: a7:cc:c1:0f:28:3e:c8:fb:09:b7:51:38:b1:ab:4e:27:c3:4d: 28:33:5f:26:8d:d1:43:80:b7:fd:6d:56:91:64:c2:35:e7:49: ed:c3:dd:f2:58:cf:a4:c8:8f:e2:45:42:6a:69:0f:ea:c9:6b: 76:5e:51:8f:37:50:78:19:79:9a:e0:da:04:f8:2b:cc:93:cb: b0:42:48:08:ad:c8:e3:88:e9:fe:f9:aa:c1:49:90:52:e5:fb: e6:24:ca:12:38:9f:77:74:dc:f3:bc:d5:e5:8a:0b:27:dc:66: da:cb:7e:8d:87:0a:a0:1f:ca:83:0e:c6:5f:2e:79:84:49:34: 9b:3e:dd:cd:79:39:d9:cb:4e:82:8b:d6:59:da:8f:11:39:01: 02:c7:47:19:e2:d8:c2:36:c3:ed:ac:97:12:ad:f7:91:a3:75: 5c:7b:fc:b5:2e:27:7c:47:3d:52:08:14:91:eb:5c:84:0a:92: 47:60:85:0d:83:a8:ba:38:b8:ce:e8:7e:51:ef:6d:d4:f0:bb: f6:fc:69:dc:77:f6:49:1c:52:aa:15:41:0b:6f:4c:d4:dc:c4: cd:53:eb:60:8e:a4:fe:ab:60:29:84:3b:0e:7b:61:f6:d5:70: d6:20:d1:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8QrKpzSGKHpmcQlGaZWOhxf3rMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTA3MjAwNzA2MTZaFw0yNTA3MjMwNzIwMTZaMDMxMTAvBgNV BAMTKEQ4RjI3MTQ0RTQ4RENCMzI2QjZGODYyQkE4MkYxMTI5MUJBOERCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDll0sIUegyJ6vVhCZyZAxV0hSy g15NyA5Vbbj1a3dPhLgVJ+VsK0jFbWE/UrpTm3LA/QEGw6EbyUb/umhZ1OoYy/go UNw2qLk7dtGaG9Zu+yJ7jw6tDeVUfZN/ymHzTGoJmAIGN3wXOdjG6Dfn5odVv95D Ixz38UFW7LKU9MO5R7nn8z3wPzS2vtuCmugh9yA8TQp5Zofgsz7g9vi6BfMn1kWE CjF8Gy12mjlKEpifFhxvZ1KiawQIKzPVtd+jf5+MAUx8ashdY0S8ShHvJPa1NlQ+ NEw0lQ9ZKMGxyagJoG58/N9qBeOr2OpyKYLJXAlUw/bz5YxYbuLrLHl8i9U5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2PJxROSNyzJrb4YrqC8RKRuo2xcwHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNA+KDsUhjcHr8Q3VSEY+5xZafMwQ8oPsj7 CbdROLGrTifDTSgzXyaN0UOAt/1tVpFkwjXnSe3D3fJYz6TIj+JFQmppD+rJa3Ze UY83UHgZeZrg2gT4K8yTy7BCSAityOOI6f75qsFJkFLl++YkyhI4n3d03PO81eWK CyfcZtrLfo2HCqAfyoMOxl8ueYRJNJs+3c15OdnLToKL1lnajxE5AQLHRxni2MI2 w+2slxKt95GjdVx7/LUuJ3xHPVIIFJHrXIQKkkdghQ2DqLo4uM7oflHvbdTwu/b8 adx39kkcUqoVQQtvTNTcxM1T62COpP6rYCmEOw57YfbVcNYg0fY= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:21 2025 by rpki-client