$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: 8Zj/0L26qQeBRr1Rl00c7RTHD8KTE2cG0gUchgiR10w= Subject key identifier: D5:5B:9A:79:C6:B0:94:58:31:C8:00:1B:72:EC:D2:E7:1A:04:D4:46 Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 74DFF8B8F1B3F638F58F3938BCC56674F6ED2E2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 035A Signing time: Tue 22 Jul 2025 00:02:15 +0000 Manifest this update: Mon 21 Jul 2025 23:57:15 +0000 Manifest next update: Fri 25 Jul 2025 10:45:15 +0000 Files and hashes: 1: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: Yz+acbdQNXGz/L6neL4oKsURfteIENXpk1ozjtdnd4E=) 2: 3130332e3135382e35392e302f32342d3234203d3e203137393935.roa (hash: 7iBHgGYKAoLVfSVzVrtATYUKOYKKHRSz7KTZsrE7P78=) 3: 3130332e3135382e35382e302f32332d3233203d3e203137393935.roa (hash: +8egnZEvXKWcwk+V4p3Tes+84K8cdSV9e+Lhzfpak6w=) 4: 3130332e3135382e35382e302f32342d3234203d3e203137393935.roa (hash: nEX5obMx7c1O0Mt16rHdamjU/vyDUmneghPgPs1dpHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 10:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:df:f8:b8:f1:b3:f6:38:f5:8f:39:38:bc:c5:66:74:f6:ed:2e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: Jul 21 23:57:15 2025 GMT Not After : Jul 25 10:45:15 2025 GMT Subject: CN=D55B9A79C6B0945831C8001B72ECD2E71A04D446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:d2:99:fa:e9:1d:40:35:26:86:77:3b:9d: ca:c0:87:49:85:8b:bc:82:c1:0e:b7:0d:86:79:8e: 45:a8:3e:d5:8c:55:9c:25:25:7c:8c:ea:d0:41:f5: d2:13:d2:15:a4:77:c1:c7:69:03:ff:66:27:ca:3e: 8b:54:a6:0f:26:c1:b3:95:7b:bc:96:48:12:a5:ec: fc:14:17:82:79:f2:03:84:0e:2b:a4:c6:38:1b:c0: 1a:ab:87:34:84:81:d1:2a:09:5f:31:09:ee:f2:dd: fd:53:ff:a4:28:27:98:2f:ea:c8:05:48:82:d3:3e: e3:62:eb:a5:df:57:bc:6b:b5:56:c4:25:74:30:d2: 3e:9a:85:21:52:8d:df:8e:37:2c:10:5d:db:4e:38: 4c:d8:76:81:a8:43:ba:90:5c:88:c6:b0:94:5d:ef: 10:e9:8d:8e:26:aa:9e:69:16:df:06:0e:06:3b:0a: 27:98:07:5a:e0:ed:be:fe:85:44:2e:b5:d4:c0:4a: b9:d7:8b:3d:78:43:e6:44:82:42:b0:9a:45:0a:9a: f1:9e:f4:09:f7:e9:d3:3b:23:fb:1d:86:d6:09:71: dc:3a:d3:52:52:c7:1f:31:51:b7:a2:61:53:db:6f: 47:83:b4:3c:c1:96:67:2d:e6:27:da:68:82:94:51: 71:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5B:9A:79:C6:B0:94:58:31:C8:00:1B:72:EC:D2:E7:1A:04:D4:46 X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0b:59:c7:4e:10:4e:87:f7:0f:f6:fb:5d:11:be:67:2d:8c: 4e:31:15:90:2e:28:53:50:51:d4:15:1c:14:5e:f3:c1:d8:64: c8:e2:7c:c4:d7:a5:a2:db:98:8c:a7:da:c0:9f:b1:09:0f:23: 47:74:d4:86:95:3c:42:b2:21:94:43:56:c8:02:fe:b7:6b:5c: 78:ad:40:36:fd:cf:dc:81:97:10:b7:89:93:61:fd:51:cb:88: 60:1f:be:f4:66:d4:3c:b1:11:98:11:3d:b7:41:5e:a9:42:15: d5:ec:75:92:15:4b:29:58:d5:e7:58:45:35:1e:e8:1d:dd:bb: fc:28:98:97:ac:da:16:da:b5:9a:2b:a5:da:6e:34:5a:bf:27: a8:03:8f:f7:0c:94:44:60:63:c0:2b:65:e3:00:9b:38:5e:b5: 5b:07:28:0a:2b:b9:fe:72:aa:9c:c3:e4:43:ad:d1:c8:0c:dd: d8:aa:bf:a2:a4:da:3d:85:95:03:e4:49:28:0e:a4:a8:ba:6b: d2:45:48:57:08:ba:6b:3d:2c:d7:22:e5:41:72:6a:3d:a5:c6: da:c5:52:f5:be:7b:4a:87:49:c0:a9:b6:38:99:a2:fe:a3:51: 14:0c:79:f1:24:e7:1a:27:29:eb:9d:41:7c:3f:20:ce:4a:d6: e7:36:a6:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdN/4uPGz9jj1jzk4vMVmdPbtLiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNTA3MjEyMzU3MTVaFw0yNTA3MjUxMDQ1MTVaMDMxMTAvBgNV BAMTKEQ1NUI5QTc5QzZCMDk0NTgzMUM4MDAxQjcyRUNEMkU3MUEwNEQ0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrgNKZ+ukdQDUmhnc7ncrAh0mF i7yCwQ63DYZ5jkWoPtWMVZwlJXyM6tBB9dIT0hWkd8HHaQP/ZifKPotUpg8mwbOV e7yWSBKl7PwUF4J58gOEDiukxjgbwBqrhzSEgdEqCV8xCe7y3f1T/6QoJ5gv6sgF SILTPuNi66XfV7xrtVbEJXQw0j6ahSFSjd+ONywQXdtOOEzYdoGoQ7qQXIjGsJRd 7xDpjY4mqp5pFt8GDgY7CieYB1rg7b7+hUQutdTASrnXiz14Q+ZEgkKwmkUKmvGe 9An36dM7I/sdhtYJcdw601JSxx8xUbeiYVPbb0eDtDzBlmct5ifaaIKUUXGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1VuaecawlFgxyAAbcuzS5xoE1EYwHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHELWcdOEE6H9w/2+10RvmctjE4xFZAuKFNQ UdQVHBRe88HYZMjifMTXpaLbmIyn2sCfsQkPI0d01IaVPEKyIZRDVsgC/rdrXHit QDb9z9yBlxC3iZNh/VHLiGAfvvRm1DyxEZgRPbdBXqlCFdXsdZIVSylY1edYRTUe 6B3du/womJes2hbatZorpdpuNFq/J6gDj/cMlERgY8ArZeMAmzhetVsHKAoruf5y qpzD5EOt0cgM3diqv6Kk2j2FlQPkSSgOpKi6a9JFSFcIums9LNci5UFyaj2lxtrF UvW+e0qHScCptjiZov6jURQMefEk5xonKeudQXw/IM5K1uc2pkM= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:07 2025 by rpki-client