$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: 1xx4ZnXBsSCWfRnzsDZ8QDZo0DiyIUG4oYRoDpbNVdE= Subject key identifier: B4:97:83:7E:EF:DE:F4:4F:CA:CF:5F:55:A2:17:AC:57:D9:30:B2:89 Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 6AC4E056943DC74A314E23B4847642E7C185E886 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 0442 Signing time: Sat 06 Sep 2025 00:41:18 +0000 Manifest this update: Sat 06 Sep 2025 00:36:18 +0000 Manifest next update: Tue 09 Sep 2025 10:16:18 +0000 Files and hashes: 1: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: hMk0Hs0vJ8h5KA3n3JJjzB0dum8PvXIqQ5+wBc1PCwY=) 2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: WW7W6Yj2G/47WPhY9FaJiFfRCgajmearKgt2Y7lE/bA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 10:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c4:e0:56:94:3d:c7:4a:31:4e:23:b4:84:76:42:e7:c1:85:e8:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Sep 6 00:36:18 2025 GMT Not After : Sep 9 10:16:18 2025 GMT Subject: CN=B497837EEFDEF44FCACF5F55A217AC57D930B289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2f:1b:17:3b:d5:f9:1c:94:74:31:f0:4c:68: b6:7d:76:21:bd:49:31:2e:6f:9b:45:b7:4d:a1:22: 7c:f1:8b:d0:56:3e:7f:7e:92:cc:f9:62:d7:33:4f: dc:c5:55:c0:11:36:9f:ae:cd:c2:15:a8:7c:bd:c7: 15:35:15:35:b9:f9:2e:df:06:f8:1d:28:55:5e:0c: 8c:7c:fb:d7:30:f7:6f:e7:f0:58:33:c8:80:38:22: 4d:bd:17:8a:8c:10:c9:b3:cb:2c:53:32:3d:95:e5: b0:4f:82:3e:43:bc:27:77:25:cb:c3:f3:40:b0:f5: 1f:9d:e3:11:61:62:8e:8b:34:63:9d:e9:a7:c4:78: d2:24:05:df:8a:23:1a:89:df:1a:61:94:a7:d0:c9: a7:08:b4:e4:fe:ff:c0:9f:07:86:ba:0c:0b:83:5e: 96:18:b5:92:4e:e5:d9:f4:d4:15:b9:25:a3:f5:04: 97:d1:36:aa:b7:ea:06:19:cb:58:ac:31:3b:8d:ed: c1:49:01:f1:fd:70:c3:67:f6:7a:c0:95:ae:db:fd: a6:e8:32:75:59:36:37:1a:25:20:9b:cf:e5:2e:4d: 8f:9b:c5:28:f9:3e:1a:95:10:ef:44:e2:f2:e3:b6: 2d:34:30:92:85:6d:5b:92:49:8e:be:52:f8:bf:3f: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:97:83:7E:EF:DE:F4:4F:CA:CF:5F:55:A2:17:AC:57:D9:30:B2:89 X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e0:3c:9d:9e:d4:58:1e:2d:f6:4d:24:3a:ee:f0:70:01:49: 0b:7c:3c:3a:ce:c8:d2:1a:99:e4:56:c7:6c:cd:7e:b0:ec:8a: f6:12:d5:33:3a:f0:fb:e2:c2:0f:bf:fb:24:fb:df:3c:82:5b: 9f:23:95:1a:36:a2:d5:93:81:85:9b:db:99:bc:53:01:0a:6c: e2:60:1a:c3:e2:ae:6b:dd:e7:a2:05:da:7f:a0:51:f8:1f:79: 16:49:94:e0:5d:24:25:8d:91:65:19:37:6a:72:b4:97:c8:a6: e1:38:7a:2f:f9:4e:cb:97:48:06:a4:fa:8a:16:d8:41:82:26: 27:3d:62:43:57:64:d6:29:eb:7e:44:37:83:5d:1a:95:13:b9: 66:eb:ce:e8:c5:48:6f:95:2e:24:93:6d:88:8a:94:e4:96:4d: 4d:f3:ae:66:55:69:8c:6d:09:a2:d5:59:f6:72:b8:67:91:31: 28:8a:5c:d9:b5:92:72:61:88:46:d6:97:72:ae:df:0b:fd:46: b6:5a:55:eb:9b:88:37:18:24:fd:e8:c2:41:74:6d:88:b3:1b: 0b:56:07:ef:1e:06:20:da:81:21:08:31:63:07:07:da:5b:8e: a9:2e:b9:d9:1c:74:5d:2c:8e:5f:20:85:d8:1d:5f:48:26:81: 2e:60:0b:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUasTgVpQ9x0oxTiO0hHZC58GF6IYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTA5MDYwMDM2MThaFw0yNTA5MDkxMDE2MThaMDMxMTAvBgNV BAMTKEI0OTc4MzdFRUZERUY0NEZDQUNGNUY1NUEyMTdBQzU3RDkzMEIyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLxsXO9X5HJR0MfBMaLZ9diG9 STEub5tFt02hInzxi9BWPn9+ksz5YtczT9zFVcARNp+uzcIVqHy9xxU1FTW5+S7f BvgdKFVeDIx8+9cw92/n8FgzyIA4Ik29F4qMEMmzyyxTMj2V5bBPgj5DvCd3JcvD 80Cw9R+d4xFhYo6LNGOd6afEeNIkBd+KIxqJ3xphlKfQyacItOT+/8CfB4a6DAuD XpYYtZJO5dn01BW5JaP1BJfRNqq36gYZy1isMTuN7cFJAfH9cMNn9nrAla7b/abo MnVZNjcaJSCbz+UuTY+bxSj5PhqVEO9E4vLjti00MJKFbVuSSY6+Uvi/P5rzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtJeDfu/e9E/Kz19VohesV9kwsokwHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJngPJ2e1FgeLfZNJDru8HABSQt8PDrOyNIa meRWx2zNfrDsivYS1TM68Pviwg+/+yT73zyCW58jlRo2otWTgYWb25m8UwEKbOJg GsPirmvd56IF2n+gUfgfeRZJlOBdJCWNkWUZN2pytJfIpuE4ei/5TsuXSAak+ooW 2EGCJic9YkNXZNYp635EN4NdGpUTuWbrzujFSG+VLiSTbYiKlOSWTU3zrmZVaYxt CaLVWfZyuGeRMSiKXNm1knJhiEbWl3Ku3wv9RrZaVeubiDcYJP3owkF0bYizGwtW B+8eBiDagSEIMWMHB9pbjqkuudkcdF0sjl8ghdgdX0gmgS5gCzE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:17:42 2025 by rpki-client