$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: Ur40V0WCGL+BPbbZq2FxSTG/xm19h/YvJoAH0xmIdVU= Subject key identifier: 55:6C:5E:93:99:28:9A:9A:21:08:97:5A:DD:B8:3C:44:05:C2:BF:5B Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 5331445A9E1CD028D25ED0A865B0CFB5D0CA650E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 0419 Signing time: Tue 03 Jun 2025 19:42:23 +0000 Manifest this update: Tue 03 Jun 2025 19:37:23 +0000 Manifest next update: Fri 06 Jun 2025 22:30:23 +0000 Files and hashes: 1: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: zXhomN17pfYOQODq826HnOLDXv5MCgjDPpsapACUomw=) 2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: WW7W6Yj2G/47WPhY9FaJiFfRCgajmearKgt2Y7lE/bA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:31:44:5a:9e:1c:d0:28:d2:5e:d0:a8:65:b0:cf:b5:d0:ca:65:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Jun 3 19:37:23 2025 GMT Not After : Jun 6 22:30:23 2025 GMT Subject: CN=556C5E9399289A9A2108975ADDB83C4405C2BF5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f5:36:d0:7f:f7:ec:90:82:68:ad:c4:79:ba: 1d:42:cd:e0:99:c0:98:04:47:89:3d:fb:14:2e:81: f7:78:54:fc:69:2c:77:70:70:03:74:61:bb:7e:c9: a4:f1:32:b2:93:2e:66:a9:2e:d3:f4:56:90:3c:a9: c3:9e:55:7d:c2:07:67:6e:3c:f1:6d:7d:34:62:63: 26:6b:4b:94:6c:7b:1c:bb:9e:1d:99:2d:a6:6c:a8: e3:e8:41:85:a4:79:60:69:a3:28:20:cc:24:3e:5e: b7:3c:1a:89:88:0c:9d:0e:99:dd:ff:7e:a7:b6:54: 4c:5d:b0:f3:f4:6b:dd:b2:95:0d:3d:7f:8f:57:10: 18:35:9f:96:ad:0f:32:0e:cb:8d:d2:0a:8e:38:15: 3b:47:c5:70:24:b6:f1:90:0b:90:45:7a:1c:ee:53: e6:7f:bb:a4:98:26:c2:d9:8d:48:82:9a:18:2b:0f: 5f:f3:51:3c:23:ce:c3:6b:a5:32:31:33:5e:45:11: 00:a3:57:b7:85:e9:0d:4c:2c:c6:89:74:08:ed:af: b7:54:17:47:0a:e0:39:37:2c:98:9e:af:ab:b5:d4: 1d:b9:71:d5:2b:7c:ad:b4:e1:e6:b5:d2:d6:5e:69: dd:70:47:4c:97:b3:ad:9e:f6:58:12:b0:fa:c4:e8: f7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6C:5E:93:99:28:9A:9A:21:08:97:5A:DD:B8:3C:44:05:C2:BF:5B X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:bf:18:16:e0:f2:56:6d:5f:e8:bb:5a:40:dd:b0:a9:89:13: 02:70:e1:3c:5b:1e:00:f0:5c:f4:14:c3:9f:4f:04:42:6e:f0: c0:3b:2e:14:95:87:40:f9:ac:95:36:8f:1b:05:53:7d:68:c9: 84:e6:7b:e9:f1:5d:df:80:05:29:a9:51:94:1a:73:70:7c:fa: a0:78:5c:08:ff:37:05:0d:ca:9e:79:f5:14:f6:a4:f8:b0:dd: 8c:32:1a:05:f4:02:55:0e:1e:5c:4b:47:2f:6a:4a:f0:68:49: 26:24:a7:3a:be:4d:88:69:8d:38:b7:1d:d5:30:63:79:e5:19: ba:81:47:a1:d6:5a:75:31:65:12:1a:77:a4:65:bb:f0:7b:00: 15:2d:80:05:6d:1d:be:34:61:05:83:4a:f3:0e:13:98:6f:50: f9:fc:38:03:61:b8:b3:7b:70:0f:2c:6a:f0:16:fb:8a:59:4e: b6:57:66:d0:74:cc:11:b7:a9:1c:04:dd:41:a3:4e:1e:00:9c: fa:a8:95:80:cc:64:04:10:17:37:03:1f:97:4a:27:a0:71:a3: a5:4e:66:69:98:0d:91:19:dc:00:6e:6e:22:8e:e9:84:ae:d0: 8c:9b:5f:44:d8:76:a3:ea:90:a1:47:1c:dc:48:f5:cb:75:02: 6d:90:4f:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzFEWp4c0CjSXtCoZbDPtdDKZQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTA2MDMxOTM3MjNaFw0yNTA2MDYyMjMwMjNaMDMxMTAvBgNV BAMTKDU1NkM1RTkzOTkyODlBOUEyMTA4OTc1QUREQjgzQzQ0MDVDMkJGNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9TbQf/fskIJorcR5uh1CzeCZ wJgER4k9+xQugfd4VPxpLHdwcAN0Ybt+yaTxMrKTLmapLtP0VpA8qcOeVX3CB2du PPFtfTRiYyZrS5Rsexy7nh2ZLaZsqOPoQYWkeWBpoyggzCQ+Xrc8GomIDJ0Omd3/ fqe2VExdsPP0a92ylQ09f49XEBg1n5atDzIOy43SCo44FTtHxXAktvGQC5BFehzu U+Z/u6SYJsLZjUiCmhgrD1/zUTwjzsNrpTIxM15FEQCjV7eF6Q1MLMaJdAjtr7dU F0cK4Dk3LJier6u11B25cdUrfK204ea10tZead1wR0yXs62e9lgSsPrE6PfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVWxek5kompohCJda3bg8RAXCv1swHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFG/GBbg8lZtX+i7WkDdsKmJEwJw4TxbHgDw XPQUw59PBEJu8MA7LhSVh0D5rJU2jxsFU31oyYTme+nxXd+ABSmpUZQac3B8+qB4 XAj/NwUNyp559RT2pPiw3YwyGgX0AlUOHlxLRy9qSvBoSSYkpzq+TYhpjTi3HdUw Y3nlGbqBR6HWWnUxZRIad6Rlu/B7ABUtgAVtHb40YQWDSvMOE5hvUPn8OANhuLN7 cA8savAW+4pZTrZXZtB0zBG3qRwE3UGjTh4AnPqolYDMZAQQFzcDH5dKJ6Bxo6VO ZmmYDZEZ3ABubiKO6YSu0IybX0TYdqPqkKFHHNxI9ct1Am2QTzg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:47 2025 by rpki-client