$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json) Hash identifier: SetO5kP8WK2dgC19iUOppSAQ2Fn3Y+M4Oej/KHO8bFY= Subject key identifier: 88:FF:6D:1D:FF:0D:0F:B2:5A:85:43:81:D6:5C:54:19:43:65:76:BD Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 2202CB28DB80269D67646FC1D0DEEF7434D42E70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft Manifest number: 021B Signing time: Wed 03 Sep 2025 00:41:08 +0000 Manifest this update: Wed 03 Sep 2025 00:36:08 +0000 Manifest next update: Sat 06 Sep 2025 10:25:08 +0000 Files and hashes: 1: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: dlbD+/5uiiUjSDqz5gbpKFRhYKZ5dEw2xA5icRVSOmE=) 2: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: QqyJNASMZtjn96t+A2cpl22xR0g97zOoHQCrnEWX+Fo=) 3: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: DxhHqoUAAMdaWjOHEj/Le98DcBLSN3wsgkEpHqCel+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:02:cb:28:db:80:26:9d:67:64:6f:c1:d0:de:ef:74:34:d4:2e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: Sep 3 00:36:08 2025 GMT Not After : Sep 6 10:25:08 2025 GMT Subject: CN=88FF6D1DFF0D0FB25A854381D65C5419436576BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:4b:2b:89:0a:12:b0:30:67:d8:15:cc:59: 55:a3:79:4a:32:54:68:0f:33:7a:c1:ae:e2:a5:4d: 76:5d:1e:a4:bb:47:37:40:73:d8:0b:d7:58:18:bd: a7:41:ea:44:52:7f:d8:87:93:1a:95:68:79:c3:01: 0f:fe:86:fc:4c:57:3f:f0:e0:1d:98:b4:f6:b2:3a: 6c:8c:4c:85:a5:77:42:58:37:09:ce:35:e3:fe:2d: 80:f6:32:54:c5:b1:7f:6c:1a:7f:4e:34:54:0c:c6: 84:6a:e4:d4:1b:ca:13:01:e2:c7:d8:2c:ac:1c:dd: 86:f8:39:08:72:ed:68:d5:68:ed:38:ef:41:53:59: 9e:89:96:9f:8e:c3:d7:b0:cc:89:c5:17:52:d5:c2: 2a:1a:5e:07:4a:6f:04:0e:d7:0c:0e:86:17:28:bd: c8:90:95:34:88:d3:7e:6a:3f:14:4a:de:79:72:80: 47:0d:09:ed:a3:f3:e3:65:27:69:17:cf:2a:af:8a: a1:1e:61:6c:97:49:e5:d0:16:03:ad:a5:bb:4c:7a: 62:74:01:7e:cb:f0:49:24:8a:f2:4c:5b:2e:43:70: e5:5c:f4:16:eb:7f:30:86:30:5f:c0:69:25:6e:54: 2f:c4:b3:c7:f9:b0:71:3c:13:d4:25:74:67:66:d8: f4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FF:6D:1D:FF:0D:0F:B2:5A:85:43:81:D6:5C:54:19:43:65:76:BD X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:85:37:31:ac:e2:d7:59:65:88:b0:80:d6:1a:5d:63:0f:a0: 77:c1:9d:c8:e9:aa:5d:10:2a:09:2f:ea:91:b1:f9:8f:eb:1c: 8e:32:48:31:b0:26:a9:6f:6c:35:a6:d5:1f:37:ce:40:61:f9: ff:fd:e9:47:37:eb:e3:94:41:f2:7c:8c:f1:f3:53:b1:3a:c2: 9b:90:05:af:80:1f:9a:4f:04:64:f7:8b:28:7a:6b:dd:c6:26: 71:29:df:da:6d:f6:02:80:e4:ea:f8:58:0f:33:7a:49:26:59: 88:21:cd:03:0e:1b:0e:79:49:07:02:66:28:f2:3a:12:83:aa: 74:34:ae:f9:ae:a1:87:18:8a:45:c8:09:f4:48:73:66:e0:76: 64:c0:8d:8b:2d:58:1a:ec:a8:2e:1d:c6:31:cb:da:81:58:57: 12:0c:d9:f4:9f:ac:11:ec:6d:fb:13:66:e4:48:aa:a1:32:b2: cd:49:4f:50:c3:4c:d0:c4:85:15:ec:57:8d:fe:0d:9a:ce:7d: 86:70:1e:20:3e:f9:8b:93:3a:9d:ba:cb:4b:1e:63:b2:1d:1c: 39:6a:f6:fa:8d:da:59:34:44:92:14:7d:e7:ad:15:22:6b:ec: 6f:1d:e9:9a:b6:d4:0f:46:bc:d2:42:0b:51:60:14:3e:de:f4: c0:9c:ea:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgLLKNuAJp1nZG/B0N7vdDTULnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNTA5MDMwMDM2MDhaFw0yNTA5MDYxMDI1MDhaMDMxMTAvBgNV BAMTKDg4RkY2RDFERkYwRDBGQjI1QTg1NDM4MUQ2NUM1NDE5NDM2NTc2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZksriQoSsDBn2BXMWVWjeUoy VGgPM3rBruKlTXZdHqS7RzdAc9gL11gYvadB6kRSf9iHkxqVaHnDAQ/+hvxMVz/w 4B2YtPayOmyMTIWld0JYNwnONeP+LYD2MlTFsX9sGn9ONFQMxoRq5NQbyhMB4sfY LKwc3Yb4OQhy7WjVaO0470FTWZ6Jlp+Ow9ewzInFF1LVwioaXgdKbwQO1wwOhhco vciQlTSI035qPxRK3nlygEcNCe2j8+NlJ2kXzyqviqEeYWyXSeXQFgOtpbtMemJ0 AX7L8EkkivJMWy5DcOVc9BbrfzCGMF/AaSVuVC/Es8f5sHE8E9QldGdm2PR5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiP9tHf8ND7JahUOB1lxUGUNldr0wHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0 M0IzMjY0RkY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaFNzGs4tdZZYiwgNYaXWMPoHfBncjpql0Q Kgkv6pGx+Y/rHI4ySDGwJqlvbDWm1R83zkBh+f/96Uc36+OUQfJ8jPHzU7E6wpuQ Ba+AH5pPBGT3iyh6a93GJnEp39pt9gKA5Or4WA8zekkmWYghzQMOGw55SQcCZijy OhKDqnQ0rvmuoYcYikXICfRIc2bgdmTAjYstWBrsqC4dxjHL2oFYVxIM2fSfrBHs bfsTZuRIqqEyss1JT1DDTNDEhRXsV43+DZrOfYZwHiA++YuTOp26y0seY7IdHDlq 9vqN2lk0RJIUfeetFSJr7G8d6Zq21A9GvNJCC1FgFD7e9MCc6qo= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:34 2025 by rpki-client