$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json) Hash identifier: q63HhOezL5ydD1q9+e6gSosRUiHXa7f/j5kqh22N3QY= Subject key identifier: 96:F1:E8:63:8C:E8:FE:A7:8F:A0:D4:29:8F:DD:BB:14:AC:46:99:CE Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 4CC23BC17D1EAFF60A32DA44C5AB55E8AA1A4019 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft Manifest number: 01D8 Signing time: Fri 04 Apr 2025 12:41:07 +0000 Manifest this update: Fri 04 Apr 2025 12:36:07 +0000 Manifest next update: Mon 07 Apr 2025 14:31:07 +0000 Files and hashes: 1: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: geXAQe6sgKG4tW/4eQGuZkh/OV/pGCGISxkEVPQrzOw=) 2: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: QqyJNASMZtjn96t+A2cpl22xR0g97zOoHQCrnEWX+Fo=) 3: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: DxhHqoUAAMdaWjOHEj/Le98DcBLSN3wsgkEpHqCel+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 14:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c2:3b:c1:7d:1e:af:f6:0a:32:da:44:c5:ab:55:e8:aa:1a:40:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: Apr 4 12:36:07 2025 GMT Not After : Apr 7 14:31:07 2025 GMT Subject: CN=96F1E8638CE8FEA78FA0D4298FDDBB14AC4699CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:e3:56:ae:31:1f:10:48:c3:d0:66:98:10: 28:a1:28:2c:95:8e:5e:a0:c7:fd:23:d8:e6:32:d5: 43:a0:b6:2e:a0:be:dc:11:a4:86:66:18:07:4c:73: aa:95:88:5c:4c:30:76:f4:6e:2f:30:fb:55:06:9c: 28:2c:b9:db:2b:43:86:a9:c5:93:dd:eb:79:c9:07: 55:bd:c4:27:e6:e3:dd:23:31:24:7d:dc:c2:78:2d: 3f:50:10:96:a6:5a:cb:96:85:67:39:b5:81:2a:94: 0e:e2:c5:e4:a1:64:4b:03:23:68:e4:45:84:6a:c5: 68:25:9a:99:35:6a:ef:4f:33:e9:d0:ee:44:f4:95: 1e:67:0e:e2:28:d9:c9:b5:23:af:1b:78:30:60:58: 8d:b0:40:84:78:d4:6c:3d:51:2b:36:d3:e3:9a:93: c4:85:c9:51:d1:5d:9d:6c:b7:9c:7f:5e:9a:fa:92: e3:c2:8f:b2:65:75:58:71:a9:93:42:98:d9:e6:2b: 26:b0:98:fe:3b:74:c5:1f:3b:e1:15:e5:ac:b7:c1: d9:7e:3c:15:3b:f5:f6:c4:33:03:db:d8:f7:5d:4c: 30:4c:c9:12:ab:33:44:9c:85:b5:5d:5a:14:d5:3a: 2e:f5:2a:59:2e:a8:10:cc:80:72:b4:cb:06:e5:9b: d2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F1:E8:63:8C:E8:FE:A7:8F:A0:D4:29:8F:DD:BB:14:AC:46:99:CE X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:72:6e:f4:b7:b5:84:57:da:cf:c7:2c:03:ce:9d:0d:cc:95: ff:b0:8f:02:a9:3b:9d:89:40:a1:c4:23:70:97:95:7e:b0:1f: c8:2c:cd:da:90:a9:50:34:26:fb:50:0e:59:b6:bd:e7:37:e5: 1f:91:98:6b:b8:46:6c:59:39:7e:df:17:26:17:cb:7b:5e:43: 71:ca:60:6a:10:e5:97:78:06:11:3a:a1:f8:44:22:66:58:5b: 7c:23:e1:fb:49:cf:f1:3a:eb:76:67:83:0d:80:e0:0f:e9:41: 45:42:a9:3c:50:ef:34:39:ae:7f:a3:18:94:d2:46:aa:e4:3f: e6:03:9a:f9:cc:c0:5a:6d:f5:51:6b:51:47:ac:f4:60:de:1a: b3:95:5b:12:41:c3:df:e8:02:f8:48:db:f8:86:73:ea:ef:2f: 3f:89:e2:08:b6:27:3e:dc:83:87:3f:b6:e1:c1:ef:e6:d2:45: dc:1c:df:c1:47:55:ae:45:c3:ab:17:f7:9f:7c:63:e7:39:83: 69:6f:9a:b8:6a:1a:39:83:d4:bd:69:31:75:ac:7a:ea:2a:14: 80:e4:49:2f:de:37:94:25:80:9a:d8:b3:4a:a7:86:a4:ba:10: aa:b0:ad:e5:c6:9e:2c:ee:e6:43:e2:9e:39:f8:f7:70:be:db: ea:47:11:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTMI7wX0er/YKMtpExatV6KoaQBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNTA0MDQxMjM2MDdaFw0yNTA0MDcxNDMxMDdaMDMxMTAvBgNV BAMTKDk2RjFFODYzOENFOEZFQTc4RkEwRDQyOThGRERCQjE0QUM0Njk5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl5uNWrjEfEEjD0GaYECihKCyV jl6gx/0j2OYy1UOgti6gvtwRpIZmGAdMc6qViFxMMHb0bi8w+1UGnCgsudsrQ4ap xZPd63nJB1W9xCfm490jMSR93MJ4LT9QEJamWsuWhWc5tYEqlA7ixeShZEsDI2jk RYRqxWglmpk1au9PM+nQ7kT0lR5nDuIo2cm1I68beDBgWI2wQIR41Gw9USs20+Oa k8SFyVHRXZ1st5x/Xpr6kuPCj7JldVhxqZNCmNnmKyawmP47dMUfO+EV5ay3wdl+ PBU79fbEMwPb2PddTDBMyRKrM0SchbVdWhTVOi71KlkuqBDMgHK0ywblm9JTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlvHoY4zo/qePoNQpj927FKxGmc4wHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0 M0IzMjY0RkY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhybvS3tYRX2s/HLAPOnQ3Mlf+wjwKpO52J QKHEI3CXlX6wH8gszdqQqVA0JvtQDlm2vec35R+RmGu4RmxZOX7fFyYXy3teQ3HK YGoQ5Zd4BhE6ofhEImZYW3wj4ftJz/E663Zngw2A4A/pQUVCqTxQ7zQ5rn+jGJTS RqrkP+YDmvnMwFpt9VFrUUes9GDeGrOVWxJBw9/oAvhI2/iGc+rvLz+J4gi2Jz7c g4c/tuHB7+bSRdwc38FHVa5Fw6sX9598Y+c5g2lvmrhqGjmD1L1pMXWseuoqFIDk SS/eN5QlgJrYs0qnhqS6EKqwreXGnizu5kPinjn493C+2+pHEcQ= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:31 2025 by rpki-client