$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: 7pH2igIyHEzi/NLlmMm4ZQpXZqhaC6g1t+S837XQWeo= Subject key identifier: B0:B7:3F:7A:32:F5:A0:75:2A:71:35:13:FE:2D:A1:06:D0:5B:D2:7C Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 1008CDEF1829E9E7D8BB38D983DBD079257527B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 041E Signing time: Sun 15 Jun 2025 11:21:17 +0000 Manifest this update: Sun 15 Jun 2025 11:16:17 +0000 Manifest next update: Wed 18 Jun 2025 19:36:17 +0000 Files and hashes: 1: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: WW7W6Yj2G/47WPhY9FaJiFfRCgajmearKgt2Y7lE/bA=) 2: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: N1RErAXEpn13oK+RuLpf/bNorg2XXa5mFf/ImZ1wVlA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 19:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:08:cd:ef:18:29:e9:e7:d8:bb:38:d9:83:db:d0:79:25:75:27:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Jun 15 11:16:17 2025 GMT Not After : Jun 18 19:36:17 2025 GMT Subject: CN=B0B73F7A32F5A0752A713513FE2DA106D05BD27C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:be:88:2a:ec:ae:fb:0c:a3:e5:81:31:e8: 06:86:db:20:1e:d6:25:4a:e0:d2:b8:5b:c1:7a:5c: d2:b4:e9:f4:4a:3b:cf:36:bd:04:2f:9f:43:1e:80: 17:d2:df:c0:99:e4:af:87:2a:71:a9:1f:a2:e4:8c: 8a:eb:c7:7b:88:05:84:c8:fc:72:85:05:83:3e:46: c3:47:da:46:b8:80:1c:bb:6b:28:67:f3:ef:10:bf: 75:a2:9a:58:d3:85:4c:d6:16:3a:b6:95:07:73:38: c1:a2:fd:f2:98:a3:41:4a:7f:51:52:7b:32:d0:a8: f2:a2:cf:8d:ea:50:30:07:5e:5d:98:52:c4:75:0d: ca:e4:e9:93:ba:8e:84:e5:58:81:d8:d5:8a:cd:b7: 15:35:c9:08:2f:9e:cb:02:4c:b2:ea:7a:f5:16:55: d3:93:f2:78:e0:14:c3:91:44:20:50:4a:ac:dd:5d: 57:60:84:b9:4c:83:6b:49:dd:49:05:ab:79:33:08: f7:e6:65:94:9d:f9:ba:96:ce:2d:02:94:21:75:23: f9:9d:04:1b:2a:0b:df:fa:6c:b8:56:02:3a:53:eb: 8b:66:38:22:59:24:17:16:81:7a:a1:38:db:db:8f: f7:18:7c:79:02:e9:2e:ef:12:24:71:4f:06:7a:06: a1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B7:3F:7A:32:F5:A0:75:2A:71:35:13:FE:2D:A1:06:D0:5B:D2:7C X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:70:91:5d:99:3d:37:ed:ab:55:96:dd:df:b8:f3:a1:51:b7: be:c4:a3:ac:44:b1:cf:d0:c8:3a:45:8a:3f:0f:93:fd:61:2e: 0f:2b:ec:b9:28:3d:3a:ac:60:3a:db:91:1f:db:3a:42:3e:9c: 6c:3e:b3:64:cb:42:34:4d:7c:bd:25:f2:50:6f:91:58:77:02: 82:51:2a:23:e3:6b:db:7e:77:99:5a:12:b7:f6:11:b5:4c:f9: 00:a8:41:8a:71:7b:28:e9:0f:5e:5b:66:e2:54:b8:3e:a9:fb: 6c:9e:ac:4b:ef:b0:f6:08:43:86:fb:3a:10:d0:75:1b:4b:0b: 62:14:25:ec:fc:46:85:b8:52:6d:3d:a2:32:6e:38:95:86:1f: 84:82:d5:e0:24:fe:e0:8d:3d:13:c0:14:67:82:93:35:8c:38: 31:23:9e:7c:85:db:8a:5e:e9:ef:47:0b:2d:d7:a4:69:1f:50: d8:fd:1b:6e:70:ad:ac:a5:11:19:b0:9c:8f:2e:93:0c:cc:8b: 4f:f8:28:e0:57:48:4e:d1:36:48:24:91:61:af:7b:73:16:8e: 20:26:b5:dd:67:43:b9:15:09:c9:6e:fd:be:89:55:ff:7d:33: cf:14:60:b1:69:16:e3:4b:ba:ad:b7:74:1b:4a:f6:e5:f7:d8: 5a:f2:04:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAjN7xgp6efYuzjZg9vQeSV1J7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTA2MTUxMTE2MTdaFw0yNTA2MTgxOTM2MTdaMDMxMTAvBgNV BAMTKEIwQjczRjdBMzJGNUEwNzUyQTcxMzUxM0ZFMkRBMTA2RDA1QkQyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/T76IKuyu+wyj5YEx6AaG2yAe 1iVK4NK4W8F6XNK06fRKO882vQQvn0MegBfS38CZ5K+HKnGpH6LkjIrrx3uIBYTI /HKFBYM+RsNH2ka4gBy7ayhn8+8Qv3WimljThUzWFjq2lQdzOMGi/fKYo0FKf1FS ezLQqPKiz43qUDAHXl2YUsR1Dcrk6ZO6joTlWIHY1YrNtxU1yQgvnssCTLLqevUW VdOT8njgFMORRCBQSqzdXVdghLlMg2tJ3UkFq3kzCPfmZZSd+bqWzi0ClCF1I/md BBsqC9/6bLhWAjpT64tmOCJZJBcWgXqhONvbj/cYfHkC6S7vEiRxTwZ6BqGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsLc/ejL1oHUqcTUT/i2hBtBb0nwwHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENwkV2ZPTftq1WW3d+486FRt77Eo6xEsc/Q yDpFij8Pk/1hLg8r7LkoPTqsYDrbkR/bOkI+nGw+s2TLQjRNfL0l8lBvkVh3AoJR KiPja9t+d5laErf2EbVM+QCoQYpxeyjpD15bZuJUuD6p+2yerEvvsPYIQ4b7OhDQ dRtLC2IUJez8RoW4Um09ojJuOJWGH4SC1eAk/uCNPRPAFGeCkzWMODEjnnyF24pe 6e9HCy3XpGkfUNj9G25wraylERmwnI8ukwzMi0/4KOBXSE7RNkgkkWGve3MWjiAm td1nQ7kVCclu/b6JVf99M88UYLFpFuNLuq23dBtK9uX32FryBDw= -----END CERTIFICATE-----Generated at Mon Jun 16 13:05:18 2025 by rpki-client