$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: KknbZClF+bXQTx48hIfX0srnJDmy++ZxJh3ZKkWJ77c= Subject key identifier: BC:B8:27:C8:F7:DC:F1:BD:DB:79:7F:AB:F5:F7:E3:C6:C5:57:61:10 Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 4BC5E77836D501E8F8857CB5FA24A64DA88FA62F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 045D Signing time: Tue 04 Nov 2025 05:11:19 +0000 Manifest this update: Tue 04 Nov 2025 05:06:19 +0000 Manifest next update: Fri 07 Nov 2025 07:43:19 +0000 Files and hashes: 1: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: CILP3xPHDYISCERR8al/4AXzgpy3MOm8yyD0J4YyA5g=) 2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: Y0HTNIxciTP1JYEk53UJRfKBr5bisZIo+A6n6oiY4Hg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c5:e7:78:36:d5:01:e8:f8:85:7c:b5:fa:24:a6:4d:a8:8f:a6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Nov 4 05:06:19 2025 GMT Not After : Nov 7 07:43:19 2025 GMT Subject: CN=BCB827C8F7DCF1BDDB797FABF5F7E3C6C5576110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:2e:d3:e7:5e:f1:2c:2e:1a:64:3b:77:7a: 21:35:c1:6d:d1:3e:c8:46:98:b2:0a:c6:d5:b9:8f: f4:ad:4e:71:27:0e:f7:86:d5:c1:fb:ff:02:c6:d4: f3:f0:0a:68:2c:55:49:17:2b:ed:6e:ef:9a:9e:7e: e8:92:f7:43:79:94:15:b0:b6:a4:5f:06:f7:6b:dd: 75:32:f3:90:80:d4:85:e7:e3:33:78:93:b3:d7:97: 85:65:e4:66:cc:0b:29:50:17:05:28:88:94:f5:82: 28:40:24:be:43:1d:d8:c1:ca:0e:d0:c8:98:43:5e: 92:65:97:dc:d7:55:b9:59:b4:1f:4a:98:84:61:0f: b7:dd:b1:d6:95:f6:e7:c1:af:4e:00:7b:3d:56:8a: 1d:39:60:66:df:24:39:93:d8:ae:57:b1:39:cb:fc: d5:e4:15:c3:3d:4a:f7:b9:44:79:23:77:bf:28:68: 12:91:b0:7f:3b:f3:e1:73:03:40:ac:1b:1a:2e:0d: ce:43:c3:5d:d0:62:83:26:e4:a2:26:bb:d3:14:9c: 73:6a:a8:90:98:af:63:91:93:77:7b:b6:a8:41:83: 4c:07:a6:d5:ce:ea:26:e5:06:32:09:29:a2:50:92: 53:0f:1f:9b:7d:50:8b:d2:81:24:1d:b5:f3:41:e4: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B8:27:C8:F7:DC:F1:BD:DB:79:7F:AB:F5:F7:E3:C6:C5:57:61:10 X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3e:e6:1a:60:4e:1d:5b:a7:ba:25:c3:48:12:78:b7:a6:2c: 9e:ea:6a:e0:3d:aa:37:5e:ad:0a:42:20:e2:41:eb:a0:3a:df: 19:15:f9:91:6e:5a:5a:a6:f9:15:cc:92:7c:28:31:0e:e1:b2: df:53:c7:1b:53:f8:b7:db:8c:59:6b:05:1b:67:b0:06:9b:88: 69:00:d3:a3:1e:7b:b2:5c:ab:f7:dc:f4:10:8a:77:86:ee:fa: 8c:36:78:b7:53:8b:90:de:1b:51:4a:09:81:9b:e3:4b:9a:01: 59:93:03:3c:48:ef:0a:8c:04:5d:10:b7:3e:3b:f0:41:d7:5c: ef:2c:32:a1:c5:c2:4a:e9:2d:32:5a:6b:84:89:c7:b0:56:5a: 84:b2:8d:6b:c2:25:88:c2:8d:53:cd:ba:d5:55:c1:ef:39:e4: 6d:b5:42:55:ae:e4:05:c9:fd:8a:f9:26:b1:78:ae:d8:25:58: 9f:be:8b:ad:4e:fe:58:2a:60:3d:75:5c:b2:61:80:03:70:5e: 86:2f:73:56:7e:c5:4e:fb:15:20:57:05:00:d0:b8:ec:45:c5: a7:e2:87:69:9d:18:e9:4c:27:6d:8c:d2:5d:b3:9d:f6:54:3d: 27:c6:41:f7:0c:08:0b:9b:10:7b:68:4c:8a:3b:41:21:3d:52: 10:5a:24:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS8XneDbVAej4hXy1+iSmTaiPpi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTExMDQwNTA2MTlaFw0yNTExMDcwNzQzMTlaMDMxMTAvBgNV BAMTKEJDQjgyN0M4RjdEQ0YxQkREQjc5N0ZBQkY1RjdFM0M2QzU1NzYxMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhC7T517xLC4aZDt3eiE1wW3R PshGmLIKxtW5j/StTnEnDveG1cH7/wLG1PPwCmgsVUkXK+1u75qefuiS90N5lBWw tqRfBvdr3XUy85CA1IXn4zN4k7PXl4Vl5GbMCylQFwUoiJT1gihAJL5DHdjByg7Q yJhDXpJll9zXVblZtB9KmIRhD7fdsdaV9ufBr04Aez1Wih05YGbfJDmT2K5XsTnL /NXkFcM9Sve5RHkjd78oaBKRsH878+FzA0CsGxouDc5Dw13QYoMm5KImu9MUnHNq qJCYr2ORk3d7tqhBg0wHptXO6iblBjIJKaJQklMPH5t9UIvSgSQdtfNB5EQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvLgnyPfc8b3beX+r9ffjxsVXYRAwHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEs+5hpgTh1bp7olw0gSeLemLJ7qauA9qjde rQpCIOJB66A63xkV+ZFuWlqm+RXMknwoMQ7hst9TxxtT+LfbjFlrBRtnsAabiGkA 06Mee7Jcq/fc9BCKd4bu+ow2eLdTi5DeG1FKCYGb40uaAVmTAzxI7wqMBF0Qtz47 8EHXXO8sMqHFwkrpLTJaa4SJx7BWWoSyjWvCJYjCjVPNutVVwe855G21QlWu5AXJ /Yr5JrF4rtglWJ++i61O/lgqYD11XLJhgANwXoYvc1Z+xU77FSBXBQDQuOxFxafi h2mdGOlMJ22M0l2znfZUPSfGQfcMCAubEHtoTIo7QSE9UhBaJLY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:53 2025 by rpki-client