$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: LFAoS+dzzhaetxUbLf0Rzqn1UFLvHCUjwSA9q6F5/Ks= Subject key identifier: 3E:44:F1:C1:5A:EC:37:83:D8:72:8C:6B:0F:C0:73:05:F6:6E:6F:B1 Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 47F3E4CB23C12BDEACECDAF9BA46128F18276E21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 0333 Signing time: Fri 25 Apr 2025 20:12:12 +0000 Manifest this update: Fri 25 Apr 2025 20:07:12 +0000 Manifest next update: Tue 29 Apr 2025 00:09:12 +0000 Files and hashes: 1: 3130332e3135382e35392e302f32342d3234203d3e203137393935.roa (hash: 7iBHgGYKAoLVfSVzVrtATYUKOYKKHRSz7KTZsrE7P78=) 2: 3130332e3135382e35382e302f32332d3233203d3e203137393935.roa (hash: +8egnZEvXKWcwk+V4p3Tes+84K8cdSV9e+Lhzfpak6w=) 3: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: e/DyMR6hIw0ZEyzvV9xnlTENJCRzNrg7Fnyp49JtIPg=) 4: 3130332e3135382e35382e302f32342d3234203d3e203137393935.roa (hash: nEX5obMx7c1O0Mt16rHdamjU/vyDUmneghPgPs1dpHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f3:e4:cb:23:c1:2b:de:ac:ec:da:f9:ba:46:12:8f:18:27:6e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: Apr 25 20:07:12 2025 GMT Not After : Apr 29 00:09:12 2025 GMT Subject: CN=3E44F1C15AEC3783D8728C6B0FC07305F66E6FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:04:ad:fa:d6:db:14:5d:3a:fa:c5:52:bb: a9:bf:ad:a2:ba:db:7a:76:f0:08:39:03:39:02:b5: 91:e2:7b:6c:5d:a6:6f:79:f6:3c:3c:1d:26:60:df: 54:6a:c0:61:f0:1e:21:74:e2:9d:83:32:ee:3e:28: 0b:1e:4a:f7:05:fb:b6:ad:58:2e:ef:3a:a0:4b:69: 8b:45:57:4f:b4:e6:68:35:cd:83:83:1c:68:55:6b: 6b:fb:14:04:57:d2:01:36:e9:c5:a7:69:d1:c9:60: 92:1b:64:6f:89:30:29:c1:de:78:74:5a:28:f3:40: 2b:b8:cb:a3:2a:3c:55:14:08:bf:2a:45:f9:62:bf: ac:d7:45:6a:cb:76:82:a4:3d:94:9e:0c:86:4e:47: 98:7e:74:7b:f2:b8:c7:c2:5b:5a:c8:57:ca:92:c5: 35:12:09:73:8c:f7:5f:a3:b7:02:a6:2a:e6:4b:e1: 4c:31:ba:5f:6e:92:69:55:48:08:d3:f9:0d:39:54: 1c:35:a6:73:c7:d3:db:62:4c:94:40:28:41:0c:b3: 2f:45:7a:20:4f:34:54:06:c5:9b:f3:26:4b:0c:63: ef:bf:0c:4e:6f:64:ce:c7:16:c6:60:43:21:ba:ce: 57:b4:ad:13:a0:6b:5a:b6:da:67:94:2f:ec:7a:3b: c5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:44:F1:C1:5A:EC:37:83:D8:72:8C:6B:0F:C0:73:05:F6:6E:6F:B1 X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:83:ab:28:72:6f:17:b6:ee:50:59:f5:a9:45:a1:f9:8f:85: d8:ac:a1:c3:4a:2d:b1:4c:61:93:6e:b3:6b:b8:66:c6:b4:15: 30:d3:4f:4a:21:cc:17:45:7f:78:cc:6b:ae:78:96:f4:0b:79: 37:a8:1c:61:d8:b1:d7:d5:53:80:90:20:31:0b:70:b3:ff:0c: 9d:7d:9d:87:f9:47:80:c9:ef:28:bc:f0:c8:83:c5:73:99:12: 58:22:1d:ea:6f:5c:c0:12:ff:ed:12:83:4a:10:21:07:82:47: 23:e2:bb:8e:ea:ff:ad:f2:58:29:f1:c8:ee:f8:16:5f:fe:15: d9:f0:13:53:09:28:cd:31:ff:b4:92:22:1f:1d:fa:88:6c:55: 5d:55:4a:7f:d4:7a:96:c6:bc:9c:43:91:1d:0a:57:04:c8:e6: 88:16:7e:55:c0:28:dc:e7:24:18:64:8b:f2:06:fd:f6:ec:95: a7:a2:13:47:70:f2:5c:34:94:51:e3:12:d9:3f:73:ca:81:2c: 07:68:65:6e:a3:1a:c9:f9:b1:36:0b:54:75:bd:97:73:9e:4e: 11:76:01:70:fa:e4:51:81:e1:e4:87:9f:d8:a9:ff:97:95:da: 5a:b8:dc:c6:1e:28:7d:1b:64:c7:ba:c2:cb:3b:2d:e2:5f:d3: 63:e5:13:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/PkyyPBK96s7Nr5ukYSjxgnbiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNTA0MjUyMDA3MTJaFw0yNTA0MjkwMDA5MTJaMDMxMTAvBgNV BAMTKDNFNDRGMUMxNUFFQzM3ODNEODcyOEM2QjBGQzA3MzA1RjY2RTZGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDViQSt+tbbFF06+sVSu6m/raK6 23p28Ag5AzkCtZHie2xdpm959jw8HSZg31RqwGHwHiF04p2DMu4+KAseSvcF+7at WC7vOqBLaYtFV0+05mg1zYODHGhVa2v7FARX0gE26cWnadHJYJIbZG+JMCnB3nh0 WijzQCu4y6MqPFUUCL8qRfliv6zXRWrLdoKkPZSeDIZOR5h+dHvyuMfCW1rIV8qS xTUSCXOM91+jtwKmKuZL4Uwxul9ukmlVSAjT+Q05VBw1pnPH09tiTJRAKEEMsy9F eiBPNFQGxZvzJksMY++/DE5vZM7HFsZgQyG6zle0rROga1q22meUL+x6O8WFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPkTxwVrsN4PYcoxrD8BzBfZub7EwHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGDqyhybxe27lBZ9alFofmPhdisocNKLbFM YZNus2u4Zsa0FTDTT0ohzBdFf3jMa654lvQLeTeoHGHYsdfVU4CQIDELcLP/DJ19 nYf5R4DJ7yi88MiDxXOZElgiHepvXMAS/+0Sg0oQIQeCRyPiu47q/63yWCnxyO74 Fl/+FdnwE1MJKM0x/7SSIh8d+ohsVV1VSn/UepbGvJxDkR0KVwTI5ogWflXAKNzn JBhki/IG/fbslaeiE0dw8lw0lFHjEtk/c8qBLAdoZW6jGsn5sTYLVHW9l3OeThF2 AXD65FGB4eSHn9ip/5eV2lq43MYeKH0bZMe6wss7LeJf02PlEzs= -----END CERTIFICATE-----Generated at Sat Apr 26 20:50:00 2025 by rpki-client