$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: ZgCAOPRAbQKkreEUZOs5TrTnofrKLzkmPqsXsyfJqMA= Subject key identifier: 5A:27:F2:57:94:0A:1E:BC:97:E1:9B:BD:14:C1:DF:2C:08:B8:61:FF Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 6D33AFD307FA9FF543F159C39CAC57BFA31A88FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 0361 Signing time: Thu 07 Aug 2025 05:22:16 +0000 Manifest this update: Thu 07 Aug 2025 05:17:16 +0000 Manifest next update: Sun 10 Aug 2025 08:45:16 +0000 Files and hashes: 1: 3130332e3135382e35382e302f32332d3233203d3e203137393935.roa (hash: +8egnZEvXKWcwk+V4p3Tes+84K8cdSV9e+Lhzfpak6w=) 2: 3130332e3135382e35382e302f32342d3234203d3e203137393935.roa (hash: nEX5obMx7c1O0Mt16rHdamjU/vyDUmneghPgPs1dpHY=) 3: 3130332e3135382e35392e302f32342d3234203d3e203137393935.roa (hash: 7iBHgGYKAoLVfSVzVrtATYUKOYKKHRSz7KTZsrE7P78=) 4: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: vpKSA8ZtKmnB4jJyCWseyK89QPMnClboITdlIZtzOyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:33:af:d3:07:fa:9f:f5:43:f1:59:c3:9c:ac:57:bf:a3:1a:88:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: Aug 7 05:17:16 2025 GMT Not After : Aug 10 08:45:16 2025 GMT Subject: CN=5A27F257940A1EBC97E19BBD14C1DF2C08B861FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:f6:13:9d:67:49:fe:b0:48:f3:1d:73:e4: 40:a7:b1:03:63:c2:af:8c:3b:00:b4:9d:6a:87:64: 02:9b:9f:eb:59:ab:9a:93:9e:48:0e:9c:02:d9:4b: ce:c1:89:bf:3f:3b:e8:03:d8:d3:b8:7a:52:1b:75: b1:60:fe:40:1b:ba:53:cf:a7:3c:89:e3:23:a9:3a: 21:42:90:c5:5b:7e:94:2e:d6:c9:09:75:d3:59:22: 42:be:12:af:cc:d1:86:6e:6d:b1:ee:13:e2:b2:a0: ce:90:0f:69:a1:6e:5e:8a:59:bd:67:64:c4:1c:58: c7:0c:79:99:06:1b:f7:cd:4d:7b:8f:1c:64:ae:98: c1:cb:55:55:a4:1d:2c:41:17:f0:e5:3b:46:ab:d1: bc:c2:92:84:0e:e0:6b:07:3a:49:f6:70:ff:d6:8f: e2:d9:43:1c:c7:23:58:62:b7:fa:80:42:b8:c3:3c: a0:32:ba:0f:79:06:3c:37:ba:d2:44:97:8f:30:4e: 88:f9:35:38:82:19:d7:c4:5e:14:e0:9c:38:bb:2d: 8b:c2:f6:82:73:ab:4d:10:4b:29:64:56:48:2a:7e: 4b:36:e9:87:d8:36:f3:68:7d:cf:a2:16:62:b9:01: ea:e2:eb:20:14:02:8f:d4:e4:2b:61:81:47:ee:96: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:27:F2:57:94:0A:1E:BC:97:E1:9B:BD:14:C1:DF:2C:08:B8:61:FF X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:50:28:7e:5d:86:69:72:4d:77:91:1a:a8:4f:38:05:67:0e: bd:74:a1:ff:b6:54:00:7c:cd:c4:dd:be:f8:e8:3f:bf:3a:11: 35:97:89:dc:5f:95:e1:8a:b6:23:23:32:d4:e0:48:33:a3:48: 5a:38:ec:8b:0b:de:e5:15:80:57:45:86:de:fd:cf:d8:29:b2: c7:5e:c8:5c:79:bb:81:fe:7f:09:75:1f:30:f7:fb:6b:fe:1c: 02:c5:26:93:3f:b7:0d:8b:32:a7:55:48:23:be:f7:cd:d8:2b: eb:ce:76:f9:ed:c2:4e:f2:24:05:56:44:92:d4:51:cb:3c:2e: c2:0c:1d:e6:6c:35:e9:0a:4a:ee:92:d6:44:a0:c9:78:76:e5: 76:fc:7d:56:3a:88:50:8f:f9:7a:8e:3e:0e:f5:ec:ae:e2:54: 88:c7:47:3e:7a:99:13:a9:12:bd:29:5b:6f:d0:54:c0:21:cb: 54:39:af:39:25:dd:e8:fe:ab:45:4e:f1:61:9a:f8:dc:a6:23: d4:cf:9b:06:a1:b9:ac:50:aa:6b:5e:09:80:a9:dd:bd:1b:7a: ad:95:a8:10:75:24:e4:c3:12:e1:40:df:25:e0:12:05:83:85: bf:2b:33:ae:4b:9a:0d:ac:31:7d:10:83:84:36:4f:2a:d8:bd: 47:8b:db:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTOv0wf6n/VD8VnDnKxXv6MaiPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNTA4MDcwNTE3MTZaFw0yNTA4MTAwODQ1MTZaMDMxMTAvBgNV BAMTKDVBMjdGMjU3OTQwQTFFQkM5N0UxOUJCRDE0QzFERjJDMDhCODYxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/PYTnWdJ/rBI8x1z5ECnsQNj wq+MOwC0nWqHZAKbn+tZq5qTnkgOnALZS87Bib8/O+gD2NO4elIbdbFg/kAbulPP pzyJ4yOpOiFCkMVbfpQu1skJddNZIkK+Eq/M0YZubbHuE+KyoM6QD2mhbl6KWb1n ZMQcWMcMeZkGG/fNTXuPHGSumMHLVVWkHSxBF/DlO0ar0bzCkoQO4GsHOkn2cP/W j+LZQxzHI1hit/qAQrjDPKAyug95Bjw3utJEl48wToj5NTiCGdfEXhTgnDi7LYvC 9oJzq00QSylkVkgqfks26YfYNvNofc+iFmK5Aeri6yAUAo/U5CthgUfulurxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWifyV5QKHryX4Zu9FMHfLAi4Yf8wHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9QKH5dhmlyTXeRGqhPOAVnDr10of+2VAB8 zcTdvvjoP786ETWXidxfleGKtiMjMtTgSDOjSFo47IsL3uUVgFdFht79z9gpssde yFx5u4H+fwl1HzD3+2v+HALFJpM/tw2LMqdVSCO+983YK+vOdvntwk7yJAVWRJLU Ucs8LsIMHeZsNekKSu6S1kSgyXh25Xb8fVY6iFCP+XqOPg717K7iVIjHRz56mROp Er0pW2/QVMAhy1Q5rzkl3ej+q0VO8WGa+NymI9TPmwahuaxQqmteCYCp3b0beq2V qBB1JOTDEuFA3yXgEgWDhb8rM65Lmg2sMX0Qg4Q2TyrYvUeL25c= -----END CERTIFICATE-----Generated at Fri Aug 8 00:16:22 2025 by rpki-client