$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: 5XTixjiy9vTjecUP78XfYyjSTS/ZG8iZXxTNWDlvcgc= Subject key identifier: C9:C1:1E:9E:5E:14:F1:55:A1:64:9D:EC:CE:D5:69:3A:8A:5C:37:06 Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 148FFA11804A5A24D8430368014700F593DBB8DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 0349 Signing time: Fri 13 Jun 2025 13:02:14 +0000 Manifest this update: Fri 13 Jun 2025 12:57:14 +0000 Manifest next update: Mon 16 Jun 2025 23:15:14 +0000 Files and hashes: 1: 3130332e3135382e35382e302f32342d3234203d3e203137393935.roa (hash: nEX5obMx7c1O0Mt16rHdamjU/vyDUmneghPgPs1dpHY=) 2: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: vLCFTTRDeuO++n+lW78CJAyx4i/LKErpH6/ge08zMBg=) 3: 3130332e3135382e35382e302f32332d3233203d3e203137393935.roa (hash: +8egnZEvXKWcwk+V4p3Tes+84K8cdSV9e+Lhzfpak6w=) 4: 3130332e3135382e35392e302f32342d3234203d3e203137393935.roa (hash: 7iBHgGYKAoLVfSVzVrtATYUKOYKKHRSz7KTZsrE7P78=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 23:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:8f:fa:11:80:4a:5a:24:d8:43:03:68:01:47:00:f5:93:db:b8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: Jun 13 12:57:14 2025 GMT Not After : Jun 16 23:15:14 2025 GMT Subject: CN=C9C11E9E5E14F155A1649DECCED5693A8A5C3706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:c2:81:63:ef:d5:26:4e:68:1f:93:1a:9d: b4:82:f3:ac:46:4c:2d:9c:ec:fc:80:07:0f:b7:98: 66:24:54:a1:db:57:67:b6:b9:40:c7:36:b2:77:fc: 57:19:23:a9:ec:0d:01:10:fa:10:a3:01:33:01:05: 52:da:62:ec:8c:11:2b:44:d8:7b:0b:1c:d9:13:de: aa:67:5b:19:38:1a:d6:10:11:c6:ed:29:48:e1:55: 36:ed:84:21:1c:e8:fa:3a:c1:a3:49:a7:a2:fb:ff: a7:25:0d:25:31:a5:40:a2:91:e2:76:0f:85:66:7a: 5f:14:21:8a:82:19:bf:f7:b9:79:16:6f:fe:e2:c8: 49:53:fc:85:64:ca:98:79:14:c8:1b:90:09:5e:1f: 47:68:ce:34:00:80:00:c8:1c:c7:7b:70:ae:47:aa: f5:d9:15:6c:98:55:d4:6e:e7:fa:cd:a5:08:c8:7d: 3a:bb:91:16:73:8f:0c:39:57:a5:4e:27:8f:a0:cd: 94:4c:f0:fc:3d:e3:d4:55:d3:32:a7:e8:82:56:17: 90:b3:e0:c5:bb:a3:8a:71:64:ca:ba:5c:d3:a7:bf: 0d:c8:3c:e0:41:34:a7:02:5e:f9:fc:ab:db:e2:ba: 3c:69:8a:a2:b1:8f:d3:c1:24:e2:9d:98:33:8a:7f: 2b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C1:1E:9E:5E:14:F1:55:A1:64:9D:EC:CE:D5:69:3A:8A:5C:37:06 X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b9:3a:e4:8b:3e:7c:c0:62:0f:b1:36:86:ab:66:b9:30:66: 48:e2:83:bb:45:6a:42:ef:63:d8:d8:3e:ca:d4:7d:3b:40:6c: 08:06:81:9e:4f:97:ce:29:0e:54:7c:9f:d5:0b:31:d5:f0:e8: 23:c2:ba:7f:5f:3d:cc:d7:96:7f:2c:c6:a1:51:f4:43:47:d7: 99:ef:81:2f:66:ab:33:08:ea:a3:52:f5:52:30:9d:f5:c8:5e: 4f:ad:01:63:fd:75:b2:f8:41:31:5d:61:45:bc:17:31:cb:e9: 2a:9f:11:c1:85:65:21:16:18:45:cf:c2:ba:b1:c1:2f:5e:b0: cc:8f:12:6f:97:b9:e9:75:77:e5:bb:f5:c7:10:27:d8:1f:6e: 75:5f:3c:62:82:69:46:32:56:7f:18:37:02:de:de:b4:ff:06: cc:83:d7:e4:e6:90:8d:19:cd:d9:c5:5c:da:56:dd:b5:bb:58: f3:d3:e3:ef:16:28:76:53:5a:ae:f8:aa:91:64:29:5f:3d:5c: 98:82:f6:c2:db:c4:a7:b2:c0:2c:b4:c6:ec:9c:a5:97:15:b5: 57:00:fa:b5:d0:80:24:53:39:a6:ed:45:1c:2d:d5:52:d4:1e: b2:9f:c4:80:d8:e7:b5:6c:eb:eb:47:d8:17:97:d8:c0:b8:95: c7:d7:5a:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFI/6EYBKWiTYQwNoAUcA9ZPbuNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNTA2MTMxMjU3MTRaFw0yNTA2MTYyMzE1MTRaMDMxMTAvBgNV BAMTKEM5QzExRTlFNUUxNEYxNTVBMTY0OURFQ0NFRDU2OTNBOEE1QzM3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bsKBY+/VJk5oH5ManbSC86xG TC2c7PyABw+3mGYkVKHbV2e2uUDHNrJ3/FcZI6nsDQEQ+hCjATMBBVLaYuyMEStE 2HsLHNkT3qpnWxk4GtYQEcbtKUjhVTbthCEc6Po6waNJp6L7/6clDSUxpUCikeJ2 D4Vmel8UIYqCGb/3uXkWb/7iyElT/IVkyph5FMgbkAleH0dozjQAgADIHMd7cK5H qvXZFWyYVdRu5/rNpQjIfTq7kRZzjww5V6VOJ4+gzZRM8Pw949RV0zKn6IJWF5Cz 4MW7o4pxZMq6XNOnvw3IPOBBNKcCXvn8q9viujxpiqKxj9PBJOKdmDOKfyvNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUycEenl4U8VWhZJ3sztVpOopcNwYwHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+5OuSLPnzAYg+xNoarZrkwZkjig7tFakLv Y9jYPsrUfTtAbAgGgZ5Pl84pDlR8n9ULMdXw6CPCun9fPczXln8sxqFR9ENH15nv gS9mqzMI6qNS9VIwnfXIXk+tAWP9dbL4QTFdYUW8FzHL6SqfEcGFZSEWGEXPwrqx wS9esMyPEm+Xuel1d+W79ccQJ9gfbnVfPGKCaUYyVn8YNwLe3rT/BsyD1+TmkI0Z zdnFXNpW3bW7WPPT4+8WKHZTWq74qpFkKV89XJiC9sLbxKeywCy0xuycpZcVtVcA +rXQgCRTOabtRRwt1VLUHrKfxIDY57Vs6+tH2BeX2MC4lcfXWrM= -----END CERTIFICATE-----Generated at Sun Jun 15 16:57:48 2025 by rpki-client