$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: BfVFVv/C/eCk8teK93VkRxUYxR3+06zAPQ22fUgGS8Q= Subject key identifier: 10:6C:9C:4D:C9:89:7F:28:71:63:D9:70:D7:40:E4:76:72:2E:9D:D1 Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 4C46C0BAFDF79DDA61158F608D48B95C63838BCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 0407 Signing time: Fri 25 Apr 2025 02:01:15 +0000 Manifest this update: Fri 25 Apr 2025 01:56:15 +0000 Manifest next update: Mon 28 Apr 2025 10:35:15 +0000 Files and hashes: 1: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: 9K+LcGes6KavizrRGsEE6NypcoVwnuuTJoRpyNQxbh4=) 2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: WW7W6Yj2G/47WPhY9FaJiFfRCgajmearKgt2Y7lE/bA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:46:c0:ba:fd:f7:9d:da:61:15:8f:60:8d:48:b9:5c:63:83:8b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Apr 25 01:56:15 2025 GMT Not After : Apr 28 10:35:15 2025 GMT Subject: CN=106C9C4DC9897F287163D970D740E476722E9DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:15:41:17:5a:b9:60:de:7d:6a:d9:6f:5a: c4:ae:e0:90:a7:af:b2:a9:a8:0f:10:4d:21:48:75: 0a:08:11:6f:7c:27:4d:3a:10:16:29:61:b7:c8:3d: 35:65:96:f8:65:12:70:d0:9b:2d:f5:5f:32:73:52: 2f:e6:ef:01:cb:e7:a9:b9:11:76:8f:3e:8b:6e:2f: d5:b5:23:18:04:15:31:88:2a:be:67:d7:1c:30:2f: 54:89:a6:6c:1f:ad:44:ae:45:29:cd:90:91:51:3d: 07:6f:f9:18:13:e2:f9:ed:ac:47:e3:b6:e6:b4:24: 0a:ac:d1:42:f1:7f:c7:d3:e6:40:15:e9:42:4b:f4: ec:7a:40:ea:6d:1f:25:fd:71:3e:fb:28:4d:83:08: fb:05:e9:14:68:64:8b:94:e6:72:fa:4e:14:ca:38: ad:ae:2e:5d:b9:f1:20:49:94:28:b8:7b:b8:5b:e7: 12:11:e9:62:ca:8c:7a:3b:48:7f:93:b2:93:34:96: f1:a9:b1:ae:7a:91:bc:ef:f6:ff:26:c0:e2:67:a1: d5:ee:5b:fa:4f:67:cd:ce:d1:4a:dc:b3:a6:fa:d3: e4:8e:4c:0e:08:74:43:8b:b6:b6:ac:d9:76:32:69: b9:75:5d:93:74:f9:46:1a:c9:5d:1f:4d:ed:69:35: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6C:9C:4D:C9:89:7F:28:71:63:D9:70:D7:40:E4:76:72:2E:9D:D1 X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a0:25:56:e4:ee:88:54:30:eb:8a:0d:2e:60:8e:8e:1b:91: 27:b5:4c:83:40:d3:8d:6a:8b:cc:11:41:ef:10:81:cf:89:c4: 0e:d7:4a:8a:c3:13:37:cc:5d:5f:00:bf:8b:41:ab:6c:cf:82: 0a:7a:b7:04:2c:b1:52:99:b0:fe:e1:a7:f4:ca:88:0e:7b:bd: 3f:c4:2a:49:d3:c3:34:b9:90:81:06:0a:35:a1:47:40:32:14: e6:53:22:3c:7b:ca:c5:15:37:0c:2a:9b:af:d7:13:51:b6:b2: e4:4f:a6:6e:52:bb:df:02:da:22:51:12:9b:a4:04:64:1c:2e: c8:e4:9f:31:96:c4:b5:d0:eb:dd:ee:2d:19:e5:aa:54:5c:ee: 32:3d:e1:27:d7:e3:6d:ea:20:d6:fb:09:04:d2:25:72:8c:67: a8:fe:ab:70:f9:5c:dc:86:d5:9d:9c:c4:78:27:f8:61:3c:d4: 2a:e4:3e:85:f4:e9:77:e1:42:ad:86:55:e3:69:1f:fa:e2:13: 39:b4:70:2e:df:1b:05:69:e5:f6:fd:81:5a:22:4b:f4:84:f4: 15:5a:b3:8d:3f:1a:6d:ad:cb:0f:41:09:91:a6:cb:f5:2f:05: b8:88:95:46:6e:46:88:5f:30:6c:ea:c5:94:00:1e:b3:13:1b: 73:39:4d:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTEbAuv33ndphFY9gjUi5XGODi80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTA0MjUwMTU2MTVaFw0yNTA0MjgxMDM1MTVaMDMxMTAvBgNV BAMTKDEwNkM5QzREQzk4OTdGMjg3MTYzRDk3MEQ3NDBFNDc2NzIyRTlERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftxVBF1q5YN59atlvWsSu4JCn r7KpqA8QTSFIdQoIEW98J006EBYpYbfIPTVllvhlEnDQmy31XzJzUi/m7wHL56m5 EXaPPotuL9W1IxgEFTGIKr5n1xwwL1SJpmwfrUSuRSnNkJFRPQdv+RgT4vntrEfj tua0JAqs0ULxf8fT5kAV6UJL9Ox6QOptHyX9cT77KE2DCPsF6RRoZIuU5nL6ThTK OK2uLl258SBJlCi4e7hb5xIR6WLKjHo7SH+TspM0lvGpsa56kbzv9v8mwOJnodXu W/pPZ83O0Urcs6b60+SOTA4IdEOLtras2XYyabl1XZN0+UYayV0fTe1pNdQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGycTcmJfyhxY9lw10DkdnIundEwHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqgJVbk7ohUMOuKDS5gjo4bkSe1TINA041q i8wRQe8Qgc+JxA7XSorDEzfMXV8Av4tBq2zPggp6twQssVKZsP7hp/TKiA57vT/E KknTwzS5kIEGCjWhR0AyFOZTIjx7ysUVNwwqm6/XE1G2suRPpm5Su98C2iJREpuk BGQcLsjknzGWxLXQ693uLRnlqlRc7jI94SfX423qINb7CQTSJXKMZ6j+q3D5XNyG 1Z2cxHgn+GE81CrkPoX06XfhQq2GVeNpH/riEzm0cC7fGwVp5fb9gVoiS/SE9BVa s40/Gm2tyw9BCZGmy/UvBbiIlUZuRohfMGzqxZQAHrMTG3M5Tdc= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:22 2025 by rpki-client on console.sobornost.net