$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json) Hash identifier: 0pOJv98AyqTlYbuZXzxBOl3fPr4Y62I0Wbj+TnjjtPc= Subject key identifier: 1F:76:73:E1:77:7C:7E:5A:C6:0B:81:12:44:0E:FA:35:3F:F2:EE:23 Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 19ABA4D656D3D2D5E463A12B4161B69B47853A1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft Manifest number: 01E2 Signing time: Sun 27 Apr 2025 08:21:07 +0000 Manifest this update: Sun 27 Apr 2025 08:16:07 +0000 Manifest next update: Wed 30 Apr 2025 13:38:07 +0000 Files and hashes: 1: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: QqyJNASMZtjn96t+A2cpl22xR0g97zOoHQCrnEWX+Fo=) 2: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: ee04jbsF+FtZ2dqkAbSB/Xgos5etmRyjUDrX7IF5cJE=) 3: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: DxhHqoUAAMdaWjOHEj/Le98DcBLSN3wsgkEpHqCel+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 05:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ab:a4:d6:56:d3:d2:d5:e4:63:a1:2b:41:61:b6:9b:47:85:3a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: Apr 27 08:16:07 2025 GMT Not After : Apr 30 13:38:07 2025 GMT Subject: CN=1F7673E1777C7E5AC60B8112440EFA353FF2EE23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:83:cf:9c:97:8f:38:70:8b:d0:6e:95:a8:5f: b6:47:a4:fb:13:ad:95:d2:80:38:93:cd:ce:68:ea: 22:4c:4b:3c:01:c5:5b:41:bf:7e:39:25:00:bb:d4: d9:bd:2a:fb:e6:2e:45:7b:b4:83:af:50:cc:23:61: 40:7a:31:19:f0:24:45:c3:c1:14:ec:ba:41:c2:bf: 52:51:6b:50:90:df:9e:5d:81:6e:29:20:ef:84:38: 43:1d:df:ba:de:a3:d6:42:19:f1:9f:7d:dd:ff:b3: 45:65:b5:dd:f1:9a:bc:7c:ed:65:c8:20:5c:49:d5: 42:e6:fa:bc:23:a0:73:5b:20:50:9c:e8:ef:44:ea: 55:07:93:16:85:b9:d0:cb:ee:51:e8:9e:ac:89:a5: 50:34:38:0c:8e:50:84:7a:32:12:37:91:6c:83:34: 9d:4b:78:ea:e0:16:77:4d:8c:34:15:80:7e:ae:dd: e3:cd:19:02:5d:5f:27:da:51:dc:92:be:ce:bf:83: 25:e5:ae:0b:4c:c6:7c:40:dc:3d:15:ff:9b:17:a7: ac:31:cc:12:d0:0a:15:21:0c:21:5a:28:58:a6:11: c6:c8:5f:85:76:b8:eb:75:75:a7:24:b5:90:f4:b6: 94:c9:13:a8:16:da:c4:dd:b1:06:1e:69:1e:5e:d5: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:76:73:E1:77:7C:7E:5A:C6:0B:81:12:44:0E:FA:35:3F:F2:EE:23 X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b2:d3:dc:e9:00:18:68:71:a4:f3:f1:ba:ea:b9:92:49:61: 60:eb:e3:5d:f2:f7:d1:a6:bc:b9:cf:3d:af:c9:8e:07:e9:92: f3:b3:cd:f8:63:38:6d:b0:31:89:98:f4:d3:b3:80:ba:84:62: d7:ba:81:0c:ce:ab:a3:bb:dc:00:dc:de:c7:a6:86:c4:74:ff: 07:d3:89:07:7f:17:71:35:8d:33:9e:4e:f8:22:27:e5:91:17: 4f:e3:48:26:44:a6:a6:64:9c:ec:cd:d1:7b:d6:43:d0:70:2a: fd:a6:1e:93:be:4a:23:f3:7d:d9:6b:c6:01:04:d7:ce:0e:3f: b8:13:7c:b6:22:f5:0f:ec:88:31:5e:03:a3:ff:49:e6:b5:34: c9:6b:c6:7a:52:a1:ec:a5:27:d0:20:f4:6d:41:d0:15:29:72: 11:05:cf:04:0b:d8:c1:cc:e1:90:af:e9:7b:a0:39:83:68:f7: ae:94:81:ab:9f:72:0f:67:9d:07:d9:44:33:84:d0:a5:5b:3e: d1:4e:16:34:7b:0f:52:f2:73:80:7a:d9:db:ef:e7:b2:b9:ed: e8:b8:c7:58:87:76:d9:44:87:b5:b9:f8:5a:cd:49:82:d7:d8: 34:5a:f2:9b:90:89:90:78:3b:0d:28:e4:08:a3:5c:54:cf:83: a0:85:dd:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGauk1lbT0tXkY6ErQWG2m0eFOh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNTA0MjcwODE2MDdaFw0yNTA0MzAxMzM4MDdaMDMxMTAvBgNV BAMTKDFGNzY3M0UxNzc3QzdFNUFDNjBCODExMjQ0MEVGQTM1M0ZGMkVFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxg8+cl484cIvQbpWoX7ZHpPsT rZXSgDiTzc5o6iJMSzwBxVtBv345JQC71Nm9KvvmLkV7tIOvUMwjYUB6MRnwJEXD wRTsukHCv1JRa1CQ355dgW4pIO+EOEMd37reo9ZCGfGffd3/s0Vltd3xmrx87WXI IFxJ1ULm+rwjoHNbIFCc6O9E6lUHkxaFudDL7lHonqyJpVA0OAyOUIR6MhI3kWyD NJ1LeOrgFndNjDQVgH6u3ePNGQJdXyfaUdySvs6/gyXlrgtMxnxA3D0V/5sXp6wx zBLQChUhDCFaKFimEcbIX4V2uOt1dacktZD0tpTJE6gW2sTdsQYeaR5e1Y9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH3Zz4Xd8flrGC4ESRA76NT/y7iMwHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0 M0IzMjY0RkY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGey09zpABhocaTz8brquZJJYWDr413y99Gm vLnPPa/JjgfpkvOzzfhjOG2wMYmY9NOzgLqEYte6gQzOq6O73ADc3semhsR0/wfT iQd/F3E1jTOeTvgiJ+WRF0/jSCZEpqZknOzN0XvWQ9BwKv2mHpO+SiPzfdlrxgEE 184OP7gTfLYi9Q/siDFeA6P/Sea1NMlrxnpSoeylJ9Ag9G1B0BUpchEFzwQL2MHM 4ZCv6XugOYNo966Ugaufcg9nnQfZRDOE0KVbPtFOFjR7D1Lyc4B62dvv57K57ei4 x1iHdtlEh7W5+FrNSYLX2DRa8puQiZB4Ow0o5AijXFTPg6CF3S8= -----END CERTIFICATE-----Generated at Sun Apr 27 10:26:43 2025 by rpki-client on console.sobornost.net