$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft File: 780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft (raw, json) Hash identifier: YbyqiHIiP4/0C9Z5QV3Z5Qlhfvx9q5Y3mb2FIEKPJGU= Subject key identifier: 4D:A5:1D:49:15:B3:2D:23:74:1D:CA:F0:86:49:71:EC:59:6F:67:E0 Authority key identifier: 78:0A:63:83:78:71:EA:9C:E6:D0:17:41:4F:6F:1C:5A:BA:3E:F7:D9 Certificate issuer: /CN=780A63837871EA9CE6D017414F6F1C5ABA3EF7D9 Certificate serial: 455D83AD95A725FC7567E98E5BF864CCA0D6E63C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft Manifest number: AD Signing time: Sat 14 Jun 2025 02:11:46 +0000 Manifest this update: Sat 14 Jun 2025 02:06:46 +0000 Manifest next update: Tue 17 Jun 2025 03:11:46 +0000 Files and hashes: 1: 780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl (hash: bJs2AD/5gjQEpHXNmNrdq3uQAU3LZBbkNfN85isyCj4=) 2: 323030313a6466333a643234303a3a2f34382d3438203d3e20313336303839.roa (hash: M+NRbpCUskaX1vYH/4jaIAMXTEk8snO9JlvCQ9TdRYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 03:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:5d:83:ad:95:a7:25:fc:75:67:e9:8e:5b:f8:64:cc:a0:d6:e6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=780A63837871EA9CE6D017414F6F1C5ABA3EF7D9 Validity Not Before: Jun 14 02:06:46 2025 GMT Not After : Jun 17 03:11:46 2025 GMT Subject: CN=4DA51D4915B32D23741DCAF0864971EC596F67E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ec:87:43:ce:ff:f8:18:b6:e1:30:1b:fa:fb: 2e:e5:6f:a5:be:ef:98:5e:3b:a1:51:f1:ae:49:c8: 35:67:af:20:d6:2a:81:62:1f:21:24:5a:ab:6d:92: a6:51:9d:de:d1:95:df:bc:1f:80:61:4d:b4:f5:f6: 8b:aa:8e:98:63:be:6e:cc:8b:6d:27:93:3f:4b:38: bc:67:a2:0d:83:18:57:c0:57:4b:6b:98:65:23:76: 25:e0:33:10:a2:ae:8f:fe:99:2b:b8:2d:78:c1:45: 02:cf:53:16:20:00:5b:e0:a3:35:57:51:06:93:3a: c1:cb:e4:9d:41:f7:76:86:82:7d:d9:93:ca:17:03: 56:fe:96:ac:21:79:05:fc:78:54:a7:02:ca:f7:69: 82:f9:72:30:b3:6a:d3:af:73:b7:d4:c5:d6:dd:b7: 48:7b:7f:1b:bb:e7:01:6c:a7:2a:fb:33:63:e9:01: a1:cf:50:c8:ae:b9:78:e3:1f:87:51:f4:4c:54:e6: ae:14:5d:3d:f8:b2:ef:af:f9:51:b1:9b:20:53:a8: b4:d1:7b:f0:fe:6a:df:ce:a3:83:fd:a7:e1:6c:6d: 9f:b2:8c:c1:f9:a1:f0:e8:0f:ec:bb:8e:3f:05:ef: 20:64:01:68:00:81:a9:5a:de:aa:f8:59:e0:74:e9: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A5:1D:49:15:B3:2D:23:74:1D:CA:F0:86:49:71:EC:59:6F:67:E0 X509v3 Authority Key Identifier: keyid:78:0A:63:83:78:71:EA:9C:E6:D0:17:41:4F:6F:1C:5A:BA:3E:F7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:35:99:b0:1a:9f:ba:78:2c:42:4b:e0:63:cb:e7:fe:62:da: 40:0a:5f:f4:50:24:3c:b8:2f:e3:17:80:22:05:3f:c0:54:bd: 48:ad:da:57:86:46:46:e4:ea:7a:06:50:fa:cb:69:b1:9b:e9: 40:d8:2e:52:46:a1:3a:73:f7:7f:17:1c:7c:79:3a:88:8a:78: b6:66:d9:88:fd:ec:56:9f:ab:44:25:ff:1c:90:8b:e5:ca:dd: ae:d8:a0:d3:45:43:05:4f:ce:01:3c:db:57:74:94:5d:d5:11: 30:07:e7:18:27:38:0c:f1:26:2c:3b:4a:1e:34:d7:ea:ce:55: fa:96:87:54:ee:03:8a:36:3b:61:d3:d5:d9:af:3e:f6:42:8b: 7f:09:c0:7e:6c:98:ae:e4:02:50:d4:4d:6d:1b:51:57:a2:6b: 6f:12:03:0e:98:76:ca:c7:d3:ba:ef:bf:7a:9a:c0:ee:7a:f8: 70:3d:7f:34:ac:78:5d:8f:75:08:aa:96:85:db:12:94:c4:5a: ca:6e:3f:01:b6:7e:d8:89:63:36:20:20:c1:e4:48:ad:cc:50: 30:43:ea:6b:98:9f:ca:2b:f9:f8:79:c9:f4:c3:6d:ea:ac:36: f8:3e:75:6d:c2:8e:4f:6b:5f:8f:12:d4:a0:95:7b:91:d3:0d: 96:59:60:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURV2DrZWnJfx1Z+mOW/hkzKDW5jwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgwQTYzODM3ODcxRUE5Q0U2RDAxNzQxNEY2RjFDNUFC QTNFRjdEOTAeFw0yNTA2MTQwMjA2NDZaFw0yNTA2MTcwMzExNDZaMDMxMTAvBgNV BAMTKDREQTUxRDQ5MTVCMzJEMjM3NDFEQ0FGMDg2NDk3MUVDNTk2RjY3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk7IdDzv/4GLbhMBv6+y7lb6W+ 75heO6FR8a5JyDVnryDWKoFiHyEkWqttkqZRnd7Rld+8H4BhTbT19ouqjphjvm7M i20nkz9LOLxnog2DGFfAV0trmGUjdiXgMxCiro/+mSu4LXjBRQLPUxYgAFvgozVX UQaTOsHL5J1B93aGgn3Zk8oXA1b+lqwheQX8eFSnAsr3aYL5cjCzatOvc7fUxdbd t0h7fxu75wFspyr7M2PpAaHPUMiuuXjjH4dR9ExU5q4UXT34su+v+VGxmyBTqLTR e/D+at/Oo4P9p+FsbZ+yjMH5ofDoD+y7jj8F7yBkAWgAgala3qr4WeB06ZE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTaUdSRWzLSN0Hcrwhklx7FlvZ+AwHwYDVR0j BBgwFoAUeApjg3hx6pzm0BdBT28cWro+99kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMS83ODBBNjM4Mzc4 NzFFQTlDRTZEMDE3NDE0RjZGMUM1QUJBM0VGN0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgwQTYzODM3ODcxRUE5Q0U2RDAxNzQxNEY2RjFDNUFCQTNF RjdEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzEvNzgwQTYzODM3ODcxRUE5Q0U2RDAxNzQxNEY2RjFD NUFCQTNFRjdEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFw1mbAan7p4LEJL4GPL5/5i2kAKX/RQJDy4 L+MXgCIFP8BUvUit2leGRkbk6noGUPrLabGb6UDYLlJGoTpz938XHHx5OoiKeLZm 2Yj97Fafq0Ql/xyQi+XK3a7YoNNFQwVPzgE821d0lF3VETAH5xgnOAzxJiw7Sh40 1+rOVfqWh1TuA4o2O2HT1dmvPvZCi38JwH5smK7kAlDUTW0bUVeia28SAw6YdsrH 07rvv3qawO56+HA9fzSseF2PdQiqloXbEpTEWspuPwG2ftiJYzYgIMHkSK3MUDBD 6muYn8or+fh5yfTDbeqsNvg+dW3Cjk9rX48S1KCVe5HTDZZZYBE= -----END CERTIFICATE-----Generated at Sun Jun 15 19:18:14 2025 by rpki-client