$ rpki-client -vvf repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft File: 782659A7F6433029248A38A1C68F2E9971161391.mft (raw, json) Hash identifier: 5X0d5lPEPkeORp6CUguuXAdo/vmTOvdLZcCJJxNt9zc= Subject key identifier: F4:8F:3B:43:84:CB:B8:44:BE:D7:3E:9E:5D:2D:7D:D3:E3:74:05:37 Authority key identifier: 78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91 Certificate issuer: /CN=782659A7F6433029248A38A1C68F2E9971161391 Certificate serial: 78A13B948AF4992A2D3647C6E3EB40E86FAD05BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer Subject info access: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft Manifest number: FB Signing time: Wed 18 Jun 2025 20:00:59 +0000 Manifest this update: Wed 18 Jun 2025 19:55:59 +0000 Manifest next update: Sat 21 Jun 2025 21:09:59 +0000 Files and hashes: 1: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: 40JRxNw6stZoA1fUKj/zKco7HRJV/HtMAMb74Ejikyo=) 2: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: QzBzm2jTi52qCuHNFLxAMIYm8xcW8JwG11leVCtzjT8=) 3: 782659A7F6433029248A38A1C68F2E9971161391.crl (hash: JhMi1pbxX/b2+h8igzPKgPa5/+M/gXfpLndAe0HYcQc=) 4: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: 4SzxYxsm34j+//J0Zj7fCtaaSGBPCJKKVqr4apFWEx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a1:3b:94:8a:f4:99:2a:2d:36:47:c6:e3:eb:40:e8:6f:ad:05:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782659A7F6433029248A38A1C68F2E9971161391 Validity Not Before: Jun 18 19:55:59 2025 GMT Not After : Jun 21 21:09:59 2025 GMT Subject: CN=F48F3B4384CBB844BED73E9E5D2D7DD3E3740537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:9c:28:5d:14:0c:1d:82:06:7c:b2:80:f9: 5e:18:d5:a9:03:a2:e3:23:f0:3e:12:2e:89:e6:40: 5c:dd:fb:f2:b8:b1:25:0a:db:b1:97:44:10:83:c8: fc:81:4b:08:60:b6:89:b5:a4:92:f9:37:33:47:09: 2a:de:4c:f3:a8:ea:a0:bc:6a:c2:a3:dc:35:ef:b5: 1f:95:71:37:59:30:7d:57:3b:ca:a0:26:ce:27:ff: 13:29:59:4a:c9:79:90:c8:91:53:c6:3b:e3:0c:2a: 16:f5:f1:4d:dd:4b:86:3b:df:64:83:11:b4:50:01: a5:c6:34:1d:d0:6d:12:e0:d7:21:1b:ce:2d:c2:13: 3e:d1:87:09:80:90:28:af:99:40:8d:53:fd:67:77: 9a:a5:0c:c8:b2:cf:f0:e5:18:a6:5e:76:fb:6c:60: 81:e3:af:fb:f9:3f:a2:d6:f7:9b:4f:b3:44:57:ac: 2f:89:54:69:6c:7a:33:85:12:fb:ff:78:1e:a4:0d: 3b:0e:27:3e:07:72:e0:1b:32:dd:1f:87:4a:d7:b6: 46:4f:0f:51:05:ca:92:78:a1:9b:5c:63:35:70:41: b4:31:44:82:ce:63:cf:15:be:16:12:e3:96:d6:4e: bf:2b:06:5b:b2:cc:39:95:fd:42:5b:03:23:c5:7a: c4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8F:3B:43:84:CB:B8:44:BE:D7:3E:9E:5D:2D:7D:D3:E3:74:05:37 X509v3 Authority Key Identifier: keyid:78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:62:62:fb:9d:3d:75:8d:ad:3b:4c:e5:d7:c9:27:75:7c:46: e7:86:23:5e:3b:a5:74:6e:e6:fe:40:d7:23:98:12:c4:79:0c: 2d:e7:d6:d2:25:0d:55:a5:e8:cf:0b:28:c2:18:38:e3:b6:54: dc:63:e5:e7:b1:e4:9e:53:14:e5:82:ca:de:49:b1:7d:4d:8c: d7:3f:26:c3:20:f2:fb:48:65:a3:c5:36:1f:94:2f:32:6a:f0: 5b:8b:bd:b7:b7:63:9c:d3:89:6e:ab:86:cb:a7:5a:5f:ca:ac: 7a:a0:5f:90:af:30:f2:04:ed:eb:2a:ba:61:45:d8:fd:2c:1f: 1c:a5:79:46:0e:34:65:c6:5e:77:d7:78:cb:95:4d:e9:e0:d9: 7d:fc:9a:33:dc:f4:d5:ae:7e:9b:f3:ef:fa:27:56:37:93:c6: a8:10:0f:6b:2a:ea:6e:e8:b7:57:49:9c:77:bc:5f:66:ee:40: 25:34:ad:55:72:4d:62:6e:12:fe:bd:20:23:d4:61:db:dd:59: cf:8c:1f:fe:c2:d9:6e:93:0b:fa:48:35:70:86:93:aa:80:e6: bb:f3:cd:ca:61:1d:dd:74:00:8b:f7:2a:97:e6:5b:37:6e:6f: 71:94:b9:4e:67:e9:cf:e8:c1:a0:65:80:f8:c7:91:78:ff:d9: 8a:9b:ad:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKE7lIr0mSotNkfG4+tA6G+tBb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNjU5QTdGNjQzMzAyOTI0OEEzOEExQzY4RjJFOTk3 MTE2MTM5MTAeFw0yNTA2MTgxOTU1NTlaFw0yNTA2MjEyMTA5NTlaMDMxMTAvBgNV BAMTKEY0OEYzQjQzODRDQkI4NDRCRUQ3M0U5RTVEMkQ3REQzRTM3NDA1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dJwoXRQMHYIGfLKA+V4Y1akD ouMj8D4SLonmQFzd+/K4sSUK27GXRBCDyPyBSwhgtom1pJL5NzNHCSreTPOo6qC8 asKj3DXvtR+VcTdZMH1XO8qgJs4n/xMpWUrJeZDIkVPGO+MMKhb18U3dS4Y732SD EbRQAaXGNB3QbRLg1yEbzi3CEz7RhwmAkCivmUCNU/1nd5qlDMiyz/DlGKZedvts YIHjr/v5P6LW95tPs0RXrC+JVGlsejOFEvv/eB6kDTsOJz4HcuAbMt0fh0rXtkZP D1EFypJ4oZtcYzVwQbQxRILOY88VvhYS45bWTr8rBluyzDmV/UJbAyPFesSnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9I87Q4TLuES+1z6eXS190+N0BTcwHwYDVR0j BBgwFoAUeCZZp/ZDMCkkijihxo8umXEWE5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTRlMDRmYS03MTg4LTRmNGYtODFiYi0zMzAzODlmODcwMTUvMC83ODI2NTlBN0Y2 NDMzMDI5MjQ4QTM4QTFDNjhGMkU5OTcxMTYxMzkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNjU5QTdGNjQzMzAyOTI0OEEzOEExQzY4RjJFOTk3MTE2 MTM5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0ZTA0ZmEtNzE4OC00ZjRmLTgx YmItMzMwMzg5Zjg3MDE1LzAvNzgyNjU5QTdGNjQzMzAyOTI0OEEzOEExQzY4RjJF OTk3MTE2MTM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJiYvudPXWNrTtM5dfJJ3V8RueGI147pXRu 5v5A1yOYEsR5DC3n1tIlDVWl6M8LKMIYOOO2VNxj5eex5J5TFOWCyt5JsX1NjNc/ JsMg8vtIZaPFNh+ULzJq8FuLvbe3Y5zTiW6rhsunWl/KrHqgX5CvMPIE7esqumFF 2P0sHxyleUYONGXGXnfXeMuVTeng2X38mjPc9NWufpvz7/onVjeTxqgQD2sq6m7o t1dJnHe8X2buQCU0rVVyTWJuEv69ICPUYdvdWc+MH/7C2W6TC/pINXCGk6qA5rvz zcphHd10AIv3KpfmWzdub3GUuU5n6c/owaBlgPjHkXj/2YqbrT8= -----END CERTIFICATE-----Generated at Fri Jun 20 17:34:50 2025 by rpki-client