$ rpki-client -vvf repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft File: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft (raw, json) Hash identifier: eLXkz1bcpjVk4ZqE8H1V7l1EuGP2Tx+s6L24RLPQiKg= Subject key identifier: 67:4E:6F:9D:89:57:6D:3C:F5:55:BA:84:1F:AD:0E:43:12:3D:5D:12 Authority key identifier: D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 Certificate issuer: /CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Certificate serial: 1B5C5838E279F0CA86BF1226A665261DB63998B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft Manifest number: 4A Signing time: Sun 15 Jun 2025 01:21:56 +0000 Manifest this update: Sun 15 Jun 2025 01:16:56 +0000 Manifest next update: Wed 18 Jun 2025 05:29:56 +0000 Files and hashes: 1: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: mtxUuoBWjsUwdIjXZpNi9bHZl2ZJW5TeiOYPZBEVbaM=) 2: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl (hash: FwDdqOVLWWgKFQj3F8ozRko+MgUMBXj2EIOKjGiaNWE=) 3: 3135372e32302e3132312e302f32342d3234203d3e20313532343133.roa (hash: J+HA2voObMJkLTe14IHtv1+pBD6tmTWcTW3nQp6DPrc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:5c:58:38:e2:79:f0:ca:86:bf:12:26:a6:65:26:1d:b6:39:98:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Validity Not Before: Jun 15 01:16:56 2025 GMT Not After : Jun 18 05:29:56 2025 GMT Subject: CN=674E6F9D89576D3CF555BA841FAD0E43123D5D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:dd:96:d5:2e:53:7a:fe:13:a4:09:90:28: 2b:b8:bc:da:05:87:6a:03:db:21:43:d6:eb:fe:4f: fd:b0:5f:cf:6e:33:42:a3:40:4b:d6:d8:1d:53:0f: 6e:39:91:ac:66:92:9c:a0:89:22:bf:2c:68:bb:c2: 30:89:53:f2:32:a8:25:5e:9c:fa:e2:88:8f:f7:2c: 08:67:b6:03:0d:a4:50:1b:cb:ae:94:2f:78:35:6d: 8b:fe:8e:02:dc:34:4b:d3:05:c7:31:22:65:2c:2d: 4b:d8:44:ac:72:e8:4b:e6:47:fe:b3:60:69:43:ca: 64:a8:c5:ec:30:0a:22:87:65:81:d0:12:67:67:c2: b4:56:59:ff:fc:c1:2b:75:54:a5:7f:ec:57:89:28: b9:6f:31:83:42:99:10:06:36:98:4b:e3:38:9a:df: 5e:89:3d:03:e6:b2:16:3f:0b:1a:9c:aa:d6:ae:0b: 5b:43:bc:13:14:5c:d5:15:c3:8c:1c:64:3b:eb:33: 77:9b:c0:e2:f0:14:db:b9:e7:72:de:9f:83:09:ba: e5:06:94:c5:fd:d2:fa:d1:c4:be:00:89:61:17:8e: 40:e6:c1:04:de:bf:33:46:b4:17:54:20:16:c4:bb: 94:f3:ed:ec:bd:3c:07:1b:6c:dc:50:55:c6:88:1b: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4E:6F:9D:89:57:6D:3C:F5:55:BA:84:1F:AD:0E:43:12:3D:5D:12 X509v3 Authority Key Identifier: keyid:D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:48:e7:81:fc:e2:19:0b:50:f6:32:2d:58:dc:88:e7:ac:ac: 63:58:5d:f6:97:da:86:14:1b:fa:cf:34:3e:db:f3:51:ff:2d: 99:36:af:54:64:8f:cb:f0:2b:9e:c2:6e:4b:35:c8:7e:e2:7c: 1f:86:f6:bd:fc:10:5e:37:8f:6f:75:d2:62:ab:7e:5b:27:9e: 46:fd:e5:4e:e3:71:1d:88:a0:3f:b4:4c:28:65:2c:db:ce:7c: 22:de:3f:a1:ae:c1:53:1f:80:b1:37:4e:2c:36:da:23:01:7f: 8b:0c:41:84:b3:63:75:1d:ff:51:c3:57:bf:09:66:8a:07:af: 9e:9e:8c:66:da:2a:d6:3c:e6:14:a6:20:b7:e5:45:f8:6e:aa: 7a:99:92:5f:8a:b9:54:67:53:2f:ca:98:d0:8f:61:d8:a9:f7: a3:83:6e:40:01:84:d8:51:1f:39:8e:1f:0a:9a:58:01:39:7f: 67:2e:63:83:dc:d9:01:71:f2:dd:a2:ca:8e:2b:ab:d6:fe:e9: 4e:98:ff:9a:8a:4e:8f:90:37:f9:63:47:88:eb:86:21:61:de: e7:f4:bb:f7:d1:e5:fc:cb:00:49:91:59:1e:7e:26:e5:2f:0b: ce:f6:35:c7:d3:13:82:01:c5:be:48:30:39:3e:a3:17:47:f4: f4:ab:17:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1xYOOJ58MqGvxImpmUmHbY5mLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVB Q0YzMjM2ODAeFw0yNTA2MTUwMTE2NTZaFw0yNTA2MTgwNTI5NTZaMDMxMTAvBgNV BAMTKDY3NEU2RjlEODk1NzZEM0NGNTU1QkE4NDFGQUQwRTQzMTIzRDVEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUd2W1S5Tev4TpAmQKCu4vNoF h2oD2yFD1uv+T/2wX89uM0KjQEvW2B1TD245kaxmkpygiSK/LGi7wjCJU/IyqCVe nPriiI/3LAhntgMNpFAby66UL3g1bYv+jgLcNEvTBccxImUsLUvYRKxy6EvmR/6z YGlDymSoxewwCiKHZYHQEmdnwrRWWf/8wSt1VKV/7FeJKLlvMYNCmRAGNphL4zia 316JPQPmshY/CxqcqtauC1tDvBMUXNUVw4wcZDvrM3ebwOLwFNu553Len4MJuuUG lMX90vrRxL4AiWEXjkDmwQTevzNGtBdUIBbEu5Tz7ey9PAcbbNxQVcaIG2knAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ05vnYlXbTz1VbqEH60OQxI9XRIwHwYDVR0j BBgwFoAU14/lrocO8iH9lXdc/q/q1azzI2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjQ0MjYzYS04ZWUyLTRlZWMtYTgxMC01NzMzY2NhZjUxZTMvMC9ENzhGRTVBRTg3 MEVGMjIxRkQ5NTc3NUNGRUFGRUFENUFDRjMyMzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVBQ0Yz MjM2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVB RDVBQ0YzMjM2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtI54H84hkLUPYyLVjciOesrGNYXfaX2oYU G/rPND7b81H/LZk2r1Rkj8vwK57Cbks1yH7ifB+G9r38EF43j2910mKrflsnnkb9 5U7jcR2IoD+0TChlLNvOfCLeP6GuwVMfgLE3Tiw22iMBf4sMQYSzY3Ud/1HDV78J ZooHr56ejGbaKtY85hSmILflRfhuqnqZkl+KuVRnUy/KmNCPYdip96ODbkABhNhR HzmOHwqaWAE5f2cuY4Pc2QFx8t2iyo4rq9b+6U6Y/5qKTo+QN/ljR4jrhiFh3uf0 u/fR5fzLAEmRWR5+JuUvC872NcfTE4IBxb5IMDk+oxdH9PSrF30= -----END CERTIFICATE-----Generated at Mon Jun 16 05:09:41 2025 by rpki-client