$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: Yn/0c00669+AceBVCaB4eCc+4QEHvEkV4o6VViMFsh0= Subject key identifier: F1:E4:D9:75:FE:7C:70:DD:C4:ED:AD:9B:D0:71:D5:64:F0:62:BB:5D Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 53E655BC37FD7FABD4E61D306B2D83197DB54266 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 01F0 Signing time: Mon 03 Nov 2025 03:21:24 +0000 Manifest this update: Mon 03 Nov 2025 03:16:24 +0000 Manifest next update: Thu 06 Nov 2025 09:09:24 +0000 Files and hashes: 1: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: sbXTksiki23CTz8M2uamzdUn6n9qebMrWsGpYt13f24=) 2: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: cXUkxWwyVPS60XbTkvXKCEQggyZtT3odfL2WdxtdbQM=) 3: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: vljo5Oi0hl2aQpZ4Kaqz7NdJ52vgowFgq0RTxUCluvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e6:55:bc:37:fd:7f:ab:d4:e6:1d:30:6b:2d:83:19:7d:b5:42:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Nov 3 03:16:24 2025 GMT Not After : Nov 6 09:09:24 2025 GMT Subject: CN=F1E4D975FE7C70DDC4EDAD9BD071D564F062BB5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:34:4e:50:7c:d9:72:ac:05:f2:e9:3a:a8: 43:e1:a2:d7:f1:f2:f0:75:68:d5:95:da:df:2f:70: 8f:a5:fb:65:e0:62:7f:2e:9c:d1:2a:c6:0c:5d:bf: fe:79:55:1c:01:3e:86:8f:88:67:71:4b:43:7f:46: f2:d0:cb:38:57:45:d5:ea:81:cb:e7:ab:c3:4d:7e: 85:81:d2:77:e5:89:bd:bb:37:2c:85:84:ff:b8:60: 57:db:28:1d:7c:69:92:20:09:41:56:0b:9e:62:86: 72:a2:08:86:ab:af:12:71:4a:a9:2c:3c:95:e2:c8: a0:83:91:4c:7a:6a:f5:18:5c:64:d7:38:d2:70:d6: bd:39:5d:6e:f7:54:68:4a:06:9e:2d:98:31:43:c1: 6a:27:da:e0:ff:98:55:46:71:c8:24:0f:f1:71:89: 72:dd:ff:e1:bd:d8:22:de:fb:ab:52:24:6c:56:3d: 42:5f:b6:68:6a:40:21:26:4d:87:6b:47:40:8d:78: f7:7c:eb:6b:8e:d9:b8:9e:4c:46:37:7e:a9:32:f6: 3d:b3:50:58:01:95:bc:c4:46:63:d0:61:92:f3:30: b2:94:d6:58:08:53:43:6f:00:c1:a3:50:58:7f:14: 7f:3d:37:00:93:84:97:ad:b0:74:ca:64:95:f2:3f: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E4:D9:75:FE:7C:70:DD:C4:ED:AD:9B:D0:71:D5:64:F0:62:BB:5D X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ae:71:33:fb:ff:1c:f5:ee:d2:b3:4c:24:18:9a:53:65:81: 66:d2:3a:50:a8:9f:08:d7:24:7a:d6:5c:9b:e9:59:66:ad:e4: 21:60:eb:a2:84:68:8d:a8:25:b1:dd:b3:1d:c1:1f:f8:a1:02: 28:6a:2e:1f:45:d2:b8:22:b9:9c:01:2f:64:fc:a4:dc:9c:16: 16:b7:b6:96:80:f1:f2:22:ff:2b:5b:c8:9f:e4:eb:57:0e:5d: be:e1:d4:d2:61:91:43:79:a8:e4:cd:e5:d3:cd:1a:58:c2:92: d6:77:b8:b2:cc:5f:ed:d4:ce:49:17:34:55:a0:8a:01:1a:5f: a0:d8:21:04:61:ff:ac:90:9d:0f:fa:c5:32:44:d8:3d:38:a2: 02:de:c4:93:96:e5:93:a4:4d:2e:5a:cf:a6:b4:02:e0:35:5b: fc:25:d5:09:5b:4c:68:2f:af:72:29:be:d1:ad:b2:78:a0:a7: 00:b1:93:9d:79:21:76:e1:2e:82:65:cc:3e:d1:a9:a4:51:e1: e9:04:10:ea:f8:28:ac:ed:19:13:86:78:c1:e0:75:43:c0:26: 6d:c2:f1:de:71:cf:a7:c7:6a:f3:bf:da:1e:ad:91:af:89:7a: 5c:38:0f:8c:68:c7:c3:3a:3b:ff:c2:ea:9c:44:ba:ea:16:f8: dc:98:5d:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+ZVvDf9f6vU5h0way2DGX21QmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNTExMDMwMzE2MjRaFw0yNTExMDYwOTA5MjRaMDMxMTAvBgNV BAMTKEYxRTREOTc1RkU3QzcwRERDNEVEQUQ5QkQwNzFENTY0RjA2MkJCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mDROUHzZcqwF8uk6qEPhotfx 8vB1aNWV2t8vcI+l+2XgYn8unNEqxgxdv/55VRwBPoaPiGdxS0N/RvLQyzhXRdXq gcvnq8NNfoWB0nflib27NyyFhP+4YFfbKB18aZIgCUFWC55ihnKiCIarrxJxSqks PJXiyKCDkUx6avUYXGTXONJw1r05XW73VGhKBp4tmDFDwWon2uD/mFVGccgkD/Fx iXLd/+G92CLe+6tSJGxWPUJftmhqQCEmTYdrR0CNePd862uO2bieTEY3fqky9j2z UFgBlbzERmPQYZLzMLKU1lgIU0NvAMGjUFh/FH89NwCThJetsHTKZJXyP2s1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8eTZdf58cN3E7a2b0HHVZPBiu10wHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+ucTP7/xz17tKzTCQYmlNlgWbSOlConwjX JHrWXJvpWWat5CFg66KEaI2oJbHdsx3BH/ihAihqLh9F0rgiuZwBL2T8pNycFha3 tpaA8fIi/ytbyJ/k61cOXb7h1NJhkUN5qOTN5dPNGljCktZ3uLLMX+3UzkkXNFWg igEaX6DYIQRh/6yQnQ/6xTJE2D04ogLexJOW5ZOkTS5az6a0AuA1W/wl1QlbTGgv r3IpvtGtsnigpwCxk515IXbhLoJlzD7RqaRR4ekEEOr4KKztGROGeMHgdUPAJm3C 8d5xz6fHavO/2h6tka+Jelw4D4xox8M6O//C6pxEuuoW+NyYXck= -----END CERTIFICATE-----Generated at Tue Nov 4 21:12:46 2025 by rpki-client