$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: T0VkGJKs7EOEJa0GNrOqhjLVbT/Umh1hvTcOrlnGEqo= Subject key identifier: B8:66:AA:05:57:4B:C4:DA:0C:C5:A7:51:E8:40:5A:A4:EA:03:B7:42 Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 66AAEFED6504694B983E34BBB4B8024BADB78790 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 01C8 Signing time: Tue 05 Aug 2025 05:01:24 +0000 Manifest this update: Tue 05 Aug 2025 04:56:24 +0000 Manifest next update: Fri 08 Aug 2025 12:18:24 +0000 Files and hashes: 1: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: cXUkxWwyVPS60XbTkvXKCEQggyZtT3odfL2WdxtdbQM=) 2: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: vljo5Oi0hl2aQpZ4Kaqz7NdJ52vgowFgq0RTxUCluvc=) 3: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: VxV0wvF76cxIgL0FMwtTPfiRv33FqVY8nN/0bnqP0Xo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 12:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:aa:ef:ed:65:04:69:4b:98:3e:34:bb:b4:b8:02:4b:ad:b7:87:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Aug 5 04:56:24 2025 GMT Not After : Aug 8 12:18:24 2025 GMT Subject: CN=B866AA05574BC4DA0CC5A751E8405AA4EA03B742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ee:a5:a3:97:a4:86:d2:d6:5c:2b:4f:a2:10: c5:f8:49:3f:37:38:5e:e9:2d:5a:cd:de:f8:25:e4: 86:0e:5f:05:c5:7e:b5:b0:98:2c:23:2a:ef:8b:d6: 5e:4f:44:45:51:35:ac:3d:7e:7c:25:a1:7c:f8:06: b4:0e:5c:52:a7:fb:65:1b:35:01:30:b3:63:a8:8f: 42:8b:ce:d8:23:5b:e4:d6:1a:fd:f3:5c:93:46:d4: 1a:89:02:95:ef:09:67:02:e2:ae:eb:77:d7:4d:0d: f5:04:98:78:80:bb:44:49:1d:50:52:b1:c5:76:a1: e7:46:d5:90:af:63:02:c9:b1:95:02:55:fc:b4:55: 88:c2:64:db:b9:95:55:5e:9d:72:25:7e:ee:51:a7: 3f:a5:f2:d6:1c:ae:c9:f7:76:8d:ab:9c:b6:10:2d: cd:1b:dc:28:f1:93:8c:b2:ea:1f:dd:1e:c3:2f:a7: 89:c4:a3:fc:f3:b5:0c:d9:d2:2b:4d:52:44:51:66: 39:84:09:9f:7a:18:f5:ed:a3:17:2e:0a:ef:6a:fe: 87:93:4e:8f:45:8c:50:71:ed:3b:ac:38:fc:78:42: 7f:c0:39:29:6a:02:fc:50:78:28:c3:b3:42:53:c3: cd:d9:2d:a1:34:20:f3:4c:81:c8:9a:49:1a:f9:c3: bc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:66:AA:05:57:4B:C4:DA:0C:C5:A7:51:E8:40:5A:A4:EA:03:B7:42 X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:36:2b:93:4b:dd:f6:08:57:6b:7f:0d:55:46:b6:bd:8a:18: 7c:fa:f1:44:a9:ee:f7:34:2a:fd:71:b4:0d:2f:a5:b5:e2:a8: 89:7b:04:4b:df:10:1c:43:cd:7c:e9:f9:77:8b:89:ac:b6:c0: c3:e1:6c:2f:d7:5f:45:80:8e:99:45:90:ce:0f:4d:fa:f5:4f: 3e:1d:f1:cb:67:b8:f6:3c:f3:74:79:f6:c2:7b:9b:73:e2:93: 79:e1:f9:c9:ec:40:f6:5c:d7:45:08:e4:44:27:3a:8f:c1:48: 25:40:25:33:1e:9a:8a:90:cd:3f:c2:78:a3:97:97:a6:18:93: fe:07:8c:a1:ba:21:bd:a4:28:22:40:d5:dd:fd:f1:3d:06:58: 69:ef:68:fe:3e:fa:08:04:fd:19:4d:a3:df:ea:80:01:05:05: 9a:64:a9:cf:c5:d2:d4:e7:96:bf:f9:15:8a:94:ef:43:62:4b: b6:76:ea:84:7e:dc:9b:2d:b5:a1:53:11:f2:af:a8:92:9d:a5: 64:a0:12:cc:24:7d:ad:93:d5:1f:3e:cb:74:67:0c:a6:3e:4e: b7:ae:03:15:1a:46:4f:1f:49:db:26:1e:6a:88:25:91:45:94: 58:2b:44:1c:f0:f0:87:7a:72:45:3d:38:37:c2:bb:e3:bb:fd: c4:87:d1:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqrv7WUEaUuYPjS7tLgCS623h5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNTA4MDUwNDU2MjRaFw0yNTA4MDgxMjE4MjRaMDMxMTAvBgNV BAMTKEI4NjZBQTA1NTc0QkM0REEwQ0M1QTc1MUU4NDA1QUE0RUEwM0I3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7qWjl6SG0tZcK0+iEMX4ST83 OF7pLVrN3vgl5IYOXwXFfrWwmCwjKu+L1l5PREVRNaw9fnwloXz4BrQOXFKn+2Ub NQEws2Ooj0KLztgjW+TWGv3zXJNG1BqJApXvCWcC4q7rd9dNDfUEmHiAu0RJHVBS scV2oedG1ZCvYwLJsZUCVfy0VYjCZNu5lVVenXIlfu5Rpz+l8tYcrsn3do2rnLYQ Lc0b3Cjxk4yy6h/dHsMvp4nEo/zztQzZ0itNUkRRZjmECZ96GPXtoxcuCu9q/oeT To9FjFBx7TusOPx4Qn/AOSlqAvxQeCjDs0JTw83ZLaE0IPNMgciaSRr5w7wVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuGaqBVdLxNoMxadR6EBapOoDt0IwHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAg2K5NL3fYIV2t/DVVGtr2KGHz68USp7vc0 Kv1xtA0vpbXiqIl7BEvfEBxDzXzp+XeLiay2wMPhbC/XX0WAjplFkM4PTfr1Tz4d 8ctnuPY883R59sJ7m3Pik3nh+cnsQPZc10UI5EQnOo/BSCVAJTMemoqQzT/CeKOX l6YYk/4HjKG6Ib2kKCJA1d398T0GWGnvaP4++ggE/RlNo9/qgAEFBZpkqc/F0tTn lr/5FYqU70NiS7Z26oR+3JsttaFTEfKvqJKdpWSgEswkfa2T1R8+y3RnDKY+Treu AxUaRk8fSdsmHmqIJZFFlFgrRBzw8Id6ckU9ODfCu+O7/cSH0ec= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:08 2025 by rpki-client