$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: RS5eD40+MuWgYtTGiQGu6pdI7O10cx3wKrGSRbaW9rM= Subject key identifier: 1A:27:F5:1B:F1:7C:E5:B6:1E:69:81:4A:79:93:63:EB:73:D9:22:40 Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 1CDB354A35144FDB2F82A2F7E6AD449BCDE22F09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 01B1 Signing time: Sat 14 Jun 2025 09:21:21 +0000 Manifest this update: Sat 14 Jun 2025 09:16:21 +0000 Manifest next update: Tue 17 Jun 2025 15:46:21 +0000 Files and hashes: 1: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: vljo5Oi0hl2aQpZ4Kaqz7NdJ52vgowFgq0RTxUCluvc=) 2: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: HAG/vaIvG6gNvciYtCXf8bqU/xi7zDd4PQW08/lBfQc=) 3: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: cXUkxWwyVPS60XbTkvXKCEQggyZtT3odfL2WdxtdbQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 15:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:db:35:4a:35:14:4f:db:2f:82:a2:f7:e6:ad:44:9b:cd:e2:2f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Jun 14 09:16:21 2025 GMT Not After : Jun 17 15:46:21 2025 GMT Subject: CN=1A27F51BF17CE5B61E69814A799363EB73D92240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:8e:e7:ba:53:51:61:3b:ff:26:62:5b:31: c0:17:ef:91:32:67:ff:95:02:b8:37:66:54:7b:b2: c2:c6:6e:4c:f4:b5:fd:3d:a8:69:13:3c:d8:1c:75: a8:dd:46:dd:a1:b1:9d:9b:c4:0f:49:f2:01:ab:21: 53:77:30:0a:0f:8a:f5:86:ef:1f:56:7a:13:e6:43: 92:c6:bb:59:9f:ab:56:cb:29:e9:bd:e4:d1:fb:74: af:e5:72:5f:57:da:12:cc:02:a9:c7:02:7c:22:ea: ea:ab:a8:97:46:2f:81:2f:05:38:4b:56:02:bc:53: 3f:10:7c:0f:70:fb:89:e3:f2:f0:9d:a5:e6:76:bc: 84:1e:90:11:99:12:5a:6f:38:5a:f6:00:71:10:20: e1:25:15:54:1a:b4:1e:2f:e7:83:28:f5:24:d2:45: c7:98:f4:a0:18:c9:0a:fd:22:47:24:44:49:b7:cd: a1:66:cb:1a:c4:10:2b:82:50:39:85:f9:5c:1d:e3: 4e:af:36:ee:82:e4:e2:fd:e9:a7:d0:95:0f:d9:6c: 8f:6f:09:b6:3d:1d:2b:de:a1:85:fb:68:41:8c:c7: f5:56:13:86:95:b3:38:ff:f1:99:10:b9:bc:8a:01: 83:43:0c:e7:8e:a0:00:8a:92:10:ab:c4:c4:08:68: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:27:F5:1B:F1:7C:E5:B6:1E:69:81:4A:79:93:63:EB:73:D9:22:40 X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:52:cb:6d:87:61:b4:ed:6e:b1:61:b9:15:da:37:f2:95:86: f2:ee:70:4a:74:37:ae:99:f5:14:1f:87:6c:90:b6:c5:c2:6e: 85:8d:3f:e0:dc:1b:c1:43:90:03:f2:46:b3:a9:8e:83:69:a2: a3:6c:92:b9:0d:ea:70:9d:07:a2:12:3f:72:eb:08:1a:74:1e: ca:bd:b2:dc:13:a4:7d:a7:fd:c0:38:01:1d:1b:df:7e:7b:e2: 0c:b9:d5:e2:ef:dd:c1:9c:ce:14:20:99:3b:9d:81:cc:66:71: 75:53:e8:00:fb:db:02:c1:92:3f:51:36:30:de:e0:70:0d:b0: b6:b3:6b:4c:60:e2:ec:35:42:13:00:f5:19:d8:bd:a0:72:db: 05:88:98:a8:ab:09:20:c3:38:1a:34:7a:6e:cd:8e:57:18:02: e5:a3:aa:85:86:6b:d2:0b:82:ef:93:44:74:84:e8:0f:07:b4: 68:a9:e3:ec:f3:91:e1:a9:a2:94:e5:80:72:17:56:9c:4d:2b: 92:ef:4a:85:70:db:9d:d9:f2:9f:7d:64:4d:85:da:64:7d:4f: 37:4c:f7:81:71:c3:9d:03:ea:ad:e1:f1:8c:82:f6:3c:ea:ec: 91:8b:ed:27:9c:6e:b1:40:e8:51:1f:73:c9:20:e5:ec:c9:2b: 6b:d1:50:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNs1SjUUT9svgqL35q1Em83iLwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNTA2MTQwOTE2MjFaFw0yNTA2MTcxNTQ2MjFaMDMxMTAvBgNV BAMTKDFBMjdGNTFCRjE3Q0U1QjYxRTY5ODE0QTc5OTM2M0VCNzNEOTIyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jI7nulNRYTv/JmJbMcAX75Ey Z/+VArg3ZlR7ssLGbkz0tf09qGkTPNgcdajdRt2hsZ2bxA9J8gGrIVN3MAoPivWG 7x9WehPmQ5LGu1mfq1bLKem95NH7dK/lcl9X2hLMAqnHAnwi6uqrqJdGL4EvBThL VgK8Uz8QfA9w+4nj8vCdpeZ2vIQekBGZElpvOFr2AHEQIOElFVQatB4v54Mo9STS RceY9KAYyQr9IkckREm3zaFmyxrEECuCUDmF+Vwd406vNu6C5OL96afQlQ/ZbI9v CbY9HSveoYX7aEGMx/VWE4aVszj/8ZkQubyKAYNDDOeOoACKkhCrxMQIaJ/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGif1G/F85bYeaYFKeZNj63PZIkAwHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9Sy22HYbTtbrFhuRXaN/KVhvLucEp0N66Z 9RQfh2yQtsXCboWNP+DcG8FDkAPyRrOpjoNpoqNskrkN6nCdB6ISP3LrCBp0Hsq9 stwTpH2n/cA4AR0b33574gy51eLv3cGczhQgmTudgcxmcXVT6AD72wLBkj9RNjDe 4HANsLaza0xg4uw1QhMA9RnYvaBy2wWImKirCSDDOBo0em7NjlcYAuWjqoWGa9IL gu+TRHSE6A8HtGip4+zzkeGpopTlgHIXVpxNK5LvSoVw253Z8p99ZE2F2mR9TzdM 94Fxw50D6q3h8YyC9jzq7JGL7SecbrFA6FEfc8kg5ezJK2vRUCs= -----END CERTIFICATE-----Generated at Mon Jun 16 01:28:34 2025 by rpki-client