$ rpki-client -vvf repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft File: 78702A768CA1E1867D543013BB6186EDA3C06C16.mft (raw, json) Hash identifier: iwbwCzPCRR9ieAb5wUS8fxtx46I3IgfHCnTyqZTqW7c= Subject key identifier: 3A:B8:62:33:EF:84:7B:07:17:B3:E1:9B:7D:AD:B9:82:9E:3D:AA:7F Authority key identifier: 78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 Certificate issuer: /CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Certificate serial: 4F02C3EBEBFF1B49EF2BA72A4B2089CD795CE08C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft Manifest number: 58 Signing time: Sun 27 Apr 2025 00:11:16 +0000 Manifest this update: Sun 27 Apr 2025 00:06:16 +0000 Manifest next update: Wed 30 Apr 2025 09:51:16 +0000 Files and hashes: 1: 78702A768CA1E1867D543013BB6186EDA3C06C16.crl (hash: VQAYYw2o4BWwzaXT3FNv3EObzwiH2QSk4ze8Lxh4log=) 2: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: EKlQMXAk89f+RqS3m5jQwamdkWyWCWcqlaMFgz2WrOg=) 3: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: FkpJvfAJZskSw2RpW6IZFlM3nRvWIXVzCCgCII/z76M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:02:c3:eb:eb:ff:1b:49:ef:2b:a7:2a:4b:20:89:cd:79:5c:e0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Validity Not Before: Apr 27 00:06:16 2025 GMT Not After : Apr 30 09:51:16 2025 GMT Subject: CN=3AB86233EF847B0717B3E19B7DADB9829E3DAA7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:74:d1:c2:3f:fb:c1:9a:93:63:3b:b6:d4: ff:3c:7e:3b:5b:cf:51:e5:42:7c:38:75:90:f6:4d: e3:da:1d:a6:6a:41:70:8f:f8:65:d3:c4:5c:a0:44: e1:38:99:49:c0:92:7b:ce:d0:5b:f9:58:43:89:9a: 7e:d1:3d:d4:47:09:c7:8e:d4:31:b5:1c:7a:e3:5c: 70:0b:d0:c4:c8:61:da:63:66:7a:02:34:da:bb:50: b9:a8:4e:c1:39:c4:09:e2:16:9a:86:b8:f5:b8:4c: b3:6e:7d:af:4e:9a:30:bb:76:c6:34:b3:90:76:59: 2b:95:72:b0:98:39:0c:2b:d6:71:03:a1:56:bf:6e: 7d:fe:40:ff:68:c0:55:36:ee:d4:08:9c:bf:ed:4b: f3:92:01:87:ed:a7:bc:98:48:b0:eb:e2:d6:57:c9: 4f:f2:be:a8:db:f2:cf:37:da:26:3f:dd:be:03:a6: 5c:16:61:85:2f:ee:68:63:03:3b:3c:d4:a1:d4:e2: 2d:68:56:13:9f:ae:08:3b:93:fd:45:22:be:ca:7a: b0:ff:37:9b:e6:18:8f:f0:27:2a:2a:0a:8f:85:00: e9:2d:ad:47:8c:d2:02:9a:7a:6e:1e:aa:d4:2a:ab: 7d:89:81:8d:84:9d:44:6a:09:11:68:e7:8d:3a:f6: 8e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B8:62:33:EF:84:7B:07:17:B3:E1:9B:7D:AD:B9:82:9E:3D:AA:7F X509v3 Authority Key Identifier: keyid:78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6c:c0:ac:1e:76:1a:c9:9f:19:19:21:d1:de:69:67:08:e6: 31:4b:86:e2:6a:b8:41:3a:7a:3e:98:77:04:a5:2a:ac:f8:bc: db:23:67:78:52:8f:72:0e:aa:37:bd:8f:64:43:09:73:42:39: 40:dd:26:3a:c4:95:1f:66:19:94:6f:a9:70:de:f8:65:53:c1: c7:1a:42:3d:4f:6a:5c:69:b4:e2:15:4c:a6:f6:f8:46:af:16: 4c:35:87:9b:fa:2a:71:36:98:56:9e:c8:e0:61:a1:0a:35:82: fc:30:0d:b0:0b:0b:90:e1:19:0e:4f:0b:18:55:70:24:35:52: 73:b2:8b:9e:85:ef:46:46:cb:a9:0d:9b:48:28:2d:49:fe:2e: ea:78:51:96:69:54:8a:3a:8e:29:21:f0:94:87:0b:4d:ed:48: 32:19:f9:8a:a5:b6:d4:c2:05:46:8d:3c:3c:5b:3c:11:9c:00: bb:d7:86:16:ca:01:c6:bc:1b:d9:db:2a:fd:59:6d:d3:27:de: 01:3b:ed:c4:74:7a:05:79:fc:c7:be:32:9f:2c:25:0b:ac:e3: 63:a3:d7:d4:c4:d8:83:c4:47:7c:af:8c:c8:a6:d0:96:ab:78: 44:c1:02:97:f4:52:08:0a:f0:89:a3:ad:22:d3:37:10:0c:06: 1d:08:20:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwLD6+v/G0nvK6cqSyCJzXlc4IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURB M0MwNkMxNjAeFw0yNTA0MjcwMDA2MTZaFw0yNTA0MzAwOTUxMTZaMDMxMTAvBgNV BAMTKDNBQjg2MjMzRUY4NDdCMDcxN0IzRTE5QjdEQURCOTgyOUUzREFBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPXTRwj/7wZqTYzu21P88fjtb z1HlQnw4dZD2TePaHaZqQXCP+GXTxFygROE4mUnAknvO0Fv5WEOJmn7RPdRHCceO 1DG1HHrjXHAL0MTIYdpjZnoCNNq7ULmoTsE5xAniFpqGuPW4TLNufa9OmjC7dsY0 s5B2WSuVcrCYOQwr1nEDoVa/bn3+QP9owFU27tQInL/tS/OSAYftp7yYSLDr4tZX yU/yvqjb8s832iY/3b4DplwWYYUv7mhjAzs81KHU4i1oVhOfrgg7k/1FIr7KerD/ N5vmGI/wJyoqCo+FAOktrUeM0gKaem4eqtQqq32JgY2EnURqCRFo54069o6NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOrhiM++EewcXs+Gbfa25gp49qn8wHwYDVR0j BBgwFoAUeHAqdoyh4YZ9VDATu2GG7aPAbBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmE5ZjRlMi1jNzNiLTQ0MjctOTgyOS0xZGExYmFhYjg3MGIvMC83ODcwMkE3NjhD QTFFMTg2N0Q1NDMwMTNCQjYxODZFREEzQzA2QzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURBM0Mw NkMxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2 RURBM0MwNkMxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5swKwedhrJnxkZIdHeaWcI5jFLhuJquEE6 ej6YdwSlKqz4vNsjZ3hSj3IOqje9j2RDCXNCOUDdJjrElR9mGZRvqXDe+GVTwcca Qj1PalxptOIVTKb2+EavFkw1h5v6KnE2mFaeyOBhoQo1gvwwDbALC5DhGQ5PCxhV cCQ1UnOyi56F70ZGy6kNm0goLUn+Lup4UZZpVIo6jikh8JSHC03tSDIZ+YqlttTC BUaNPDxbPBGcALvXhhbKAca8G9nbKv1ZbdMn3gE77cR0egV5/Me+Mp8sJQus42Oj 19TE2IPER3yvjMim0JareETBApf0UggK8ImjrSLTNxAMBh0IIF8= -----END CERTIFICATE-----Generated at Sun Apr 27 06:47:20 2025 by rpki-client