$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft File: 78578588503A7F091F1D7CD7B16BDC9E55055889.mft (raw, json) Hash identifier: 5Rdjq7G+j/+Vi3crVm5mtk0UpOd+xpGKqMVccmHcGM8= Subject key identifier: EA:AE:D9:90:D0:2D:6C:46:21:F5:8D:5C:C3:99:38:EC:5B:7C:C6:B0 Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 Certificate issuer: /CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Certificate serial: 2BAB25859CDFE14926D97A1886283E41B8BB71F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft Manifest number: EA Signing time: Sat 26 Apr 2025 22:11:31 +0000 Manifest this update: Sat 26 Apr 2025 22:06:31 +0000 Manifest next update: Wed 30 Apr 2025 07:07:31 +0000 Files and hashes: 1: 78578588503A7F091F1D7CD7B16BDC9E55055889.crl (hash: Vo5bpH1iSiY5kAuBoFJaZs/bs1LpVnjKM79rWV43Ll4=) 2: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: YXBLniWIP1tEpCZLI2E35OhkhCdsQi0gYJFIjwBZCnk=) 3: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: e1JG4uU1iuO6rgmOne6CBOco5jWQCmWhIZVp0+S/uh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 07:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ab:25:85:9c:df:e1:49:26:d9:7a:18:86:28:3e:41:b8:bb:71:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Validity Not Before: Apr 26 22:06:31 2025 GMT Not After : Apr 30 07:07:31 2025 GMT Subject: CN=EAAED990D02D6C4621F58D5CC39938EC5B7CC6B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b9:81:9a:28:65:72:ea:fd:69:00:9f:e0:9a: be:1c:60:28:67:fc:bc:1c:8b:f7:f4:71:54:82:19: 2c:3d:09:26:dc:e2:d5:7e:12:9e:78:f7:30:fa:6c: 5f:6f:2c:c0:50:bf:60:c9:19:4c:71:d9:cf:2a:0c: 0d:68:10:bd:1b:7f:36:90:2a:db:9f:2d:1b:6b:4a: f5:af:a9:50:b0:0c:85:40:5a:fc:d1:50:84:6b:c6: a7:55:1c:e4:29:87:66:d7:3d:63:6e:3b:94:c1:78: c6:90:23:f2:fd:a1:fe:c7:95:99:7c:55:5e:62:4a: 7b:6f:c9:17:27:ad:5f:90:2e:23:cf:53:3c:df:8f: a8:ba:3e:46:d2:2a:26:2c:92:ee:fd:0d:b0:3a:15: ec:bf:7f:be:ea:1c:d6:8d:3f:b8:f2:1e:db:7e:dd: 63:69:6b:0b:8f:fc:f2:73:5a:b0:21:11:8b:04:3c: 7c:d1:47:f4:f5:34:4a:e3:ae:64:f2:37:80:5b:90: b5:97:0d:75:b4:de:bb:9a:ea:c6:8a:ce:21:4c:93: 8c:dd:3a:14:55:15:12:e2:8f:ef:47:fc:da:55:8a: 88:84:5a:c4:91:fa:5b:63:67:51:d9:20:21:f3:0d: 3a:dd:aa:0e:cc:7e:f3:c9:62:61:03:a5:0e:b4:2e: 66:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AE:D9:90:D0:2D:6C:46:21:F5:8D:5C:C3:99:38:EC:5B:7C:C6:B0 X509v3 Authority Key Identifier: keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cb:58:97:5c:af:86:2e:03:1d:dd:1b:8f:3e:d7:de:ff:4b: 00:99:e9:a3:16:db:c7:0f:1b:b3:24:c8:94:b6:ff:43:5f:64: e1:16:a4:df:28:02:c4:7c:f1:81:db:4a:4a:41:fc:4b:de:66: eb:26:d0:d4:d4:59:26:50:5b:0a:df:7f:89:fd:6e:e0:23:09: 62:d4:09:37:ba:a8:f1:b6:41:d4:64:67:85:14:18:41:c7:6f: 02:d3:51:30:8c:23:88:fc:4c:39:53:8c:70:ee:ed:37:45:08: 81:25:a7:14:39:06:cc:b1:4b:94:d3:57:cf:87:5a:c2:ef:42: 8e:24:93:4a:58:b4:fa:78:7a:41:f6:f0:42:e6:e0:28:6f:df: 8c:87:ab:d5:4a:ca:e5:f3:94:91:be:2d:2a:d2:0d:6b:bd:08: ce:cc:05:b3:0a:6b:36:97:28:73:b3:20:f7:a6:31:11:ea:3c: 14:9c:44:1b:d7:8a:2a:fa:19:d9:af:3b:e9:c6:fd:22:ac:d8: 17:67:32:ff:76:b0:ba:83:de:6b:c7:e7:d8:0b:d0:79:da:6a: 66:e6:4b:2c:d3:1c:ec:d5:21:a6:ce:5d:5d:76:83:41:1c:c6: a2:9f:96:48:20:25:28:e6:20:36:2c:fd:e6:96:51:87:35:c7: 51:99:52:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK6slhZzf4Ukm2XoYhig+Qbi7cfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1 NTA1NTg4OTAeFw0yNTA0MjYyMjA2MzFaFw0yNTA0MzAwNzA3MzFaMDMxMTAvBgNV BAMTKEVBQUVEOTkwRDAyRDZDNDYyMUY1OEQ1Q0MzOTkzOEVDNUI3Q0M2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZuYGaKGVy6v1pAJ/gmr4cYChn /Lwci/f0cVSCGSw9CSbc4tV+Ep549zD6bF9vLMBQv2DJGUxx2c8qDA1oEL0bfzaQ KtufLRtrSvWvqVCwDIVAWvzRUIRrxqdVHOQph2bXPWNuO5TBeMaQI/L9of7HlZl8 VV5iSntvyRcnrV+QLiPPUzzfj6i6PkbSKiYsku79DbA6Fey/f77qHNaNP7jyHtt+ 3WNpawuP/PJzWrAhEYsEPHzRR/T1NErjrmTyN4BbkLWXDXW03rua6saKziFMk4zd OhRVFRLij+9H/NpVioiEWsSR+ltjZ1HZICHzDTrdqg7MfvPJYmEDpQ60Lmb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6q7ZkNAtbEYh9Y1cw5k47Ft8xrAwHwYDVR0j BBgwFoAUeFeFiFA6fwkfHXzXsWvcnlUFWIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGU0Y2E1NC04NTdiLTRmNjgtYWI1Zi0wZDhjNDcyZTZjOTIvMC83ODU3ODU4ODUw M0E3RjA5MUYxRDdDRDdCMTZCREM5RTU1MDU1ODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1NTA1 NTg4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlNGNhNTQtODU3Yi00ZjY4LWFi NWYtMGQ4YzQ3MmU2YzkyLzAvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRD OUU1NTA1NTg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrLWJdcr4YuAx3dG48+197/SwCZ6aMW28cP G7MkyJS2/0NfZOEWpN8oAsR88YHbSkpB/EveZusm0NTUWSZQWwrff4n9buAjCWLU CTe6qPG2QdRkZ4UUGEHHbwLTUTCMI4j8TDlTjHDu7TdFCIElpxQ5BsyxS5TTV8+H WsLvQo4kk0pYtPp4ekH28ELm4Chv34yHq9VKyuXzlJG+LSrSDWu9CM7MBbMKazaX KHOzIPemMRHqPBScRBvXiir6GdmvO+nG/SKs2BdnMv92sLqD3mvH59gL0Hnaambm SyzTHOzVIabOXV12g0EcxqKflkggJSjmIDYs/eaWUYc1x1GZUsM= -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:57 2025 by rpki-client