$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: iTsbkm8mkj37OqHFVH35jyF/wQJhWtIYfZZ+5CLket0= Subject key identifier: 41:EB:B9:C1:B4:A1:FE:A3:2E:AA:81:51:E7:AA:CA:57:DC:0F:B7:0E Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 728BAC3C692ED5BA869A9062C4D02D22D465BC3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 01B7 Signing time: Fri 27 Jun 2025 21:31:22 +0000 Manifest this update: Fri 27 Jun 2025 21:26:22 +0000 Manifest next update: Tue 01 Jul 2025 05:50:22 +0000 Files and hashes: 1: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: vljo5Oi0hl2aQpZ4Kaqz7NdJ52vgowFgq0RTxUCluvc=) 2: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: 1+/Dmx2EN6G8zzEJhZcx2qB1agatyu6KHyIxPe4FZhQ=) 3: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: cXUkxWwyVPS60XbTkvXKCEQggyZtT3odfL2WdxtdbQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:8b:ac:3c:69:2e:d5:ba:86:9a:90:62:c4:d0:2d:22:d4:65:bc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Jun 27 21:26:22 2025 GMT Not After : Jul 1 05:50:22 2025 GMT Subject: CN=41EBB9C1B4A1FEA32EAA8151E7AACA57DC0FB70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:dc:32:ad:5c:b3:ee:44:50:e6:ff:0d:12: e7:87:19:72:bd:17:4f:28:4c:c8:e2:65:bd:2f:c1: ca:5f:a0:bc:88:a7:a8:cd:92:30:3d:65:20:09:8b: e6:8f:fe:ee:6d:8a:fc:b3:93:92:11:25:de:23:d4: b7:ee:15:c5:e8:8d:17:cc:91:14:c9:6e:35:32:c0: e7:7c:77:c3:83:8c:76:81:75:13:fa:02:df:28:cc: 13:e1:25:4d:f2:fb:8b:07:29:aa:24:d5:65:22:0d: 82:a5:40:af:ac:f9:b2:dd:ab:95:f1:6f:8f:4c:71: c7:49:8b:9c:48:99:73:f0:ac:db:a4:eb:6f:33:fe: f2:1b:f3:ae:d5:34:ea:a5:bc:0f:86:a4:07:30:d8: 54:35:93:98:1a:36:d2:cc:3b:19:ce:84:2b:d3:d2: 8e:b1:aa:79:19:eb:81:d5:48:ee:a5:3a:b9:ce:82: 2a:e8:b0:be:c5:34:90:91:a4:c7:e2:3b:96:94:62: 8b:b2:4a:70:80:0d:2b:c9:bc:22:71:c9:82:b4:12: 52:b3:48:8d:30:a5:14:9a:94:d1:6c:64:db:da:d2: fe:68:a4:54:73:b3:f9:dc:53:51:2c:64:96:37:14: cf:9f:19:08:d2:57:fc:7e:d3:b6:9a:97:cb:eb:b2: 1b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EB:B9:C1:B4:A1:FE:A3:2E:AA:81:51:E7:AA:CA:57:DC:0F:B7:0E X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:05:b3:77:cd:fa:f3:05:c1:98:fb:85:b1:f4:d1:62:c4:be: 45:d6:48:f0:26:f7:5b:04:41:14:1e:f6:4e:fb:ca:9c:6d:0f: ca:c9:cf:90:5f:c2:d9:c7:16:59:aa:7f:b4:6a:f6:ca:b3:44: d6:f0:2d:6a:48:4a:e8:bb:cb:41:4b:96:e6:d3:89:c8:99:68: 85:a9:14:ac:08:9e:86:70:ea:55:b2:78:d2:82:1e:ee:f9:f6: ac:fd:f2:f3:50:f1:2c:86:21:8a:52:4f:16:b6:3d:29:ac:cb: dc:dd:1d:b1:f6:8f:03:27:a4:c1:82:6a:0c:5c:69:08:3f:93: 33:0d:60:50:8f:51:9b:4a:d1:f2:45:e7:74:25:75:58:2f:03: 16:d8:c7:6b:7a:02:d7:46:ce:c0:09:96:87:32:14:d1:84:e7: c8:db:a6:79:7c:95:33:45:42:de:36:cc:e1:4c:f4:fb:96:0b: ca:10:21:4a:54:be:76:90:2c:7e:cf:d4:da:92:b8:d5:4d:60: 7f:62:b0:75:71:bd:d6:a2:30:df:1b:b3:14:e9:6a:fd:ff:29: d7:14:82:e6:3e:39:82:d5:3e:20:c3:c0:f0:7b:f0:d0:4d:49: 5e:10:ed:b8:b2:c7:94:b1:1d:3e:a0:ba:32:3d:4d:b1:b1:66: 3e:00:72:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcousPGku1bqGmpBixNAtItRlvD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNTA2MjcyMTI2MjJaFw0yNTA3MDEwNTUwMjJaMDMxMTAvBgNV BAMTKDQxRUJCOUMxQjRBMUZFQTMyRUFBODE1MUU3QUFDQTU3REMwRkI3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCejtwyrVyz7kRQ5v8NEueHGXK9 F08oTMjiZb0vwcpfoLyIp6jNkjA9ZSAJi+aP/u5tivyzk5IRJd4j1LfuFcXojRfM kRTJbjUywOd8d8ODjHaBdRP6At8ozBPhJU3y+4sHKaok1WUiDYKlQK+s+bLdq5Xx b49MccdJi5xImXPwrNuk628z/vIb867VNOqlvA+GpAcw2FQ1k5gaNtLMOxnOhCvT 0o6xqnkZ64HVSO6lOrnOgirosL7FNJCRpMfiO5aUYouySnCADSvJvCJxyYK0ElKz SI0wpRSalNFsZNva0v5opFRzs/ncU1EsZJY3FM+fGQjSV/x+07aal8vrshsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQeu5wbSh/qMuqoFR56rKV9wPtw4wHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkFs3fN+vMFwZj7hbH00WLEvkXWSPAm91sE QRQe9k77ypxtD8rJz5BfwtnHFlmqf7Rq9sqzRNbwLWpISui7y0FLlubTiciZaIWp FKwInoZw6lWyeNKCHu759qz98vNQ8SyGIYpSTxa2PSmsy9zdHbH2jwMnpMGCagxc aQg/kzMNYFCPUZtK0fJF53QldVgvAxbYx2t6AtdGzsAJlocyFNGE58jbpnl8lTNF Qt42zOFM9PuWC8oQIUpUvnaQLH7P1NqSuNVNYH9isHVxvdaiMN8bsxTpav3/KdcU guY+OYLVPiDDwPB78NBNSV4Q7biyx5SxHT6gujI9TbGxZj4Acic= -----END CERTIFICATE-----Generated at Sun Jun 29 21:23:06 2025 by rpki-client