$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: mfcZuLkKqtvXi/xbq4zyc5VOxrLv6cbPbbM/4h70AYA= Subject key identifier: AF:12:D7:42:E8:B4:95:05:EB:78:81:F9:AE:E2:33:D5:E2:25:BA:A9 Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 09ECD9AAF8B3D04E1CDBBC8F9E4D0DEC9DBC5357 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 01CF Signing time: Thu 21 Aug 2025 17:31:23 +0000 Manifest this update: Thu 21 Aug 2025 17:26:23 +0000 Manifest next update: Sun 24 Aug 2025 18:36:23 +0000 Files and hashes: 1: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: cXUkxWwyVPS60XbTkvXKCEQggyZtT3odfL2WdxtdbQM=) 2: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: hfrAiErMxtPaoADphWRzPwG3CjjpFuTlP4pM9egX550=) 3: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: vljo5Oi0hl2aQpZ4Kaqz7NdJ52vgowFgq0RTxUCluvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ec:d9:aa:f8:b3:d0:4e:1c:db:bc:8f:9e:4d:0d:ec:9d:bc:53:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Aug 21 17:26:23 2025 GMT Not After : Aug 24 18:36:23 2025 GMT Subject: CN=AF12D742E8B49505EB7881F9AEE233D5E225BAA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:8f:9d:aa:10:c5:25:1d:91:f3:21:18:d4: c9:fb:8d:6f:27:f2:cf:b1:57:eb:2c:75:8c:eb:ec: fa:7b:b1:da:ec:57:01:a9:f6:84:2d:4a:0c:f2:00: e7:4b:54:7b:1f:e5:07:f5:fe:4a:2d:9b:d9:44:c4: d3:cc:19:a4:a1:bf:08:26:f6:03:f1:2f:e5:0d:74: 93:e1:f9:b9:df:70:89:36:5c:f7:a8:28:3c:64:52: 6d:8c:ca:01:28:eb:13:58:55:c6:d2:b0:2d:b5:5d: 99:6e:f8:4c:fc:a3:35:25:ca:c0:6e:83:d9:d8:8c: f5:a7:26:2b:72:9e:4c:a1:9a:67:7a:15:b8:90:3c: 48:3a:21:d2:fd:bd:04:63:35:bd:8c:a4:de:f2:b1: c1:3e:4d:c5:4b:88:16:26:03:3c:4b:2c:9e:f2:ff: c1:42:59:ff:b5:7b:bf:4b:c2:b2:f2:30:f6:ea:60: 86:0f:90:72:fe:93:23:2c:6b:cf:35:bc:db:7d:90: ac:ba:17:0f:0c:37:77:d5:99:17:57:b9:a5:8f:7b: 70:67:b4:e8:27:8d:4c:65:7c:20:16:e1:68:47:29: 4e:e2:aa:7f:3a:75:52:10:35:e6:32:6e:13:54:ff: ac:5e:e7:8c:be:f1:ca:03:ab:11:95:06:23:87:54: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:12:D7:42:E8:B4:95:05:EB:78:81:F9:AE:E2:33:D5:E2:25:BA:A9 X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ca:e6:38:6a:63:85:14:b1:5b:97:17:97:58:3a:48:24:70: 7e:96:55:5b:3c:54:11:1b:2e:48:5c:77:9d:87:69:b4:f3:14: 50:7f:94:f7:35:d5:55:d8:e2:48:8d:fc:2c:b6:2a:30:b9:72: c3:2c:90:12:0f:ae:36:0d:87:dd:e0:52:95:05:e2:c2:4c:bc: b7:eb:cb:43:b2:c5:29:a0:b5:fb:de:1e:00:42:55:31:63:8b: f4:b4:32:dc:d3:b8:22:15:23:0e:0b:cf:de:e5:a8:26:06:78: f4:1a:91:89:82:02:24:e3:09:07:60:d9:90:e1:cb:74:44:a7: 5f:dd:1c:9a:ea:b6:fd:a5:97:47:16:28:97:19:99:14:ad:fc: 07:a2:9e:44:8b:83:a7:9c:4c:20:ad:04:b2:91:18:9c:37:dc: 67:22:b3:85:00:d6:1c:5c:04:23:4b:e2:44:dd:3f:96:63:1f: 3e:33:ae:a4:fb:68:50:23:b8:59:fc:b9:b6:96:4b:0f:75:71: 3a:e9:dc:33:ac:ae:4c:bb:96:34:5a:c5:95:96:da:2e:27:64: 02:ba:86:7b:b5:3d:79:1a:fd:b7:30:3f:9c:20:a8:ad:3c:5d: de:f2:7f:40:bc:fe:e5:e3:e6:db:6c:03:e2:c2:31:03:9a:27: df:9a:a3:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCezZqviz0E4c27yPnk0N7J28U1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNTA4MjExNzI2MjNaFw0yNTA4MjQxODM2MjNaMDMxMTAvBgNV BAMTKEFGMTJENzQyRThCNDk1MDVFQjc4ODFGOUFFRTIzM0Q1RTIyNUJBQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdI+dqhDFJR2R8yEY1Mn7jW8n 8s+xV+ssdYzr7Pp7sdrsVwGp9oQtSgzyAOdLVHsf5Qf1/kotm9lExNPMGaShvwgm 9gPxL+UNdJPh+bnfcIk2XPeoKDxkUm2MygEo6xNYVcbSsC21XZlu+Ez8ozUlysBu g9nYjPWnJitynkyhmmd6FbiQPEg6IdL9vQRjNb2MpN7yscE+TcVLiBYmAzxLLJ7y /8FCWf+1e79LwrLyMPbqYIYPkHL+kyMsa881vNt9kKy6Fw8MN3fVmRdXuaWPe3Bn tOgnjUxlfCAW4WhHKU7iqn86dVIQNeYybhNU/6xe54y+8coDqxGVBiOHVJUZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrxLXQui0lQXreIH5ruIz1eIluqkwHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3K5jhqY4UUsVuXF5dYOkgkcH6WVVs8VBEb Lkhcd52HabTzFFB/lPc11VXY4kiN/Cy2KjC5csMskBIPrjYNh93gUpUF4sJMvLfr y0OyxSmgtfveHgBCVTFji/S0MtzTuCIVIw4Lz97lqCYGePQakYmCAiTjCQdg2ZDh y3REp1/dHJrqtv2ll0cWKJcZmRSt/AeinkSLg6ecTCCtBLKRGJw33Gcis4UA1hxc BCNL4kTdP5ZjHz4zrqT7aFAjuFn8ubaWSw91cTrp3DOsrky7ljRaxZWW2i4nZAK6 hnu1PXka/bcwP5wgqK08Xd7yf0C8/uXj5ttsA+LCMQOaJ9+ao90= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:40 2025 by rpki-client