$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: Je6YYgIR1sQVw64zahhzXET4o3zqcL8Q/pzKJ4HVgIQ= Subject key identifier: AB:77:D7:52:3D:82:C2:34:56:FB:3F:F6:B4:8A:41:7A:65:F2:86:85 Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 563C932A6CF503F3900A5AD18C4D53597A6E3634 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 019F Signing time: Sun 04 May 2025 22:01:21 +0000 Manifest this update: Sun 04 May 2025 21:56:21 +0000 Manifest next update: Thu 08 May 2025 00:03:21 +0000 Files and hashes: 1: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: B61wBLeJZ8Iylt8JOlP/IRrY842eZ9723vt50rW8sK4=) 2: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: vljo5Oi0hl2aQpZ4Kaqz7NdJ52vgowFgq0RTxUCluvc=) 3: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: cXUkxWwyVPS60XbTkvXKCEQggyZtT3odfL2WdxtdbQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 00:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3c:93:2a:6c:f5:03:f3:90:0a:5a:d1:8c:4d:53:59:7a:6e:36:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: May 4 21:56:21 2025 GMT Not After : May 8 00:03:21 2025 GMT Subject: CN=AB77D7523D82C23456FB3FF6B48A417A65F28685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:09:2d:f4:0b:06:ed:81:83:74:d9:d8:56:29: ff:2c:f7:a4:3b:2f:db:53:ac:58:f9:4f:d3:a2:47: 4c:96:da:16:9a:0a:af:fc:ce:1b:86:ab:4c:0d:bb: 46:ac:3e:a0:1c:ed:9a:1e:68:41:c6:71:25:cb:d0: 68:75:04:ae:53:f6:57:74:70:b9:bb:2d:06:96:58: 78:84:00:6d:ef:73:05:4e:f5:f7:5e:ba:2a:09:60: 24:a6:c6:c3:b5:94:dd:06:be:94:09:bf:90:bc:68: bf:a0:0e:b6:1f:60:ba:93:26:dd:f2:4a:98:bb:fd: 3a:75:54:02:eb:8d:e1:e4:a2:ec:99:6c:d5:a1:78: c8:9b:75:d8:ed:af:d7:c1:62:fb:da:97:27:bf:39: 93:67:b3:be:c4:bd:cb:3a:c1:9d:64:35:eb:b3:84: 43:8b:b8:71:9e:41:62:84:c2:03:53:b7:6a:7f:0e: 8f:41:f4:0a:a0:26:52:02:ad:5f:f2:23:d1:67:94: 32:9a:dd:1b:8c:fd:47:34:9d:55:a7:cc:78:7d:48: 95:53:0d:a3:b7:5c:4d:a5:59:6c:2f:15:03:10:59: cd:b5:59:27:b8:08:00:40:e9:fc:67:34:2f:90:1c: 76:e2:1a:55:ff:a2:55:08:56:c3:0c:55:30:18:65: ca:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:77:D7:52:3D:82:C2:34:56:FB:3F:F6:B4:8A:41:7A:65:F2:86:85 X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e4:0b:2e:54:36:3f:05:19:5d:38:32:40:40:52:1c:26:cf: b3:db:65:02:4c:b6:95:71:40:75:f5:1b:5d:b3:6a:1c:ef:c1: 26:07:08:e8:58:63:be:5f:bd:75:d1:60:7f:f5:cd:1e:12:25: bd:ec:67:3c:af:49:09:21:57:4c:5e:9b:9a:79:cf:25:84:ca: b0:e3:78:cd:07:b4:87:4c:3f:8f:c1:6f:c4:0e:8e:b8:d1:3e: b8:98:23:ee:aa:28:2a:7d:95:29:fc:27:95:fe:fc:4e:cc:c4: 6a:05:32:4d:7a:0b:1e:d7:fe:2a:28:6c:f1:60:1e:5b:42:0d: 1f:25:d9:cb:92:1c:15:1a:de:ff:ac:4e:42:ed:d0:d1:07:d9: 05:cc:a4:cd:84:66:27:19:e5:d5:16:e2:e9:3b:52:56:30:f4: 16:8c:4c:33:45:ba:89:87:74:40:d5:0f:fc:59:db:31:69:37: 45:2f:e4:5d:bb:eb:6c:31:84:1d:63:55:ec:59:6e:47:6c:31: ee:0f:33:87:90:6a:2a:66:f1:5d:aa:4b:a6:f1:4b:8a:03:ee: ce:8b:15:cd:04:0b:0e:f8:93:fb:6c:d5:58:4e:ce:07:af:ba: 00:4e:c3:3b:e9:46:4d:75:87:92:d6:ac:5d:f8:69:38:ae:d0: 54:5a:52:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjyTKmz1A/OQClrRjE1TWXpuNjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNTA1MDQyMTU2MjFaFw0yNTA1MDgwMDAzMjFaMDMxMTAvBgNV BAMTKEFCNzdENzUyM0Q4MkMyMzQ1NkZCM0ZGNkI0OEE0MTdBNjVGMjg2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdCS30CwbtgYN02dhWKf8s96Q7 L9tTrFj5T9OiR0yW2haaCq/8zhuGq0wNu0asPqAc7ZoeaEHGcSXL0Gh1BK5T9ld0 cLm7LQaWWHiEAG3vcwVO9fdeuioJYCSmxsO1lN0GvpQJv5C8aL+gDrYfYLqTJt3y Spi7/Tp1VALrjeHkouyZbNWheMibddjtr9fBYvvalye/OZNns77Evcs6wZ1kNeuz hEOLuHGeQWKEwgNTt2p/Do9B9AqgJlICrV/yI9FnlDKa3RuM/Uc0nVWnzHh9SJVT DaO3XE2lWWwvFQMQWc21WSe4CABA6fxnNC+QHHbiGlX/olUIVsMMVTAYZcpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq3fXUj2CwjRW+z/2tIpBemXyhoUwHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3kCy5UNj8FGV04MkBAUhwmz7PbZQJMtpVx QHX1G12zahzvwSYHCOhYY75fvXXRYH/1zR4SJb3sZzyvSQkhV0xem5p5zyWEyrDj eM0HtIdMP4/Bb8QOjrjRPriYI+6qKCp9lSn8J5X+/E7MxGoFMk16Cx7X/ioobPFg HltCDR8l2cuSHBUa3v+sTkLt0NEH2QXMpM2EZicZ5dUW4uk7UlYw9BaMTDNFuomH dEDVD/xZ2zFpN0Uv5F2762wxhB1jVexZbkdsMe4PM4eQaipm8V2qS6bxS4oD7s6L Fc0ECw74k/ts1VhOzgevugBOwzvpRk11h5LWrF34aTiu0FRaUuM= -----END CERTIFICATE-----Generated at Wed May 7 02:17:26 2025 by rpki-client