$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft File: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft (raw, json) Hash identifier: iadZEEDYMMTJR47paD1P3crfr4q3iPhA/uBnl641HMA= Subject key identifier: 2A:DB:C8:6B:93:2A:C7:D5:E8:41:D1:BC:FB:48:A0:49:61:C7:07:BD Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 Certificate issuer: /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Certificate serial: 3B528D0DA664CB7CA746E8FBC8CEAE65EA8C6754 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft Manifest number: 45 Signing time: Tue 06 May 2025 14:41:14 +0000 Manifest this update: Tue 06 May 2025 14:36:14 +0000 Manifest next update: Sat 10 May 2025 01:37:14 +0000 Files and hashes: 1: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: HUEwdGiOhF3oiIXSl5GQ5TTpMFKflaMugAM28/Htypk=) 2: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: X+5UT/GSOBpO30J7mwUdK8TlS1P10P4zZ4ljBd5RqEY=) 3: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl (hash: mEcEQsI8Y5PK5q0Mq9NUvP5HjLci63EtlRRCbEswQ9c=) 4: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: KwAYS/a7h4fChN6pY7P76dJV21oWKmMZY37E8i7mLHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 01:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:52:8d:0d:a6:64:cb:7c:a7:46:e8:fb:c8:ce:ae:65:ea:8c:67:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Validity Not Before: May 6 14:36:14 2025 GMT Not After : May 10 01:37:14 2025 GMT Subject: CN=2ADBC86B932AC7D5E841D1BCFB48A04961C707BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ef:3f:7b:b1:6b:cc:52:2b:f2:b4:6d:bd:4c: 0e:34:0e:38:f4:33:47:75:c0:a1:4d:90:48:f0:43: b1:f9:a7:2e:55:5b:9c:20:be:db:51:93:56:5b:7c: 2b:76:3a:2e:00:1c:0f:c6:a7:6c:b8:93:77:03:eb: 9a:1a:0e:8d:e8:2e:2c:e5:ce:2f:6c:3e:3a:13:76: 6c:37:6a:18:0a:33:f7:90:dc:53:fc:e0:b8:c4:d2: 6b:4f:1e:17:99:31:fc:19:b3:a4:fb:6f:3c:68:47: b7:da:82:6e:df:08:09:e1:37:a5:09:8a:79:02:4e: f4:bc:d4:e8:01:41:89:11:f9:3c:b8:25:1a:45:77: c0:f7:aa:1e:5f:59:e5:31:fb:92:ad:ff:4d:e2:3f: 2c:e5:9b:43:1c:72:d8:64:ed:00:e7:93:5f:4c:1d: 96:1b:38:c8:35:da:bb:dc:6b:8a:11:93:c7:ad:ac: 31:85:fb:ef:e3:95:76:89:ff:3e:33:cb:64:8b:2c: a5:7a:d0:3b:88:0d:1d:c1:a5:75:8c:f8:16:a9:0a: e1:11:ad:89:7d:5f:4c:ef:7d:fc:1a:af:5c:1d:9e: cb:ff:12:72:e6:b6:b5:3d:e7:b3:5c:af:b6:0f:63: 91:8a:e2:86:48:a4:e5:57:d0:48:a5:af:4d:7d:65: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DB:C8:6B:93:2A:C7:D5:E8:41:D1:BC:FB:48:A0:49:61:C7:07:BD X509v3 Authority Key Identifier: keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:65:15:c2:c8:7c:07:b7:a4:25:56:27:9c:1d:12:55:bb:af: 64:6e:7d:c4:2b:1c:0d:05:ee:6a:68:b4:e0:e5:fe:13:fd:c7: d7:7f:ed:58:88:3d:d4:f4:be:20:ca:ab:fe:c7:fa:52:4b:2e: 7b:18:b8:7c:b3:76:15:e3:68:10:5b:4b:95:9a:f6:a7:9d:02: fd:60:b5:27:e1:c2:09:c4:ff:1a:7f:b6:39:dc:ee:47:23:0b: 4f:cd:7f:c3:f9:7d:c0:d8:3c:49:4d:15:92:1e:0c:d2:34:d7: 01:b9:fe:5d:93:89:9a:63:0c:73:97:d7:cd:75:62:6b:5b:12: 57:a6:6e:ab:a2:b3:88:6b:fa:45:cc:24:58:74:6e:9c:db:97: b7:d0:3d:d9:a5:0d:67:6e:b2:d9:85:09:5b:57:1b:da:72:e1: f5:c2:02:e8:9c:08:b6:d9:0c:8e:60:ad:73:d2:04:08:7d:85: ca:1c:7d:2f:5b:bc:05:7b:a7:64:7b:e8:12:0e:4c:80:fc:38: b5:d8:90:71:fd:05:af:b9:d1:45:94:1c:fe:a4:d9:0d:82:17: 0b:ba:5d:6e:ae:12:43:eb:45:57:29:5d:fa:a1:ec:70:a1:27: a8:48:c7:12:b8:f0:e3:e2:34:ea:ba:eb:47:f2:0b:55:73:59: c4:ae:04:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1KNDaZky3ynRuj7yM6uZeqMZ1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0 REY0MTQxNDAeFw0yNTA1MDYxNDM2MTRaFw0yNTA1MTAwMTM3MTRaMDMxMTAvBgNV BAMTKDJBREJDODZCOTMyQUM3RDVFODQxRDFCQ0ZCNDhBMDQ5NjFDNzA3QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7z97sWvMUivytG29TA40Djj0 M0d1wKFNkEjwQ7H5py5VW5wgvttRk1ZbfCt2Oi4AHA/Gp2y4k3cD65oaDo3oLizl zi9sPjoTdmw3ahgKM/eQ3FP84LjE0mtPHheZMfwZs6T7bzxoR7fagm7fCAnhN6UJ inkCTvS81OgBQYkR+Ty4JRpFd8D3qh5fWeUx+5Kt/03iPyzlm0Mccthk7QDnk19M HZYbOMg12rvca4oRk8etrDGF++/jlXaJ/z4zy2SLLKV60DuIDR3BpXWM+BapCuER rYl9X0zvffwar1wdnsv/EnLmtrU957Ncr7YPY5GK4oZIpOVX0Eilr019ZTp7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKtvIa5Mqx9XoQdG8+0igSWHHB70wHwYDVR0j BBgwFoAUeLf6oogav7wRfA+D7NydVU30FBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMC83OEI3RkFBMjg4 MUFCRkJDMTE3QzBGODNFQ0RDOUQ1NTRERjQxNDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0REY0 MTQxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlE NTU0REY0MTQxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxlFcLIfAe3pCVWJ5wdElW7r2RufcQrHA0F 7mpotODl/hP9x9d/7ViIPdT0viDKq/7H+lJLLnsYuHyzdhXjaBBbS5Wa9qedAv1g tSfhwgnE/xp/tjnc7kcjC0/Nf8P5fcDYPElNFZIeDNI01wG5/l2TiZpjDHOX1811 YmtbElembquis4hr+kXMJFh0bpzbl7fQPdmlDWdustmFCVtXG9py4fXCAuicCLbZ DI5grXPSBAh9hcocfS9bvAV7p2R76BIOTID8OLXYkHH9Ba+50UWUHP6k2Q2CFwu6 XW6uEkPrRVcpXfqh7HChJ6hIxxK48OPiNOq660fyC1VzWcSuBIQ= -----END CERTIFICATE-----Generated at Thu May 8 00:55:37 2025 by rpki-client