$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft File: 78578588503A7F091F1D7CD7B16BDC9E55055889.mft (raw, json) Hash identifier: koaviX1AczbsI1jEKx+zTefyBY8wN1zQ4HkktwYJGYk= Subject key identifier: D7:AC:07:F7:62:C0:D4:C9:32:1A:C4:DF:9C:6F:D5:A1:2B:6A:6E:69 Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 Certificate issuer: /CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Certificate serial: 35AE4400CEAA8ABC89B86A73857D7C1696594ED9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft Manifest number: 0107 Signing time: Tue 01 Jul 2025 09:11:33 +0000 Manifest this update: Tue 01 Jul 2025 09:06:33 +0000 Manifest next update: Fri 04 Jul 2025 10:21:33 +0000 Files and hashes: 1: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: YXBLniWIP1tEpCZLI2E35OhkhCdsQi0gYJFIjwBZCnk=) 2: 78578588503A7F091F1D7CD7B16BDC9E55055889.crl (hash: 0xfksix4g16QaRm7VDMO9arzrXbtPxxZOa1frKgrvyk=) 3: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: e1JG4uU1iuO6rgmOne6CBOco5jWQCmWhIZVp0+S/uh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 10:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ae:44:00:ce:aa:8a:bc:89:b8:6a:73:85:7d:7c:16:96:59:4e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Validity Not Before: Jul 1 09:06:33 2025 GMT Not After : Jul 4 10:21:33 2025 GMT Subject: CN=D7AC07F762C0D4C9321AC4DF9C6FD5A12B6A6E69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:dd:be:13:dd:fb:25:d1:84:fc:37:1a:89: c8:d9:cb:5e:60:9e:19:e5:77:b1:74:8d:db:12:29: c4:fc:92:57:0c:a6:e2:96:01:e7:1d:1c:9c:6a:fa: 85:84:a5:d6:9d:07:62:a4:73:ce:c7:fb:74:d7:33: cc:c5:02:fe:62:90:59:85:a0:9a:06:35:66:4e:34: d5:c1:4a:59:a6:8f:43:e6:9c:6d:25:92:77:24:1f: 35:8f:bd:be:d0:ab:20:05:17:53:12:89:fd:c5:ae: e0:eb:ac:84:07:0e:27:44:3f:11:ea:6b:a3:19:4c: 35:7b:f0:cd:19:f7:43:72:0e:5a:32:03:be:e1:1f: ac:a7:cb:69:20:55:0f:a3:4e:f9:fa:95:cb:fe:d1: 01:11:17:f9:8c:c6:9b:fb:23:06:40:f1:1b:7c:da: 32:14:3e:59:0c:c8:75:7b:93:9c:af:e7:3b:50:c7: ec:69:86:91:88:41:ff:ac:2c:02:ac:fc:52:01:96: fc:ac:81:62:b8:66:b5:f6:b4:b6:48:d6:fe:29:13: f5:c6:36:fe:69:3c:fe:82:0e:82:16:9f:ed:c7:9b: 50:09:d7:0d:24:5f:41:29:b2:a6:15:0d:29:fa:2f: 7d:54:dd:c3:ba:91:a3:16:1e:96:a4:bb:ce:fd:f4: d6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AC:07:F7:62:C0:D4:C9:32:1A:C4:DF:9C:6F:D5:A1:2B:6A:6E:69 X509v3 Authority Key Identifier: keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e5:b5:ab:ff:78:50:f8:2f:05:4a:6f:f6:0f:f9:0b:42:87: c5:2d:f3:96:8d:d4:5a:d0:3a:32:79:cf:21:19:a9:da:d7:60: 6d:61:88:be:ed:08:13:43:d1:ea:6c:b7:f6:cc:e8:01:6d:1c: a1:28:41:b6:29:dc:f4:26:41:9c:3a:e8:66:9a:75:f4:09:c4: 19:87:1a:9c:a7:6b:6e:1e:f4:b4:3a:ab:49:7b:94:4c:c7:34: bb:fd:27:4b:10:a1:3c:7d:ca:dd:a5:56:3d:ef:59:96:fc:2f: 34:42:2e:49:f6:fa:1a:b5:28:7f:02:2a:2e:6c:18:60:18:dc: f7:a9:c0:27:69:25:17:be:13:a8:6a:0b:55:7e:74:71:c1:e4: 1e:77:2d:76:47:ce:0d:b7:6f:b0:83:ab:8d:a7:11:58:5c:58: 00:57:e5:7c:bd:9e:4b:6d:36:ad:f0:18:1a:3e:94:77:1d:68: d1:c1:a4:c2:d0:d3:4e:e6:26:78:e5:58:8d:0d:23:12:3f:c6: 3d:b4:f8:ba:62:b2:a3:0b:7d:e7:dc:45:bf:27:7d:ce:66:c6: 6d:69:6a:f4:18:4c:9f:16:42:65:a2:83:06:f2:52:6e:79:68: cb:91:6f:ac:10:b5:95:02:a5:5c:fc:55:57:3b:21:89:e9:35: b5:95:6c:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNa5EAM6qiryJuGpzhX18FpZZTtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1 NTA1NTg4OTAeFw0yNTA3MDEwOTA2MzNaFw0yNTA3MDQxMDIxMzNaMDMxMTAvBgNV BAMTKEQ3QUMwN0Y3NjJDMEQ0QzkzMjFBQzRERjlDNkZENUExMkI2QTZFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLW92+E937JdGE/DcaicjZy15g nhnld7F0jdsSKcT8klcMpuKWAecdHJxq+oWEpdadB2Kkc87H+3TXM8zFAv5ikFmF oJoGNWZONNXBSlmmj0PmnG0lknckHzWPvb7QqyAFF1MSif3FruDrrIQHDidEPxHq a6MZTDV78M0Z90NyDloyA77hH6yny2kgVQ+jTvn6lcv+0QERF/mMxpv7IwZA8Rt8 2jIUPlkMyHV7k5yv5ztQx+xphpGIQf+sLAKs/FIBlvysgWK4ZrX2tLZI1v4pE/XG Nv5pPP6CDoIWn+3Hm1AJ1w0kX0EpsqYVDSn6L31U3cO6kaMWHpaku8799NYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU16wH92LA1MkyGsTfnG/VoStqbmkwHwYDVR0j BBgwFoAUeFeFiFA6fwkfHXzXsWvcnlUFWIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGU0Y2E1NC04NTdiLTRmNjgtYWI1Zi0wZDhjNDcyZTZjOTIvMC83ODU3ODU4ODUw M0E3RjA5MUYxRDdDRDdCMTZCREM5RTU1MDU1ODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1NTA1 NTg4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlNGNhNTQtODU3Yi00ZjY4LWFi NWYtMGQ4YzQ3MmU2YzkyLzAvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRD OUU1NTA1NTg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3ltav/eFD4LwVKb/YP+QtCh8Ut85aN1FrQ OjJ5zyEZqdrXYG1hiL7tCBND0epst/bM6AFtHKEoQbYp3PQmQZw66GaadfQJxBmH Gpyna24e9LQ6q0l7lEzHNLv9J0sQoTx9yt2lVj3vWZb8LzRCLkn2+hq1KH8CKi5s GGAY3PepwCdpJRe+E6hqC1V+dHHB5B53LXZHzg23b7CDq42nEVhcWABX5Xy9nktt Nq3wGBo+lHcdaNHBpMLQ007mJnjlWI0NIxI/xj20+LpisqMLfefcRb8nfc5mxm1p avQYTJ8WQmWigwbyUm55aMuRb6wQtZUCpVz8VVc7IYnpNbWVbEY= -----END CERTIFICATE-----Generated at Tue Jul 1 16:01:54 2025 by rpki-client