$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: tkot3lvrOSZgRzpUjUikEbLw5J7+vEioHLL4qawxulg= Subject key identifier: 6B:D1:5E:F7:16:70:EC:E8:35:32:4F:7B:8D:E9:B6:0A:71:44:0E:85 Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 7B98BC3FB029F8E8F6AF35E236FCF82E6EF48E16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 01C1 Signing time: Sun 20 Jul 2025 18:01:21 +0000 Manifest this update: Sun 20 Jul 2025 17:56:21 +0000 Manifest next update: Thu 24 Jul 2025 01:39:21 +0000 Files and hashes: 1: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: vljo5Oi0hl2aQpZ4Kaqz7NdJ52vgowFgq0RTxUCluvc=) 2: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: oacfw+T2PPhHM/LzfLnSCG9WDdljk+rfKMw6jc92PxE=) 3: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: cXUkxWwyVPS60XbTkvXKCEQggyZtT3odfL2WdxtdbQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:98:bc:3f:b0:29:f8:e8:f6:af:35:e2:36:fc:f8:2e:6e:f4:8e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Jul 20 17:56:21 2025 GMT Not After : Jul 24 01:39:21 2025 GMT Subject: CN=6BD15EF71670ECE835324F7B8DE9B60A71440E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b0:d8:88:41:43:06:88:6d:3e:b9:78:a4:56: 8f:36:a3:e9:ec:21:30:28:a9:4e:66:d4:de:3e:11: dd:a1:c6:1f:1f:ec:c8:ae:a5:be:e7:ff:27:79:88: bc:9d:75:97:14:72:86:e1:82:77:78:36:d6:85:f8: f2:ab:30:91:f8:45:39:70:ac:8d:53:99:3c:4b:5c: 6c:1b:99:e1:18:4f:f4:79:c1:b9:fd:2e:b5:f7:31: b1:fa:aa:65:43:48:d8:04:0b:ba:75:72:54:84:73: b8:15:ed:15:bf:75:b7:95:fd:a4:b7:9e:46:7c:8d: 21:94:a2:10:92:8e:af:da:6f:78:2e:e3:a4:10:3a: 8d:53:72:7b:be:03:e6:bf:61:b9:98:cd:a0:b9:b3: f6:f9:fa:24:25:46:fc:89:60:68:5b:6f:3f:e6:d2: 07:41:64:c3:d2:a7:93:3b:35:a0:29:81:11:0a:70: 61:45:f5:44:9d:cb:16:43:39:20:a6:d8:a3:e6:f0: 42:cc:ba:33:52:74:da:d3:74:15:c5:71:71:0a:91: 10:12:7d:b1:51:ac:ca:2b:ad:3d:73:d2:ec:6b:fb: 75:0c:a7:dd:33:1b:e0:e1:c9:e3:11:60:4a:77:e7: b9:34:3b:83:bd:b1:95:91:1c:d6:a6:ae:12:57:5c: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D1:5E:F7:16:70:EC:E8:35:32:4F:7B:8D:E9:B6:0A:71:44:0E:85 X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c4:91:5b:88:da:96:0e:86:75:39:1f:64:44:0c:69:f1:a8: f9:c6:f0:6b:5d:9f:be:77:50:03:8d:5a:b6:a2:f2:8d:04:01: c5:0e:50:04:e8:9c:64:a4:a9:38:47:5b:9c:2c:7e:8a:50:ea: f6:4c:b2:c1:f8:bf:e8:80:bb:7a:f1:93:3f:f8:40:b7:67:8b: da:5e:d8:09:be:68:21:7b:62:78:ba:2c:c7:ea:8d:99:e8:e6: 21:52:0c:f2:00:f0:6d:f6:b6:52:82:9f:05:37:8d:6b:99:cb: be:15:ce:7e:a6:36:f0:e8:fd:01:ed:d7:f5:80:b3:4f:f5:e0: 37:bb:d8:9d:ca:51:d3:dc:b6:ec:9d:2a:00:35:f4:fb:12:da: 0d:99:57:a3:5a:da:d4:cd:02:be:b4:26:13:c0:10:d9:f2:62: 1e:2d:91:2c:31:1c:a3:b6:2b:b5:6b:e2:2b:e8:12:b1:cd:57: 66:3a:94:bb:11:c5:72:15:5e:87:6e:f0:9d:5a:e5:71:c7:76: 88:39:27:3e:c2:88:60:fa:5b:d3:15:56:1a:7f:17:14:b0:3e: 3c:a1:49:eb:17:1a:99:76:3e:10:16:7e:64:f3:22:cb:3c:59: db:41:c9:7a:7c:68:9a:ab:da:b1:d5:b1:ee:7e:d2:e7:f7:fe: 96:4e:4e:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe5i8P7Ap+Oj2rzXiNvz4Lm70jhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNTA3MjAxNzU2MjFaFw0yNTA3MjQwMTM5MjFaMDMxMTAvBgNV BAMTKDZCRDE1RUY3MTY3MEVDRTgzNTMyNEY3QjhERTlCNjBBNzE0NDBFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsNiIQUMGiG0+uXikVo82o+ns ITAoqU5m1N4+Ed2hxh8f7Miupb7n/yd5iLyddZcUcobhgnd4NtaF+PKrMJH4RTlw rI1TmTxLXGwbmeEYT/R5wbn9LrX3MbH6qmVDSNgEC7p1clSEc7gV7RW/dbeV/aS3 nkZ8jSGUohCSjq/ab3gu46QQOo1Tcnu+A+a/YbmYzaC5s/b5+iQlRvyJYGhbbz/m 0gdBZMPSp5M7NaApgREKcGFF9USdyxZDOSCm2KPm8ELMujNSdNrTdBXFcXEKkRAS fbFRrMorrT1z0uxr+3UMp90zG+DhyeMRYEp357k0O4O9sZWRHNamrhJXXHPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa9Fe9xZw7Og1Mk97jem2CnFEDoUwHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrEkVuI2pYOhnU5H2REDGnxqPnG8Gtdn753 UAONWrai8o0EAcUOUATonGSkqThHW5wsfopQ6vZMssH4v+iAu3rxkz/4QLdni9pe 2Am+aCF7Yni6LMfqjZno5iFSDPIA8G32tlKCnwU3jWuZy74Vzn6mNvDo/QHt1/WA s0/14De72J3KUdPctuydKgA19PsS2g2ZV6Na2tTNAr60JhPAENnyYh4tkSwxHKO2 K7Vr4ivoErHNV2Y6lLsRxXIVXodu8J1a5XHHdog5Jz7CiGD6W9MVVhp/FxSwPjyh SesXGpl2PhAWfmTzIss8WdtByXp8aJqr2rHVse5+0uf3/pZOTuc= -----END CERTIFICATE-----Generated at Mon Jul 21 09:00:44 2025 by rpki-client