$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft File: 8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json) Hash identifier: 7CI26/LaljjmO7MqRXgDQpstAMuW6wQXOEaTjGbkJeQ= Subject key identifier: 07:D6:4D:8A:DD:75:87:95:D2:B4:2A:0F:3B:FC:05:67:A7:72:B9:09 Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Certificate issuer: /CN=8A78F143A2E18078229313E44ACE70165360440C Certificate serial: 434B950A2F43964C1AE3FB2201CF701F1DFD83C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft Manifest number: 95 Signing time: Sat 12 Apr 2025 22:10:51 +0000 Manifest this update: Sat 12 Apr 2025 22:05:51 +0000 Manifest next update: Wed 16 Apr 2025 05:42:51 +0000 Files and hashes: 1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: zKUz0x4Gyn44tUf/4Wpm+kk/FTbhWTwKXv7yCKGydh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4b:95:0a:2f:43:96:4c:1a:e3:fb:22:01:cf:70:1f:1d:fd:83:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C Validity Not Before: Apr 12 22:05:51 2025 GMT Not After : Apr 16 05:42:51 2025 GMT Subject: CN=07D64D8ADD758795D2B42A0F3BFC0567A772B909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:1e:10:85:c6:05:9e:1f:0e:c6:91:15:66: 20:70:c0:8d:49:1e:c7:9a:1e:e7:76:8c:35:a5:1c: 51:f9:e9:c9:ee:9b:6a:64:3f:8f:be:26:10:2c:44: fd:e0:d7:9d:2d:96:60:31:29:29:62:69:c3:b5:5a: 8c:42:48:62:c5:a0:b4:76:0c:4c:3f:e0:39:d1:d2: c0:63:b2:48:90:19:a5:71:71:71:e6:55:68:ac:bc: a0:fc:a4:81:2a:2a:e1:4c:f3:07:37:7e:50:ca:2f: c0:39:1b:02:c1:d0:77:97:66:8e:9b:e6:01:9b:34: 62:f2:ec:a8:1e:96:3c:74:d2:28:4f:7b:16:bc:47: ff:f6:cd:c3:d6:b9:9e:26:74:80:6d:07:54:19:fb: d1:09:3f:93:95:09:79:cb:86:e6:40:0b:70:a8:3c: 58:e2:fb:d6:d7:be:ff:b0:bc:31:b2:9f:c5:49:4c: 53:a3:0e:c0:44:0d:b5:9b:d0:87:e8:7c:06:96:a1: fe:07:9c:45:10:40:7e:e5:4f:69:a1:b4:24:e4:92: e5:ab:18:5a:02:fe:24:19:16:70:25:4c:6f:df:5d: ec:e9:4e:78:5e:05:c2:c8:3c:14:1a:7a:60:ff:db: 97:25:14:36:3c:37:a3:72:0f:20:71:5b:de:20:68: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D6:4D:8A:DD:75:87:95:D2:B4:2A:0F:3B:FC:05:67:A7:72:B9:09 X509v3 Authority Key Identifier: keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b5:4d:1c:7d:39:19:2e:3b:c0:3b:84:53:c5:48:ae:8f:36: 3e:ed:79:55:99:38:38:c5:55:2b:0c:4b:4d:cb:eb:9b:62:de: 13:e9:5d:59:2e:1d:19:99:5c:94:8f:c2:ad:82:b0:c6:a7:c0: 8b:60:9a:0e:aa:d5:97:79:fb:a5:2f:b7:47:95:ec:d9:09:5e: 70:7b:c6:dd:e4:80:95:51:e9:27:34:34:c8:8e:33:1a:22:07: 23:27:b5:4b:d7:b3:d6:ab:f8:0e:a6:dd:85:9a:1f:02:b4:5b: ea:29:79:3b:d5:09:bf:80:e1:ea:2d:81:41:0b:9a:6d:92:38: 9d:85:21:82:ab:33:61:d1:28:2d:39:bf:69:ed:7a:5e:d6:3c: f1:42:16:74:73:4f:5d:b6:8e:95:78:c5:27:7c:ac:f2:14:d8: 47:38:39:6c:ca:3e:6a:2c:79:cf:8b:5f:85:87:5a:f8:b4:34: b7:61:97:64:ed:39:48:8d:5e:3e:a6:70:1b:e8:5e:59:aa:fc: f8:8f:f9:0a:79:d1:e6:ef:83:fd:aa:bd:7c:58:29:55:db:4a: 02:79:cc:0a:77:27:6b:c1:a1:b5:3e:48:56:77:2e:8f:4e:59: 4a:54:71:75:77:0c:0e:1e:24:06:78:16:24:da:d6:a7:96:13: 14:31:51:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0uVCi9Dlkwa4/siAc9wHx39g8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1 MzYwNDQwQzAeFw0yNTA0MTIyMjA1NTFaFw0yNTA0MTYwNTQyNTFaMDMxMTAvBgNV BAMTKDA3RDY0RDhBREQ3NTg3OTVEMkI0MkEwRjNCRkMwNTY3QTc3MkI5MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVCx4QhcYFnh8OxpEVZiBwwI1J HseaHud2jDWlHFH56cnum2pkP4++JhAsRP3g150tlmAxKSliacO1WoxCSGLFoLR2 DEw/4DnR0sBjskiQGaVxcXHmVWisvKD8pIEqKuFM8wc3flDKL8A5GwLB0HeXZo6b 5gGbNGLy7Kgeljx00ihPexa8R//2zcPWuZ4mdIBtB1QZ+9EJP5OVCXnLhuZAC3Co PFji+9bXvv+wvDGyn8VJTFOjDsBEDbWb0IfofAaWof4HnEUQQH7lT2mhtCTkkuWr GFoC/iQZFnAlTG/fXezpTnheBcLIPBQaemD/25clFDY8N6NyDyBxW94gaONrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB9ZNit11h5XStCoPO/wFZ6dyuQkwHwYDVR0j BBgwFoAUinjxQ6LhgHgikxPkSs5wFlNgRAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMC84QTc4RjE0M0Ey RTE4MDc4MjI5MzEzRTQ0QUNFNzAxNjUzNjA0NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1MzYw NDQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcw MTY1MzYwNDQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIi1TRx9ORkuO8A7hFPFSK6PNj7teVWZODjF VSsMS03L65ti3hPpXVkuHRmZXJSPwq2CsManwItgmg6q1Zd5+6Uvt0eV7NkJXnB7 xt3kgJVR6Sc0NMiOMxoiByMntUvXs9ar+A6m3YWaHwK0W+opeTvVCb+A4eotgUEL mm2SOJ2FIYKrM2HRKC05v2ntel7WPPFCFnRzT122jpV4xSd8rPIU2Ec4OWzKPmos ec+LX4WHWvi0NLdhl2TtOUiNXj6mcBvoXlmq/PiP+Qp50ebvg/2qvXxYKVXbSgJ5 zAp3J2vBobU+SFZ3Lo9OWUpUcXV3DA4eJAZ4FiTa1qeWExQxUQw= -----END CERTIFICATE-----Generated at Tue Apr 15 01:13:49 2025 by rpki-client