$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft File: 8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json) Hash identifier: u5HeSE4x97cWlxmFf5/6/4b4fUIoGK3T8r4ZfL+5K4A= Subject key identifier: 7F:D8:ED:81:0A:6E:85:A5:11:22:45:A4:6E:4A:A9:E7:04:CB:6A:88 Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Certificate issuer: /CN=8A78F143A2E18078229313E44ACE70165360440C Certificate serial: 484B13299D3D7FC356BA13B93B28EBD3A32BE284 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft Manifest number: AD Signing time: Fri 06 Jun 2025 01:30:52 +0000 Manifest this update: Fri 06 Jun 2025 01:25:52 +0000 Manifest next update: Mon 09 Jun 2025 03:31:52 +0000 Files and hashes: 1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: O4tz+6zNE7pl9sFd5M07+/QqMyA/r0k1N9jbKAitsa8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 03:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4b:13:29:9d:3d:7f:c3:56:ba:13:b9:3b:28:eb:d3:a3:2b:e2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C Validity Not Before: Jun 6 01:25:52 2025 GMT Not After : Jun 9 03:31:52 2025 GMT Subject: CN=7FD8ED810A6E85A5112245A46E4AA9E704CB6A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:40:e5:d8:ed:28:af:b4:fe:21:5a:18:b7:ea: a3:82:bb:08:98:5b:8b:4e:71:92:5e:f5:9b:23:1d: ce:60:c1:72:5e:d9:3c:88:9c:93:02:30:3f:7f:30: 2d:5f:66:49:ce:20:4a:ad:93:e2:04:2e:8e:12:a0: 1c:97:8c:99:8d:fb:49:d7:61:67:b8:ec:26:14:68: 65:93:b5:8d:d7:ba:c3:07:9c:25:e2:92:88:e3:2a: 65:86:b3:95:e1:d6:bb:cb:79:e4:6e:2f:f7:5b:f6: 6d:de:da:80:72:ae:24:e9:c1:0e:14:3c:8f:cd:a1: a6:1b:93:67:10:61:eb:9f:62:e1:d9:15:9f:5a:ec: f1:46:6b:52:53:90:a3:94:3f:68:32:29:db:11:de: f8:2c:ee:78:95:23:d4:9d:30:d4:0f:f6:19:5c:58: f2:04:2c:2c:5d:51:c8:ac:b7:f5:26:f9:dd:aa:39: ab:7c:21:bf:21:42:5d:09:da:71:38:6e:31:b2:37: dd:57:d6:77:1c:0d:c1:c4:4f:80:39:9c:5d:08:5d: 6a:e2:2e:d9:d8:6c:c2:fd:15:21:cd:ef:f3:e3:a3: b3:f2:8b:4a:fa:99:1d:00:f2:e9:eb:12:d0:a3:99: f4:9f:e1:22:9e:a3:4a:18:05:aa:8c:a7:55:d7:49: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D8:ED:81:0A:6E:85:A5:11:22:45:A4:6E:4A:A9:E7:04:CB:6A:88 X509v3 Authority Key Identifier: keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:29:dd:ef:1a:a0:32:54:bc:6c:71:3e:c1:99:bc:c5:ca:cc: 22:6c:67:06:4e:5c:3f:d5:77:cc:aa:8e:7a:34:66:d9:3a:21: 58:52:47:b2:97:4a:82:ad:cd:03:b0:da:8c:66:09:d1:17:3f: ba:66:c1:51:59:dc:7b:f6:af:23:45:49:e6:ac:ae:d2:bc:b2: c9:2e:4a:14:b6:12:71:27:93:f6:11:2a:1d:62:1b:ff:67:91: 3c:5a:7f:f8:73:44:39:03:53:94:ca:72:61:77:41:4e:64:31: bb:3e:30:be:73:a8:10:84:54:32:fc:ee:32:2e:4e:2e:10:27: 35:36:aa:ba:4c:6d:b8:38:ac:50:e7:3f:2c:52:73:92:9f:6f: 9a:ba:b7:9a:f2:d5:53:51:8b:d9:14:40:0a:a9:ed:b7:cb:9b: 63:5a:e7:ff:f7:3d:9a:39:b3:05:d1:08:01:a8:f8:99:11:d8: 61:09:00:04:68:7a:69:a9:79:5c:c7:07:f6:74:7f:8d:68:d4: 77:d1:57:bb:22:7b:36:19:67:8e:2b:e3:e0:48:5b:fa:4b:03: 4b:f9:dc:15:4e:61:52:62:dd:eb:c1:f3:3a:9a:a6:45:2a:c2: 5a:b8:a5:0a:ba:e5:5b:25:69:f7:91:cd:f8:a8:bc:8e:a8:54: 67:50:30:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEsTKZ09f8NWuhO5Oyjr06Mr4oQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1 MzYwNDQwQzAeFw0yNTA2MDYwMTI1NTJaFw0yNTA2MDkwMzMxNTJaMDMxMTAvBgNV BAMTKDdGRDhFRDgxMEE2RTg1QTUxMTIyNDVBNDZFNEFBOUU3MDRDQjZBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxQOXY7SivtP4hWhi36qOCuwiY W4tOcZJe9ZsjHc5gwXJe2TyInJMCMD9/MC1fZknOIEqtk+IELo4SoByXjJmN+0nX YWe47CYUaGWTtY3XusMHnCXikojjKmWGs5Xh1rvLeeRuL/db9m3e2oByriTpwQ4U PI/NoaYbk2cQYeufYuHZFZ9a7PFGa1JTkKOUP2gyKdsR3vgs7niVI9SdMNQP9hlc WPIELCxdUcist/Um+d2qOat8Ib8hQl0J2nE4bjGyN91X1nccDcHET4A5nF0IXWri LtnYbML9FSHN7/Pjo7Pyi0r6mR0A8unrEtCjmfSf4SKeo0oYBaqMp1XXSYm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf9jtgQpuhaURIkWkbkqp5wTLaogwHwYDVR0j BBgwFoAUinjxQ6LhgHgikxPkSs5wFlNgRAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMC84QTc4RjE0M0Ey RTE4MDc4MjI5MzEzRTQ0QUNFNzAxNjUzNjA0NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1MzYw NDQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcw MTY1MzYwNDQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAp3e8aoDJUvGxxPsGZvMXKzCJsZwZOXD/V d8yqjno0Ztk6IVhSR7KXSoKtzQOw2oxmCdEXP7pmwVFZ3Hv2ryNFSeasrtK8ssku ShS2EnEnk/YRKh1iG/9nkTxaf/hzRDkDU5TKcmF3QU5kMbs+ML5zqBCEVDL87jIu Ti4QJzU2qrpMbbg4rFDnPyxSc5Kfb5q6t5ry1VNRi9kUQAqp7bfLm2Na5//3PZo5 swXRCAGo+JkR2GEJAARoemmpeVzHB/Z0f41o1HfRV7siezYZZ44r4+BIW/pLA0v5 3BVOYVJi3evB8zqapkUqwlq4pQq65VslafeRzfiovI6oVGdQMIM= -----END CERTIFICATE-----Generated at Fri Jun 6 19:35:33 2025 by rpki-client