$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: 7tsVMNmvYCjtggTwScGzCnwe5MP7HIWcIXm29+rjaU8= Subject key identifier: 9A:30:9F:30:3B:EC:C9:B2:5D:7F:A3:7D:FD:89:05:B9:77:E3:F7:B6 Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 1988278BE873C46D5BE9A85D2B115A5429B0B5AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 01AD Signing time: Thu 05 Jun 2025 07:01:23 +0000 Manifest this update: Thu 05 Jun 2025 06:56:23 +0000 Manifest next update: Sun 08 Jun 2025 11:21:23 +0000 Files and hashes: 1: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: ttjrlyspZ//XcTprEIr7DDFpJAGubaRKlEIkcTzojGU=) 2: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: cXUkxWwyVPS60XbTkvXKCEQggyZtT3odfL2WdxtdbQM=) 3: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: vljo5Oi0hl2aQpZ4Kaqz7NdJ52vgowFgq0RTxUCluvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 11:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:88:27:8b:e8:73:c4:6d:5b:e9:a8:5d:2b:11:5a:54:29:b0:b5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Jun 5 06:56:23 2025 GMT Not After : Jun 8 11:21:23 2025 GMT Subject: CN=9A309F303BECC9B25D7FA37DFD8905B977E3F7B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f0:66:40:30:cf:3d:9e:77:3d:46:32:91:0b: ff:76:ee:f8:bd:32:ef:02:6b:2d:0f:78:bb:e4:54: 23:69:b4:61:0b:e1:54:36:54:7b:a5:2a:f0:da:90: 40:41:b3:0f:be:2f:63:0f:dd:83:61:9d:cd:4c:07: e0:fe:3f:95:84:c4:2c:b0:01:0c:5d:e0:20:51:59: ec:8f:0f:d1:7a:58:d4:6e:0a:c9:17:c6:5a:56:80: 95:60:1a:d7:b3:0e:18:27:b4:95:75:51:d4:19:16: ef:0c:48:84:18:e6:e7:c8:57:48:3e:f9:b0:24:33: fb:72:4e:9c:b3:74:c0:d3:49:f1:65:04:4c:03:27: cf:b6:04:74:4d:d8:e0:73:d7:b2:cb:52:ae:d0:b0: 9a:18:9b:7c:b6:3e:af:37:88:9c:7b:36:c0:c6:d2: 71:1e:5c:30:b3:6d:b0:5c:0c:cf:dc:3c:dd:10:37: 1c:96:7e:57:c0:61:a9:7f:13:b8:eb:74:c6:1c:9f: 91:e0:61:17:db:2f:1b:76:c5:f8:35:f6:a0:2c:5e: da:6e:0d:af:13:50:62:77:6f:9f:9c:00:22:a1:30: 1d:38:9f:6b:a7:dc:57:02:1b:9e:99:0f:5f:07:60: 2b:77:16:1c:7e:88:29:99:7f:30:58:a5:71:99:31: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:30:9F:30:3B:EC:C9:B2:5D:7F:A3:7D:FD:89:05:B9:77:E3:F7:B6 X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a7:a9:41:68:45:92:9c:c9:76:06:9a:17:4a:c7:c1:45:24: b0:43:46:1f:26:e9:c1:0d:a8:3f:97:f1:22:79:e7:21:d2:fb: 9c:93:e6:65:8a:89:ff:0f:ea:49:de:23:12:5c:83:bc:ab:d4: b5:95:6f:f6:0c:52:7e:6f:d8:2d:3d:67:4b:28:7d:ec:50:22: 80:7b:9f:37:0e:9f:bb:c2:2f:78:5c:76:38:0e:75:45:2f:d9: cf:b8:c6:f9:07:d8:23:52:64:cf:16:db:32:8d:f8:0d:f5:b6: be:7b:a2:e7:0a:11:d6:ef:e2:ba:69:b9:b1:f4:da:0d:a3:89: 2d:04:80:61:63:a7:11:5d:1c:06:6f:a2:54:a8:47:49:4b:d7: 6d:b6:19:9c:7e:5b:09:a3:4a:01:8f:91:fe:92:b9:d1:79:fc: cc:58:fe:48:81:0c:1e:8d:0e:e7:a1:22:4a:fb:93:b1:0b:fe: 24:7c:1a:97:e3:9c:28:a8:39:50:d0:19:87:4d:f6:f2:53:62: 12:12:d6:6a:66:20:02:5e:a3:95:c4:d2:e5:27:7c:4f:32:9c: 14:4c:61:cf:76:36:72:a4:e0:58:d0:72:b2:94:09:a8:73:74: 06:65:39:dc:34:66:3f:86:e7:12:b7:a3:ba:dc:56:46:a8:c6: c0:8f:29:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYgni+hzxG1b6ahdKxFaVCmwta4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNTA2MDUwNjU2MjNaFw0yNTA2MDgxMTIxMjNaMDMxMTAvBgNV BAMTKDlBMzA5RjMwM0JFQ0M5QjI1RDdGQTM3REZEODkwNUI5NzdFM0Y3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe8GZAMM89nnc9RjKRC/927vi9 Mu8Cay0PeLvkVCNptGEL4VQ2VHulKvDakEBBsw++L2MP3YNhnc1MB+D+P5WExCyw AQxd4CBRWeyPD9F6WNRuCskXxlpWgJVgGtezDhgntJV1UdQZFu8MSIQY5ufIV0g+ +bAkM/tyTpyzdMDTSfFlBEwDJ8+2BHRN2OBz17LLUq7QsJoYm3y2Pq83iJx7NsDG 0nEeXDCzbbBcDM/cPN0QNxyWflfAYal/E7jrdMYcn5HgYRfbLxt2xfg19qAsXtpu Da8TUGJ3b5+cACKhMB04n2un3FcCG56ZD18HYCt3Fhx+iCmZfzBYpXGZMYppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmjCfMDvsybJdf6N9/YkFuXfj97YwHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACnqUFoRZKcyXYGmhdKx8FFJLBDRh8m6cEN qD+X8SJ55yHS+5yT5mWKif8P6kneIxJcg7yr1LWVb/YMUn5v2C09Z0sofexQIoB7 nzcOn7vCL3hcdjgOdUUv2c+4xvkH2CNSZM8W2zKN+A31tr57oucKEdbv4rppubH0 2g2jiS0EgGFjpxFdHAZvolSoR0lL1222GZx+WwmjSgGPkf6SudF5/MxY/kiBDB6N DuehIkr7k7EL/iR8GpfjnCioOVDQGYdN9vJTYhIS1mpmIAJeo5XE0uUnfE8ynBRM Yc92NnKk4FjQcrKUCahzdAZlOdw0Zj+G5xK3o7rcVkaoxsCPKdo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:17 2025 by rpki-client