$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: 0ZY1BM6j7XKQfg+KKB4ARS9dYwF/rgH7eO4CNbhAyA4= Subject key identifier: 1C:0C:06:26:D9:65:B5:24:B3:23:48:BF:79:B6:84:EB:50:EF:C6:7D Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 3B69C39D52BF86C4CD8D6E6FA05347228CF9F919 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 01D6 Signing time: Fri 05 Sep 2025 16:31:22 +0000 Manifest this update: Fri 05 Sep 2025 16:26:22 +0000 Manifest next update: Mon 08 Sep 2025 19:11:22 +0000 Files and hashes: 1: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: vljo5Oi0hl2aQpZ4Kaqz7NdJ52vgowFgq0RTxUCluvc=) 2: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: cXUkxWwyVPS60XbTkvXKCEQggyZtT3odfL2WdxtdbQM=) 3: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: Ch8h7WW7qhu4qmScqnLm8u21/o7n1eksAcjW/5z/9PQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:69:c3:9d:52:bf:86:c4:cd:8d:6e:6f:a0:53:47:22:8c:f9:f9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Sep 5 16:26:22 2025 GMT Not After : Sep 8 19:11:22 2025 GMT Subject: CN=1C0C0626D965B524B32348BF79B684EB50EFC67D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:53:b4:27:7c:46:bd:35:7f:bc:1c:26:79: 70:79:e5:73:ce:5f:66:13:32:4a:f5:a5:23:e8:9a: 41:cf:07:cb:17:4a:5d:61:3a:ce:5a:4b:4a:71:7f: 12:6f:2e:07:ec:a9:b3:fe:9d:a7:f5:87:19:c3:9b: 4d:44:ed:ec:75:75:0c:6d:0b:8f:46:34:06:b1:92: 41:44:e4:20:54:74:e9:ce:cb:29:34:00:34:ef:06: 93:76:6d:07:cd:91:4f:5e:52:d3:50:ba:cc:c6:42: 08:92:cb:76:5c:bb:1f:49:68:6e:e8:25:72:94:45: cb:41:da:72:cd:70:9f:d1:e7:60:44:62:70:7c:6b: 65:89:c2:87:02:0f:9e:ad:46:a7:b5:a8:0a:1d:24: 4c:b2:5c:10:f7:e6:2b:e5:cd:62:8b:8e:ff:aa:66: ff:a2:38:86:99:ad:f5:3e:a7:cc:21:03:aa:62:4a: f4:62:d7:f4:52:36:d9:cd:82:4d:1c:d8:73:25:99: 1d:2f:1e:ef:55:60:34:85:c3:77:04:f3:80:62:26: db:64:13:1a:be:e8:53:c9:f0:9f:e6:3d:31:2b:a2: 9d:5e:17:f2:14:df:ff:6d:ca:22:d9:13:6d:0c:a1: 14:d5:10:45:08:00:35:60:26:72:a2:b2:ad:dd:c7: 8f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0C:06:26:D9:65:B5:24:B3:23:48:BF:79:B6:84:EB:50:EF:C6:7D X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:b2:4f:ee:1c:1b:b2:a6:58:9f:eb:3a:f1:06:c0:82:6f:4a: 1d:fb:90:3b:71:e0:aa:22:60:13:2f:d9:69:94:6f:9b:08:8e: fe:b9:15:28:cf:ee:e3:2b:13:3e:38:26:ee:ba:71:cf:f6:10: 06:b7:35:f1:bf:66:97:9c:bf:30:b8:c5:31:d0:2a:b3:f5:44: 98:01:f6:a0:de:5d:9d:52:85:ed:b3:d8:4c:aa:b9:50:8a:98: af:24:0d:ac:59:0b:00:af:e6:2f:48:c1:25:fd:44:26:f7:d9: 60:fc:ff:3e:5e:8a:ba:ce:c9:6e:98:5d:35:53:64:ff:86:7c: 6a:d8:61:1f:2e:af:9f:29:82:dd:30:c3:1c:4e:1f:d3:fe:d3: 7d:04:60:c8:c5:e1:27:c9:86:fa:78:b7:c0:4f:52:fd:60:2c: 7c:e9:10:64:af:34:7e:b0:c8:7d:46:1c:4b:41:2d:bd:1d:04: 3f:e6:cd:88:ff:41:14:60:13:dc:1e:f5:e4:f2:3d:a5:89:a9: 4a:cd:04:17:58:9c:34:eb:43:1b:a8:04:6c:2f:aa:e9:3d:92: d6:6e:c0:4a:30:8e:f9:af:cc:b9:4f:3c:31:20:bb:9b:2f:13: f3:f3:6e:8a:81:5b:b0:bb:62:42:e1:f1:de:20:10:c3:50:a6: b5:dd:5a:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2nDnVK/hsTNjW5voFNHIoz5+RkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNTA5MDUxNjI2MjJaFw0yNTA5MDgxOTExMjJaMDMxMTAvBgNV BAMTKDFDMEMwNjI2RDk2NUI1MjRCMzIzNDhCRjc5QjY4NEVCNTBFRkM2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCblO0J3xGvTV/vBwmeXB55XPO X2YTMkr1pSPomkHPB8sXSl1hOs5aS0pxfxJvLgfsqbP+naf1hxnDm01E7ex1dQxt C49GNAaxkkFE5CBUdOnOyyk0ADTvBpN2bQfNkU9eUtNQuszGQgiSy3Zcux9JaG7o JXKURctB2nLNcJ/R52BEYnB8a2WJwocCD56tRqe1qAodJEyyXBD35ivlzWKLjv+q Zv+iOIaZrfU+p8whA6piSvRi1/RSNtnNgk0c2HMlmR0vHu9VYDSFw3cE84BiJttk Exq+6FPJ8J/mPTErop1eF/IU3/9tyiLZE20MoRTVEEUIADVgJnKisq3dx49JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHAwGJtlltSSzI0i/ebaE61Dvxn0wHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMiyT+4cG7KmWJ/rOvEGwIJvSh37kDtx4Koi YBMv2WmUb5sIjv65FSjP7uMrEz44Ju66cc/2EAa3NfG/ZpecvzC4xTHQKrP1RJgB 9qDeXZ1She2z2EyquVCKmK8kDaxZCwCv5i9IwSX9RCb32WD8/z5eirrOyW6YXTVT ZP+GfGrYYR8ur58pgt0wwxxOH9P+030EYMjF4SfJhvp4t8BPUv1gLHzpEGSvNH6w yH1GHEtBLb0dBD/mzYj/QRRgE9we9eTyPaWJqUrNBBdYnDTrQxuoBGwvquk9ktZu wEowjvmvzLlPPDEgu5svE/PzboqBW7C7YkLh8d4gEMNQprXdWuE= -----END CERTIFICATE-----Generated at Fri Sep 5 17:41:24 2025 by rpki-client