$ rpki-client -vvf repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft File: 78702A768CA1E1867D543013BB6186EDA3C06C16.mft (raw, json) Hash identifier: FgbMK6xLuY5LtEmHjTwFxEVDKGfGpfCIXbbgVdm6e+E= Subject key identifier: 28:2C:66:15:71:54:B3:15:A5:B0:87:67:6E:23:28:3A:A8:E7:1F:E9 Authority key identifier: 78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 Certificate issuer: /CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Certificate serial: 7A71DA6B8209AA861BC614EE5C697F69B238E9B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft Manifest number: 52 Signing time: Sun 13 Apr 2025 10:11:15 +0000 Manifest this update: Sun 13 Apr 2025 10:06:15 +0000 Manifest next update: Wed 16 Apr 2025 18:12:15 +0000 Files and hashes: 1: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: FkpJvfAJZskSw2RpW6IZFlM3nRvWIXVzCCgCII/z76M=) 2: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: EKlQMXAk89f+RqS3m5jQwamdkWyWCWcqlaMFgz2WrOg=) 3: 78702A768CA1E1867D543013BB6186EDA3C06C16.crl (hash: GRJ0pWmz0ZG+29PcDVCUiZAoEBKGmGO+om0z18tfNJA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 18:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:71:da:6b:82:09:aa:86:1b:c6:14:ee:5c:69:7f:69:b2:38:e9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Validity Not Before: Apr 13 10:06:15 2025 GMT Not After : Apr 16 18:12:15 2025 GMT Subject: CN=282C66157154B315A5B087676E23283AA8E71FE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:ab:25:02:70:12:36:e4:7e:1f:54:c8:aa: 5b:8f:0f:7e:32:18:f3:5b:22:a7:41:f7:7f:83:40: f4:a9:4e:15:aa:cc:dd:5a:48:cd:44:a6:c3:9b:87: aa:c8:99:34:9b:fd:a7:35:52:3f:70:b8:4b:51:33: 47:75:ac:ab:26:71:28:d5:3c:98:71:4c:86:7a:cc: 84:f4:36:dc:fa:7c:9d:cd:84:5b:38:d4:b7:b1:b3: 05:cd:a3:d2:0d:da:29:15:6f:8d:ce:9c:85:46:c1: be:65:d1:df:d0:80:98:58:10:ad:14:a3:c0:ec:9d: d5:c8:52:63:e1:45:1a:80:95:a2:bc:c1:34:d0:aa: 13:cb:cb:70:bb:b3:86:f8:ea:85:e0:5d:86:db:d6: 12:31:46:e6:b2:4f:b5:8e:46:3c:f4:11:aa:30:34: 27:6d:09:c8:0d:1c:d1:04:cb:7d:3f:4b:c5:db:46: 8a:d3:39:2c:c2:25:2c:f7:82:05:b6:f7:09:7e:31: 26:f3:a1:2b:61:6f:4c:b8:ca:fd:00:01:fd:45:83: 10:5a:8e:86:d0:db:8d:4a:b5:c6:d6:8b:04:d2:d1: 0f:74:d0:2c:04:69:3b:4a:f6:7e:db:e7:f5:f2:24: 9e:f6:e1:a9:dd:8d:28:fc:78:ad:d7:df:d3:96:ff: ce:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:66:15:71:54:B3:15:A5:B0:87:67:6E:23:28:3A:A8:E7:1F:E9 X509v3 Authority Key Identifier: keyid:78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e1:62:62:35:eb:b1:80:4c:41:9b:2a:96:41:91:38:21:56: 73:97:a3:f1:32:01:a9:2c:6e:d8:0b:8f:a5:03:fc:9e:6e:d3: 93:a0:73:9f:cc:0e:e7:b0:cb:04:d4:36:c9:c8:73:3e:da:c1: b5:06:15:f7:44:d4:ad:15:f6:4a:1e:81:fa:c0:a9:e9:0b:ca: 2f:26:cb:ec:b9:8c:50:3e:30:33:33:86:6c:0b:0e:6e:49:ca: 9b:a5:75:98:c6:8e:4b:67:c1:e8:1e:8d:ea:02:34:8d:bb:6e: 64:61:f9:23:01:c7:fb:fa:c4:2a:19:58:3f:03:bd:00:da:9d: 34:15:3f:6d:fd:d8:ec:f2:d1:2a:d4:1d:ee:7b:cb:1b:91:82: 97:db:33:a4:a3:e0:1a:07:38:41:61:96:81:76:5f:87:ad:4a: c1:3c:98:b8:e2:f5:2b:b7:9f:18:89:77:27:66:8d:ac:49:fb: 05:04:f9:9d:98:a7:a8:6b:f6:45:fa:7a:63:e8:73:0f:96:b8: ac:80:92:68:e1:77:5f:36:85:6a:82:08:8c:c0:06:34:58:59: b9:64:03:dd:4a:4b:ee:94:4c:0f:7c:4b:1b:4a:68:1c:73:ff: 43:21:56:8b:18:99:e0:63:37:27:19:3d:31:43:d7:73:1b:39: f6:aa:fa:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUenHaa4IJqoYbxhTuXGl/abI46bYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURB M0MwNkMxNjAeFw0yNTA0MTMxMDA2MTVaFw0yNTA0MTYxODEyMTVaMDMxMTAvBgNV BAMTKDI4MkM2NjE1NzE1NEIzMTVBNUIwODc2NzZFMjMyODNBQThFNzFGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJ6slAnASNuR+H1TIqluPD34y GPNbIqdB93+DQPSpThWqzN1aSM1EpsObh6rImTSb/ac1Uj9wuEtRM0d1rKsmcSjV PJhxTIZ6zIT0Ntz6fJ3NhFs41LexswXNo9IN2ikVb43OnIVGwb5l0d/QgJhYEK0U o8DsndXIUmPhRRqAlaK8wTTQqhPLy3C7s4b46oXgXYbb1hIxRuayT7WORjz0Eaow NCdtCcgNHNEEy30/S8XbRorTOSzCJSz3ggW29wl+MSbzoSthb0y4yv0AAf1FgxBa jobQ241KtcbWiwTS0Q900CwEaTtK9n7b5/XyJJ724andjSj8eK3X39OW/87dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKCxmFXFUsxWlsIdnbiMoOqjnH+kwHwYDVR0j BBgwFoAUeHAqdoyh4YZ9VDATu2GG7aPAbBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmE5ZjRlMi1jNzNiLTQ0MjctOTgyOS0xZGExYmFhYjg3MGIvMC83ODcwMkE3NjhD QTFFMTg2N0Q1NDMwMTNCQjYxODZFREEzQzA2QzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURBM0Mw NkMxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2 RURBM0MwNkMxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnhYmI167GATEGbKpZBkTghVnOXo/EyAaks btgLj6UD/J5u05Ogc5/MDuewywTUNsnIcz7awbUGFfdE1K0V9koegfrAqekLyi8m y+y5jFA+MDMzhmwLDm5JypuldZjGjktnwegejeoCNI27bmRh+SMBx/v6xCoZWD8D vQDanTQVP2392Ozy0SrUHe57yxuRgpfbM6Sj4BoHOEFhloF2X4etSsE8mLji9Su3 nxiJdydmjaxJ+wUE+Z2Yp6hr9kX6emPocw+WuKyAkmjhd182hWqCCIzABjRYWblk A91KS+6UTA98SxtKaBxz/0MhVosYmeBjNycZPTFD13MbOfaq+iY= -----END CERTIFICATE-----Generated at Sun Apr 13 21:24:21 2025 by rpki-client