$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft File: 8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json) Hash identifier: +T1kpiQSoYBr50kfORBzJ8+nQX9Q5NMTHkkl0TuvUvQ= Subject key identifier: F8:50:64:57:86:F5:DE:BC:B1:FD:D2:2D:EC:47:27:C8:E6:13:E4:74 Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Certificate issuer: /CN=8A78F143A2E18078229313E44ACE70165360440C Certificate serial: 4B6F6B573E968B4147D22ED70F89EE112724AA55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft Manifest number: D3 Signing time: Sat 30 Aug 2025 14:00:55 +0000 Manifest this update: Sat 30 Aug 2025 13:55:55 +0000 Manifest next update: Tue 02 Sep 2025 23:12:55 +0000 Files and hashes: 1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: Jdwyu5TgfPXhHs+CdR7l79/HUWZn2NlU3OAUFWHzq6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6f:6b:57:3e:96:8b:41:47:d2:2e:d7:0f:89:ee:11:27:24:aa:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C Validity Not Before: Aug 30 13:55:55 2025 GMT Not After : Sep 2 23:12:55 2025 GMT Subject: CN=F850645786F5DEBCB1FDD22DEC4727C8E613E474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:f1:c6:82:48:5b:6d:23:9b:49:77:48:5d: e7:0c:a2:86:43:0a:70:ab:4a:79:58:bd:d0:67:f0: fe:c1:ec:8a:0e:aa:66:ef:85:03:be:35:c0:e0:a9: fa:9e:23:8b:40:77:22:54:72:30:52:1b:2f:0d:90: 96:f0:ac:f9:7a:a8:e1:c1:d7:73:86:a5:dd:49:61: 24:c0:53:9e:7b:40:97:1e:7b:6d:ba:1f:43:f0:82: fe:44:b4:9d:7b:89:44:56:d9:1e:89:f3:83:6d:ff: fd:aa:71:73:4f:f3:1a:33:06:12:79:0c:c2:ea:13: 1a:2e:8f:14:92:44:6a:eb:27:fe:e0:ed:28:b4:46: 46:fe:fc:ea:3f:87:6b:39:24:dc:9e:39:0d:9c:6f: ca:ab:33:22:e5:67:0c:5c:f2:c7:4d:4a:c3:5a:5e: e9:8c:4b:ce:6f:d4:f0:08:39:d1:de:02:9e:86:5f: 0f:07:19:3b:81:27:d0:68:45:22:5c:4e:b1:7c:a5: 5e:fc:41:88:2c:d9:b8:29:f2:97:d4:da:f2:73:c9: ad:b3:72:65:1b:74:8b:a9:c4:e7:6c:f8:dd:e0:ce: 2b:b1:08:63:c0:7a:e8:b5:32:4f:cf:c9:54:49:4c: 75:16:50:28:ed:12:27:90:fd:09:98:0e:5f:32:b9: 7b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:50:64:57:86:F5:DE:BC:B1:FD:D2:2D:EC:47:27:C8:E6:13:E4:74 X509v3 Authority Key Identifier: keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c4:1b:b1:d0:b4:7c:62:5f:12:ca:f3:dc:54:91:d2:f2:b9: 9a:0c:74:8f:b7:4c:f8:0f:d8:c5:ef:15:56:7c:25:90:92:ab: 6b:77:1c:6b:6e:ed:a1:06:9f:21:b5:a5:91:2a:a7:7f:76:36: fd:e1:84:25:f9:bd:00:48:4f:78:82:63:91:0d:5e:15:96:6c: a5:e4:aa:65:eb:d5:96:cc:d2:51:29:d7:0e:61:3f:2f:66:6c: 61:47:ce:34:57:fb:33:56:bd:65:9a:c0:33:e8:57:bd:00:bd: d1:2b:34:d3:96:f5:11:5c:cf:81:99:8b:36:03:90:d7:38:f5: 3d:10:c1:d8:d6:cc:42:5a:52:4d:92:1b:de:70:89:ac:9e:b6: 02:9a:ab:bd:de:3f:fa:cb:7c:3e:78:70:42:a2:7b:60:4a:f9: 51:e2:8a:f6:70:ba:05:d4:b2:67:1f:ae:27:4a:03:8b:e0:a0: 47:87:5e:80:0d:55:7f:37:4f:bb:e5:89:90:b0:81:36:f1:86: 98:97:76:61:23:93:4c:64:f0:8a:0d:12:80:92:92:94:9e:a4: bf:c6:5c:25:39:a7:28:a1:62:e7:25:f4:db:97:3a:29:83:c3: ad:a9:9a:12:ef:55:0e:34:a9:9f:81:52:08:4e:b7:1f:a8:1c: 1a:6d:f7:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS29rVz6Wi0FH0i7XD4nuESckqlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1 MzYwNDQwQzAeFw0yNTA4MzAxMzU1NTVaFw0yNTA5MDIyMzEyNTVaMDMxMTAvBgNV BAMTKEY4NTA2NDU3ODZGNURFQkNCMUZERDIyREVDNDcyN0M4RTYxM0U0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/v/HGgkhbbSObSXdIXecMooZD CnCrSnlYvdBn8P7B7IoOqmbvhQO+NcDgqfqeI4tAdyJUcjBSGy8NkJbwrPl6qOHB 13OGpd1JYSTAU557QJcee226H0Pwgv5EtJ17iURW2R6J84Nt//2qcXNP8xozBhJ5 DMLqExoujxSSRGrrJ/7g7Si0Rkb+/Oo/h2s5JNyeOQ2cb8qrMyLlZwxc8sdNSsNa XumMS85v1PAIOdHeAp6GXw8HGTuBJ9BoRSJcTrF8pV78QYgs2bgp8pfU2vJzya2z cmUbdIupxOds+N3gziuxCGPAeui1Mk/PyVRJTHUWUCjtEieQ/QmYDl8yuXv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+FBkV4b13ryx/dIt7EcnyOYT5HQwHwYDVR0j BBgwFoAUinjxQ6LhgHgikxPkSs5wFlNgRAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMC84QTc4RjE0M0Ey RTE4MDc4MjI5MzEzRTQ0QUNFNzAxNjUzNjA0NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1MzYw NDQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcw MTY1MzYwNDQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnEG7HQtHxiXxLK89xUkdLyuZoMdI+3TPgP 2MXvFVZ8JZCSq2t3HGtu7aEGnyG1pZEqp392Nv3hhCX5vQBIT3iCY5ENXhWWbKXk qmXr1ZbM0lEp1w5hPy9mbGFHzjRX+zNWvWWawDPoV70AvdErNNOW9RFcz4GZizYD kNc49T0QwdjWzEJaUk2SG95wiayetgKaq73eP/rLfD54cEKie2BK+VHiivZwugXU smcfridKA4vgoEeHXoANVX83T7vliZCwgTbxhpiXdmEjk0xk8IoNEoCSkpSepL/G XCU5pyihYucl9NuXOimDw62pmhLvVQ40qZ+BUghOtx+oHBpt98M= -----END CERTIFICATE-----Generated at Sun Aug 31 15:04:12 2025 by rpki-client