$ rpki-client -vvf repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft File: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft (raw, json) Hash identifier: yxa6b7uUjZp8q3q+FcBBFGKTbsMJFB9vMR0e7WuWYBA= Subject key identifier: EC:43:DF:D0:39:BC:4B:91:5B:25:2C:55:CB:D6:3A:1F:EA:89:3D:6E Authority key identifier: D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 Certificate issuer: /CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Certificate serial: 7AD1B1DD5BA117E50E496A5FB9B30473D59CFE92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft Manifest number: 5E Signing time: Thu 31 Jul 2025 06:01:59 +0000 Manifest this update: Thu 31 Jul 2025 05:56:59 +0000 Manifest next update: Sun 03 Aug 2025 11:46:59 +0000 Files and hashes: 1: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl (hash: Bvp+cctoWiN3OzkjH6PtLP21k9z1ByYtnJa97I/c1EY=) 2: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: mtxUuoBWjsUwdIjXZpNi9bHZl2ZJW5TeiOYPZBEVbaM=) 3: 3135372e32302e3132312e302f32342d3234203d3e20313532343133.roa (hash: J+HA2voObMJkLTe14IHtv1+pBD6tmTWcTW3nQp6DPrc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 09:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d1:b1:dd:5b:a1:17:e5:0e:49:6a:5f:b9:b3:04:73:d5:9c:fe:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Validity Not Before: Jul 31 05:56:59 2025 GMT Not After : Aug 3 11:46:59 2025 GMT Subject: CN=EC43DFD039BC4B915B252C55CBD63A1FEA893D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:37:4f:e4:27:30:38:c6:17:9d:22:f8:4c: 55:b9:39:d2:ed:bc:38:e4:50:37:0b:c3:30:33:97: 18:10:38:90:66:68:83:2b:68:82:40:8c:bc:ef:b9: 3b:cb:d9:0b:42:18:ce:43:a2:84:90:14:3e:5a:58: 82:82:61:52:45:46:fc:21:c6:95:87:69:f2:4d:44: 5e:60:06:83:14:20:68:1e:65:82:d9:b6:ac:02:b5: ed:7d:e5:52:fa:07:fc:a7:b4:89:0d:14:5a:1c:ca: 29:82:a8:aa:8f:3b:ac:4d:c5:b3:d1:6c:e9:9c:b2: db:ce:13:a2:d7:82:38:d5:14:72:68:3c:7c:a5:ec: d7:9a:01:a1:58:cf:de:43:e6:89:ad:a6:0b:27:43: c4:18:05:4b:60:55:44:1d:97:62:34:cd:b2:8c:a2: 0a:14:4e:27:06:38:fd:6d:4d:57:ff:dd:0b:31:4d: 0d:23:de:94:2d:26:77:0a:03:d2:3a:0b:8f:96:ca: 51:76:40:33:d3:ea:5a:aa:01:11:1e:05:f7:af:8b: a2:d3:c1:13:b1:19:63:34:28:75:84:40:69:f9:82: 7d:bf:fd:d4:33:b1:8c:f9:d1:29:59:f5:b5:d6:27: 44:70:68:2b:e6:21:73:31:48:12:74:41:1d:b3:73: 27:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:43:DF:D0:39:BC:4B:91:5B:25:2C:55:CB:D6:3A:1F:EA:89:3D:6E X509v3 Authority Key Identifier: keyid:D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f3:84:c1:7c:90:4a:a7:07:8a:33:8e:32:e6:8d:df:da:2f: f1:a8:45:32:96:3f:96:58:15:62:3e:14:c9:81:3c:45:6a:12: 5c:b0:ab:40:a9:3d:f9:79:d7:2d:1c:09:34:7f:96:e6:a6:a3: 17:a9:fe:ca:ee:4c:24:e7:6a:f0:c6:d2:bb:75:68:be:0d:0d: 40:20:a4:af:3f:70:24:fd:e6:f5:62:a5:06:f2:3e:48:15:5d: ab:7b:63:89:80:9d:57:88:50:62:05:9d:1c:53:df:9e:ea:07: 7e:e4:11:9b:02:65:24:d4:a7:1d:56:fb:95:02:88:e6:aa:2f: 5c:e2:9a:02:04:0b:ee:29:f3:ee:4e:31:c4:59:0d:07:7d:3e: 0c:42:59:b4:e1:08:6e:03:86:76:eb:9f:bf:a0:9a:6d:e0:05: 81:5f:b0:09:b1:ed:44:3b:44:5b:c7:0d:f3:8b:d0:62:b5:70: 44:74:d3:6d:95:0e:73:d1:63:bd:f1:28:d8:87:46:55:aa:37: 96:10:a3:03:4b:64:3d:8d:9f:13:78:ba:fd:66:c8:4d:ee:61: 0b:43:e1:e1:65:a3:dc:03:73:de:14:e9:21:ea:ad:06:05:d5: aa:78:11:09:92:0b:a2:1b:8b:25:f6:41:fc:31:8e:55:42:85: aa:40:a7:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUetGx3VuhF+UOSWpfubMEc9Wc/pIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVB Q0YzMjM2ODAeFw0yNTA3MzEwNTU2NTlaFw0yNTA4MDMxMTQ2NTlaMDMxMTAvBgNV BAMTKEVDNDNERkQwMzlCQzRCOTE1QjI1MkM1NUNCRDYzQTFGRUE4OTNENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRVzdP5CcwOMYXnSL4TFW5OdLt vDjkUDcLwzAzlxgQOJBmaIMraIJAjLzvuTvL2QtCGM5DooSQFD5aWIKCYVJFRvwh xpWHafJNRF5gBoMUIGgeZYLZtqwCte195VL6B/yntIkNFFocyimCqKqPO6xNxbPR bOmcstvOE6LXgjjVFHJoPHyl7NeaAaFYz95D5omtpgsnQ8QYBUtgVUQdl2I0zbKM ogoUTicGOP1tTVf/3QsxTQ0j3pQtJncKA9I6C4+WylF2QDPT6lqqAREeBfevi6LT wROxGWM0KHWEQGn5gn2//dQzsYz50SlZ9bXWJ0RwaCvmIXMxSBJ0QR2zcyf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7EPf0Dm8S5FbJSxVy9Y6H+qJPW4wHwYDVR0j BBgwFoAU14/lrocO8iH9lXdc/q/q1azzI2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjQ0MjYzYS04ZWUyLTRlZWMtYTgxMC01NzMzY2NhZjUxZTMvMC9ENzhGRTVBRTg3 MEVGMjIxRkQ5NTc3NUNGRUFGRUFENUFDRjMyMzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVBQ0Yz MjM2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVB RDVBQ0YzMjM2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDzhMF8kEqnB4ozjjLmjd/aL/GoRTKWP5ZY FWI+FMmBPEVqElywq0CpPfl51y0cCTR/luamoxep/sruTCTnavDG0rt1aL4NDUAg pK8/cCT95vVipQbyPkgVXat7Y4mAnVeIUGIFnRxT357qB37kEZsCZSTUpx1W+5UC iOaqL1zimgIEC+4p8+5OMcRZDQd9PgxCWbThCG4Dhnbrn7+gmm3gBYFfsAmx7UQ7 RFvHDfOL0GK1cER0022VDnPRY73xKNiHRlWqN5YQowNLZD2NnxN4uv1myE3uYQtD 4eFlo9wDc94U6SHqrQYF1ap4EQmSC6IbiyX2QfwxjlVChapAp+M= -----END CERTIFICATE-----Generated at Thu Jul 31 12:31:32 2025 by rpki-client