$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft File: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft (raw, json) Hash identifier: e3TWbRPyUKNBM/wK/54BEp3zWKyc4K7oQKPucmNzPiw= Subject key identifier: D8:57:20:C8:DC:3D:47:50:92:9F:1E:32:82:AB:AA:29:82:AA:4A:16 Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 Certificate issuer: /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Certificate serial: 20E6420760C81232C07E75410DE249987C70D476 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft Manifest number: 67 Signing time: Tue 22 Jul 2025 07:51:15 +0000 Manifest this update: Tue 22 Jul 2025 07:46:15 +0000 Manifest next update: Fri 25 Jul 2025 16:22:15 +0000 Files and hashes: 1: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: X+5UT/GSOBpO30J7mwUdK8TlS1P10P4zZ4ljBd5RqEY=) 2: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: KwAYS/a7h4fChN6pY7P76dJV21oWKmMZY37E8i7mLHA=) 3: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: HUEwdGiOhF3oiIXSl5GQ5TTpMFKflaMugAM28/Htypk=) 4: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl (hash: cjLr6JLNICySpts6J2nR/LZ742jeNaBVb6H77cg/1oc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e6:42:07:60:c8:12:32:c0:7e:75:41:0d:e2:49:98:7c:70:d4:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Validity Not Before: Jul 22 07:46:15 2025 GMT Not After : Jul 25 16:22:15 2025 GMT Subject: CN=D85720C8DC3D4750929F1E3282ABAA2982AA4A16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:62:03:6e:82:d9:c1:10:27:0c:b9:a0:63:37: 28:b1:bc:c4:64:8c:8c:16:1c:ed:e4:e9:bb:93:af: 53:3c:c1:1a:f3:2c:d5:5a:80:bd:9f:63:7d:af:d9: 3e:92:10:d9:eb:a6:3e:85:34:fa:da:85:6d:73:92: ed:6c:3c:3c:97:d1:a8:09:26:0e:4a:95:c6:d9:ad: be:9f:bd:7e:82:4f:9c:32:18:a5:2e:e9:bf:bb:d1: a4:22:1a:40:6e:63:40:ca:3d:bb:14:25:eb:d8:61: 16:bb:c6:02:75:7a:e2:32:c3:f7:ae:42:75:1a:dd: 25:9b:fc:44:d1:6a:3a:b4:27:a2:ab:89:f7:d2:f2: 68:e1:d6:2b:ae:b9:4e:69:06:f0:6c:f5:85:f5:c2: 7e:a3:57:c9:13:7f:89:4a:12:d2:25:81:cb:84:e3: d0:82:17:3e:0f:a9:82:eb:90:bd:0f:d4:11:6a:33: a7:40:08:85:29:54:0a:02:e4:67:83:e7:1d:8b:4f: fd:4d:bb:32:22:49:07:29:3d:d0:01:72:01:aa:64: 59:db:f3:8e:08:53:d6:f4:2d:1c:52:b3:88:73:f4: e3:68:8f:9e:3b:b7:68:4c:6f:13:4d:d3:34:fe:49: fc:8f:32:65:c8:60:3d:40:91:d5:a5:2f:0a:33:41: 98:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:57:20:C8:DC:3D:47:50:92:9F:1E:32:82:AB:AA:29:82:AA:4A:16 X509v3 Authority Key Identifier: keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:aa:c2:0a:99:6c:93:6c:5d:3f:4f:7a:11:21:b2:3e:d3:65: cd:1e:18:45:42:6e:1b:f2:86:94:27:40:db:48:11:e2:a5:16: 86:10:cd:48:5e:f7:7d:78:45:e0:57:62:72:04:85:e3:b0:85: 29:fa:ec:23:5c:ec:eb:fb:87:91:f4:7e:eb:10:de:79:0a:d6: 83:3c:0d:2e:77:a0:6b:b3:88:f4:d3:56:88:73:db:39:6d:ea: 93:71:a2:41:5c:22:78:b6:a7:83:3b:df:0f:a3:78:83:be:ca: cb:fe:d7:6a:f2:8b:43:e5:9d:b0:d9:53:cc:b8:ba:8a:e1:99: ec:d9:13:e1:75:a2:ae:af:70:eb:80:59:0f:eb:be:26:36:b2: 1a:14:7f:d8:99:d6:e1:96:55:8b:32:53:e3:d7:36:2b:5f:58: 65:86:bb:25:3b:1f:6d:34:3f:34:5d:dc:ca:15:43:a2:fd:5b: 6c:e0:ce:30:0f:af:c4:aa:17:19:91:e3:b9:07:74:21:ca:c7: 6c:6a:b6:fc:0c:41:aa:dd:e8:3c:7e:60:84:36:59:62:8d:21: 0f:41:c6:b9:0a:a8:d9:69:75:07:d7:c6:6a:e2:4d:b7:8a:18: 6e:05:9e:16:cf:04:20:e9:e6:a8:e7:db:df:15:4d:47:8f:5a: 73:4f:1b:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOZCB2DIEjLAfnVBDeJJmHxw1HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0 REY0MTQxNDAeFw0yNTA3MjIwNzQ2MTVaFw0yNTA3MjUxNjIyMTVaMDMxMTAvBgNV BAMTKEQ4NTcyMEM4REMzRDQ3NTA5MjlGMUUzMjgyQUJBQTI5ODJBQTRBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrYgNugtnBECcMuaBjNyixvMRk jIwWHO3k6buTr1M8wRrzLNVagL2fY32v2T6SENnrpj6FNPrahW1zku1sPDyX0agJ Jg5KlcbZrb6fvX6CT5wyGKUu6b+70aQiGkBuY0DKPbsUJevYYRa7xgJ1euIyw/eu QnUa3SWb/ETRajq0J6KriffS8mjh1iuuuU5pBvBs9YX1wn6jV8kTf4lKEtIlgcuE 49CCFz4PqYLrkL0P1BFqM6dACIUpVAoC5GeD5x2LT/1NuzIiSQcpPdABcgGqZFnb 844IU9b0LRxSs4hz9ONoj547t2hMbxNN0zT+SfyPMmXIYD1AkdWlLwozQZizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2FcgyNw9R1CSnx4ygquqKYKqShYwHwYDVR0j BBgwFoAUeLf6oogav7wRfA+D7NydVU30FBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMC83OEI3RkFBMjg4 MUFCRkJDMTE3QzBGODNFQ0RDOUQ1NTRERjQxNDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0REY0 MTQxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlE NTU0REY0MTQxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWqwgqZbJNsXT9PehEhsj7TZc0eGEVCbhvy hpQnQNtIEeKlFoYQzUhe9314ReBXYnIEheOwhSn67CNc7Ov7h5H0fusQ3nkK1oM8 DS53oGuziPTTVohz2zlt6pNxokFcIni2p4M73w+jeIO+ysv+12ryi0PlnbDZU8y4 uorhmezZE+F1oq6vcOuAWQ/rviY2shoUf9iZ1uGWVYsyU+PXNitfWGWGuyU7H200 PzRd3MoVQ6L9W2zgzjAPr8SqFxmR47kHdCHKx2xqtvwMQard6Dx+YIQ2WWKNIQ9B xrkKqNlpdQfXxmriTbeKGG4FnhbPBCDp5qjn298VTUePWnNPG6o= -----END CERTIFICATE-----Generated at Tue Jul 22 19:29:15 2025 by rpki-client