$ rpki-client -vvf repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft File: 78702A768CA1E1867D543013BB6186EDA3C06C16.mft (raw, json) Hash identifier: uCiM7YJe8MiUsELab4tfvcNnekAvT7mm+Uln5m7P1RE= Subject key identifier: 47:24:13:CA:1B:DD:A5:12:A9:19:AA:C0:09:F3:FC:84:BF:32:E0:AB Authority key identifier: 78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 Certificate issuer: /CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Certificate serial: 2D472FBD10210539B8D8E2213F1CB4427151CCD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft Manifest number: 8F Signing time: Fri 29 Aug 2025 02:11:20 +0000 Manifest this update: Fri 29 Aug 2025 02:06:20 +0000 Manifest next update: Mon 01 Sep 2025 09:59:20 +0000 Files and hashes: 1: 78702A768CA1E1867D543013BB6186EDA3C06C16.crl (hash: YmfUiGVAsKKuvLAqg3JcofRI/UB0pNFtpEAK/twYk+8=) 2: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: EKlQMXAk89f+RqS3m5jQwamdkWyWCWcqlaMFgz2WrOg=) 3: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: FkpJvfAJZskSw2RpW6IZFlM3nRvWIXVzCCgCII/z76M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 09:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:47:2f:bd:10:21:05:39:b8:d8:e2:21:3f:1c:b4:42:71:51:cc:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Validity Not Before: Aug 29 02:06:20 2025 GMT Not After : Sep 1 09:59:20 2025 GMT Subject: CN=472413CA1BDDA512A919AAC009F3FC84BF32E0AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:88:5b:11:e7:63:20:aa:5b:d4:d2:0a:ee: 89:1a:a3:48:c7:2b:1c:1f:46:a4:b4:be:13:4a:3d: 1f:1b:b9:da:e1:fa:cd:d1:b6:66:07:fa:f3:d1:c1: 89:34:0f:5e:49:5f:af:9c:cc:ca:4b:2a:72:e9:8f: b4:aa:73:33:72:52:2e:16:47:ed:b9:53:73:7c:44: e7:74:ad:d3:7a:8c:1d:98:0c:a6:c9:9f:ac:d3:38: af:1b:09:47:de:21:c7:c7:0c:63:58:99:b5:7f:89: 58:ea:12:2b:64:d4:7f:1f:14:c9:e8:12:03:a9:af: 03:05:e9:b6:0e:9a:f8:17:89:d0:ad:32:9c:d2:e7: 25:75:98:6b:1f:f8:4d:e9:89:2e:24:e6:fe:36:03: d1:ed:dd:de:9f:23:76:81:e7:15:8a:68:f9:f8:31: 4b:92:1d:85:52:fe:70:14:00:cc:e7:ea:19:c5:3a: 27:1e:fa:bc:30:90:a6:41:50:62:a0:b0:e2:28:cf: 27:4c:64:a9:cf:75:36:52:31:58:37:5f:b5:54:b9: ad:6e:93:34:68:bf:4d:29:9f:2d:1f:3f:65:55:47: cf:d5:23:5e:0c:6e:27:ee:0b:58:3d:ce:61:f8:d2: 34:13:23:8a:c6:42:d1:9e:e9:69:96:78:5d:d0:9d: 0c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:24:13:CA:1B:DD:A5:12:A9:19:AA:C0:09:F3:FC:84:BF:32:E0:AB X509v3 Authority Key Identifier: keyid:78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:93:e2:e4:fb:d9:77:36:d7:fc:19:c8:ba:9c:a7:3f:45:3e: 99:87:db:72:6b:d0:29:a4:ab:ab:f6:ad:8a:97:8d:e0:56:86: c2:98:b4:ec:f8:a0:1e:b9:e1:a9:45:d5:e5:c1:07:27:1e:ef: a3:92:3c:59:83:34:7a:8a:e1:84:6c:ff:c7:50:4f:88:6c:1f: f8:88:a1:62:e4:4f:b0:94:b1:38:c2:a4:3f:9d:2d:7d:27:3f: e0:e6:ec:06:c6:68:1d:df:86:30:bf:89:41:96:38:9a:7a:e7: c9:8b:c5:7c:b0:e8:6e:68:4c:88:f0:7b:fa:38:fa:45:34:61: b5:13:a3:14:98:de:96:dd:41:c9:fb:e0:a8:15:0c:ed:29:64: 62:3d:17:64:25:0e:da:f6:2a:34:87:1b:31:f5:ac:8d:63:c7: c8:aa:0a:35:db:da:c8:3a:40:b5:21:11:bb:04:18:ba:39:c4: 05:01:33:2a:3f:b7:65:05:f3:0c:dd:68:4f:6b:53:6b:ca:e9: b7:40:8b:a4:be:16:73:e7:56:ec:a9:22:40:8d:90:db:b5:e8: 6c:2c:78:ec:22:6e:81:64:df:85:ba:0f:84:16:07:6c:25:0e: 52:b0:22:e4:31:7a:db:b8:af:ad:c2:2a:98:76:76:b9:b1:cc: a4:04:30:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUcvvRAhBTm42OIhPxy0QnFRzNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURB M0MwNkMxNjAeFw0yNTA4MjkwMjA2MjBaFw0yNTA5MDEwOTU5MjBaMDMxMTAvBgNV BAMTKDQ3MjQxM0NBMUJEREE1MTJBOTE5QUFDMDA5RjNGQzg0QkYzMkUwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7ohbEedjIKpb1NIK7okao0jH KxwfRqS0vhNKPR8budrh+s3RtmYH+vPRwYk0D15JX6+czMpLKnLpj7SqczNyUi4W R+25U3N8ROd0rdN6jB2YDKbJn6zTOK8bCUfeIcfHDGNYmbV/iVjqEitk1H8fFMno EgOprwMF6bYOmvgXidCtMpzS5yV1mGsf+E3piS4k5v42A9Ht3d6fI3aB5xWKaPn4 MUuSHYVS/nAUAMzn6hnFOice+rwwkKZBUGKgsOIozydMZKnPdTZSMVg3X7VUua1u kzRov00pny0fP2VVR8/VI14MbifuC1g9zmH40jQTI4rGQtGe6WmWeF3QnQwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURyQTyhvdpRKpGarACfP8hL8y4KswHwYDVR0j BBgwFoAUeHAqdoyh4YZ9VDATu2GG7aPAbBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmE5ZjRlMi1jNzNiLTQ0MjctOTgyOS0xZGExYmFhYjg3MGIvMC83ODcwMkE3NjhD QTFFMTg2N0Q1NDMwMTNCQjYxODZFREEzQzA2QzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURBM0Mw NkMxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2 RURBM0MwNkMxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOT4uT72Xc21/wZyLqcpz9FPpmH23Jr0Cmk q6v2rYqXjeBWhsKYtOz4oB654alF1eXBByce76OSPFmDNHqK4YRs/8dQT4hsH/iI oWLkT7CUsTjCpD+dLX0nP+Dm7AbGaB3fhjC/iUGWOJp658mLxXyw6G5oTIjwe/o4 +kU0YbUToxSY3pbdQcn74KgVDO0pZGI9F2QlDtr2KjSHGzH1rI1jx8iqCjXb2sg6 QLUhEbsEGLo5xAUBMyo/t2UF8wzdaE9rU2vK6bdAi6S+FnPnVuypIkCNkNu16Gws eOwiboFk34W6D4QWB2wlDlKwIuQxetu4r63CKph2drmxzKQEMP8= -----END CERTIFICATE-----Generated at Sun Aug 31 09:13:25 2025 by rpki-client