$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft File: 78578588503A7F091F1D7CD7B16BDC9E55055889.mft (raw, json) Hash identifier: 2WYpEdUXumwZlXx62x7WniBjrmsYmRgCAjxMLUwp03Q= Subject key identifier: 18:C2:B8:B3:0D:8E:84:6B:AE:A4:20:2F:A4:D7:AC:7B:AC:AB:F9:60 Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 Certificate issuer: /CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Certificate serial: 7B4AA26FB17C18BE52798A3F95FFB0C3A8DDDB8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft Manifest number: 0129 Signing time: Tue 16 Sep 2025 16:11:33 +0000 Manifest this update: Tue 16 Sep 2025 16:06:33 +0000 Manifest next update: Fri 19 Sep 2025 19:20:33 +0000 Files and hashes: 1: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: YXBLniWIP1tEpCZLI2E35OhkhCdsQi0gYJFIjwBZCnk=) 2: 78578588503A7F091F1D7CD7B16BDC9E55055889.crl (hash: 78vEgrwpdkz27n8zTvGARvWgbsmHvGLzSA3uqHIxFRY=) 3: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: e1JG4uU1iuO6rgmOne6CBOco5jWQCmWhIZVp0+S/uh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Sep 2025 19:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:4a:a2:6f:b1:7c:18:be:52:79:8a:3f:95:ff:b0:c3:a8:dd:db:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Validity Not Before: Sep 16 16:06:33 2025 GMT Not After : Sep 19 19:20:33 2025 GMT Subject: CN=18C2B8B30D8E846BAEA4202FA4D7AC7BACABF960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:05:0d:a0:66:e7:86:69:b5:d3:e5:0f:b5: 19:34:19:36:de:2a:ca:3c:67:65:2a:8f:82:5a:ac: ef:4a:1d:fd:df:06:87:77:99:a6:98:3e:2e:c4:79: ee:11:81:f8:0b:32:8a:36:89:4e:3e:c8:df:2b:21: 92:b4:c7:be:1f:c4:3c:de:56:4a:2c:78:43:e4:99: dc:f8:6e:de:ac:ea:15:bf:29:78:89:31:f3:c0:2d: 3c:39:da:d1:be:10:e4:73:85:48:c9:32:d6:b9:02: e4:26:73:bb:8d:52:bb:34:df:1b:0f:e5:30:e2:c6: 1b:b8:55:a2:67:a5:62:a4:5a:8d:30:6a:98:04:cd: ee:3c:26:b0:7f:f1:5c:7d:a9:c1:4a:e7:7d:9a:c9: e1:bc:0a:7d:65:65:cf:f2:92:4e:8c:61:fd:8e:a7: ad:d8:bb:ef:b4:41:e9:5f:a3:2c:2d:0c:61:7a:50: cb:f2:08:f6:54:a9:5e:50:96:3f:e5:2c:e7:a6:9c: 1d:b5:9b:77:5a:e2:fa:82:6b:7f:a2:24:37:dc:a5: 7e:df:bd:0d:c6:c0:fd:14:81:b4:1b:bc:83:86:5e: 6c:db:ff:5f:a7:d4:0a:33:53:ec:be:93:d9:5c:27: 71:e0:f5:4f:32:2f:e9:25:89:bd:72:89:bf:9a:5d: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C2:B8:B3:0D:8E:84:6B:AE:A4:20:2F:A4:D7:AC:7B:AC:AB:F9:60 X509v3 Authority Key Identifier: keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b6:dd:fe:f7:69:3a:74:49:ac:f3:23:5c:d9:b6:28:80:db: c3:d5:0d:de:c3:2c:f1:49:fc:c5:67:f4:0a:a6:52:5f:7d:ac: 77:92:a1:02:bc:ad:ae:0e:5f:36:b1:08:9d:63:68:3e:32:5c: e9:ac:52:2a:45:59:59:1d:38:56:4c:a9:d8:3b:d4:21:08:ea: 66:9b:5f:11:2d:a7:45:5c:a9:27:5e:c8:9d:ae:40:ca:bc:6f: b1:d0:bc:a6:e2:ea:d3:2c:60:23:f2:45:6d:12:39:f2:72:1c: 0f:43:1a:aa:9e:0d:59:68:2c:b1:aa:01:ea:f1:4b:57:3f:8e: 5b:80:37:a8:9a:54:7e:9b:1a:fc:67:f6:8a:53:60:aa:02:93: f0:76:70:37:85:6f:08:8a:4f:6f:d7:b1:8a:11:2f:f1:08:d7: 1d:90:8d:ca:33:d5:bc:c8:b5:f1:07:de:cf:e6:27:86:c3:6b: 01:a6:c3:95:23:a8:7e:d4:3a:da:96:24:0b:2a:c1:33:09:8d: 82:b1:86:7a:ed:d7:c8:be:0b:83:05:28:66:b8:53:4a:81:40: 51:0c:8a:8d:b5:d3:c1:eb:3f:a5:e2:3c:80:d0:82:06:b8:ba: 98:fe:be:f3:74:fe:2b:73:ee:6a:3a:21:a7:2a:42:e0:e2:01: 7e:c7:0b:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0qib7F8GL5SeYo/lf+ww6jd240wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1 NTA1NTg4OTAeFw0yNTA5MTYxNjA2MzNaFw0yNTA5MTkxOTIwMzNaMDMxMTAvBgNV BAMTKDE4QzJCOEIzMEQ4RTg0NkJBRUE0MjAyRkE0RDdBQzdCQUNBQkY5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsAUNoGbnhmm10+UPtRk0GTbe Kso8Z2Uqj4JarO9KHf3fBod3maaYPi7Eee4RgfgLMoo2iU4+yN8rIZK0x74fxDze VkoseEPkmdz4bt6s6hW/KXiJMfPALTw52tG+EORzhUjJMta5AuQmc7uNUrs03xsP 5TDixhu4VaJnpWKkWo0wapgEze48JrB/8Vx9qcFK532ayeG8Cn1lZc/ykk6MYf2O p63Yu++0QelfoywtDGF6UMvyCPZUqV5Qlj/lLOemnB21m3da4vqCa3+iJDfcpX7f vQ3GwP0UgbQbvIOGXmzb/1+n1AozU+y+k9lcJ3Hg9U8yL+klib1yib+aXVtLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGMK4sw2OhGuupCAvpNese6yr+WAwHwYDVR0j BBgwFoAUeFeFiFA6fwkfHXzXsWvcnlUFWIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGU0Y2E1NC04NTdiLTRmNjgtYWI1Zi0wZDhjNDcyZTZjOTIvMC83ODU3ODU4ODUw M0E3RjA5MUYxRDdDRDdCMTZCREM5RTU1MDU1ODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1NTA1 NTg4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlNGNhNTQtODU3Yi00ZjY4LWFi NWYtMGQ4YzQ3MmU2YzkyLzAvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRD OUU1NTA1NTg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+23f73aTp0SazzI1zZtiiA28PVDd7DLPFJ /MVn9AqmUl99rHeSoQK8ra4OXzaxCJ1jaD4yXOmsUipFWVkdOFZMqdg71CEI6mab XxEtp0VcqSdeyJ2uQMq8b7HQvKbi6tMsYCPyRW0SOfJyHA9DGqqeDVloLLGqAerx S1c/jluAN6iaVH6bGvxn9opTYKoCk/B2cDeFbwiKT2/XsYoRL/EI1x2Qjcoz1bzI tfEH3s/mJ4bDawGmw5UjqH7UOtqWJAsqwTMJjYKxhnrt18i+C4MFKGa4U0qBQFEM io2108HrP6XiPIDQgga4upj+vvN0/itz7mo6IacqQuDiAX7HC3c= -----END CERTIFICATE-----Generated at Wed Sep 17 02:12:01 2025 by rpki-client