$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft File: 8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json) Hash identifier: fHCctwJwOH0i2UTTB1Ywc/IyKNNH6vGYJXxJCTXPmeo= Subject key identifier: 59:73:1F:79:5D:2F:60:62:03:B4:36:C7:7F:D0:65:FA:70:A0:0D:04 Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Certificate issuer: /CN=8A78F143A2E18078229313E44ACE70165360440C Certificate serial: 71D4FF98AD031999A2D997E112D7B15651EA87CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft Manifest number: F1 Signing time: Wed 05 Nov 2025 09:40:54 +0000 Manifest this update: Wed 05 Nov 2025 09:35:54 +0000 Manifest next update: Sat 08 Nov 2025 11:38:54 +0000 Files and hashes: 1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: FudzPKu3tQLjl7YTHxckHvFlpgH6w9UJPAtgjJ+mnfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 10:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d4:ff:98:ad:03:19:99:a2:d9:97:e1:12:d7:b1:56:51:ea:87:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C Validity Not Before: Nov 5 09:35:54 2025 GMT Not After : Nov 8 11:38:54 2025 GMT Subject: CN=59731F795D2F606203B436C77FD065FA70A00D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:fd:47:a6:e7:5d:b7:4a:13:90:f8:ba:69: e1:55:e3:83:ba:29:69:93:3b:14:22:3a:d9:19:af: 16:55:70:00:28:3e:c7:f0:f8:05:6f:c7:ac:b3:2d: 62:50:16:b9:0a:0c:6e:6f:59:10:90:93:48:20:7a: cb:cb:be:88:25:23:fd:c6:2e:b3:46:65:2e:05:39: 26:68:d9:e2:ac:cb:76:d2:4d:18:a5:aa:2a:23:14: 65:d9:c2:62:a5:86:ed:9e:f6:25:35:57:7f:a2:89: d3:10:44:75:c7:6f:ae:b7:36:cc:fe:0d:88:f4:ba: b3:6a:b2:68:38:9a:d2:b3:39:f1:14:0c:42:5d:29: 2a:80:ef:0d:5d:e9:65:84:04:c9:91:61:ae:bf:35: a4:9d:de:3a:1c:93:18:a2:11:76:e8:61:98:37:7b: 81:1d:ab:b5:81:26:1a:55:2a:4c:bf:b7:2c:38:44: 3a:58:19:9d:c0:2c:39:58:3c:51:9d:44:54:49:12: 62:76:4d:9d:6a:5c:cf:b3:03:6f:3c:19:a5:a3:23: a9:8c:60:a7:11:8f:62:fc:66:79:82:d9:e5:6e:28: 2b:b8:bc:f9:00:93:e2:de:aa:02:93:84:b3:c4:63: 22:27:81:d8:4a:34:ee:0b:ce:c7:1b:ce:df:f9:c4: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:73:1F:79:5D:2F:60:62:03:B4:36:C7:7F:D0:65:FA:70:A0:0D:04 X509v3 Authority Key Identifier: keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e0:24:d1:19:33:a5:6e:de:39:e4:2e:69:63:34:b5:ef:a7: ef:2a:b7:82:ff:cf:e9:35:b3:d8:76:b7:4a:8f:e7:89:c4:7c: 30:be:03:19:1f:0d:05:87:4c:26:86:eb:26:0e:3f:2e:38:b8: cc:0f:23:6b:05:1d:f7:d4:13:ad:69:14:77:c9:72:60:2b:c1: 59:08:49:fb:ac:54:56:91:05:32:53:1b:b6:7e:a0:b3:53:17: 2f:86:88:eb:35:07:65:6e:c6:4e:70:9a:45:04:44:2d:30:a0: b1:a6:3f:bd:72:b7:e8:ab:4f:90:48:84:4e:e2:ed:a7:a8:4a: cb:2c:55:9f:bd:cf:9d:fe:1b:30:2e:91:d9:39:83:c6:01:fa: fa:21:05:fd:91:c2:6f:14:05:a7:53:05:1c:8e:79:0d:19:78: 78:3f:ea:c2:21:5f:48:56:b5:f3:15:8b:ae:14:b9:df:e4:ca: fe:05:b1:19:3b:6a:d0:48:86:f9:c2:d4:08:44:f2:01:45:96: 6a:c1:dd:26:be:7e:20:58:61:96:bb:e9:4f:db:0b:59:0e:e5: 04:60:82:25:df:3a:04:48:46:ef:2e:e1:08:1f:7c:70:fc:2e: 5a:6e:3b:6e:53:8e:55:52:b4:9a:7a:df:9e:fc:6c:0e:e0:96: fa:bf:65:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcdT/mK0DGZmi2ZfhEtexVlHqh8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1 MzYwNDQwQzAeFw0yNTExMDUwOTM1NTRaFw0yNTExMDgxMTM4NTRaMDMxMTAvBgNV BAMTKDU5NzMxRjc5NUQyRjYwNjIwM0I0MzZDNzdGRDA2NUZBNzBBMDBEMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8H/1Hpuddt0oTkPi6aeFV44O6 KWmTOxQiOtkZrxZVcAAoPsfw+AVvx6yzLWJQFrkKDG5vWRCQk0ggesvLvoglI/3G LrNGZS4FOSZo2eKsy3bSTRilqiojFGXZwmKlhu2e9iU1V3+iidMQRHXHb663Nsz+ DYj0urNqsmg4mtKzOfEUDEJdKSqA7w1d6WWEBMmRYa6/NaSd3jockxiiEXboYZg3 e4Edq7WBJhpVKky/tyw4RDpYGZ3ALDlYPFGdRFRJEmJ2TZ1qXM+zA288GaWjI6mM YKcRj2L8ZnmC2eVuKCu4vPkAk+LeqgKThLPEYyIngdhKNO4Lzscbzt/5xPWXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWXMfeV0vYGIDtDbHf9Bl+nCgDQQwHwYDVR0j BBgwFoAUinjxQ6LhgHgikxPkSs5wFlNgRAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMC84QTc4RjE0M0Ey RTE4MDc4MjI5MzEzRTQ0QUNFNzAxNjUzNjA0NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1MzYw NDQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcw MTY1MzYwNDQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzgJNEZM6Vu3jnkLmljNLXvp+8qt4L/z+k1 s9h2t0qP54nEfDC+AxkfDQWHTCaG6yYOPy44uMwPI2sFHffUE61pFHfJcmArwVkI SfusVFaRBTJTG7Z+oLNTFy+GiOs1B2Vuxk5wmkUERC0woLGmP71yt+irT5BIhE7i 7aeoSsssVZ+9z53+GzAukdk5g8YB+vohBf2Rwm8UBadTBRyOeQ0ZeHg/6sIhX0hW tfMVi64Uud/kyv4FsRk7atBIhvnC1AhE8gFFlmrB3Sa+fiBYYZa76U/bC1kO5QRg giXfOgRIRu8u4QgffHD8LlpuO25TjlVStJp63578bA7glvq/Ze8= -----END CERTIFICATE-----Generated at Wed Nov 5 15:13:33 2025 by rpki-client