$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft File: 8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json) Hash identifier: GZI+k1feR6MZL0Lj4WTZK/7kPT5R12EPmxrryKXZMb8= Subject key identifier: 14:99:F4:26:FB:86:CB:0C:34:E8:DD:AF:91:9A:FD:2B:D0:38:65:C3 Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Certificate issuer: /CN=8A78F143A2E18078229313E44ACE70165360440C Certificate serial: 3F23163F2B1D84923E8703F3B25061D71806F9CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft Manifest number: C9 Signing time: Thu 07 Aug 2025 21:00:54 +0000 Manifest this update: Thu 07 Aug 2025 20:55:54 +0000 Manifest next update: Mon 11 Aug 2025 00:57:54 +0000 Files and hashes: 1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: FFH7qFmDLauG+JMBxDfShgtwdOkqzSZpqTX4E+uvk08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 00:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:23:16:3f:2b:1d:84:92:3e:87:03:f3:b2:50:61:d7:18:06:f9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C Validity Not Before: Aug 7 20:55:54 2025 GMT Not After : Aug 11 00:57:54 2025 GMT Subject: CN=1499F426FB86CB0C34E8DDAF919AFD2BD03865C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:a5:64:64:d1:40:80:22:ba:1e:08:78:2e: 05:98:44:6d:46:5c:a0:86:c3:09:bb:bf:57:d0:56: a2:a3:c9:68:4a:4b:20:29:72:b8:7a:8d:cb:ee:1d: f0:b7:db:ac:19:36:df:37:09:b2:aa:78:52:31:53: f4:59:65:6a:bb:6e:08:64:11:0e:1e:05:20:a8:30: 7e:1c:69:bc:67:e9:2a:60:76:71:15:54:9a:d9:46: f8:2e:eb:ef:c5:fe:b5:f4:68:bf:34:74:d5:99:8f: c3:6a:a8:01:64:a0:fb:b7:bf:4b:52:ca:66:65:e9: 7b:e8:57:ab:61:ea:c3:8f:9b:82:13:f8:ba:7d:98: 08:34:d1:aa:45:2a:66:4c:84:19:d4:5d:40:99:de: 6c:2f:77:eb:b2:86:8b:97:79:d1:d2:55:58:75:5a: 56:20:2f:23:e2:03:4d:a6:e8:50:c1:bc:b2:70:b7: c3:c2:65:05:51:11:61:53:31:f2:a3:21:b1:57:63: a3:99:19:28:34:1a:e9:1a:79:51:fc:05:4f:f8:bd: e3:cd:d2:2a:ad:42:44:ff:6c:a9:3b:68:eb:7c:47: 27:a4:4c:d8:ba:6e:8f:ad:11:4e:82:5a:91:e5:0a: 9a:ce:b2:fc:1a:60:52:45:47:9c:b5:a4:f8:50:d4: ee:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:99:F4:26:FB:86:CB:0C:34:E8:DD:AF:91:9A:FD:2B:D0:38:65:C3 X509v3 Authority Key Identifier: keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:78:cb:fe:71:54:34:c3:6d:f5:68:3e:6c:30:94:0e:53:72: be:8d:13:3f:76:c8:87:37:01:64:9e:95:cb:2a:f5:79:22:45: 27:c8:31:fb:31:cd:1c:64:4f:47:e7:13:18:06:ff:15:f4:89: 39:e9:7b:12:09:df:e4:5c:93:59:5c:8b:2d:78:37:d6:44:bc: d2:f8:e9:8b:cb:55:a0:0d:fd:e1:6a:3c:e3:34:fa:8f:4a:58: f0:7e:f8:78:d2:dc:2b:47:f6:f7:dd:b7:3e:43:fe:bf:2d:d7: d3:94:c8:12:f4:a8:82:8f:af:41:0c:a1:67:3c:5e:e4:cf:23: 18:50:7b:0d:fc:96:a5:ba:7f:34:dd:4a:62:2a:d0:32:79:24: db:14:88:57:04:fd:59:70:33:c9:80:01:40:89:20:69:db:37: 7a:12:fc:b6:a1:49:32:da:46:fb:f7:6c:9e:1f:ae:b0:9c:24: 29:12:ad:28:25:19:53:c7:8b:74:1f:62:e8:d1:1b:c7:6e:32: 9d:89:d5:92:b8:8c:09:64:1d:95:99:48:5e:51:ed:04:24:71: 57:7d:00:46:69:01:52:6b:07:c4:b3:60:9c:28:e3:b2:fe:af: 22:cc:5a:cd:5d:e5:9e:bb:96:3a:e0:f0:1b:b1:5d:a8:fa:72: 38:76:fe:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPyMWPysdhJI+hwPzslBh1xgG+c4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1 MzYwNDQwQzAeFw0yNTA4MDcyMDU1NTRaFw0yNTA4MTEwMDU3NTRaMDMxMTAvBgNV BAMTKDE0OTlGNDI2RkI4NkNCMEMzNEU4RERBRjkxOUFGRDJCRDAzODY1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTKVkZNFAgCK6Hgh4LgWYRG1G XKCGwwm7v1fQVqKjyWhKSyApcrh6jcvuHfC326wZNt83CbKqeFIxU/RZZWq7bghk EQ4eBSCoMH4cabxn6SpgdnEVVJrZRvgu6+/F/rX0aL80dNWZj8NqqAFkoPu3v0tS ymZl6XvoV6th6sOPm4IT+Lp9mAg00apFKmZMhBnUXUCZ3mwvd+uyhouXedHSVVh1 WlYgLyPiA02m6FDBvLJwt8PCZQVREWFTMfKjIbFXY6OZGSg0GukaeVH8BU/4vePN 0iqtQkT/bKk7aOt8RyekTNi6bo+tEU6CWpHlCprOsvwaYFJFR5y1pPhQ1O7VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFJn0JvuGyww06N2vkZr9K9A4ZcMwHwYDVR0j BBgwFoAUinjxQ6LhgHgikxPkSs5wFlNgRAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMC84QTc4RjE0M0Ey RTE4MDc4MjI5MzEzRTQ0QUNFNzAxNjUzNjA0NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1MzYw NDQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcw MTY1MzYwNDQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZ4y/5xVDTDbfVoPmwwlA5Tcr6NEz92yIc3 AWSelcsq9XkiRSfIMfsxzRxkT0fnExgG/xX0iTnpexIJ3+Rck1lciy14N9ZEvNL4 6YvLVaAN/eFqPOM0+o9KWPB++HjS3CtH9vfdtz5D/r8t19OUyBL0qIKPr0EMoWc8 XuTPIxhQew38lqW6fzTdSmIq0DJ5JNsUiFcE/VlwM8mAAUCJIGnbN3oS/LahSTLa Rvv3bJ4frrCcJCkSrSglGVPHi3QfYujRG8duMp2J1ZK4jAlkHZWZSF5R7QQkcVd9 AEZpAVJrB8SzYJwo47L+ryLMWs1d5Z67ljrg8BuxXaj6cjh2/tE= -----END CERTIFICATE-----Generated at Sat Aug 9 22:37:48 2025 by rpki-client