$ rpki-client -vvf repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft File: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft (raw, json) Hash identifier: uMP5kqROg2Z9P4qKYrzE35b1GpIh159ry6bVVQbESq8= Subject key identifier: 6B:3E:1B:6E:3A:44:C6:D7:18:20:CD:09:77:C3:04:64:E3:B2:3D:2D Authority key identifier: D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 Certificate issuer: /CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Certificate serial: 23EF3E834A36C0152DAA0F5CA069750DB61F9E94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft Manifest number: 89 Signing time: Tue 04 Nov 2025 09:11:56 +0000 Manifest this update: Tue 04 Nov 2025 09:06:56 +0000 Manifest next update: Fri 07 Nov 2025 16:49:56 +0000 Files and hashes: 1: 3135372e32302e3132312e302f32342d3234203d3e20313532343133.roa (hash: J+HA2voObMJkLTe14IHtv1+pBD6tmTWcTW3nQp6DPrc=) 2: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl (hash: 6UyQEUL768r9U92cQxeU0tMlj0pZz/0CjrTA4a5CbcQ=) 3: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: mtxUuoBWjsUwdIjXZpNi9bHZl2ZJW5TeiOYPZBEVbaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ef:3e:83:4a:36:c0:15:2d:aa:0f:5c:a0:69:75:0d:b6:1f:9e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Validity Not Before: Nov 4 09:06:56 2025 GMT Not After : Nov 7 16:49:56 2025 GMT Subject: CN=6B3E1B6E3A44C6D71820CD0977C30464E3B23D2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:ee:b0:1c:2a:b5:95:9b:eb:b2:00:60:25: 51:d4:b8:65:c4:2b:63:cc:31:6d:2a:3d:22:5f:e2: 09:6a:59:a8:59:5b:b6:62:fd:f0:cf:fd:f7:27:1b: 32:99:6c:13:b7:1a:80:c0:d1:a5:d9:52:44:0a:09: d1:06:01:84:e5:80:f8:86:08:ed:2b:a2:21:14:f9: 84:4d:15:d4:1b:71:43:6a:59:f0:3c:ef:13:7c:cd: 62:fb:2b:8d:32:1f:95:b1:cd:e6:c5:3e:61:71:b1: 84:ac:d2:8d:59:8b:70:c6:f5:f8:c3:6c:99:ba:06: 18:b6:46:18:67:bb:68:e2:de:09:f1:4a:79:b3:6f: 3e:f6:0b:fa:c4:f5:5e:46:ee:ed:91:62:59:51:f1: 9d:5c:c3:a9:64:e0:38:e5:ea:e9:d2:44:ef:ec:d7: 86:d4:08:41:c7:cb:a9:e4:d3:6e:4c:91:9e:40:62: 5b:71:76:25:06:f1:a5:46:73:0d:9f:7f:a4:78:76: 29:8e:71:81:f2:08:89:87:30:ef:33:80:27:d6:88: 43:66:b9:3a:d7:b1:e7:c1:9a:a5:7a:7b:95:98:b3: 7f:38:c9:37:0f:62:64:ee:b2:59:c4:26:dd:e9:ef: 0c:d7:53:49:19:0b:95:5c:74:44:de:bf:85:7b:30: 7a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3E:1B:6E:3A:44:C6:D7:18:20:CD:09:77:C3:04:64:E3:B2:3D:2D X509v3 Authority Key Identifier: keyid:D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:17:8e:93:4f:2a:4c:af:b8:69:42:d1:de:6a:39:46:f6:9a: 51:04:55:96:ef:c1:16:45:48:0e:eb:e2:40:2f:50:1a:60:24: ef:88:0d:89:03:65:80:77:0b:da:9b:2d:92:8c:2d:a0:7c:f5: ed:16:58:e9:f9:90:63:99:1b:d4:c8:ae:1d:c4:be:cb:4b:56: bf:92:81:d2:c7:19:8d:5a:73:1d:0e:81:66:7c:f5:9d:6b:83: c5:52:bf:38:30:10:ef:ed:7b:b3:63:c9:b4:64:be:fd:bb:d5: 68:0c:5c:98:16:34:32:6d:92:3b:62:dc:09:79:87:59:ed:ab: 4a:11:c5:d8:10:84:23:df:88:46:59:cc:4e:9c:22:54:2e:de: 52:79:c9:03:e7:58:e2:f6:60:ca:e6:39:a4:f0:d8:15:5f:c1: 38:6d:64:c5:a7:90:c7:e2:1b:be:f0:59:ea:d6:0b:81:39:8b: 12:25:57:c8:aa:f7:c1:3e:a6:55:fe:5b:5c:86:1b:39:fc:c1: fc:f8:17:9c:0a:e4:08:61:ee:d5:ba:7c:0c:bb:15:ec:1f:3c: 0e:ef:3a:6e:6d:45:20:0c:9d:a1:6a:f1:9c:3f:bb:d0:c7:a0: c4:28:b6:d8:0b:85:b1:0b:64:67:43:56:54:cf:9d:56:d3:52: d5:d5:d0:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+8+g0o2wBUtqg9coGl1DbYfnpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVB Q0YzMjM2ODAeFw0yNTExMDQwOTA2NTZaFw0yNTExMDcxNjQ5NTZaMDMxMTAvBgNV BAMTKDZCM0UxQjZFM0E0NEM2RDcxODIwQ0QwOTc3QzMwNDY0RTNCMjNEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9+6wHCq1lZvrsgBgJVHUuGXE K2PMMW0qPSJf4glqWahZW7Zi/fDP/fcnGzKZbBO3GoDA0aXZUkQKCdEGAYTlgPiG CO0roiEU+YRNFdQbcUNqWfA87xN8zWL7K40yH5WxzebFPmFxsYSs0o1Zi3DG9fjD bJm6Bhi2Rhhnu2ji3gnxSnmzbz72C/rE9V5G7u2RYllR8Z1cw6lk4Djl6unSRO/s 14bUCEHHy6nk025MkZ5AYltxdiUG8aVGcw2ff6R4dimOcYHyCImHMO8zgCfWiENm uTrXsefBmqV6e5WYs384yTcPYmTuslnEJt3p7wzXU0kZC5VcdETev4V7MHqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaz4bbjpExtcYIM0Jd8MEZOOyPS0wHwYDVR0j BBgwFoAU14/lrocO8iH9lXdc/q/q1azzI2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjQ0MjYzYS04ZWUyLTRlZWMtYTgxMC01NzMzY2NhZjUxZTMvMC9ENzhGRTVBRTg3 MEVGMjIxRkQ5NTc3NUNGRUFGRUFENUFDRjMyMzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVBQ0Yz MjM2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVB RDVBQ0YzMjM2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAXjpNPKkyvuGlC0d5qOUb2mlEEVZbvwRZF SA7r4kAvUBpgJO+IDYkDZYB3C9qbLZKMLaB89e0WWOn5kGOZG9TIrh3EvstLVr+S gdLHGY1acx0OgWZ89Z1rg8VSvzgwEO/te7NjybRkvv271WgMXJgWNDJtkjti3Al5 h1ntq0oRxdgQhCPfiEZZzE6cIlQu3lJ5yQPnWOL2YMrmOaTw2BVfwThtZMWnkMfi G77wWerWC4E5ixIlV8iq98E+plX+W1yGGzn8wfz4F5wK5Ahh7tW6fAy7FewfPA7v Om5tRSAMnaFq8Zw/u9DHoMQottgLhbELZGdDVlTPnVbTUtXV0GU= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:23 2025 by rpki-client