$ rpki-client -vvf repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft File: 78702A768CA1E1867D543013BB6186EDA3C06C16.mft (raw, json) Hash identifier: XiwCYMOtdvdiX93HBUs4qb6FFGzOveSgLLTpVPwcbtk= Subject key identifier: C4:4F:6D:77:B7:62:C9:2A:7D:3C:80:42:95:49:25:07:FF:E5:C0:FC Authority key identifier: 78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 Certificate issuer: /CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Certificate serial: 6B4151B260D875ACABE981DD8B3A20E6E7B03DAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft Manifest number: 86 Signing time: Fri 08 Aug 2025 23:01:20 +0000 Manifest this update: Fri 08 Aug 2025 22:56:20 +0000 Manifest next update: Tue 12 Aug 2025 10:51:20 +0000 Files and hashes: 1: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: EKlQMXAk89f+RqS3m5jQwamdkWyWCWcqlaMFgz2WrOg=) 2: 78702A768CA1E1867D543013BB6186EDA3C06C16.crl (hash: KFZSB7yB9AuAhdr+n7XTWQaQr0TnA2duClXs5rhU000=) 3: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: FkpJvfAJZskSw2RpW6IZFlM3nRvWIXVzCCgCII/z76M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:41:51:b2:60:d8:75:ac:ab:e9:81:dd:8b:3a:20:e6:e7:b0:3d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Validity Not Before: Aug 8 22:56:20 2025 GMT Not After : Aug 12 10:51:20 2025 GMT Subject: CN=C44F6D77B762C92A7D3C804295492507FFE5C0FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:09:44:e3:99:b8:4d:32:08:89:45:3e:57: 48:6a:30:bf:9e:8b:ba:ce:ee:7b:a1:9e:df:3a:bd: d6:72:2f:b1:5d:3f:a7:08:4d:57:02:90:92:0b:e3: 5f:13:a8:cf:ab:83:c4:a7:68:53:12:7c:7e:aa:86: b5:b7:d0:47:37:51:2c:f8:0b:6b:7d:f8:1e:fd:b5: b0:d5:88:6c:a9:67:4e:90:55:b9:2e:7a:17:71:f6: 6a:0d:58:00:e4:2e:7d:e2:ef:56:35:4e:b4:e2:3c: cc:55:47:74:a6:e7:0d:0a:90:9a:44:83:99:d1:80: e9:4e:60:c5:67:a8:9e:3c:b7:78:65:1c:57:b0:f1: 58:84:18:72:64:1b:19:16:87:1c:ff:cb:0e:15:12: 2a:54:e1:36:f0:77:83:8e:61:8f:7d:fa:4b:67:7c: 1a:f0:84:07:73:60:27:18:00:bc:0a:47:09:06:a7: f0:aa:2f:a7:79:39:88:aa:84:7e:db:51:9c:38:14: 9d:d4:f7:41:9d:90:4f:7e:77:43:5c:a5:5d:1f:1e: a4:3d:e2:df:18:0f:dc:98:e8:fa:4b:f8:46:f0:2e: 72:a0:cc:5a:6c:fa:3f:5c:30:56:51:b0:6a:72:9c: aa:ac:b9:c4:9b:34:24:6e:47:34:76:76:b2:db:fd: 4b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4F:6D:77:B7:62:C9:2A:7D:3C:80:42:95:49:25:07:FF:E5:C0:FC X509v3 Authority Key Identifier: keyid:78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:26:64:7b:f3:b5:e2:21:91:ef:ea:ac:da:8d:50:bd:9b:18: 5b:07:93:c3:55:57:43:d0:ae:d7:f5:db:cf:a4:91:e3:53:35: 44:70:34:45:77:86:fb:25:b6:01:37:5c:8d:61:7b:fc:27:a4: c4:c2:0b:30:d6:1f:f6:89:d7:e8:a7:59:74:f5:6c:08:c7:17: 49:2b:db:93:93:7a:0b:2a:ed:d3:91:9d:6b:f0:b2:28:6b:ab: 60:cb:33:27:bc:a7:4d:e6:6a:40:23:42:07:ea:d1:1e:83:51: d2:38:4b:c2:76:b2:5f:8f:a7:38:b7:57:77:2f:4c:c9:39:90: 29:ea:68:c9:43:30:97:24:44:04:f5:fe:9a:49:19:24:49:f0: c8:53:8a:e9:0e:13:63:af:8a:79:bb:4f:7e:77:20:bd:17:26: d8:f7:79:08:a0:22:23:07:72:7e:e6:f6:e8:3a:18:66:22:43: 64:fc:e4:7e:6d:3e:d7:12:ba:e4:19:a2:a9:a8:85:08:3f:12: 37:20:4f:55:97:12:0e:1d:6b:0d:3a:00:73:1f:b4:3f:0f:9e: f4:d8:8c:5b:f3:f6:11:cc:a4:f7:b5:18:7f:8c:4c:66:92:78: 58:d5:ff:a1:bb:19:4e:26:b0:68:87:9f:71:53:a9:d9:52:f7: d3:72:27:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0FRsmDYdayr6YHdizog5uewPa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURB M0MwNkMxNjAeFw0yNTA4MDgyMjU2MjBaFw0yNTA4MTIxMDUxMjBaMDMxMTAvBgNV BAMTKEM0NEY2RDc3Qjc2MkM5MkE3RDNDODA0Mjk1NDkyNTA3RkZFNUMwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CQlE45m4TTIIiUU+V0hqML+e i7rO7nuhnt86vdZyL7FdP6cITVcCkJIL418TqM+rg8SnaFMSfH6qhrW30Ec3USz4 C2t9+B79tbDViGypZ06QVbkuehdx9moNWADkLn3i71Y1TrTiPMxVR3Sm5w0KkJpE g5nRgOlOYMVnqJ48t3hlHFew8ViEGHJkGxkWhxz/yw4VEipU4Tbwd4OOYY99+ktn fBrwhAdzYCcYALwKRwkGp/CqL6d5OYiqhH7bUZw4FJ3U90GdkE9+d0NcpV0fHqQ9 4t8YD9yY6PpL+EbwLnKgzFps+j9cMFZRsGpynKqsucSbNCRuRzR2drLb/UuvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxE9td7diySp9PIBClUklB//lwPwwHwYDVR0j BBgwFoAUeHAqdoyh4YZ9VDATu2GG7aPAbBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmE5ZjRlMi1jNzNiLTQ0MjctOTgyOS0xZGExYmFhYjg3MGIvMC83ODcwMkE3NjhD QTFFMTg2N0Q1NDMwMTNCQjYxODZFREEzQzA2QzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURBM0Mw NkMxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2 RURBM0MwNkMxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcmZHvzteIhke/qrNqNUL2bGFsHk8NVV0PQ rtf128+kkeNTNURwNEV3hvsltgE3XI1he/wnpMTCCzDWH/aJ1+inWXT1bAjHF0kr 25OTegsq7dORnWvwsihrq2DLMye8p03makAjQgfq0R6DUdI4S8J2sl+Ppzi3V3cv TMk5kCnqaMlDMJckRAT1/ppJGSRJ8MhTiukOE2Ovinm7T353IL0XJtj3eQigIiMH cn7m9ug6GGYiQ2T85H5tPtcSuuQZoqmohQg/EjcgT1WXEg4daw06AHMftD8PnvTY jFvz9hHMpPe1GH+MTGaSeFjV/6G7GU4msGiHn3FTqdlS99NyJ3o= -----END CERTIFICATE-----Generated at Sat Aug 9 20:34:57 2025 by rpki-client