$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft File: 780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft (raw, json) Hash identifier: HsfJsAXWIlxaKNC75F2DTWcqMDsJ2WGR9wSiKsK3f6c= Subject key identifier: 4B:3D:6C:CE:15:D2:DD:D8:9A:E9:3A:C3:4A:A7:70:CA:52:24:E3:4C Authority key identifier: 78:0A:63:83:78:71:EA:9C:E6:D0:17:41:4F:6F:1C:5A:BA:3E:F7:D9 Certificate issuer: /CN=780A63837871EA9CE6D017414F6F1C5ABA3EF7D9 Certificate serial: 505C75FDE5C82576DDD0FCFCF14C4CDC5260F9EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft Manifest number: E5 Signing time: Sat 18 Oct 2025 18:41:48 +0000 Manifest this update: Sat 18 Oct 2025 18:36:48 +0000 Manifest next update: Tue 21 Oct 2025 22:26:48 +0000 Files and hashes: 1: 780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl (hash: DtrAsK3HTuiGjLJ99AX8+hP+32iht9HUANywnDKh75c=) 2: 323030313a6466333a643234303a3a2f34382d3438203d3e20313336303839.roa (hash: M+NRbpCUskaX1vYH/4jaIAMXTEk8snO9JlvCQ9TdRYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5c:75:fd:e5:c8:25:76:dd:d0:fc:fc:f1:4c:4c:dc:52:60:f9:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=780A63837871EA9CE6D017414F6F1C5ABA3EF7D9 Validity Not Before: Oct 18 18:36:48 2025 GMT Not After : Oct 21 22:26:48 2025 GMT Subject: CN=4B3D6CCE15D2DDD89AE93AC34AA770CA5224E34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:62:7a:7a:69:21:95:fe:1f:ec:69:cb:24:7c: 3d:94:77:1a:fd:e5:0d:66:9a:65:85:b4:65:bb:b5: 19:c4:e2:d8:24:87:83:1f:80:dc:c2:80:10:e4:35: 39:d0:44:b1:39:35:f6:ba:87:f9:44:5d:38:db:48: ae:69:10:d5:37:f2:d5:ea:72:3c:55:9f:c0:17:cc: 2a:ba:bd:ed:36:b1:72:08:73:f4:6e:b2:95:78:64: b3:d8:2b:e6:79:31:fa:74:24:09:d3:62:a9:d8:34: d8:c4:53:5c:2e:c7:07:16:ed:f0:90:fe:c7:73:75: 15:7e:ad:0e:9f:43:93:21:86:ff:3a:45:71:10:d2: e4:2b:95:05:63:91:7d:03:e3:5c:47:0b:df:17:87: f1:8e:42:ae:e1:5e:b0:98:b1:54:8b:23:be:8a:fc: 2e:77:9e:e2:a0:11:dc:60:f8:09:90:bd:a0:a6:6b: 76:6f:a4:88:d4:c1:a6:73:17:1d:af:15:54:5f:fe: dd:d7:44:55:b3:bb:b2:9c:05:59:e8:44:3c:21:27: 8a:f7:49:a2:fd:8c:df:49:57:f2:c2:51:55:56:6d: 38:32:41:5b:ac:de:1c:a6:73:e5:43:d0:f8:57:84: e2:30:f4:a2:3e:96:ca:a3:2a:fa:a3:ad:7c:f5:5f: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3D:6C:CE:15:D2:DD:D8:9A:E9:3A:C3:4A:A7:70:CA:52:24:E3:4C X509v3 Authority Key Identifier: keyid:78:0A:63:83:78:71:EA:9C:E6:D0:17:41:4F:6F:1C:5A:BA:3E:F7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:67:47:5a:32:5f:d6:5d:c3:69:56:8e:59:37:10:a9:b8:00: b2:8b:8c:c8:bf:ce:e7:a9:ff:30:e6:0e:5b:b5:7a:ca:b7:24: 06:8a:60:12:0b:a1:be:30:e3:7d:dd:99:ab:e1:d2:a1:8f:c2: 1b:bc:95:de:0f:f4:69:f4:b7:56:a2:49:16:24:ce:76:ec:b4: d2:23:d5:72:60:b7:e1:bc:86:db:4c:5b:a3:6e:9b:0a:6b:45: 38:c7:76:12:de:45:ac:0b:6b:59:82:05:8b:78:4d:5a:bf:e1: 5f:78:ad:3b:74:f3:3a:24:f9:86:3f:61:7d:d6:ab:49:c1:81: d2:6a:30:b2:76:5c:58:51:0d:98:98:30:04:f6:d2:b0:77:dd: 58:9d:66:ae:48:01:ed:13:5b:1f:d2:00:bd:be:09:3c:5c:47: a3:98:eb:8a:ef:e3:10:c2:95:77:89:62:3d:68:fc:e8:f6:eb: 07:2d:98:05:64:f1:d9:fd:2e:3a:59:b3:02:8b:fd:62:46:4b: 2d:6c:12:39:e4:47:34:c3:63:94:71:7a:e5:7a:0b:b0:f5:f0: 22:93:4e:de:cb:1b:b6:5c:e8:c7:07:10:2f:57:a2:7c:a6:46: 0e:80:a5:30:e2:97:e7:c6:fe:09:cf:e4:f3:7d:f3:fb:66:df: 19:f0:9d:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFx1/eXIJXbd0Pz88UxM3FJg+eswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgwQTYzODM3ODcxRUE5Q0U2RDAxNzQxNEY2RjFDNUFC QTNFRjdEOTAeFw0yNTEwMTgxODM2NDhaFw0yNTEwMjEyMjI2NDhaMDMxMTAvBgNV BAMTKDRCM0Q2Q0NFMTVEMkRERDg5QUU5M0FDMzRBQTc3MENBNTIyNEUzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmYnp6aSGV/h/sacskfD2Udxr9 5Q1mmmWFtGW7tRnE4tgkh4MfgNzCgBDkNTnQRLE5Nfa6h/lEXTjbSK5pENU38tXq cjxVn8AXzCq6ve02sXIIc/RuspV4ZLPYK+Z5Mfp0JAnTYqnYNNjEU1wuxwcW7fCQ /sdzdRV+rQ6fQ5Mhhv86RXEQ0uQrlQVjkX0D41xHC98Xh/GOQq7hXrCYsVSLI76K /C53nuKgEdxg+AmQvaCma3ZvpIjUwaZzFx2vFVRf/t3XRFWzu7KcBVnoRDwhJ4r3 SaL9jN9JV/LCUVVWbTgyQVus3hymc+VD0PhXhOIw9KI+lsqjKvqjrXz1X7BzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSz1szhXS3dia6TrDSqdwylIk40wwHwYDVR0j BBgwFoAUeApjg3hx6pzm0BdBT28cWro+99kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMS83ODBBNjM4Mzc4 NzFFQTlDRTZEMDE3NDE0RjZGMUM1QUJBM0VGN0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgwQTYzODM3ODcxRUE5Q0U2RDAxNzQxNEY2RjFDNUFCQTNF RjdEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzEvNzgwQTYzODM3ODcxRUE5Q0U2RDAxNzQxNEY2RjFD NUFCQTNFRjdEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERnR1oyX9Zdw2lWjlk3EKm4ALKLjMi/zuep /zDmDlu1esq3JAaKYBILob4w433dmavh0qGPwhu8ld4P9Gn0t1aiSRYkznbstNIj 1XJgt+G8httMW6NumwprRTjHdhLeRawLa1mCBYt4TVq/4V94rTt08zok+YY/YX3W q0nBgdJqMLJ2XFhRDZiYMAT20rB33VidZq5IAe0TWx/SAL2+CTxcR6OY64rv4xDC lXeJYj1o/Oj26wctmAVk8dn9LjpZswKL/WJGSy1sEjnkRzTDY5RxeuV6C7D18CKT Tt7LG7Zc6McHEC9XonymRg6ApTDil+fG/gnP5PN98/tm3xnwnYQ= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:35 2025 by rpki-client