$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft File: 8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json) Hash identifier: fIkGWZp/rvpWQrxynFBmvSTasV5D2wogIdgTrw8ofos= Subject key identifier: 8F:44:B9:26:79:1C:81:58:54:65:93:8B:CD:FD:8A:9B:E4:E1:F8:D9 Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Certificate issuer: /CN=8A78F143A2E18078229313E44ACE70165360440C Certificate serial: 0B223D69E866AB8A21F6519B75523510FD86CE5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft Manifest number: E9 Signing time: Sat 18 Oct 2025 18:20:54 +0000 Manifest this update: Sat 18 Oct 2025 18:15:54 +0000 Manifest next update: Wed 22 Oct 2025 03:51:54 +0000 Files and hashes: 1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: pCTlH2dEt47UpBhSkwz8V4bx7czSA37NLKvyVRPOsnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:22:3d:69:e8:66:ab:8a:21:f6:51:9b:75:52:35:10:fd:86:ce:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C Validity Not Before: Oct 18 18:15:54 2025 GMT Not After : Oct 22 03:51:54 2025 GMT Subject: CN=8F44B926791C81585465938BCDFD8A9BE4E1F8D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:03:2f:3c:0c:0e:5a:d1:7b:2c:9e:5f:f2: 63:ab:d5:b4:2f:7a:8a:da:dc:51:76:39:21:48:16: a9:9f:e7:4a:4d:03:6e:7c:e7:8f:22:2a:4e:15:91: 96:6b:59:12:ee:9e:51:a0:cd:4e:9e:a9:65:df:4b: 68:53:69:b0:55:04:b0:cf:ed:4c:87:54:3b:0e:1f: 3b:ed:03:bf:fb:ce:79:cf:d7:55:d7:20:a6:f7:70: a1:5c:17:84:bb:b0:c2:ae:79:81:fe:d0:be:a1:31: e6:da:22:e5:2c:f3:b1:e6:bf:37:45:cc:42:eb:49: 4c:c2:15:9b:83:4b:7d:31:b8:ac:26:7c:64:11:ce: 9d:0b:06:99:70:dd:62:f9:e8:58:35:09:f6:6f:8e: 08:de:27:61:ef:ef:00:9b:cc:af:ff:b9:88:ce:9a: 8e:e1:44:fc:aa:c6:aa:0a:2f:e1:b0:cf:b6:e5:ab: b9:94:b0:a9:63:5f:bd:34:33:c5:31:19:91:86:6b: 54:4f:d3:a1:0c:21:4a:b9:1d:a2:a6:1a:bf:fc:77: 42:2b:fd:3f:0e:15:d6:3c:97:b4:c2:b9:b3:69:3a: a9:29:2c:e9:da:8d:9c:f9:65:55:3d:f9:2a:3b:de: c1:4d:69:02:2a:02:f4:05:dc:74:6a:9d:c9:22:e5: a0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:44:B9:26:79:1C:81:58:54:65:93:8B:CD:FD:8A:9B:E4:E1:F8:D9 X509v3 Authority Key Identifier: keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f3:63:db:82:ec:37:3a:6e:5b:28:f4:ac:70:45:48:07:80:dc: 8a:bc:b6:e4:fa:06:0f:c4:a8:eb:8f:50:79:7e:b0:fc:5d:94: 79:76:68:5c:5a:1c:cb:38:e4:46:6a:cc:7d:e1:e4:d9:13:dc: e0:8f:e7:89:11:28:b5:28:54:32:4a:92:89:26:a9:2c:89:25: 3b:69:bb:78:5c:fb:3c:b6:46:ab:6e:cd:75:31:ff:a1:da:12: 95:e1:34:86:b0:f0:a2:bb:22:9e:4b:d0:af:2a:6d:b1:86:2c: ed:15:57:1d:05:1d:36:25:21:43:87:03:6c:e0:73:37:46:5a: bd:94:3f:95:b9:81:c9:01:e0:f8:d2:84:8b:b3:4d:72:d2:d8: c2:94:35:6e:07:cc:bd:9c:3b:af:21:c8:0a:13:c1:71:b3:52: ef:76:77:02:be:c7:8c:12:10:3a:5d:03:50:5e:9a:5a:5d:13: 33:b3:b5:2b:77:1d:73:f0:fd:5e:67:f4:16:9c:82:d4:14:b9: 5a:b1:02:c3:ce:ae:a9:95:89:58:f9:f8:e1:4d:53:15:03:15: 3d:49:89:a2:62:d1:19:cd:44:66:10:88:62:22:54:e3:e9:48: 46:0c:a0:ab:e6:ec:53:5e:13:23:0f:ee:3e:90:23:79:f7:86: f6:68:08:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCyI9aehmq4oh9lGbdVI1EP2GzlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1 MzYwNDQwQzAeFw0yNTEwMTgxODE1NTRaFw0yNTEwMjIwMzUxNTRaMDMxMTAvBgNV BAMTKDhGNDRCOTI2NzkxQzgxNTg1NDY1OTM4QkNERkQ4QTlCRTRFMUY4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqAMvPAwOWtF7LJ5f8mOr1bQv eora3FF2OSFIFqmf50pNA258548iKk4VkZZrWRLunlGgzU6eqWXfS2hTabBVBLDP 7UyHVDsOHzvtA7/7znnP11XXIKb3cKFcF4S7sMKueYH+0L6hMebaIuUs87HmvzdF zELrSUzCFZuDS30xuKwmfGQRzp0LBplw3WL56Fg1CfZvjgjeJ2Hv7wCbzK//uYjO mo7hRPyqxqoKL+Gwz7blq7mUsKljX700M8UxGZGGa1RP06EMIUq5HaKmGr/8d0Ir /T8OFdY8l7TCubNpOqkpLOnajZz5ZVU9+So73sFNaQIqAvQF3HRqncki5aAxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj0S5JnkcgVhUZZOLzf2Km+Th+NkwHwYDVR0j BBgwFoAUinjxQ6LhgHgikxPkSs5wFlNgRAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMC84QTc4RjE0M0Ey RTE4MDc4MjI5MzEzRTQ0QUNFNzAxNjUzNjA0NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1MzYw NDQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcw MTY1MzYwNDQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPNj24LsNzpuWyj0rHBFSAeA3Iq8tuT6Bg/E qOuPUHl+sPxdlHl2aFxaHMs45EZqzH3h5NkT3OCP54kRKLUoVDJKkokmqSyJJTtp u3hc+zy2RqtuzXUx/6HaEpXhNIaw8KK7Ip5L0K8qbbGGLO0VVx0FHTYlIUOHA2zg czdGWr2UP5W5gckB4PjShIuzTXLS2MKUNW4HzL2cO68hyAoTwXGzUu92dwK+x4wS EDpdA1BemlpdEzOztSt3HXPw/V5n9BacgtQUuVqxAsPOrqmViVj5+OFNUxUDFT1J iaJi0RnNRGYQiGIiVOPpSEYMoKvm7FNeEyMP7j6QI3n3hvZoCCI= -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:33 2025 by rpki-client