$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft File: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft (raw, json) Hash identifier: CXr/wV8hVQtpqo21piU8/qFFFWmCY+at65dStaeNgQU= Subject key identifier: F9:DB:9C:AE:AD:D9:B6:80:AA:6C:9C:06:9D:74:FE:02:01:69:D9:94 Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 Certificate issuer: /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Certificate serial: 0D766AA222248FFA28A7C3E7D3161E88F3721FDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft Manifest number: 75 Signing time: Thu 21 Aug 2025 22:11:17 +0000 Manifest this update: Thu 21 Aug 2025 22:06:17 +0000 Manifest next update: Mon 25 Aug 2025 06:02:17 +0000 Files and hashes: 1: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl (hash: YOx9A5HlKWiCbtSxiq+2HFfQKDLqcokP8MAw72l0I7w=) 2: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: X+5UT/GSOBpO30J7mwUdK8TlS1P10P4zZ4ljBd5RqEY=) 3: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: KwAYS/a7h4fChN6pY7P76dJV21oWKmMZY37E8i7mLHA=) 4: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: HUEwdGiOhF3oiIXSl5GQ5TTpMFKflaMugAM28/Htypk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:76:6a:a2:22:24:8f:fa:28:a7:c3:e7:d3:16:1e:88:f3:72:1f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Validity Not Before: Aug 21 22:06:17 2025 GMT Not After : Aug 25 06:02:17 2025 GMT Subject: CN=F9DB9CAEADD9B680AA6C9C069D74FE020169D994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:a3:e7:a1:87:9e:c9:f5:d1:c8:3b:00:a7: 54:51:67:5f:9e:9e:f7:55:73:45:48:b6:40:c6:ed: 1a:3d:1f:de:2b:22:3a:80:0a:c3:41:fd:57:98:25: b7:de:d1:50:a6:12:1e:b6:0e:cc:e0:30:34:b9:4a: eb:ea:99:6a:25:27:71:70:d4:49:c8:d5:76:90:4e: 95:0a:81:48:08:91:57:a9:6a:9d:82:d1:3f:bd:5a: c4:cf:71:a7:d1:52:be:a1:ce:45:06:05:1f:dc:f9: 52:9c:ac:d5:c8:c6:8b:52:ae:89:2a:4a:4d:cf:4e: b9:46:d2:f8:fc:16:3f:e6:59:d8:bd:d7:63:22:f8: 5c:f1:bd:d4:24:18:ec:fb:37:2a:ea:08:25:00:36: 30:ca:c8:4a:8a:48:b3:38:04:03:b4:1d:bc:03:ce: 4d:c8:cd:a7:90:48:57:74:fc:f9:5b:5b:39:9e:5b: f5:63:6c:2c:3d:4e:54:0e:6c:27:15:9a:f1:69:08: b5:11:ad:ee:03:ec:d8:5f:18:75:12:66:9f:a9:2e: 66:bb:86:08:c4:56:5b:2a:87:21:ef:f5:fc:96:9d: 58:b2:50:2a:2e:8a:0f:f9:ae:7e:2d:0d:17:89:df: 90:7c:19:6d:6b:f6:33:80:eb:47:f0:52:0f:45:5d: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DB:9C:AE:AD:D9:B6:80:AA:6C:9C:06:9D:74:FE:02:01:69:D9:94 X509v3 Authority Key Identifier: keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e7:e6:94:8a:6c:d7:9e:93:93:a8:84:32:74:dd:2e:11:02: 49:85:32:06:4f:fc:5a:16:5a:f3:34:4b:25:95:a7:38:db:19: 43:69:a1:44:50:b3:cd:26:c0:3f:30:a1:4c:46:6a:a7:e8:a5: 48:71:cc:be:9c:2c:2f:df:90:96:6c:4e:cf:75:91:28:07:0b: ab:5a:77:48:70:2f:cb:08:85:df:22:69:ba:63:ca:2d:80:6f: 75:cd:44:2a:2b:91:76:26:f5:9d:7c:d1:30:93:6e:1f:f5:9d: 8e:1a:5f:66:5a:4e:57:3a:d9:eb:a7:ed:92:36:3a:e3:93:7b: 7c:7f:fc:b3:4b:05:f3:d1:ea:89:3c:92:cc:c2:e2:b3:6f:e1: 8a:0b:8d:f0:04:eb:d0:17:91:29:ad:0d:ce:26:0e:f6:37:10: 25:64:39:24:75:91:e4:d2:4e:16:6d:b8:d2:e2:c6:a8:94:20: 9e:78:50:f9:a4:13:4e:28:7b:33:0d:29:09:db:e3:92:26:85: 29:8b:b2:98:6e:14:c9:33:d7:6a:66:68:de:80:f5:98:c6:02: f3:d2:2c:24:76:49:10:70:43:a8:69:74:40:a5:d7:bf:28:e2: 96:ac:64:1f:1d:be:57:34:43:2b:3b:73:ab:c0:48:84:55:bb: 95:dd:63:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXZqoiIkj/oop8Pn0xYeiPNyH9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0 REY0MTQxNDAeFw0yNTA4MjEyMjA2MTdaFw0yNTA4MjUwNjAyMTdaMDMxMTAvBgNV BAMTKEY5REI5Q0FFQUREOUI2ODBBQTZDOUMwNjlENzRGRTAyMDE2OUQ5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChiaPnoYeeyfXRyDsAp1RRZ1+e nvdVc0VItkDG7Ro9H94rIjqACsNB/VeYJbfe0VCmEh62DszgMDS5SuvqmWolJ3Fw 1EnI1XaQTpUKgUgIkVepap2C0T+9WsTPcafRUr6hzkUGBR/c+VKcrNXIxotSrokq Sk3PTrlG0vj8Fj/mWdi912Mi+FzxvdQkGOz7NyrqCCUANjDKyEqKSLM4BAO0HbwD zk3IzaeQSFd0/PlbWzmeW/VjbCw9TlQObCcVmvFpCLURre4D7NhfGHUSZp+pLma7 hgjEVlsqhyHv9fyWnViyUCouig/5rn4tDReJ35B8GW1r9jOA60fwUg9FXQpXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ducrq3ZtoCqbJwGnXT+AgFp2ZQwHwYDVR0j BBgwFoAUeLf6oogav7wRfA+D7NydVU30FBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMC83OEI3RkFBMjg4 MUFCRkJDMTE3QzBGODNFQ0RDOUQ1NTRERjQxNDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0REY0 MTQxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlE NTU0REY0MTQxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnn5pSKbNeek5OohDJ03S4RAkmFMgZP/FoW WvM0SyWVpzjbGUNpoURQs80mwD8woUxGaqfopUhxzL6cLC/fkJZsTs91kSgHC6ta d0hwL8sIhd8iabpjyi2Ab3XNRCorkXYm9Z180TCTbh/1nY4aX2ZaTlc62eun7ZI2 OuOTe3x//LNLBfPR6ok8kszC4rNv4YoLjfAE69AXkSmtDc4mDvY3ECVkOSR1keTS ThZtuNLixqiUIJ54UPmkE04oezMNKQnb45ImhSmLsphuFMkz12pmaN6A9ZjGAvPS LCR2SRBwQ6hpdECl178o4pasZB8dvlc0Qys7c6vASIRVu5XdY5Y= -----END CERTIFICATE-----Generated at Sat Aug 23 22:45:13 2025 by rpki-client