$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft File: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft (raw, json) Hash identifier: H/IdmTHzhiJhv9yTjRY2HGR76SLUd/whjudoiFOM3NE= Subject key identifier: 63:BA:8D:F1:94:E1:FB:CB:27:5C:05:3A:04:A7:17:61:1D:BA:F2:AB Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 Certificate issuer: /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Certificate serial: 19D495960647DF4D6702469DEE2FA310B8D51730 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft Manifest number: 8F Signing time: Sun 19 Oct 2025 03:51:18 +0000 Manifest this update: Sun 19 Oct 2025 03:46:18 +0000 Manifest next update: Wed 22 Oct 2025 11:45:18 +0000 Files and hashes: 1: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: HUEwdGiOhF3oiIXSl5GQ5TTpMFKflaMugAM28/Htypk=) 2: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: KwAYS/a7h4fChN6pY7P76dJV21oWKmMZY37E8i7mLHA=) 3: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl (hash: vIk03ssm1sjp9CiyKEveoCylSC/vzcmegnB2n2tzjb8=) 4: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: X+5UT/GSOBpO30J7mwUdK8TlS1P10P4zZ4ljBd5RqEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d4:95:96:06:47:df:4d:67:02:46:9d:ee:2f:a3:10:b8:d5:17:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Validity Not Before: Oct 19 03:46:18 2025 GMT Not After : Oct 22 11:45:18 2025 GMT Subject: CN=63BA8DF194E1FBCB275C053A04A717611DBAF2AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:ce:99:d4:0b:ae:29:3c:1b:8f:4d:cd:f4: fe:69:32:4f:9a:a3:d3:3d:50:ab:6d:b9:5b:85:75: 75:56:54:13:3f:fb:1a:a8:a3:83:ad:1a:59:db:6f: 45:26:68:6b:0f:7e:23:57:ac:e0:0b:2c:43:c7:9f: 26:13:c4:35:ef:d5:16:07:d7:95:52:15:30:76:29: 6a:c3:23:e0:3b:3c:59:c2:a9:c0:41:14:c0:4a:67: 29:49:aa:4f:a8:71:05:4d:fd:90:f6:d5:4b:cd:f5: 2f:ff:2c:c4:75:b0:4b:1a:1d:28:96:99:13:70:52: 8a:57:03:88:69:eb:0f:48:e8:29:72:8b:64:91:ab: 67:d4:a2:60:d2:bb:fa:ab:eb:28:d1:cc:32:5c:dc: f0:04:e4:05:3c:77:d6:79:fe:4b:90:eb:70:82:4e: f4:9b:c4:d9:e1:21:c2:f5:eb:a9:06:ed:8b:db:d2: 9e:fc:2e:cd:43:02:35:60:e1:09:7b:85:ce:38:88: c5:6a:5c:e3:b8:e6:b2:ff:cf:34:f5:05:0c:2f:3f: a4:9c:88:75:8d:da:79:17:86:53:7c:1a:fd:35:2b: 92:5d:2d:cb:b0:97:0e:5f:27:73:5e:9c:c0:ec:01: 61:69:bf:bf:20:cc:9e:ab:43:4d:cf:85:af:be:7e: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BA:8D:F1:94:E1:FB:CB:27:5C:05:3A:04:A7:17:61:1D:BA:F2:AB X509v3 Authority Key Identifier: keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:2b:85:d5:bd:de:48:5f:4e:45:ce:bc:04:fd:8d:3e:d8:5b: eb:39:c8:3d:c5:12:46:3d:49:f2:98:37:33:70:ea:f1:dc:d6: 7c:6d:4b:83:a6:d1:eb:07:3e:2a:08:01:81:f6:71:1c:54:cd: db:af:51:dd:62:4e:08:3a:3b:e2:b6:8e:8d:8b:1e:e6:ed:0b: 25:54:da:7b:04:36:03:dd:8a:4c:8e:9d:8c:a8:6a:80:70:bb: 1c:73:a7:19:bc:6c:c3:51:25:d4:f9:d3:3e:52:ac:72:07:9a: 58:a7:6b:48:51:e2:9e:76:ff:17:e7:70:7d:39:b4:ba:fe:77: 65:e2:2c:83:e0:27:fd:6e:4c:e9:35:f4:f6:91:fa:ca:b0:bd: e7:bf:a0:8d:63:07:2b:22:72:48:05:3e:0a:b1:6c:34:74:07: ef:8e:fd:c9:d2:ea:76:81:1b:4e:55:85:a7:88:14:4b:91:52: dc:e9:e6:e1:25:85:62:6c:af:61:65:2f:cf:d0:6d:e8:69:09: 8e:0f:b1:4a:a1:42:6c:fc:a5:a0:77:1b:17:51:c3:8f:ba:bf: c1:2b:fa:5f:1f:02:b3:63:3e:03:ce:9c:0e:9a:03:3a:90:91: 1f:62:7c:c1:b7:4b:27:d2:3f:38:7b:c8:4d:aa:d6:91:46:0f: 3e:3e:c6:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdSVlgZH301nAkad7i+jELjVFzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0 REY0MTQxNDAeFw0yNTEwMTkwMzQ2MThaFw0yNTEwMjIxMTQ1MThaMDMxMTAvBgNV BAMTKDYzQkE4REYxOTRFMUZCQ0IyNzVDMDUzQTA0QTcxNzYxMURCQUYyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRI86Z1AuuKTwbj03N9P5pMk+a o9M9UKttuVuFdXVWVBM/+xqoo4OtGlnbb0UmaGsPfiNXrOALLEPHnyYTxDXv1RYH 15VSFTB2KWrDI+A7PFnCqcBBFMBKZylJqk+ocQVN/ZD21UvN9S//LMR1sEsaHSiW mRNwUopXA4hp6w9I6Clyi2SRq2fUomDSu/qr6yjRzDJc3PAE5AU8d9Z5/kuQ63CC TvSbxNnhIcL166kG7Yvb0p78Ls1DAjVg4Ql7hc44iMVqXOO45rL/zzT1BQwvP6Sc iHWN2nkXhlN8Gv01K5JdLcuwlw5fJ3NenMDsAWFpv78gzJ6rQ03Pha++fum/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY7qN8ZTh+8snXAU6BKcXYR268qswHwYDVR0j BBgwFoAUeLf6oogav7wRfA+D7NydVU30FBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMC83OEI3RkFBMjg4 MUFCRkJDMTE3QzBGODNFQ0RDOUQ1NTRERjQxNDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0REY0 MTQxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlE NTU0REY0MTQxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHErhdW93khfTkXOvAT9jT7YW+s5yD3FEkY9 SfKYNzNw6vHc1nxtS4Om0esHPioIAYH2cRxUzduvUd1iTgg6O+K2jo2LHubtCyVU 2nsENgPdikyOnYyoaoBwuxxzpxm8bMNRJdT50z5SrHIHmlina0hR4p52/xfncH05 tLr+d2XiLIPgJ/1uTOk19PaR+sqwvee/oI1jBysickgFPgqxbDR0B++O/cnS6naB G05VhaeIFEuRUtzp5uElhWJsr2FlL8/QbehpCY4PsUqhQmz8paB3GxdRw4+6v8Er +l8fArNjPgPOnA6aAzqQkR9ifMG3SyfSPzh7yE2q1pFGDz4+xtQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:16:25 2025 by rpki-client