$ rpki-client -vvf repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft File: 78702A768CA1E1867D543013BB6186EDA3C06C16.mft (raw, json) Hash identifier: b+n0xwY4WQ7Sk2ITLr1eyYBXb4FBbqzX4hLf1kXqvJk= Subject key identifier: E2:AA:C9:F8:3F:A3:9A:3E:5D:66:A6:29:6E:D3:E4:C0:2A:FD:61:C4 Authority key identifier: 78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 Certificate issuer: /CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Certificate serial: 0E8D9A762E7BAB07B0DBEDB9EA010F1DFE8139C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft Manifest number: A7 Signing time: Mon 20 Oct 2025 04:11:19 +0000 Manifest this update: Mon 20 Oct 2025 04:06:19 +0000 Manifest next update: Thu 23 Oct 2025 12:03:19 +0000 Files and hashes: 1: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: movLiT++PBKuPBzz5dXs+l8kqn3e27i1U3F37q5BVns=) 2: 78702A768CA1E1867D543013BB6186EDA3C06C16.crl (hash: blHRe0ACisMN10CG/uZozxNPvWiTNCEgehodbBRV9/I=) 3: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: wI2gL+xeUj5R4U7m3JbkXYMiUcHbqqc4tcsVpsPURE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8d:9a:76:2e:7b:ab:07:b0:db:ed:b9:ea:01:0f:1d:fe:81:39:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Validity Not Before: Oct 20 04:06:19 2025 GMT Not After : Oct 23 12:03:19 2025 GMT Subject: CN=E2AAC9F83FA39A3E5D66A6296ED3E4C02AFD61C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:76:53:82:a5:14:dc:bd:6b:13:d6:f0:74: 89:d7:2b:f9:c1:a2:ac:39:95:ce:0d:04:67:a4:74: 45:2d:35:27:f6:9a:52:9e:74:e8:fc:80:0c:f6:8e: 60:ed:fa:04:2e:1d:75:87:99:9d:fd:57:92:fd:45: 80:06:56:5b:65:2f:14:f9:3f:57:c7:5c:2e:67:c6: f9:b2:29:73:bf:0f:3f:eb:1d:ce:c9:c3:7a:5e:93: a8:b5:ce:cf:8d:bb:ae:87:8a:df:58:62:25:ec:1a: 49:3d:60:2a:26:b2:fb:a4:ce:33:80:6a:6e:86:00: c9:73:9d:ee:2f:59:4f:02:52:ef:b7:61:8c:77:52: 5e:00:49:c0:10:fe:25:ed:2f:68:87:ba:84:f2:a1: 86:ba:3f:a3:99:5e:47:f6:e5:26:66:ca:8f:1f:a2: e0:ee:29:cd:9c:05:31:29:f2:46:91:79:ef:6e:e0: 68:0a:d8:9a:1a:06:bc:83:84:be:68:7d:18:4c:47: f8:25:50:c9:4b:3b:c1:a4:bf:3c:4f:e8:50:c5:21: 97:51:ce:1e:bf:67:12:4f:b5:f9:32:52:a3:c3:cc: 28:01:f2:e9:ed:10:6c:94:d1:33:85:5e:e8:af:f4: cf:da:79:6c:8c:05:36:8b:b7:39:90:83:d1:4d:db: 72:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AA:C9:F8:3F:A3:9A:3E:5D:66:A6:29:6E:D3:E4:C0:2A:FD:61:C4 X509v3 Authority Key Identifier: keyid:78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:66:dc:ca:1d:d9:a7:41:63:01:1d:d7:3d:a5:1f:d0:c5:4e: 71:c0:0b:cb:54:83:87:27:5a:38:b4:67:64:ba:3c:8c:b0:88: af:d0:67:e9:e7:20:4e:d9:ff:ce:ca:26:c6:bd:10:fa:31:8c: 16:f1:d5:a0:f1:06:5d:d3:e9:18:13:b7:d1:87:94:a0:e3:09: d5:c7:45:f2:e1:f4:dc:35:94:ed:d3:fa:06:f3:76:c5:dc:5e: b5:ff:f4:a6:dd:ba:9d:97:4d:8f:de:05:ee:92:f5:ef:35:20: a0:4e:76:2a:bd:b5:ab:eb:52:20:ef:35:1d:ca:13:3e:89:ac: 95:c0:28:af:ae:2f:e1:d5:a1:fd:1d:82:1f:76:65:31:be:fe: 4f:54:8e:74:9b:7b:74:98:cc:f9:21:6b:2a:78:ec:3b:80:22: 95:ee:de:8a:c8:26:99:a5:91:35:94:04:83:f5:dd:67:41:c2: cd:59:6f:74:12:a7:c1:9a:c5:be:59:24:65:ae:bf:11:0a:73: bc:04:a7:5b:37:dc:9d:3d:81:73:42:3c:b6:53:49:88:6f:56: 48:15:40:72:cf:ff:6c:01:ee:fb:e1:93:fc:3d:bd:f6:7a:49: 04:57:60:33:65:55:1e:f3:c7:30:d7:96:04:79:9e:7e:ae:61: 18:96:20:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDo2adi57qwew2+256gEPHf6BOcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURB M0MwNkMxNjAeFw0yNTEwMjAwNDA2MTlaFw0yNTEwMjMxMjAzMTlaMDMxMTAvBgNV BAMTKEUyQUFDOUY4M0ZBMzlBM0U1RDY2QTYyOTZFRDNFNEMwMkFGRDYxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6nZTgqUU3L1rE9bwdInXK/nB oqw5lc4NBGekdEUtNSf2mlKedOj8gAz2jmDt+gQuHXWHmZ39V5L9RYAGVltlLxT5 P1fHXC5nxvmyKXO/Dz/rHc7Jw3pek6i1zs+Nu66Hit9YYiXsGkk9YComsvukzjOA am6GAMlzne4vWU8CUu+3YYx3Ul4AScAQ/iXtL2iHuoTyoYa6P6OZXkf25SZmyo8f ouDuKc2cBTEp8kaRee9u4GgK2JoaBryDhL5ofRhMR/glUMlLO8GkvzxP6FDFIZdR zh6/ZxJPtfkyUqPDzCgB8untEGyU0TOFXuiv9M/aeWyMBTaLtzmQg9FN23ItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4qrJ+D+jmj5dZqYpbtPkwCr9YcQwHwYDVR0j BBgwFoAUeHAqdoyh4YZ9VDATu2GG7aPAbBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmE5ZjRlMi1jNzNiLTQ0MjctOTgyOS0xZGExYmFhYjg3MGIvMC83ODcwMkE3NjhD QTFFMTg2N0Q1NDMwMTNCQjYxODZFREEzQzA2QzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURBM0Mw NkMxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2 RURBM0MwNkMxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElm3Mod2adBYwEd1z2lH9DFTnHAC8tUg4cn Wji0Z2S6PIywiK/QZ+nnIE7Z/87KJsa9EPoxjBbx1aDxBl3T6RgTt9GHlKDjCdXH RfLh9Nw1lO3T+gbzdsXcXrX/9Kbdup2XTY/eBe6S9e81IKBOdiq9tavrUiDvNR3K Ez6JrJXAKK+uL+HVof0dgh92ZTG+/k9UjnSbe3SYzPkhayp47DuAIpXu3orIJpml kTWUBIP13WdBws1Zb3QSp8Gaxb5ZJGWuvxEKc7wEp1s33J09gXNCPLZTSYhvVkgV QHLP/2wB7vvhk/w9vfZ6SQRXYDNlVR7zxzDXlgR5nn6uYRiWIMs= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:15 2025 by rpki-client