$ rpki-client -vvf repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft File: 78702A768CA1E1867D543013BB6186EDA3C06C16.mft (raw, json) Hash identifier: oqwZiGqUGguks4oKiA+RZeiwGAx9iTeW0rDFpo4PyAs= Subject key identifier: E1:B3:E5:96:DD:62:04:18:54:21:C2:B4:E5:21:EC:90:BD:68:47:2A Authority key identifier: 78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 Certificate issuer: /CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Certificate serial: 5A103F70692B1079750B89B348327600B165365D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft Manifest number: 74 Signing time: Mon 30 Jun 2025 01:11:17 +0000 Manifest this update: Mon 30 Jun 2025 01:06:17 +0000 Manifest next update: Thu 03 Jul 2025 09:53:17 +0000 Files and hashes: 1: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: EKlQMXAk89f+RqS3m5jQwamdkWyWCWcqlaMFgz2WrOg=) 2: 78702A768CA1E1867D543013BB6186EDA3C06C16.crl (hash: wZUFq5RwLrDEaPLUTBlM56WZlpHnmlZi/VBoPAWzSo8=) 3: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: FkpJvfAJZskSw2RpW6IZFlM3nRvWIXVzCCgCII/z76M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:10:3f:70:69:2b:10:79:75:0b:89:b3:48:32:76:00:b1:65:36:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Validity Not Before: Jun 30 01:06:17 2025 GMT Not After : Jul 3 09:53:17 2025 GMT Subject: CN=E1B3E596DD6204185421C2B4E521EC90BD68472A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:45:1c:26:14:10:d4:49:44:9c:86:bf:bf: 75:db:da:c8:1e:f4:07:2d:6c:05:c1:a3:78:c4:2b: 90:8f:6f:e3:2c:76:c1:3d:d6:7d:17:5e:08:3d:d6: c4:3c:14:88:51:5d:8c:06:af:59:45:ad:f5:7d:c1: 66:11:73:0a:05:8e:72:0a:ed:49:e8:d0:7c:53:fb: b5:b0:06:0c:96:57:36:42:f9:7f:f4:44:80:9e:98: 3f:fc:c1:60:d3:84:9d:bd:18:21:f4:fd:57:6e:e4: e2:33:4f:41:28:e3:25:a1:75:ec:b7:22:83:71:ed: ec:e8:83:ce:cd:71:11:70:fd:9d:57:8e:5c:48:81: 36:6a:57:89:e7:c7:e6:21:be:0d:6d:ce:31:b1:16: 76:0f:11:11:9a:f6:e9:56:2c:1b:b9:ec:ed:b0:2e: 17:77:92:8a:52:ea:a5:a8:3f:99:d3:33:38:4a:63: 4a:40:93:d0:9b:7d:fc:b7:32:89:f5:9e:93:d0:c5: 64:49:94:13:29:d5:b3:92:5d:d5:26:1d:32:25:b4: 77:58:8e:a2:84:4e:36:ee:db:69:a5:b1:7d:61:a5: 43:46:6d:c6:44:e9:8e:d0:83:27:96:c5:d5:c3:8f: ce:b0:d7:87:d5:ed:15:c4:5e:ea:e3:45:e7:ba:2b: 29:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B3:E5:96:DD:62:04:18:54:21:C2:B4:E5:21:EC:90:BD:68:47:2A X509v3 Authority Key Identifier: keyid:78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b2:79:ff:d8:86:a0:e3:35:08:ed:b7:8f:ea:92:36:33:47: 3b:af:54:3b:37:bd:8b:44:6c:17:c4:7a:cf:a4:ac:83:fc:6a: de:f6:85:88:18:03:18:c4:9e:a3:98:ca:bc:8c:56:f6:ee:46: a0:2d:f3:e5:59:1b:f9:b8:7d:05:0b:42:d6:06:e1:9a:ef:f9: 7a:a4:e1:bd:46:8b:0b:57:81:c1:02:f5:07:bf:34:8f:37:77: da:60:d2:aa:b3:0f:22:0e:14:55:02:3f:52:90:b3:97:29:ef: 81:9f:4d:7d:0b:49:68:58:1c:07:82:f4:fb:97:c7:f9:d6:49: ea:a2:4e:ee:c5:21:51:cd:13:67:04:b8:47:2c:18:bc:06:04: 7f:7b:62:ce:e7:89:cc:5c:84:65:79:07:4d:ae:5c:53:83:7b: 84:65:e8:fb:99:d5:14:43:e5:60:bd:36:f2:55:b6:e2:a0:09: bb:be:59:1f:10:48:bb:41:e4:34:7b:bd:64:5c:7c:91:5c:d6: 92:b2:b9:19:9d:49:f4:9e:59:e9:f2:87:5c:8e:ae:f5:f3:8c: c5:29:8f:6d:f7:fb:13:4c:60:a6:da:a3:64:c1:d8:13:69:92: f5:b0:05:7a:50:f2:48:ef:b4:84:6e:45:79:66:12:2f:17:9d: df:ff:da:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhA/cGkrEHl1C4mzSDJ2ALFlNl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURB M0MwNkMxNjAeFw0yNTA2MzAwMTA2MTdaFw0yNTA3MDMwOTUzMTdaMDMxMTAvBgNV BAMTKEUxQjNFNTk2REQ2MjA0MTg1NDIxQzJCNEU1MjFFQzkwQkQ2ODQ3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMkUcJhQQ1ElEnIa/v3Xb2sge 9ActbAXBo3jEK5CPb+MsdsE91n0XXgg91sQ8FIhRXYwGr1lFrfV9wWYRcwoFjnIK 7Uno0HxT+7WwBgyWVzZC+X/0RICemD/8wWDThJ29GCH0/Vdu5OIzT0Eo4yWhdey3 IoNx7ezog87NcRFw/Z1XjlxIgTZqV4nnx+Yhvg1tzjGxFnYPERGa9ulWLBu57O2w Lhd3kopS6qWoP5nTMzhKY0pAk9Cbffy3Mon1npPQxWRJlBMp1bOSXdUmHTIltHdY jqKETjbu22mlsX1hpUNGbcZE6Y7QgyeWxdXDj86w14fV7RXEXurjRee6Kym/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4bPllt1iBBhUIcK05SHskL1oRyowHwYDVR0j BBgwFoAUeHAqdoyh4YZ9VDATu2GG7aPAbBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmE5ZjRlMi1jNzNiLTQ0MjctOTgyOS0xZGExYmFhYjg3MGIvMC83ODcwMkE3NjhD QTFFMTg2N0Q1NDMwMTNCQjYxODZFREEzQzA2QzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURBM0Mw NkMxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2 RURBM0MwNkMxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmyef/YhqDjNQjtt4/qkjYzRzuvVDs3vYtE bBfEes+krIP8at72hYgYAxjEnqOYyryMVvbuRqAt8+VZG/m4fQULQtYG4Zrv+Xqk 4b1GiwtXgcEC9Qe/NI83d9pg0qqzDyIOFFUCP1KQs5cp74GfTX0LSWhYHAeC9PuX x/nWSeqiTu7FIVHNE2cEuEcsGLwGBH97Ys7nicxchGV5B02uXFODe4Rl6PuZ1RRD 5WC9NvJVtuKgCbu+WR8QSLtB5DR7vWRcfJFc1pKyuRmdSfSeWenyh1yOrvXzjMUp j233+xNMYKbao2TB2BNpkvWwBXpQ8kjvtIRuRXlmEi8Xnd//2mg= -----END CERTIFICATE-----Generated at Tue Jul 1 05:10:19 2025 by rpki-client