$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft File: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft (raw, json) Hash identifier: XVNeIPfzMGJWFqAaKVjDGIQ0g76sPIKjsMqI5pTFa7g= Subject key identifier: F4:11:A9:FA:94:6B:87:EB:D1:25:D8:B2:12:FD:07:A0:98:F0:06:27 Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 Certificate issuer: /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Certificate serial: 6CB51FAA76C8A7F9F7A9BA1513149196D2AE6104 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft Manifest number: D6 Signing time: Thu 26 Mar 2026 17:01:31 +0000 Manifest this update: Thu 26 Mar 2026 16:56:31 +0000 Manifest next update: Sun 29 Mar 2026 18:16:31 +0000 Files and hashes: 1: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: PB5sEIidful8Aq2vYl2cOVwqgMl/aNUVGYhSLpss8uA=) 2: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: BKOeIpPmZ/JlEup668j4Ru9S2UzMSJK/Lz9NsYvcvj4=) 3: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: pcrYcQfetv/rc/0VTi5Yuk7X3ubcBjWkKo4wzgdZiSs=) 4: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl (hash: TN0mNy0nlym+exn2Ockh/6p1XnUroybYOoRD9F5fGoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b5:1f:aa:76:c8:a7:f9:f7:a9:ba:15:13:14:91:96:d2:ae:61:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Validity Not Before: Mar 26 16:56:31 2026 GMT Not After : Mar 29 18:16:31 2026 GMT Subject: CN=F411A9FA946B87EBD125D8B212FD07A098F00627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:8d:85:fe:9a:8f:e5:99:bb:8a:ec:9f:8a: e2:5f:30:10:84:a4:29:ac:95:a1:b5:67:fb:2a:e6: 7b:62:88:82:45:f3:f0:a0:d1:44:77:b2:bc:d4:c5: b4:42:ab:29:6b:09:a0:ac:ff:f1:1e:17:93:e4:7b: 9b:d9:26:a0:d1:b0:7e:bb:0a:32:8c:04:95:33:71: 8a:cb:36:75:8c:a5:c2:6f:27:e1:01:57:c9:53:62: de:ce:74:6d:fd:11:6d:86:45:93:bf:e3:68:87:91: 94:47:ea:53:36:65:f7:2c:8b:b8:90:20:cf:cc:d6: d2:41:24:e3:5c:6e:8c:7f:18:b7:fb:65:96:d8:c0: e9:be:a7:77:3f:ab:f4:0a:a5:e6:ff:2d:33:a9:b4: 16:ae:3f:42:9e:db:ca:da:64:40:61:e0:8c:c4:e6: 48:c0:ce:b9:2f:5b:42:ad:b3:13:b3:dc:05:4d:03: f6:68:53:0a:bf:97:ad:3f:b5:a6:b9:9b:0c:89:da: d4:1e:bf:34:84:70:b3:86:58:bb:25:28:3f:3b:06: fd:64:af:a2:3d:74:99:9b:a1:53:39:66:44:58:be: 81:90:84:bd:60:b0:f0:64:1a:75:d0:3f:1f:f0:a5: af:14:4d:a5:e3:45:1c:37:96:f9:46:43:da:d9:3b: f4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:11:A9:FA:94:6B:87:EB:D1:25:D8:B2:12:FD:07:A0:98:F0:06:27 X509v3 Authority Key Identifier: keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b2:b3:aa:1c:b8:b9:d5:22:d6:c2:3d:f4:fa:f8:12:5e:6f: 0b:81:f3:fc:0f:86:22:f3:02:36:15:e6:93:3b:da:c9:43:94: 8b:de:31:23:52:db:fd:2b:0e:a7:cf:49:09:c3:5c:7c:04:c7: 2b:fd:6f:ac:c0:4f:2f:0a:e4:a5:6b:45:a3:85:71:c3:84:91: 70:8b:ec:ac:58:37:16:57:c3:0b:84:d4:c8:f1:ac:43:ed:bf: f2:92:62:c4:3a:d0:cc:de:24:32:0a:e9:8a:e2:0e:b3:31:6a: bf:c5:85:b9:11:47:51:68:19:d5:c4:6a:f7:b6:a2:97:e2:eb: a2:51:31:25:53:8e:a4:c5:92:d1:85:b6:8f:47:bc:5b:8c:8d: 2d:b0:61:ca:9a:41:17:1f:f6:56:83:e5:bd:ce:32:43:54:53: 35:28:bc:b6:84:18:19:fd:58:c7:cc:48:d7:18:1e:c0:72:d9: 33:1f:4e:b7:a4:45:0b:99:04:f2:18:74:b9:23:ce:2b:ba:52: 7a:53:15:e6:7b:3b:0e:55:b8:76:9b:90:cd:5e:9a:12:96:94: 9c:36:0a:e5:31:fe:49:4b:40:90:41:26:0b:89:84:7a:aa:c9: 34:1f:1f:dc:53:3f:d1:31:45:6c:15:61:9f:13:6b:84:a9:52: 39:af:c8:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLUfqnbIp/n3qboVExSRltKuYQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0 REY0MTQxNDAeFw0yNjAzMjYxNjU2MzFaFw0yNjAzMjkxODE2MzFaMDMxMTAvBgNV BAMTKEY0MTFBOUZBOTQ2Qjg3RUJEMTI1RDhCMjEyRkQwN0EwOThGMDA2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4u42F/pqP5Zm7iuyfiuJfMBCE pCmslaG1Z/sq5ntiiIJF8/Cg0UR3srzUxbRCqylrCaCs//EeF5Pke5vZJqDRsH67 CjKMBJUzcYrLNnWMpcJvJ+EBV8lTYt7OdG39EW2GRZO/42iHkZRH6lM2Zfcsi7iQ IM/M1tJBJONcbox/GLf7ZZbYwOm+p3c/q/QKpeb/LTOptBauP0Ke28raZEBh4IzE 5kjAzrkvW0KtsxOz3AVNA/ZoUwq/l60/taa5mwyJ2tQevzSEcLOGWLslKD87Bv1k r6I9dJmboVM5ZkRYvoGQhL1gsPBkGnXQPx/wpa8UTaXjRRw3lvlGQ9rZO/Q3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9BGp+pRrh+vRJdiyEv0HoJjwBicwHwYDVR0j BBgwFoAUeLf6oogav7wRfA+D7NydVU30FBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMC83OEI3RkFBMjg4 MUFCRkJDMTE3QzBGODNFQ0RDOUQ1NTRERjQxNDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0REY0 MTQxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlE NTU0REY0MTQxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSys6ocuLnVItbCPfT6+BJebwuB8/wPhiLz AjYV5pM72slDlIveMSNS2/0rDqfPSQnDXHwExyv9b6zATy8K5KVrRaOFccOEkXCL 7KxYNxZXwwuE1MjxrEPtv/KSYsQ60MzeJDIK6YriDrMxar/FhbkRR1FoGdXEave2 opfi66JRMSVTjqTFktGFto9HvFuMjS2wYcqaQRcf9laD5b3OMkNUUzUovLaEGBn9 WMfMSNcYHsBy2TMfTrekRQuZBPIYdLkjziu6UnpTFeZ7Ow5VuHabkM1emhKWlJw2 CuUx/klLQJBBJguJhHqqyTQfH9xTP9ExRWwVYZ8Ta4SpUjmvyCI= -----END CERTIFICATE-----Generated at Thu Mar 26 20:23:42 2026 by rpki-client