$ rpki-client -vvf rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft File: 78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft (raw, json) Hash identifier: VvEi/wtj23MaVAaRGB0qn546ndxNeob+bVKjGoqRlTs= Subject key identifier: C9:E2:FB:EA:D9:EB:A8:6E:CE:8B:FE:1B:3B:09:1E:28:4C:66:3A:EF Authority key identifier: 78:C9:BB:96:C0:0E:5E:4E:6A:0F:B5:83:C4:C0:E8:88:77:D4:0B:12 Certificate issuer: /CN=78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12 Certificate serial: 4FF14F74CE4A35EF9992C9F9B750236D9108A759 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:31:38 +0000 Manifest this update: Thu 23 Jul 2026 17:26:38 +0000 Manifest next update: Fri 24 Jul 2026 20:43:38 +0000 Files and hashes: 1: 78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl (hash: WA/7xRNBKfWQ/hwkjKPGvTjDAaL0QMLDNmaDCFfhg60=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f1:4f:74:ce:4a:35:ef:99:92:c9:f9:b7:50:23:6d:91:08:a7:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12 Validity Not Before: Jul 23 17:26:38 2026 GMT Not After : Jul 24 20:43:38 2026 GMT Subject: CN=C9E2FBEAD9EBA86ECE8BFE1B3B091E284C663AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:f7:44:6a:65:f9:b8:7e:7d:88:05:34:e3: e1:64:90:46:c1:1d:7a:53:60:09:39:d8:bd:d4:10: 09:42:03:a0:d5:2f:f7:22:59:ed:7f:ac:27:4e:5b: c5:57:37:dd:d9:16:39:ca:f7:d5:3f:5b:04:53:32: 48:91:4c:7f:1d:16:f4:b2:f9:31:fa:68:89:d4:4f: 11:4d:96:b0:39:d8:a0:b8:6a:3e:ed:32:b0:8b:10: a1:c6:09:29:df:a7:b1:58:7b:60:46:55:b1:04:52: b9:32:7e:5a:d7:e3:b5:5e:39:16:53:99:6b:3e:92: 20:47:b4:ff:48:1d:28:36:1f:41:97:d3:fa:03:e4: 5e:83:f6:6e:59:54:be:89:ac:01:8f:bd:7f:df:2c: 8a:2a:cb:75:3c:bf:c5:47:43:ae:76:f3:4c:cc:ae: 8c:c3:7c:8e:d6:ee:f9:60:b8:4f:29:79:99:53:b0: 53:a4:ae:ec:59:80:02:ed:d9:bd:ac:44:3f:9c:8d: d0:c6:f1:03:89:b8:e2:7e:08:dd:a8:e8:dc:f7:fc: 3a:df:fd:cc:6f:aa:ab:5a:82:1a:e3:00:0f:e4:64: b9:e5:2b:76:d9:e5:64:fa:a8:65:21:da:c1:57:f5: c0:d5:55:45:4a:e4:d8:63:1a:a4:88:62:ec:1c:79: e2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E2:FB:EA:D9:EB:A8:6E:CE:8B:FE:1B:3B:09:1E:28:4C:66:3A:EF X509v3 Authority Key Identifier: keyid:78:C9:BB:96:C0:0E:5E:4E:6A:0F:B5:83:C4:C0:E8:88:77:D4:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:28:a3:9e:62:a2:1a:5e:92:a1:62:73:5d:f3:e7:18:bc:10: 9c:69:1c:a5:96:b9:be:67:91:1d:0e:67:2e:81:8f:1e:73:04: 00:fa:e4:c5:36:ce:c1:e5:57:e0:95:53:7d:c4:de:0f:39:fa: e6:2b:b7:09:27:b8:9e:25:07:bb:63:9b:31:09:1c:91:ca:a7: c5:57:00:c6:60:ea:01:86:05:af:0c:0e:4e:57:7a:ae:a8:1b: 5e:ff:dd:53:47:72:f6:d4:27:a5:88:88:c7:a6:ba:c2:ad:bb: e6:5f:fe:9b:d7:80:86:b4:b8:8d:d2:77:54:e3:ac:fd:dd:e7: aa:09:ce:44:84:2f:4a:48:90:ed:dc:70:6e:41:11:55:40:6b: f1:8d:e5:37:d7:17:48:1b:c4:0f:de:6b:84:69:04:4f:1d:98: 3d:ec:bc:66:87:8a:3e:e8:1e:11:d2:14:d2:2e:98:67:0c:a3: 1a:d5:68:8c:46:94:81:a3:b4:b9:11:93:32:f7:3e:bd:d3:83: 80:18:a6:f6:10:70:c3:3a:09:27:9e:72:c7:d4:a0:1f:fc:bb: 68:3b:f0:d9:8a:62:57:06:21:1a:6a:62:d7:25:d9:84:f5:a5: 25:a8:d1:04:fd:13:8a:b4:e4:ec:6b:b8:19:f3:c6:39:9b:22: 44:5f:d6:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/FPdM5KNe+Zksn5t1AjbZEIp1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDOUJCOTZDMDBFNUU0RTZBMEZCNTgzQzRDMEU4ODg3 N0Q0MEIxMjAeFw0yNjA3MjMxNzI2MzhaFw0yNjA3MjQyMDQzMzhaMDMxMTAvBgNV BAMTKEM5RTJGQkVBRDlFQkE4NkVDRThCRkUxQjNCMDkxRTI4NEM2NjNBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaPdEamX5uH59iAU04+FkkEbB HXpTYAk52L3UEAlCA6DVL/ciWe1/rCdOW8VXN93ZFjnK99U/WwRTMkiRTH8dFvSy +TH6aInUTxFNlrA52KC4aj7tMrCLEKHGCSnfp7FYe2BGVbEEUrkyflrX47VeORZT mWs+kiBHtP9IHSg2H0GX0/oD5F6D9m5ZVL6JrAGPvX/fLIoqy3U8v8VHQ65280zM rozDfI7W7vlguE8peZlTsFOkruxZgALt2b2sRD+cjdDG8QOJuOJ+CN2o6Nz3/Drf /cxvqqtaghrjAA/kZLnlK3bZ5WT6qGUh2sFX9cDVVUVK5NhjGqSIYuwceeIxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyeL76tnrqG7Oi/4bOwkeKExmOu8wHwYDVR0j BBgwFoAUeMm7lsAOXk5qD7WDxMDoiHfUCxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgzM2YzNzUtZGJkNS00ZTQ4LTg5NmQtZjhjYjZlMDBmZTA4LzAvNzhDOUJCOTZD MDBFNUU0RTZBMEZCNTgzQzRDMEU4ODg3N0Q0MEIxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEM5QkI5NkMwMEU1RTRFNkEwRkI1ODNDNEMwRTg4ODc3RDQw QjEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgzM2YzNzUtZGJkNS00ZTQ4LTg5 NmQtZjhjYjZlMDBmZTA4LzAvNzhDOUJCOTZDMDBFNUU0RTZBMEZCNTgzQzRDMEU4 ODg3N0Q0MEIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQoo55iohpekqFic13z5xi8EJxpHKWWub5n kR0OZy6Bjx5zBAD65MU2zsHlV+CVU33E3g85+uYrtwknuJ4lB7tjmzEJHJHKp8VX AMZg6gGGBa8MDk5Xeq6oG17/3VNHcvbUJ6WIiMemusKtu+Zf/pvXgIa0uI3Sd1Tj rP3d56oJzkSEL0pIkO3ccG5BEVVAa/GN5TfXF0gbxA/ea4RpBE8dmD3svGaHij7o HhHSFNIumGcMoxrVaIxGlIGjtLkRkzL3Pr3Tg4AYpvYQcMM6CSeecsfUoB/8u2g7 8NmKYlcGIRpqYtcl2YT1pSWo0QT9E4q05OxruBnzxjmbIkRf1vE= -----END CERTIFICATE-----Generated at Fri Jul 24 07:51:43 2026 by rpki-client