$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft File: 78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft (raw, json) Hash identifier: BJmjlA1+YKb1RC7MsbirEKVctNa4W6EoTWBacgBOAWc= Subject key identifier: 34:CD:91:BA:69:2C:78:92:37:3C:B2:3D:D5:1E:9E:9A:53:A8:C4:B6 Authority key identifier: 78:C9:BB:96:C0:0E:5E:4E:6A:0F:B5:83:C4:C0:E8:88:77:D4:0B:12 Certificate issuer: /CN=78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12 Certificate serial: 5DC48833EC1549C6250C7BF8E5C63F17E8F686D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 15:09:35 +0000 Manifest this update: Thu 24 Sep 2026 15:04:35 +0000 Manifest next update: Fri 25 Sep 2026 18:52:35 +0000 Files and hashes: 1: 78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl (hash: vYWZ0mAqg8rqaHD/qoSUUlj7m3w0+I2Sii8wSW5332k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 18:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c4:88:33:ec:15:49:c6:25:0c:7b:f8:e5:c6:3f:17:e8:f6:86:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12 Validity Not Before: Sep 24 15:04:35 2026 GMT Not After : Sep 25 18:52:35 2026 GMT Subject: CN=34CD91BA692C7892373CB23DD51E9E9A53A8C4B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:77:0f:82:79:ff:b6:5a:e5:da:75:f9:c3:cc: 3c:a5:d7:10:ed:8f:a5:c8:c8:9e:31:e9:8e:be:e0: f8:5c:4e:31:91:4e:e4:21:e9:2a:48:65:63:c6:db: af:d9:4f:14:c0:47:c1:e7:35:68:ef:2f:25:a1:6a: da:62:52:44:89:55:e6:58:50:da:96:fe:23:be:2d: d3:ab:56:ca:c0:bb:99:81:3c:f1:86:e3:c3:29:a3: 90:cd:c3:50:d5:e0:17:c6:75:df:71:90:2d:be:b2: 97:b3:69:05:83:7a:c7:46:f1:a7:2d:70:5b:12:3b: c0:9d:48:be:51:b6:42:83:4b:70:c9:b5:5b:5d:e7: d2:60:39:4f:f4:4a:55:02:2b:58:1b:03:06:1b:0e: 45:42:85:fd:8a:15:95:a5:71:38:73:2d:1e:cd:f5: ba:81:53:a3:66:7a:59:4c:eb:8d:d2:47:54:2a:0a: b9:95:a2:d6:4b:e8:03:96:02:37:7d:05:a4:ba:a7: 03:a3:2d:19:55:26:74:7c:83:3f:4f:1f:6a:77:80: e3:16:02:34:86:c6:93:bb:41:39:27:de:3d:7f:bf: 54:ea:1e:54:bd:fa:41:ee:fd:0c:f4:4e:8b:d5:bd: a9:4a:35:16:cf:cb:df:d7:ef:8c:cb:c9:e2:cd:2b: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CD:91:BA:69:2C:78:92:37:3C:B2:3D:D5:1E:9E:9A:53:A8:C4:B6 X509v3 Authority Key Identifier: keyid:78:C9:BB:96:C0:0E:5E:4E:6A:0F:B5:83:C4:C0:E8:88:77:D4:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:07:d3:11:fb:69:8b:71:2e:b7:74:66:4c:a2:b0:8b:8d:58: ca:04:29:db:53:9f:1a:e4:91:b1:d5:ef:71:a9:a7:ba:0a:f8: bb:6f:4f:90:d2:58:c8:ca:0f:10:31:aa:35:73:78:5a:d7:75: 64:c8:81:79:29:0e:6e:22:ac:ba:e3:7c:de:fa:4f:13:d1:1b: 8f:a3:4b:26:ac:a6:46:96:63:91:de:81:96:78:a5:80:b8:51: c3:31:f7:a9:15:29:c7:cc:06:2f:a9:20:d1:19:24:84:ab:8a: 2c:b2:ea:b5:67:35:b5:04:b2:ff:c5:6c:f1:7e:d4:68:58:c0: 8c:be:06:da:72:ec:03:88:10:3a:48:88:00:a7:3a:38:8a:49: f3:61:9a:04:a9:91:a8:6a:ea:88:8d:fb:07:84:d3:81:56:38: 3f:4f:55:f3:3a:2c:94:f1:07:07:13:7a:6b:93:ec:02:ba:ed: 8b:d2:a9:61:49:22:9d:cf:fa:ca:3c:4e:e6:cb:f2:1b:43:5b: 4f:a9:05:b3:2f:f9:b4:56:66:77:39:6e:fb:8d:76:4b:f0:c3: 4a:5d:56:24:08:49:a3:59:cd:14:ee:ed:20:f2:fb:fb:7f:f2: 99:f0:5c:1d:35:ed:9c:6f:5f:0e:41:75:a6:b8:14:3a:e6:38: 90:c0:13:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXcSIM+wVScYlDHv45cY/F+j2htUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDOUJCOTZDMDBFNUU0RTZBMEZCNTgzQzRDMEU4ODg3 N0Q0MEIxMjAeFw0yNjA5MjQxNTA0MzVaFw0yNjA5MjUxODUyMzVaMDMxMTAvBgNV BAMTKDM0Q0Q5MUJBNjkyQzc4OTIzNzNDQjIzREQ1MUU5RTlBNTNBOEM0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXdw+Cef+2WuXadfnDzDyl1xDt j6XIyJ4x6Y6+4PhcTjGRTuQh6SpIZWPG26/ZTxTAR8HnNWjvLyWhatpiUkSJVeZY UNqW/iO+LdOrVsrAu5mBPPGG48Mpo5DNw1DV4BfGdd9xkC2+spezaQWDesdG8act cFsSO8CdSL5RtkKDS3DJtVtd59JgOU/0SlUCK1gbAwYbDkVChf2KFZWlcThzLR7N 9bqBU6NmellM643SR1QqCrmVotZL6AOWAjd9BaS6pwOjLRlVJnR8gz9PH2p3gOMW AjSGxpO7QTkn3j1/v1TqHlS9+kHu/Qz0TovVvalKNRbPy9/X74zLyeLNK+KlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNM2RumkseJI3PLI91R6emlOoxLYwHwYDVR0j BBgwFoAUeMm7lsAOXk5qD7WDxMDoiHfUCxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgzM2YzNzUtZGJkNS00ZTQ4LTg5NmQtZjhjYjZlMDBmZTA4LzAvNzhDOUJCOTZD MDBFNUU0RTZBMEZCNTgzQzRDMEU4ODg3N0Q0MEIxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEM5QkI5NkMwMEU1RTRFNkEwRkI1ODNDNEMwRTg4ODc3RDQw QjEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgzM2YzNzUtZGJkNS00ZTQ4LTg5 NmQtZjhjYjZlMDBmZTA4LzAvNzhDOUJCOTZDMDBFNUU0RTZBMEZCNTgzQzRDMEU4 ODg3N0Q0MEIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0H0xH7aYtxLrd0ZkyisIuNWMoEKdtTnxrk kbHV73Gpp7oK+LtvT5DSWMjKDxAxqjVzeFrXdWTIgXkpDm4irLrjfN76TxPRG4+j SyaspkaWY5HegZZ4pYC4UcMx96kVKcfMBi+pINEZJISriiyy6rVnNbUEsv/FbPF+ 1GhYwIy+Btpy7AOIEDpIiACnOjiKSfNhmgSpkahq6oiN+weE04FWOD9PVfM6LJTx BwcTemuT7AK67YvSqWFJIp3P+so8TubL8htDW0+pBbMv+bRWZnc5bvuNdkvww0pd ViQISaNZzRTu7SDy+/t/8pnwXB017ZxvXw5Bdaa4FDrmOJDAE2M= -----END CERTIFICATE-----Generated at Fri Sep 25 05:22:54 2026 by rpki-client