$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft File: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft (raw, json) Hash identifier: reIjxysgcbGhKw1tmtduRW8HEaubr9j7IboS686r5Xs= Subject key identifier: 96:D8:48:85:FD:F6:5B:87:90:06:48:03:34:BB:CA:FB:75:BD:40:18 Authority key identifier: 78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA Certificate issuer: /CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Certificate serial: 199A768D517469BF375913518828C44C26DCE731 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft Manifest number: 0F Signing time: Wed 13 May 2026 01:35:28 +0000 Manifest this update: Wed 13 May 2026 01:30:28 +0000 Manifest next update: Thu 14 May 2026 04:58:28 +0000 Files and hashes: 1: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: lMkQ1C6m2HGJs+HDPBBo+GFoglPLrUt0++vMeyTVBPY=) 2: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: 2xL5IzsEGAiAsA9S7Fekuh6FO3TOT5kNHOKLcjwwo5c=) 3: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl (hash: fhyLPY7nqJyXf1IzfSwuBtYOBSaDycEqo6SqJBo4aJQ=) 4: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: rXNV58EDW9NtYxw1tsZgUKFdyItW8rTbx+PqrdGXOd8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9a:76:8d:51:74:69:bf:37:59:13:51:88:28:c4:4c:26:dc:e7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Validity Not Before: May 13 01:30:28 2026 GMT Not After : May 14 04:58:28 2026 GMT Subject: CN=96D84885FDF65B879006480334BBCAFB75BD4018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:e9:30:c4:10:1a:6b:f6:6b:e6:8e:56:b4: 15:19:79:b4:5c:e0:77:1e:1f:36:b5:48:95:f2:b4: 62:46:6d:35:5c:40:f6:52:33:c7:9b:a6:f3:b8:3f: a3:59:89:f0:26:2a:a9:97:ed:e3:c6:6c:7f:b1:4a: 13:e7:93:a9:2d:91:b4:f2:9e:15:d8:57:26:45:f8: 58:5a:5e:2c:b9:b0:13:7e:cf:c3:1c:0c:e7:b9:16: ee:67:91:82:d8:05:7d:72:21:3f:4d:ae:c7:f5:cf: c5:1a:1a:2c:61:73:a8:e9:05:24:d2:ec:3e:91:e7: 10:3a:3f:ac:e1:69:77:ae:77:d8:45:6d:27:9c:67: 94:f0:6c:15:74:f9:03:2b:19:ca:ec:7b:16:16:48: f3:f0:7a:20:e1:e5:a4:83:65:6a:1b:65:0b:47:1b: ff:8f:fd:f9:ee:19:f0:c8:8a:23:b7:50:45:8c:c1: 3c:24:4c:ff:9b:c7:c3:05:e0:b2:d6:1a:ba:0d:b4: c8:25:49:69:a6:c7:0b:5e:c6:ec:87:42:3c:9c:46: 70:34:c9:f4:b0:ba:6d:c8:19:56:7e:1b:b2:48:4a: b2:5f:98:8c:c9:d7:ed:79:40:8b:f9:12:9f:19:d9: 72:5f:ca:f9:19:96:6b:67:81:23:fc:7d:b2:8b:b9: 12:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D8:48:85:FD:F6:5B:87:90:06:48:03:34:BB:CA:FB:75:BD:40:18 X509v3 Authority Key Identifier: keyid:78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:7d:04:5b:89:8c:e6:9b:d8:09:36:77:0b:dd:9f:f5:9d:02: b8:5e:82:17:9a:7e:02:6c:d6:f9:43:44:08:85:ec:b2:d7:00: 27:60:fe:b6:96:84:98:73:ef:1a:8f:2e:25:09:a9:5a:ba:0e: 29:f9:b5:64:ac:5d:bd:1e:86:70:7f:3a:68:60:ae:ab:0f:ac: 8a:92:4f:2a:81:ce:2a:05:d3:58:1b:ed:a7:91:66:e4:e0:1e: 48:d0:a4:fd:78:89:5e:e8:ad:4a:3b:e0:55:dd:96:d4:c4:58: 7b:c2:25:5d:73:14:96:39:71:b5:78:16:1b:51:bc:d0:ef:37: 11:8e:90:15:9f:9b:74:68:86:0a:6a:14:c2:ef:2f:82:69:63: 2f:01:4a:0e:bb:57:46:77:93:4b:72:74:68:0e:d5:0c:1b:6d: 2c:3d:70:38:87:4b:e1:67:a7:e1:3e:da:f2:30:17:23:20:17: c8:b2:eb:ee:d8:c6:cf:07:0a:09:23:60:bd:12:c0:17:91:1c: ea:3d:bd:e8:6d:f6:b9:61:7f:ed:00:06:51:45:54:8d:8e:2c: 30:54:e1:67:a9:08:2f:63:6b:f6:e0:09:68:5a:2b:ff:3a:35: 5d:7f:d0:5c:b6:88:42:72:2c:1a:a5:6e:d2:ee:1d:c7:cb:03: e9:80:fa:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZp2jVF0ab83WRNRiCjETCbc5zEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJB MTM2RDJFQTAeFw0yNjA1MTMwMTMwMjhaFw0yNjA1MTQwNDU4MjhaMDMxMTAvBgNV BAMTKDk2RDg0ODg1RkRGNjVCODc5MDA2NDgwMzM0QkJDQUZCNzVCRDQwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9ukwxBAaa/Zr5o5WtBUZebRc 4HceHza1SJXytGJGbTVcQPZSM8ebpvO4P6NZifAmKqmX7ePGbH+xShPnk6ktkbTy nhXYVyZF+FhaXiy5sBN+z8McDOe5Fu5nkYLYBX1yIT9Nrsf1z8UaGixhc6jpBSTS 7D6R5xA6P6zhaXeud9hFbSecZ5TwbBV0+QMrGcrsexYWSPPweiDh5aSDZWobZQtH G/+P/fnuGfDIiiO3UEWMwTwkTP+bx8MF4LLWGroNtMglSWmmxwtexuyHQjycRnA0 yfSwum3IGVZ+G7JISrJfmIzJ1+15QIv5Ep8Z2XJfyvkZlmtngSP8fbKLuRK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlthIhf32W4eQBkgDNLvK+3W9QBgwHwYDVR0j BBgwFoAUeLIfzFfpuRJPFdW3xv4UUqE20uowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyMzRkNTAtNjdlMS00MTljLTg1YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1 N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJBMTM2RDJFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEIyMUZDQzU3RTlCOTEyNEYxNUQ1QjdDNkZFMTQ1MkExMzZE MkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0 NTJBMTM2RDJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJ9BFuJjOab2Ak2dwvdn/WdArhegheafgJs 1vlDRAiF7LLXACdg/raWhJhz7xqPLiUJqVq6Din5tWSsXb0ehnB/OmhgrqsPrIqS TyqBzioF01gb7aeRZuTgHkjQpP14iV7orUo74FXdltTEWHvCJV1zFJY5cbV4FhtR vNDvNxGOkBWfm3RohgpqFMLvL4JpYy8BSg67V0Z3k0tydGgO1QwbbSw9cDiHS+Fn p+E+2vIwFyMgF8iy6+7Yxs8HCgkjYL0SwBeRHOo9veht9rlhf+0ABlFFVI2OLDBU 4WepCC9ja/bgCWhaK/86NV1/0Fy2iEJyLBqlbtLuHcfLA+mA+nY= -----END CERTIFICATE-----Generated at Wed May 13 05:48:08 2026 by rpki-client