$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft File: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft (raw, json) Hash identifier: NqdmC+P8xcItC8KZDhxkiydJe2a7G9zWU/WsOa2mkE4= Subject key identifier: A2:7F:1B:66:8B:E8:84:83:8A:5D:8D:66:BB:81:CA:8F:0C:63:E8:66 Authority key identifier: 78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA Certificate issuer: /CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Certificate serial: 6364D44EB41627EF2E72E7F729019063FE06A4CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 11:29:05 +0000 Manifest this update: Thu 23 Jul 2026 11:24:05 +0000 Manifest next update: Fri 24 Jul 2026 14:38:05 +0000 Files and hashes: 1: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: rXNV58EDW9NtYxw1tsZgUKFdyItW8rTbx+PqrdGXOd8=) 2: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: 2xL5IzsEGAiAsA9S7Fekuh6FO3TOT5kNHOKLcjwwo5c=) 3: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: lMkQ1C6m2HGJs+HDPBBo+GFoglPLrUt0++vMeyTVBPY=) 4: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl (hash: tnmsoXztZmOzZl2GduIDzOFWuXPWyYjmwSJ4z8cGr/M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:64:d4:4e:b4:16:27:ef:2e:72:e7:f7:29:01:90:63:fe:06:a4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Validity Not Before: Jul 23 11:24:05 2026 GMT Not After : Jul 24 14:38:05 2026 GMT Subject: CN=A27F1B668BE884838A5D8D66BB81CA8F0C63E866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:de:12:9d:4f:d7:47:e5:8d:88:c8:14:65: 2e:59:9a:0f:63:67:c3:db:6f:79:01:f0:08:e0:cf: bb:f3:7d:ef:26:a8:21:9f:e9:21:b0:68:a8:be:b6: dd:eb:02:8a:18:16:b6:3b:a5:c4:2d:ed:62:4f:c5: 83:44:2d:19:c9:95:81:37:91:fb:0b:20:7d:96:f8: b5:c6:67:b4:13:9e:09:b3:54:68:64:ce:21:16:7c: 5e:6f:a6:d7:e2:d9:3a:5e:2a:c2:98:49:49:ba:ef: 27:e1:50:15:9d:95:47:a5:4e:6a:e4:6e:24:21:3e: 03:56:ca:60:8c:5a:8e:15:f1:7f:a0:5b:cf:3d:37: ef:08:d9:7c:54:90:6f:0e:95:70:b0:07:78:f8:b5: b8:d5:85:39:5e:4d:63:1c:41:ae:59:8c:3d:45:55: 18:1b:b4:7d:ca:83:d8:f6:68:90:4f:4e:0c:3b:c5: 9f:0c:67:41:a0:37:93:cb:99:25:37:49:97:19:dd: 10:14:b9:08:1b:4c:e0:87:b1:8c:53:cf:b0:24:bd: ef:4c:42:a8:ec:bd:17:98:d7:42:b7:0d:89:ab:7f: ba:16:1b:2f:11:c5:61:65:bd:c3:f0:c3:dc:26:ff: fc:bf:37:cf:e5:68:fe:7d:89:95:39:38:ba:c9:fa: 5a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7F:1B:66:8B:E8:84:83:8A:5D:8D:66:BB:81:CA:8F:0C:63:E8:66 X509v3 Authority Key Identifier: keyid:78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:96:b8:23:9a:3e:77:60:3e:a1:d9:37:bd:49:56:8f:7b:a0: 39:bc:d8:67:37:51:f9:1e:25:ee:aa:90:43:e3:8c:1b:22:ec: 66:7e:45:e2:b6:80:67:f9:1a:6d:45:65:b9:79:fc:4c:f5:4e: 6d:3f:1b:6d:cf:3f:42:b0:a5:dd:bf:d7:49:73:08:0c:d6:e3: 6e:0c:ec:dd:2a:ed:52:cd:78:ba:d3:1f:3b:03:1f:07:f8:2e: c8:b0:56:88:d4:74:01:bc:36:7d:75:87:cd:c8:05:b7:68:79: ad:e3:10:38:00:4a:54:65:58:63:64:5b:5d:a3:24:0f:f9:6b: b9:d8:a4:db:dc:10:6e:51:f6:76:da:8a:6e:b0:3b:b1:27:36: fe:56:93:c8:31:62:9e:3a:23:f0:ba:09:a2:ef:13:62:25:51: 7a:a0:31:0a:fd:30:30:a9:54:4f:e6:2e:0e:a2:a2:d8:4a:bf: 5f:70:16:f1:5c:30:cb:5d:8b:75:3a:da:58:52:37:c2:1d:ec: c6:66:32:a2:87:58:ce:35:49:95:dd:d6:1c:af:51:d5:07:8b: 7a:27:9a:88:24:a5:08:b0:7a:72:57:be:3b:9e:4f:24:79:ff: 79:90:58:d0:bd:f7:80:48:88:94:99:e8:57:04:9f:49:3c:5f: fa:c0:0e:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2TUTrQWJ+8ucuf3KQGQY/4GpMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJB MTM2RDJFQTAeFw0yNjA3MjMxMTI0MDVaFw0yNjA3MjQxNDM4MDVaMDMxMTAvBgNV BAMTKEEyN0YxQjY2OEJFODg0ODM4QTVEOEQ2NkJCODFDQThGMEM2M0U4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnF94SnU/XR+WNiMgUZS5Zmg9j Z8Pbb3kB8Ajgz7vzfe8mqCGf6SGwaKi+tt3rAooYFrY7pcQt7WJPxYNELRnJlYE3 kfsLIH2W+LXGZ7QTngmzVGhkziEWfF5vptfi2TpeKsKYSUm67yfhUBWdlUelTmrk biQhPgNWymCMWo4V8X+gW889N+8I2XxUkG8OlXCwB3j4tbjVhTleTWMcQa5ZjD1F VRgbtH3Kg9j2aJBPTgw7xZ8MZ0GgN5PLmSU3SZcZ3RAUuQgbTOCHsYxTz7Akve9M QqjsvReY10K3DYmrf7oWGy8RxWFlvcPww9wm//y/N8/laP59iZU5OLrJ+lofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUon8bZovohIOKXY1mu4HKjwxj6GYwHwYDVR0j BBgwFoAUeLIfzFfpuRJPFdW3xv4UUqE20uowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyMzRkNTAtNjdlMS00MTljLTg1YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1 N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJBMTM2RDJFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEIyMUZDQzU3RTlCOTEyNEYxNUQ1QjdDNkZFMTQ1MkExMzZE MkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0 NTJBMTM2RDJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISWuCOaPndgPqHZN71JVo97oDm82Gc3Ufke Je6qkEPjjBsi7GZ+ReK2gGf5Gm1FZbl5/Ez1Tm0/G23PP0Kwpd2/10lzCAzW424M 7N0q7VLNeLrTHzsDHwf4LsiwVojUdAG8Nn11h83IBbdoea3jEDgASlRlWGNkW12j JA/5a7nYpNvcEG5R9nbaim6wO7EnNv5Wk8gxYp46I/C6CaLvE2IlUXqgMQr9MDCp VE/mLg6iothKv19wFvFcMMtdi3U62lhSN8Id7MZmMqKHWM41SZXd1hyvUdUHi3on mogkpQiwenJXvjueTyR5/3mQWNC994BIiJSZ6FcEn0k8X/rADjg= -----END CERTIFICATE-----Generated at Fri Jul 24 07:50:00 2026 by rpki-client