$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft File: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft (raw, json) Hash identifier: aKpCEejIbaaxu2xEzsdvKWEogJqWTtimTLEKF99cYcg= Subject key identifier: A0:2C:60:99:F1:9D:D0:F4:E5:E6:05:27:95:26:93:3D:4A:50:9D:49 Authority key identifier: 78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA Certificate issuer: /CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Certificate serial: 7F504866ACE81F22F814EF2842489B15409CFA3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 16:15:21 +0000 Manifest this update: Fri 25 Sep 2026 16:10:21 +0000 Manifest next update: Sat 26 Sep 2026 18:53:21 +0000 Files and hashes: 1: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl (hash: OwdHY9ABGkN7CGn5uMb8MQsG9vrxAgtcDzHs6zhXP28=) 2: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: lMkQ1C6m2HGJs+HDPBBo+GFoglPLrUt0++vMeyTVBPY=) 3: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: 2xL5IzsEGAiAsA9S7Fekuh6FO3TOT5kNHOKLcjwwo5c=) 4: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: rXNV58EDW9NtYxw1tsZgUKFdyItW8rTbx+PqrdGXOd8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:50:48:66:ac:e8:1f:22:f8:14:ef:28:42:48:9b:15:40:9c:fa:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Validity Not Before: Sep 25 16:10:21 2026 GMT Not After : Sep 26 18:53:21 2026 GMT Subject: CN=A02C6099F19DD0F4E5E605279526933D4A509D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:83:f8:ca:93:80:71:f4:82:db:c9:77:a8: 5b:9b:81:38:a0:cd:0a:56:aa:56:45:1b:1c:4a:b2: d8:51:de:14:6f:b3:9d:4c:77:c1:d3:c0:31:c1:be: b5:77:13:df:8a:ad:34:a0:e5:72:06:ea:08:dd:d0: c0:aa:c1:68:f1:4b:26:54:ad:a3:46:12:ad:32:d6: 5b:de:9c:f7:2d:ff:03:e4:e2:05:97:c7:95:47:76: 1b:c9:68:27:9c:d3:54:74:77:0a:16:a3:d1:a9:0e: f7:cd:1a:44:21:62:5c:bc:37:d1:89:3c:e1:67:05: 2d:71:d0:70:f4:26:81:e0:fc:6c:e8:29:77:1d:0f: 4a:a3:b4:1a:d6:a0:4d:59:bb:37:be:63:72:83:70: 23:28:5b:92:72:21:1b:76:de:8a:77:a9:7c:7b:ce: 36:60:c7:67:09:2c:0b:ed:89:de:81:57:2f:f4:74: 1e:35:79:00:9f:e3:b3:5e:e6:f4:2e:1f:63:32:7c: 62:f7:e7:ad:40:3c:2a:e9:ab:72:8a:51:80:cc:26: b0:2d:80:2f:51:5b:c2:80:a1:b1:6b:e2:92:51:de: c7:1a:ac:98:e4:5c:12:92:0c:b9:91:8b:48:7c:5e: 82:a1:f5:34:34:22:b1:6c:26:b8:14:50:c1:73:54: 64:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:60:99:F1:9D:D0:F4:E5:E6:05:27:95:26:93:3D:4A:50:9D:49 X509v3 Authority Key Identifier: keyid:78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:cc:68:77:69:f5:4f:b5:88:0e:d8:8c:d8:1a:4d:e7:99:2b: 73:12:1f:40:e7:1b:04:ed:58:be:50:e6:68:1a:05:f2:09:96: f2:01:74:07:02:b7:dd:f5:7b:00:bc:01:68:f8:d2:9b:77:dd: 0b:33:c8:4f:c3:10:24:e7:cd:86:39:90:33:b7:1a:1f:53:10: 01:c3:5c:eb:e6:8c:06:eb:3c:b5:21:b6:0d:d2:ad:ff:41:fc: 37:80:2d:66:8e:b8:ce:94:21:37:d6:d9:77:2a:bd:49:d1:b9: 0f:9e:23:11:4f:06:8e:89:3c:34:e4:9d:03:eb:ce:69:b3:af: 89:7d:ab:3f:a5:6f:59:b6:f9:92:f4:98:9a:b2:1b:70:5f:ac: bd:e3:d3:67:19:85:29:61:b4:3f:74:75:12:e5:08:a0:d9:91: e0:78:bb:f4:11:05:0e:6b:45:2a:88:25:f7:5d:1d:35:b9:d8: 52:e7:11:45:5e:f6:ca:5c:81:af:33:82:0b:12:01:9b:80:6d: 6b:f2:0c:8b:a4:a3:9e:af:e5:45:6c:60:e2:c5:1f:1a:77:cb: e7:8d:8b:56:b2:3a:00:1d:6d:ca:11:7f:a8:de:7f:11:48:5c: 2d:d8:ea:ec:b7:46:27:4c:ba:42:5d:59:64:8c:29:3b:be:0e: ed:80:e6:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf1BIZqzoHyL4FO8oQkibFUCc+j4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJB MTM2RDJFQTAeFw0yNjA5MjUxNjEwMjFaFw0yNjA5MjYxODUzMjFaMDMxMTAvBgNV BAMTKEEwMkM2MDk5RjE5REQwRjRFNUU2MDUyNzk1MjY5MzNENEE1MDlENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTEIP4ypOAcfSC28l3qFubgTig zQpWqlZFGxxKsthR3hRvs51Md8HTwDHBvrV3E9+KrTSg5XIG6gjd0MCqwWjxSyZU raNGEq0y1lvenPct/wPk4gWXx5VHdhvJaCec01R0dwoWo9GpDvfNGkQhYly8N9GJ POFnBS1x0HD0JoHg/GzoKXcdD0qjtBrWoE1Zuze+Y3KDcCMoW5JyIRt23op3qXx7 zjZgx2cJLAvtid6BVy/0dB41eQCf47Ne5vQuH2MyfGL3561APCrpq3KKUYDMJrAt gC9RW8KAobFr4pJR3scarJjkXBKSDLmRi0h8XoKh9TQ0IrFsJrgUUMFzVGQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoCxgmfGd0PTl5gUnlSaTPUpQnUkwHwYDVR0j BBgwFoAUeLIfzFfpuRJPFdW3xv4UUqE20uowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyMzRkNTAtNjdlMS00MTljLTg1YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1 N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJBMTM2RDJFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEIyMUZDQzU3RTlCOTEyNEYxNUQ1QjdDNkZFMTQ1MkExMzZE MkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0 NTJBMTM2RDJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLMaHdp9U+1iA7YjNgaTeeZK3MSH0DnGwTt WL5Q5mgaBfIJlvIBdAcCt931ewC8AWj40pt33QszyE/DECTnzYY5kDO3Gh9TEAHD XOvmjAbrPLUhtg3Srf9B/DeALWaOuM6UITfW2XcqvUnRuQ+eIxFPBo6JPDTknQPr zmmzr4l9qz+lb1m2+ZL0mJqyG3BfrL3j02cZhSlhtD90dRLlCKDZkeB4u/QRBQ5r RSqIJfddHTW52FLnEUVe9spcga8zggsSAZuAbWvyDIuko56v5UVsYOLFHxp3y+eN i1ayOgAdbcoRf6jefxFIXC3Y6uy3RidMukJdWWSMKTu+Du2A5jk= -----END CERTIFICATE-----Generated at Sat Sep 26 05:41:51 2026 by rpki-client