$ rpki-client -vvf rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft File: 78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft (raw, json) Hash identifier: HtvgXr29HH2d+jcznCRyVFOuFutaGaHHOtIoPZF4CsA= Subject key identifier: 4F:4B:CA:97:D7:5F:D4:49:60:C4:0E:CC:50:4D:16:86:8F:D4:A0:25 Authority key identifier: 78:E6:D3:92:CE:D2:11:6E:3E:51:67:D5:20:6B:5F:C3:75:EA:9F:35 Certificate issuer: /CN=78E6D392CED2116E3E5167D5206B5FC375EA9F35 Certificate serial: 4349896DA5FA75519BC8A51FD4116E700B795CD5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:43:09 +0000 Manifest this update: Thu 23 Jul 2026 10:38:09 +0000 Manifest next update: Fri 24 Jul 2026 14:09:09 +0000 Files and hashes: 1: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: 3Berm5Gapt1UeoI40U+e3+MMW9FgSwdKP2f8X5GE7qo=) 2: 78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl (hash: AgXx9BciJdhYyebe539uo0NKs+6k8zleR1gp8F1A4wU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:49:89:6d:a5:fa:75:51:9b:c8:a5:1f:d4:11:6e:70:0b:79:5c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78E6D392CED2116E3E5167D5206B5FC375EA9F35 Validity Not Before: Jul 23 10:38:09 2026 GMT Not After : Jul 24 14:09:09 2026 GMT Subject: CN=4F4BCA97D75FD44960C40ECC504D16868FD4A025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:f4:a2:f6:ba:0a:b5:c3:62:61:81:d9:3e: ae:9b:da:9f:27:85:6f:7d:7e:8c:5d:f5:49:1b:28: ab:58:4c:65:7d:55:9d:e6:c5:3f:4c:ae:5a:d8:69: 79:de:5b:8c:ac:ba:32:1f:72:5e:49:cd:9a:b0:cf: 37:d3:cc:a1:0e:b0:41:11:d0:0f:57:58:1a:65:e7: ce:55:8d:3e:36:90:2c:4c:bb:34:b5:ea:f5:5e:fb: 06:3f:12:e1:89:1d:da:13:7b:3e:4d:76:af:3f:b9: e3:d6:be:71:7a:8c:45:e7:a8:41:cf:af:d7:95:d2: d3:52:7b:4e:40:ab:f8:de:c3:f6:d2:aa:9c:a2:03: df:d2:5f:25:ad:38:60:9d:88:9c:80:50:bb:d2:39: db:a3:7d:61:0b:cf:08:14:4c:d7:3c:dd:77:8c:f9: 1d:bf:52:ae:df:73:44:27:45:42:0f:54:96:12:16: 87:7e:f7:e6:d3:33:cd:6b:45:c6:ec:65:9d:71:e9: 1f:00:19:61:da:c2:43:33:eb:fe:74:99:c9:d3:90: 08:a6:dd:4e:89:41:3c:53:eb:07:aa:1b:c7:0e:b5: bb:1e:5e:49:09:6e:b9:89:ec:4a:e9:fc:d8:90:a5: 4d:3f:ae:f4:a3:20:97:8f:30:5f:ea:66:47:aa:c5: 85:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4B:CA:97:D7:5F:D4:49:60:C4:0E:CC:50:4D:16:86:8F:D4:A0:25 X509v3 Authority Key Identifier: keyid:78:E6:D3:92:CE:D2:11:6E:3E:51:67:D5:20:6B:5F:C3:75:EA:9F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9d:0d:11:14:12:dd:2e:5b:82:9e:82:80:35:0a:ba:2a:27: 3e:d2:c2:5d:a8:db:84:cc:86:f9:fe:14:5f:28:08:4a:6c:00: b2:7b:91:1b:14:a9:30:8d:4e:27:dd:9f:20:49:cd:91:13:f0: 4d:b0:69:27:a8:6f:1d:d5:75:48:fb:5b:90:b1:59:1a:c5:63: 41:12:17:db:ef:80:97:92:d7:8c:ba:6b:10:14:37:db:36:c0: 63:d7:58:d5:0e:81:ed:cf:de:92:b3:8e:cc:28:9b:e0:e6:4c: 93:70:36:e4:77:ca:25:a9:80:ad:c9:83:4f:c9:cc:0e:f8:cb: 8c:05:b7:36:b1:02:1b:a9:12:30:2e:b7:0e:f5:17:72:50:c0: 09:0e:c0:f6:92:88:e6:03:a4:2e:e4:04:5c:5f:4a:c2:63:6c: 42:c2:c8:7d:5e:93:ea:4b:83:73:0c:10:9c:66:c2:a1:76:a9: 9d:32:c2:1e:45:3b:72:d0:61:8d:c7:c4:3b:68:da:e0:79:8a: d3:86:1f:07:a3:32:d1:c4:ee:30:83:23:17:24:91:da:f0:f7: f0:83:83:74:42:8f:86:fc:ad:04:03:81:8f:2a:11:83:7a:d1: ce:9a:ad:81:60:18:2d:eb:83:f2:5f:a0:ea:47:02:dc:73:db: 19:21:92:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0mJbaX6dVGbyKUf1BFucAt5XNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhFNkQzOTJDRUQyMTE2RTNFNTE2N0Q1MjA2QjVGQzM3 NUVBOUYzNTAeFw0yNjA3MjMxMDM4MDlaFw0yNjA3MjQxNDA5MDlaMDMxMTAvBgNV BAMTKDRGNEJDQTk3RDc1RkQ0NDk2MEM0MEVDQzUwNEQxNjg2OEZENEEwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCux/Si9roKtcNiYYHZPq6b2p8n hW99foxd9UkbKKtYTGV9VZ3mxT9MrlrYaXneW4ysujIfcl5JzZqwzzfTzKEOsEER 0A9XWBpl585VjT42kCxMuzS16vVe+wY/EuGJHdoTez5Ndq8/uePWvnF6jEXnqEHP r9eV0tNSe05Aq/jew/bSqpyiA9/SXyWtOGCdiJyAULvSOdujfWELzwgUTNc83XeM +R2/Uq7fc0QnRUIPVJYSFod+9+bTM81rRcbsZZ1x6R8AGWHawkMz6/50mcnTkAim 3U6JQTxT6weqG8cOtbseXkkJbrmJ7Erp/NiQpU0/rvSjIJePMF/qZkeqxYW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT0vKl9df1ElgxA7MUE0Who/UoCUwHwYDVR0j BBgwFoAUeObTks7SEW4+UWfVIGtfw3XqnzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk1ZGQ1NzMtMzFmNC00MTZjLWExYjctNjk4ZDZiMTY5N2FkLzAvNzhFNkQzOTJD RUQyMTE2RTNFNTE2N0Q1MjA2QjVGQzM3NUVBOUYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEU2RDM5MkNFRDIxMTZFM0U1MTY3RDUyMDZCNUZDMzc1RUE5 RjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvNzhFNkQzOTJDRUQyMTE2RTNFNTE2N0Q1MjA2QjVG QzM3NUVBOUYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqdDREUEt0uW4KegoA1CroqJz7Swl2o24TM hvn+FF8oCEpsALJ7kRsUqTCNTifdnyBJzZET8E2waSeobx3VdUj7W5CxWRrFY0ES F9vvgJeS14y6axAUN9s2wGPXWNUOge3P3pKzjswom+DmTJNwNuR3yiWpgK3Jg0/J zA74y4wFtzaxAhupEjAutw71F3JQwAkOwPaSiOYDpC7kBFxfSsJjbELCyH1ek+pL g3MMEJxmwqF2qZ0ywh5FO3LQYY3HxDto2uB5itOGHwejMtHE7jCDIxckkdrw9/CD g3RCj4b8rQQDgY8qEYN60c6arYFgGC3rg/JfoOpHAtxz2xkhkrM= -----END CERTIFICATE-----Generated at Fri Jul 24 04:37:54 2026 by rpki-client