$ rpki-client -vvvf rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft File: B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft (raw, json) Hash identifier: HzZoPWhZH4PXWR15MYrQvb2zyRLcH18BAKTtAOgmps4= Subject key identifier: CF:F3:5F:76:84:88:50:FE:FD:DC:4F:AC:1C:A3:3A:06:76:09:F8:2A Authority key identifier: B7:8C:E4:D8:A6:32:D1:81:FC:C2:32:51:B7:CF:41:14:1D:BE:14:67 Certificate issuer: /CN=B78CE4D8A632D181FCC23251B7CF41141DBE1467 Certificate serial: 40108CC43D1EFCBF13065B01899D11C1E0DFF05D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 16:41:21 +0000 Manifest this update: Thu 24 Sep 2026 16:36:21 +0000 Manifest next update: Fri 25 Sep 2026 20:00:21 +0000 Files and hashes: 1: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: mNJEKMh3hSl5NgjooxF7vf8ObGAkdCHs4KVMgWm6mRg=) 2: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: 6gZoekKimbXzQFwezQ08dgpfsSYtH0N4xMrqLiWGu2w=) 3: B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl (hash: wXE547KLpsifxVD1pbIoA4d0BAoCUtJKuEvrKWJBxQQ=) 4: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: 1OPKoVTIZ4FhDqdn69u56tbHHs8Rhg6o9IgAaKOf1j4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:10:8c:c4:3d:1e:fc:bf:13:06:5b:01:89:9d:11:c1:e0:df:f0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B78CE4D8A632D181FCC23251B7CF41141DBE1467 Validity Not Before: Sep 24 16:36:21 2026 GMT Not After : Sep 25 20:00:21 2026 GMT Subject: CN=CFF35F76848850FEFDDC4FAC1CA33A067609F82A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:7e:65:eb:9e:30:a5:94:1e:fd:6f:75:f1: 44:ce:b6:58:a0:a4:fc:17:dc:4e:11:42:46:0f:c9: 23:25:20:a8:c2:7f:a4:b7:df:3a:95:09:76:fd:be: fd:85:dc:f0:cb:ef:28:6d:9f:cb:31:cf:fe:30:51: a3:c4:46:97:18:c3:10:30:39:30:ed:af:a9:09:b0: ed:36:1f:42:03:56:d6:45:72:28:90:c3:14:fd:1a: ee:05:2b:4a:ad:e3:5b:14:60:04:93:93:8a:2b:ab: ea:d6:30:27:2b:51:60:a9:12:76:62:33:cc:6d:5e: d9:49:ac:54:43:5f:f3:e8:92:68:1e:51:39:ef:4e: 2e:8d:d9:ee:98:e8:22:ee:53:c1:ff:bb:f7:a2:46: fa:82:8e:01:1a:af:55:44:1e:53:71:77:56:31:df: 87:cd:3f:b9:60:ec:5e:a2:eb:65:bc:9b:74:1a:bf: 57:9d:a0:84:06:5e:4b:0b:80:23:62:53:f2:60:a4: 08:0b:6b:ff:af:9f:f0:9d:ed:8c:1b:44:3f:8a:e4: 82:9d:a7:b7:02:0a:80:1f:6b:bd:a0:1e:ff:1a:e3: 11:9f:e6:33:2d:97:80:98:77:4d:2c:82:69:08:89: 00:6e:e7:e2:e4:f6:7b:69:f2:9a:31:d4:45:b3:0f: 27:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F3:5F:76:84:88:50:FE:FD:DC:4F:AC:1C:A3:3A:06:76:09:F8:2A X509v3 Authority Key Identifier: keyid:B7:8C:E4:D8:A6:32:D1:81:FC:C2:32:51:B7:CF:41:14:1D:BE:14:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f0:b4:a7:a7:8a:79:6d:7f:ab:90:3a:cc:16:7a:09:af:c1: 5e:aa:52:05:0d:cf:bb:60:7c:96:fd:62:f0:b2:af:56:a5:d3: 79:15:c4:7c:38:0a:b2:f5:90:e4:b9:86:22:92:12:45:93:5a: d7:ae:ee:fa:02:09:1d:6b:ba:45:51:60:2d:f4:02:1d:51:a7: 23:b2:44:63:14:6d:f2:1d:b7:c8:6c:67:99:09:4f:69:c8:7a: 26:9d:f6:d1:c8:3e:ad:3b:d3:ad:d9:30:9a:9a:34:3b:96:45: c4:16:67:81:65:2d:24:84:da:a1:66:ad:4f:d3:72:42:7e:f7: b5:1a:5f:bd:d9:ee:be:b5:c9:cc:41:a3:4f:07:af:06:b8:89: ed:a6:17:ca:ef:fa:7c:e9:53:a2:21:67:ea:2e:8c:75:57:26: 8d:a2:0f:22:92:9f:b0:5a:5f:46:6e:a8:04:6d:04:30:30:bb: ea:ab:c9:64:42:86:8d:3a:fe:8a:84:42:a9:4d:78:07:b6:df: 80:71:52:70:5a:c7:5d:62:91:15:9e:d2:4b:e1:23:cf:df:5c: d8:9d:50:e5:a4:d6:95:7d:50:26:0a:ac:42:dc:50:fb:23:b2: 0f:7b:7c:02:45:a4:3c:99:c9:85:85:23:88:99:0d:c2:ed:39: 86:6e:8c:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBCMxD0e/L8TBlsBiZ0RweDf8F0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc4Q0U0RDhBNjMyRDE4MUZDQzIzMjUxQjdDRjQxMTQx REJFMTQ2NzAeFw0yNjA5MjQxNjM2MjFaFw0yNjA5MjUyMDAwMjFaMDMxMTAvBgNV BAMTKENGRjM1Rjc2ODQ4ODUwRkVGRERDNEZBQzFDQTMzQTA2NzYwOUY4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbhn5l654wpZQe/W918UTOtlig pPwX3E4RQkYPySMlIKjCf6S33zqVCXb9vv2F3PDL7yhtn8sxz/4wUaPERpcYwxAw OTDtr6kJsO02H0IDVtZFciiQwxT9Gu4FK0qt41sUYASTk4orq+rWMCcrUWCpEnZi M8xtXtlJrFRDX/PokmgeUTnvTi6N2e6Y6CLuU8H/u/eiRvqCjgEar1VEHlNxd1Yx 34fNP7lg7F6i62W8m3Qav1edoIQGXksLgCNiU/JgpAgLa/+vn/Cd7YwbRD+K5IKd p7cCCoAfa72gHv8a4xGf5jMtl4CYd00sgmkIiQBu5+Lk9ntp8pox1EWzDyftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/NfdoSIUP793E+sHKM6BnYJ+CowHwYDVR0j BBgwFoAUt4zk2KYy0YH8wjJRt89BFB2+FGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjFlNDQ2NjUtZTg0Ni00NTViLWFhMWEtZDVhYjA3ZGVlZGYzLzAvQjc4Q0U0RDhB NjMyRDE4MUZDQzIzMjUxQjdDRjQxMTQxREJFMTQ2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNzhDRTREOEE2MzJEMTgxRkNDMjMyNTFCN0NGNDExNDFEQkUx NDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvQjc4Q0U0RDhBNjMyRDE4MUZDQzIzMjUxQjdDRjQx MTQxREJFMTQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrwtKeninltf6uQOswWegmvwV6qUgUNz7tg fJb9YvCyr1al03kVxHw4CrL1kOS5hiKSEkWTWteu7voCCR1rukVRYC30Ah1RpyOy RGMUbfIdt8hsZ5kJT2nIeiad9tHIPq07063ZMJqaNDuWRcQWZ4FlLSSE2qFmrU/T ckJ+97UaX73Z7r61ycxBo08Hrwa4ie2mF8rv+nzpU6IhZ+oujHVXJo2iDyKSn7Ba X0ZuqARtBDAwu+qryWRCho06/oqEQqlNeAe234BxUnBax11ikRWe0kvhI8/fXNid UOWk1pV9UCYKrELcUPsjsg97fAJFpDyZyYWFI4iZDcLtOYZujCE= -----END CERTIFICATE-----Generated at Thu Sep 24 19:41:59 2026 by rpki-client