$ rpki-client -vvvf rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft File: B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft (raw, json) Hash identifier: yiaf3Pf2LPjnl49KRhy8RtwafkC0NZk7r4Y0/3ZBM4c= Subject key identifier: 67:8A:CF:4B:22:E7:22:70:41:1F:47:F8:EC:67:89:41:D2:70:DE:E6 Authority key identifier: B7:8C:E4:D8:A6:32:D1:81:FC:C2:32:51:B7:CF:41:14:1D:BE:14:67 Certificate issuer: /CN=B78CE4D8A632D181FCC23251B7CF41141DBE1467 Certificate serial: 453A4DCD5F7E261A073BA17D229399EA8D29DD52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 09:26:09 +0000 Manifest this update: Sat 14 Nov 2026 09:21:09 +0000 Manifest next update: Sun 15 Nov 2026 09:28:09 +0000 Files and hashes: 1: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: 6gZoekKimbXzQFwezQ08dgpfsSYtH0N4xMrqLiWGu2w=) 2: B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl (hash: RsipuPTKHwQT8b+OYxujIoYO0Zk5jdPfbtbU2c5WImI=) 3: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: mNJEKMh3hSl5NgjooxF7vf8ObGAkdCHs4KVMgWm6mRg=) 4: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: 1OPKoVTIZ4FhDqdn69u56tbHHs8Rhg6o9IgAaKOf1j4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 09:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3a:4d:cd:5f:7e:26:1a:07:3b:a1:7d:22:93:99:ea:8d:29:dd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B78CE4D8A632D181FCC23251B7CF41141DBE1467 Validity Not Before: Nov 14 09:21:09 2026 GMT Not After : Nov 15 09:28:09 2026 GMT Subject: CN=678ACF4B22E72270411F47F8EC678941D270DEE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:9c:39:1a:d6:d0:09:44:af:a6:04:b7:75: ad:cf:0e:1e:df:ca:36:c7:dc:5b:9b:14:b5:ed:75: 51:ae:b7:c5:f9:ba:c9:05:fb:87:aa:d8:82:86:89: 13:e4:84:65:88:53:2a:44:1c:24:61:26:17:f8:e9: ee:4a:db:ff:ad:27:d0:1a:34:99:6d:07:2f:3f:c6: 8e:94:d8:8a:fd:22:d2:88:d6:33:60:ab:98:14:0b: 3c:a1:77:b7:79:2f:fc:c8:2e:98:7b:da:a7:4f:3f: 82:a2:bd:5d:65:15:83:d4:0c:df:26:3a:da:9c:c6: 85:9e:11:87:cc:22:7b:c1:95:d1:2a:40:35:35:74: 0a:14:e2:e3:9a:71:b9:9b:8c:b2:a1:08:53:1d:b6: c9:b0:41:81:31:61:65:8f:de:6f:a8:78:92:91:17: ba:95:05:01:e9:d4:26:af:56:1b:03:cc:53:6b:da: 36:4e:4d:8b:34:a7:71:db:d9:03:d5:c3:87:3e:f6: a2:3c:35:99:80:4c:ea:6e:3d:66:48:a6:8d:cc:99: a4:6a:4b:f9:eb:16:46:98:18:39:bd:1f:3a:b2:b6: 0e:f6:fa:19:d1:19:1b:ad:6e:5e:75:94:b5:41:8e: 1b:dc:8a:50:59:a2:b6:d3:ce:0b:da:ff:d0:76:1c: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8A:CF:4B:22:E7:22:70:41:1F:47:F8:EC:67:89:41:D2:70:DE:E6 X509v3 Authority Key Identifier: keyid:B7:8C:E4:D8:A6:32:D1:81:FC:C2:32:51:B7:CF:41:14:1D:BE:14:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:82:30:0f:3d:b6:40:d2:b0:06:db:1c:e3:7e:12:03:13:a0: 5d:d5:59:bc:ba:13:51:d8:ae:e8:63:a5:d4:0c:40:7c:3e:49: e1:b9:35:b1:e0:d5:f1:79:a0:71:01:96:16:17:5f:07:9c:9a: ad:dd:02:af:af:1a:36:3d:fa:15:75:4f:52:2f:a5:bf:bd:ba: d5:40:6c:b4:d7:37:5f:f9:ea:39:53:fb:15:4d:16:54:dc:c8: 58:04:55:1d:c8:9d:fc:c5:9d:98:fe:2e:0b:3a:60:b6:94:6b: f1:f3:db:49:9c:57:c4:06:e9:dc:a9:cb:b6:64:a7:3b:82:72: 43:da:53:d3:ca:e6:ea:5c:55:0f:ba:4d:a2:77:05:3f:3a:40: 6d:aa:f0:23:2b:f9:df:8d:da:e1:ea:0b:ef:69:83:75:3b:b3: 77:9e:d3:5e:c6:a8:5a:25:d4:0a:99:d5:ba:9f:a4:71:a4:07: df:fe:b5:f1:0c:1f:c3:23:f9:2f:a0:61:8e:36:e2:bd:4f:b5: 63:04:2f:cf:b1:cd:51:6c:13:6b:f6:f3:e5:b3:5c:f4:ae:33: 31:cf:16:12:af:40:41:a8:c2:02:d7:75:d4:a7:4d:89:8f:b5: 13:ce:cf:02:a6:6a:76:df:f0:68:63:81:70:e5:ae:64:56:fa: f6:22:8d:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTpNzV9+JhoHO6F9IpOZ6o0p3VIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc4Q0U0RDhBNjMyRDE4MUZDQzIzMjUxQjdDRjQxMTQx REJFMTQ2NzAeFw0yNjExMTQwOTIxMDlaFw0yNjExMTUwOTI4MDlaMDMxMTAvBgNV BAMTKDY3OEFDRjRCMjJFNzIyNzA0MTFGNDdGOEVDNjc4OTQxRDI3MERFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4JZw5GtbQCUSvpgS3da3PDh7f yjbH3FubFLXtdVGut8X5uskF+4eq2IKGiRPkhGWIUypEHCRhJhf46e5K2/+tJ9Aa NJltBy8/xo6U2Ir9ItKI1jNgq5gUCzyhd7d5L/zILph72qdPP4KivV1lFYPUDN8m OtqcxoWeEYfMInvBldEqQDU1dAoU4uOacbmbjLKhCFMdtsmwQYExYWWP3m+oeJKR F7qVBQHp1CavVhsDzFNr2jZOTYs0p3Hb2QPVw4c+9qI8NZmATOpuPWZIpo3MmaRq S/nrFkaYGDm9Hzqytg72+hnRGRutbl51lLVBjhvcilBZorbTzgva/9B2HFafAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ4rPSyLnInBBH0f47GeJQdJw3uYwHwYDVR0j BBgwFoAUt4zk2KYy0YH8wjJRt89BFB2+FGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjFlNDQ2NjUtZTg0Ni00NTViLWFhMWEtZDVhYjA3ZGVlZGYzLzAvQjc4Q0U0RDhB NjMyRDE4MUZDQzIzMjUxQjdDRjQxMTQxREJFMTQ2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNzhDRTREOEE2MzJEMTgxRkNDMjMyNTFCN0NGNDExNDFEQkUx NDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvQjc4Q0U0RDhBNjMyRDE4MUZDQzIzMjUxQjdDRjQx MTQxREJFMTQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuCMA89tkDSsAbbHON+EgMToF3VWby6E1HY ruhjpdQMQHw+SeG5NbHg1fF5oHEBlhYXXwecmq3dAq+vGjY9+hV1T1Ivpb+9utVA bLTXN1/56jlT+xVNFlTcyFgEVR3InfzFnZj+Lgs6YLaUa/Hz20mcV8QG6dypy7Zk pzuCckPaU9PK5upcVQ+6TaJ3BT86QG2q8CMr+d+N2uHqC+9pg3U7s3ee017GqFol 1AqZ1bqfpHGkB9/+tfEMH8Mj+S+gYY424r1PtWMEL8+xzVFsE2v28+WzXPSuMzHP FhKvQEGowgLXddSnTYmPtRPOzwKmanbf8GhjgXDlrmRW+vYijUs= -----END CERTIFICATE-----Generated at Sat Nov 14 22:33:59 2026 by rpki-client