$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft File: 2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft (raw, json) Hash identifier: vrYKJNs5yS+IwNG3mZ4SyB/v8xdWO6h07xrXauL/GYI= Subject key identifier: 6E:73:1D:EE:13:D9:ED:0B:7A:AF:4E:FC:F5:B5:09:C2:26:5F:88:CD Authority key identifier: 2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF Certificate issuer: /CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF Certificate serial: 7C9E24D33C23D38C773310EF6F3F96FEF7A1D843 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:04:51 +0000 Manifest this update: Wed 23 Sep 2026 10:59:51 +0000 Manifest next update: Thu 24 Sep 2026 11:50:51 +0000 Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: 60R7X56SozCA5mIN8nGG4Hjmryhwz60xWHs0HKmGlWc=) 2: 2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl (hash: 3+W8l0LgHIxMmQBGm2lDqV2OECmxmxzr28fQ7czmVmQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9e:24:d3:3c:23:d3:8c:77:33:10:ef:6f:3f:96:fe:f7:a1:d8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF Validity Not Before: Sep 23 10:59:51 2026 GMT Not After : Sep 24 11:50:51 2026 GMT Subject: CN=6E731DEE13D9ED0B7AAF4EFCF5B509C2265F88CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:90:87:40:04:a2:07:6f:45:52:7c:55:0e: 3f:a8:3b:fa:82:32:76:dd:ca:a9:6c:6b:b4:31:49: d6:e0:e0:1e:e3:7b:4b:1b:9b:89:81:bb:8b:ad:26: 6b:88:93:f7:5d:d4:5a:f1:9a:08:16:c7:c9:a0:39: 2c:16:c6:a4:05:bb:84:89:07:b0:06:13:81:37:a1: 5c:89:3b:06:3f:00:23:4e:5c:37:6b:22:7e:19:33: 36:7c:cb:12:d0:37:53:d7:78:e9:1c:b6:bd:46:09: e1:84:9e:9a:1d:ac:8e:59:cb:cb:61:73:2a:3a:32: 83:a0:1d:22:6e:47:da:e1:f5:e4:28:18:cf:f2:62: 03:dd:06:49:ff:10:c8:59:54:72:70:a9:f2:10:b3: 95:32:27:08:1d:ca:6b:1f:e9:15:2d:31:0f:c7:c5: 0c:65:53:b3:00:9a:0b:22:ce:ce:ef:78:ae:f6:12: 83:4f:f3:e6:40:0b:b8:11:09:67:f7:21:43:a1:7c: b9:b9:99:e5:1e:10:ed:e6:e9:42:f6:a3:ec:2a:4c: 5a:94:38:b4:0a:6a:89:76:cb:0d:7a:b2:e4:b4:d0: c0:21:ad:30:25:c5:dc:b7:2c:bd:0a:ac:4f:e0:81: 02:c7:2a:3b:33:86:20:4f:53:bb:e4:81:0a:d6:0b: ca:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:73:1D:EE:13:D9:ED:0B:7A:AF:4E:FC:F5:B5:09:C2:26:5F:88:CD X509v3 Authority Key Identifier: keyid:2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:66:4c:d2:87:37:47:c1:5b:c0:5a:b6:d9:0d:09:eb:fb:61: fe:07:1a:b3:3a:15:17:8c:34:d2:e0:c6:62:24:e4:b9:95:a5: ec:a3:91:30:15:e9:3e:a1:86:03:6d:24:59:1b:d8:79:06:72: b0:b3:84:c0:4b:ad:d3:be:03:b3:ee:1a:05:b9:20:59:23:e4: bc:63:8b:fb:2f:30:54:f8:43:82:ca:7f:f8:ec:18:e0:6d:af: 9e:27:a0:5d:7d:6d:7b:96:f2:bc:18:cc:17:bc:0f:89:be:76: ea:b9:d8:e8:c0:9b:03:80:8b:1a:df:13:33:5a:38:7a:a2:6a: d5:71:95:0a:84:99:c7:01:8f:2d:f5:d9:d5:d8:ec:43:7e:45: 4c:2e:cf:44:45:d0:b9:73:e1:14:ec:16:e3:55:8d:f1:e1:52: 68:9a:18:eb:44:8f:f1:f8:2f:ea:ea:5f:09:7b:f8:9c:09:7b: 92:2d:dc:4e:e9:27:c5:22:87:b0:78:37:a3:f3:9c:41:57:c5: 35:c9:db:75:16:67:df:ea:3b:61:85:70:38:bc:4f:be:43:57: 09:7d:13:84:36:32:5f:6d:e8:f5:ac:68:63:be:6d:2e:df:68: a7:42:96:2f:8e:19:c1:20:a5:7f:f9:16:82:09:9a:fb:9e:90: 56:db:78:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJ4k0zwj04x3MxDvbz+W/veh2EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY3ODc5NEVDMDc1RkU5NUU3ODMxREYwQjE0RTc0Qjg4 RTBFM0ZERjAeFw0yNjA5MjMxMDU5NTFaFw0yNjA5MjQxMTUwNTFaMDMxMTAvBgNV BAMTKDZFNzMxREVFMTNEOUVEMEI3QUFGNEVGQ0Y1QjUwOUMyMjY1Rjg4Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3ZCHQASiB29FUnxVDj+oO/qC Mnbdyqlsa7QxSdbg4B7je0sbm4mBu4utJmuIk/dd1FrxmggWx8mgOSwWxqQFu4SJ B7AGE4E3oVyJOwY/ACNOXDdrIn4ZMzZ8yxLQN1PXeOkctr1GCeGEnpodrI5Zy8th cyo6MoOgHSJuR9rh9eQoGM/yYgPdBkn/EMhZVHJwqfIQs5UyJwgdymsf6RUtMQ/H xQxlU7MAmgsizs7veK72EoNP8+ZAC7gRCWf3IUOhfLm5meUeEO3m6UL2o+wqTFqU OLQKaol2yw16suS00MAhrTAlxdy3LL0KrE/ggQLHKjszhiBPU7vkgQrWC8q1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbnMd7hPZ7Qt6r0789bUJwiZfiM0wHwYDVR0j BBgwFoAUL3h5TsB1/pXngx3wsU50uI4OP98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThhN2YzNTUtZjIyNS00OGYzLTg3ZjgtMGJmYjBjOGU1OGYwLzAvMkY3ODc5NEVD MDc1RkU5NUU3ODMxREYwQjE0RTc0Qjg4RTBFM0ZERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjc4Nzk0RUMwNzVGRTk1RTc4MzFERjBCMTRFNzRCODhFMEUz RkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvMkY3ODc5NEVDMDc1RkU5NUU3ODMxREYwQjE0RTc0 Qjg4RTBFM0ZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9mTNKHN0fBW8BattkNCev7Yf4HGrM6FReM NNLgxmIk5LmVpeyjkTAV6T6hhgNtJFkb2HkGcrCzhMBLrdO+A7PuGgW5IFkj5Lxj i/svMFT4Q4LKf/jsGOBtr54noF19bXuW8rwYzBe8D4m+duq52OjAmwOAixrfEzNa OHqiatVxlQqEmccBjy312dXY7EN+RUwuz0RF0Llz4RTsFuNVjfHhUmiaGOtEj/H4 L+rqXwl7+JwJe5It3E7pJ8Uih7B4N6PznEFXxTXJ23UWZ9/qO2GFcDi8T75DVwl9 E4Q2Ml9t6PWsaGO+bS7faKdCli+OGcEgpX/5FoIJmvuekFbbeKU= -----END CERTIFICATE-----Generated at Thu Sep 24 02:42:45 2026 by rpki-client