$ rpki-client -vvvf rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft File: 78A2C1B7FD05098A611E198E8481B7297F924590.mft (raw, json) Hash identifier: QuJtg/P+TwfICpXiQPz5PWxtKlkoaArsf70GmoKZ9HI= Subject key identifier: 88:AD:69:D3:2F:11:AA:23:B3:5C:0A:F0:CE:49:4B:5B:AE:3B:B1:C4 Authority key identifier: 78:A2:C1:B7:FD:05:09:8A:61:1E:19:8E:84:81:B7:29:7F:92:45:90 Certificate issuer: /CN=78A2C1B7FD05098A611E198E8481B7297F924590 Certificate serial: 7843BC33E66EBB43672B5CFADA1466E0A02BA093 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 14:58:52 +0000 Manifest this update: Fri 25 Sep 2026 14:53:52 +0000 Manifest next update: Sat 26 Sep 2026 16:37:52 +0000 Files and hashes: 1: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: I4d4M5kb/PaS52EXblXxmrUeQhD789o5zOZWBGwmGC8=) 2: 78A2C1B7FD05098A611E198E8481B7297F924590.crl (hash: BvRlzUAVCrDtIItHkg/UxLss4E0lFIHs/6eq9oDk5SM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.crl rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:43:bc:33:e6:6e:bb:43:67:2b:5c:fa:da:14:66:e0:a0:2b:a0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A2C1B7FD05098A611E198E8481B7297F924590 Validity Not Before: Sep 25 14:53:52 2026 GMT Not After : Sep 26 16:37:52 2026 GMT Subject: CN=88AD69D32F11AA23B35C0AF0CE494B5BAE3BB1C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:68:79:5d:5a:38:49:b8:68:ee:57:6a:49:69: 1b:2c:04:94:d7:29:8a:60:ad:36:95:9a:ce:1c:78: 88:7e:fd:8e:15:e4:8c:55:26:63:3e:00:c6:4a:69: 9f:e1:5b:5f:09:f9:45:27:63:23:3f:76:9a:9c:6f: 62:12:cf:55:0e:52:09:9e:a6:d5:b1:f5:ac:a7:dd: 83:5b:8f:11:f8:ce:f7:cb:41:35:04:38:36:41:0c: 1e:88:ec:6d:d6:92:94:6f:4d:b2:0b:fa:b9:dc:c3: b0:13:4a:e0:84:d2:d3:de:ab:73:ec:89:ad:dd:33: 76:d2:12:67:92:00:c4:00:00:be:da:0e:7a:5b:08: 82:73:43:c3:67:d3:cf:fb:2e:57:f4:57:6a:89:f3: 39:7e:0b:d5:1e:3e:1a:7e:3b:87:65:83:ba:b7:98: fc:60:47:50:95:9a:5b:c9:90:a9:92:5e:58:5f:23: 26:3d:aa:df:e6:b9:51:6f:01:1d:6f:10:b6:fe:8a: b0:c6:db:b6:4d:88:61:ca:f3:2d:ef:e7:a3:59:a6: 92:f2:e0:ec:90:9c:70:45:7f:01:6c:01:8b:f0:b0: ce:25:ee:85:f1:26:b9:95:88:78:95:04:1e:69:d9: fd:7b:94:83:04:03:60:04:5a:44:ec:81:75:76:99: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AD:69:D3:2F:11:AA:23:B3:5C:0A:F0:CE:49:4B:5B:AE:3B:B1:C4 X509v3 Authority Key Identifier: keyid:78:A2:C1:B7:FD:05:09:8A:61:1E:19:8E:84:81:B7:29:7F:92:45:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d7:44:e1:68:13:7f:65:3e:ce:6e:08:81:c3:08:c2:85:2c: 85:42:30:fb:f2:88:e0:60:cf:ad:74:68:cf:02:67:d7:c9:ce: 9d:44:44:cd:52:4a:16:21:cc:fa:38:44:39:4f:bf:e3:b3:5a: 7e:d6:83:db:62:bd:cd:1e:9a:e3:c1:d7:ab:d6:6b:26:14:f9: 63:78:3b:bf:7f:ab:e0:15:a1:c4:52:38:6d:2d:d4:7c:3b:0c: 4a:3c:35:4c:35:41:e0:39:20:8d:6b:23:84:fe:bf:66:e9:c7: 15:bc:43:d9:4a:b9:97:c3:4b:2c:7c:87:fe:d3:61:42:c4:45: 8e:1a:9d:dc:52:98:64:dd:8a:9e:a5:2d:d2:3b:a1:3f:30:68: 8e:de:d3:9a:e2:5f:a2:c8:1c:41:e1:3b:59:5d:5f:82:ea:6f: 6d:cc:66:9f:e7:a6:e9:89:83:51:5a:23:5e:8a:46:3d:a2:c8: 07:64:d2:f8:a1:2e:32:a8:bd:92:7f:3b:81:89:b2:65:6e:49: 4d:73:75:0e:3d:48:4e:66:ba:a0:6d:49:db:ea:37:af:d0:32: 30:e9:9e:d7:17:ea:22:cd:12:35:55:2d:30:be:3c:28:6f:13: 00:b7:a3:85:eb:10:b7:f6:3c:0a:47:5b:33:15:0f:5e:6b:7a: 48:83:82:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeEO8M+Zuu0NnK1z62hRm4KAroJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMkMxQjdGRDA1MDk4QTYxMUUxOThFODQ4MUI3Mjk3 RjkyNDU5MDAeFw0yNjA5MjUxNDUzNTJaFw0yNjA5MjYxNjM3NTJaMDMxMTAvBgNV BAMTKDg4QUQ2OUQzMkYxMUFBMjNCMzVDMEFGMENFNDk0QjVCQUUzQkIxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqaHldWjhJuGjuV2pJaRssBJTX KYpgrTaVms4ceIh+/Y4V5IxVJmM+AMZKaZ/hW18J+UUnYyM/dpqcb2ISz1UOUgme ptWx9ayn3YNbjxH4zvfLQTUEODZBDB6I7G3WkpRvTbIL+rncw7ATSuCE0tPeq3Ps ia3dM3bSEmeSAMQAAL7aDnpbCIJzQ8Nn08/7Llf0V2qJ8zl+C9UePhp+O4dlg7q3 mPxgR1CVmlvJkKmSXlhfIyY9qt/muVFvAR1vELb+irDG27ZNiGHK8y3v56NZppLy 4OyQnHBFfwFsAYvwsM4l7oXxJrmViHiVBB5p2f17lIMEA2AEWkTsgXV2mSFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiK1p0y8RqiOzXArwzklLW647scQwHwYDVR0j BBgwFoAUeKLBt/0FCYphHhmOhIG3KX+SRZAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTllM2IxZDgtYmYxOS00NmUzLWI2MDktMGQxNjA5ODhkYWM4LzAvNzhBMkMxQjdG RDA1MDk4QTYxMUUxOThFODQ4MUI3Mjk3RjkyNDU5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEEyQzFCN0ZEMDUwOThBNjExRTE5OEU4NDgxQjcyOTdGOTI0 NTkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTllM2IxZDgtYmYxOS00NmUzLWI2 MDktMGQxNjA5ODhkYWM4LzAvNzhBMkMxQjdGRDA1MDk4QTYxMUUxOThFODQ4MUI3 Mjk3RjkyNDU5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzXROFoE39lPs5uCIHDCMKFLIVCMPvyiOBg z610aM8CZ9fJzp1ERM1SShYhzPo4RDlPv+OzWn7Wg9tivc0emuPB16vWayYU+WN4 O79/q+AVocRSOG0t1Hw7DEo8NUw1QeA5II1rI4T+v2bpxxW8Q9lKuZfDSyx8h/7T YULERY4andxSmGTdip6lLdI7oT8waI7e05riX6LIHEHhO1ldX4Lqb23MZp/npumJ g1FaI16KRj2iyAdk0vihLjKovZJ/O4GJsmVuSU1zdQ49SE5muqBtSdvqN6/QMjDp ntcX6iLNEjVVLTC+PChvEwC3o4XrELf2PApHWzMVD15rekiDgiE= -----END CERTIFICATE-----Generated at Fri Sep 25 18:50:48 2026 by rpki-client