$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.mft File: B78A1ED892FB248A8B9BD980AD2B97821308CD15.mft (raw, json) Hash identifier: vaLHggBMYV1ECebEPeuKd85Zb092OIKsN6HGe5mmC/U= Subject key identifier: E3:EC:3A:CA:A6:DA:CC:79:44:C2:67:B0:84:5E:81:0B:DB:18:BA:4C Authority key identifier: B7:8A:1E:D8:92:FB:24:8A:8B:9B:D9:80:AD:2B:97:82:13:08:CD:15 Certificate issuer: /CN=B78A1ED892FB248A8B9BD980AD2B97821308CD15 Certificate serial: 0BBB6CD380E3AFD39D300B537CB4F61A3E797BDA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78A1ED892FB248A8B9BD980AD2B97821308CD15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.mft Manifest number: C4 Signing time: Sun 27 Sep 2026 07:13:28 +0000 Manifest this update: Sun 27 Sep 2026 07:08:28 +0000 Manifest next update: Mon 28 Sep 2026 07:55:28 +0000 Files and hashes: 1: B78A1ED892FB248A8B9BD980AD2B97821308CD15.crl (hash: SQCfXpFg+Rx7aKNgXO67urdOXO+2K04aXw1sTrG2I38=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.crl rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78A1ED892FB248A8B9BD980AD2B97821308CD15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:bb:6c:d3:80:e3:af:d3:9d:30:0b:53:7c:b4:f6:1a:3e:79:7b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B78A1ED892FB248A8B9BD980AD2B97821308CD15 Validity Not Before: Sep 27 07:08:28 2026 GMT Not After : Sep 28 07:55:28 2026 GMT Subject: CN=E3EC3ACAA6DACC7944C267B0845E810BDB18BA4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2c:95:8b:c1:12:3a:ae:dc:d3:6a:7a:e2:e5: 69:ab:a4:d8:12:b5:e6:b1:e7:6b:b1:aa:4b:78:b7: 83:64:39:6f:8d:3f:6e:4e:31:8c:03:ae:d3:f3:e2: c5:c0:a4:e5:a7:cb:4f:17:49:dc:56:d0:43:8b:c5: 85:7a:8c:e0:9d:fc:1e:96:f0:97:1b:e4:07:e5:20: 52:ca:0f:cf:86:52:53:a1:98:17:b2:15:84:22:df: cc:75:a1:fb:f6:a1:24:6e:09:af:08:4d:97:01:16: 30:8c:92:04:86:c7:f4:1c:74:a5:91:ce:81:6d:d0: c8:22:f6:3f:eb:46:02:00:36:c9:5f:f3:74:ff:af: 28:3f:f8:43:24:47:d7:24:c3:8f:0c:f8:52:d6:a1: 24:bd:93:8a:5f:e6:b0:b1:93:5d:6b:9d:5f:12:3a: 4f:53:d9:fd:be:89:57:23:a8:0f:9c:6c:39:ae:e1: 95:80:5d:df:94:5b:cb:63:c9:e1:77:47:95:4a:20: ef:00:ef:45:b1:93:06:1d:67:7e:c5:62:b4:0e:20: fa:21:7a:63:33:c9:8d:59:f0:b4:c2:1e:31:59:ae: fd:38:a8:8f:5d:89:17:05:f4:f0:2c:b1:b7:3f:c5: 92:53:28:aa:39:23:27:79:5a:9f:cd:09:06:5b:0a: e2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EC:3A:CA:A6:DA:CC:79:44:C2:67:B0:84:5E:81:0B:DB:18:BA:4C X509v3 Authority Key Identifier: keyid:B7:8A:1E:D8:92:FB:24:8A:8B:9B:D9:80:AD:2B:97:82:13:08:CD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78A1ED892FB248A8B9BD980AD2B97821308CD15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:72:e3:69:c3:22:6c:d2:36:4c:14:8e:51:38:e8:45:ac:7e: a6:53:2c:2a:4f:bb:a1:1d:98:a5:81:e4:ac:63:e5:6f:d0:89: a8:97:b6:fa:51:91:80:94:2d:e7:f4:85:c2:c6:40:5c:ba:c8: 2d:5e:fa:cd:92:08:20:89:ac:7c:5a:1e:14:d0:15:e2:16:0d: 0e:af:9d:9f:e5:bd:0f:b3:c9:26:c3:97:17:57:1f:f0:2e:a9: 50:95:6b:02:8b:a6:a8:60:f2:31:c0:3a:60:9b:8e:91:9b:24: ce:3c:02:0d:69:d1:74:eb:68:32:e1:e3:b8:17:a8:f3:44:0b: 53:79:35:9f:76:64:22:a3:ff:21:f0:4e:96:9f:3a:6b:f3:19: ac:2c:d3:f8:a7:c1:d3:f1:5f:ee:9d:11:78:77:2b:71:73:d2: 26:29:08:03:c6:0e:b6:69:6b:ae:71:68:c7:3f:55:8d:bc:5b: ea:5b:a1:ee:f5:4f:41:23:5e:1d:8b:e6:f8:40:48:ca:a1:56: c2:20:aa:2c:4a:3d:f2:44:1f:fe:f2:a2:41:7c:da:3b:05:3b: 9e:62:71:f1:54:34:27:4e:5d:00:be:37:70:a6:99:8d:0e:aa: 5e:ab:0c:37:03:c8:fb:62:b0:08:c6:61:64:ce:b8:ed:84:ad: 18:f7:bb:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7ts04Djr9OdMAtTfLT2Gj55e9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc4QTFFRDg5MkZCMjQ4QThCOUJEOTgwQUQyQjk3ODIx MzA4Q0QxNTAeFw0yNjA5MjcwNzA4MjhaFw0yNjA5MjgwNzU1MjhaMDMxMTAvBgNV BAMTKEUzRUMzQUNBQTZEQUNDNzk0NEMyNjdCMDg0NUU4MTBCREIxOEJBNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPLJWLwRI6rtzTanri5WmrpNgS teax52uxqkt4t4NkOW+NP25OMYwDrtPz4sXApOWny08XSdxW0EOLxYV6jOCd/B6W 8Jcb5AflIFLKD8+GUlOhmBeyFYQi38x1ofv2oSRuCa8ITZcBFjCMkgSGx/QcdKWR zoFt0Mgi9j/rRgIANslf83T/ryg/+EMkR9ckw48M+FLWoSS9k4pf5rCxk11rnV8S Ok9T2f2+iVcjqA+cbDmu4ZWAXd+UW8tjyeF3R5VKIO8A70WxkwYdZ37FYrQOIPoh emMzyY1Z8LTCHjFZrv04qI9diRcF9PAssbc/xZJTKKo5Iyd5Wp/NCQZbCuKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4+w6yqbazHlEwmewhF6BC9sYukwwHwYDVR0j BBgwFoAUt4oe2JL7JIqLm9mArSuXghMIzRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTkwYWExNTgtNjU4MS00Y2JlLWI2Y2UtZDg3MjFjNzE5ZmEwLzAvQjc4QTFFRDg5 MkZCMjQ4QThCOUJEOTgwQUQyQjk3ODIxMzA4Q0QxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzhBMUVEODkyRkIyNDhBOEI5QkQ5ODBBRDJCOTc4MjEzMDhD RDE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvQjc4QTFFRDg5MkZCMjQ4QThCOUJEOTgwQUQyQjk3 ODIxMzA4Q0QxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9y42nDImzSNkwUjlE46EWsfqZTLCpPu6Ed mKWB5Kxj5W/QiaiXtvpRkYCULef0hcLGQFy6yC1e+s2SCCCJrHxaHhTQFeIWDQ6v nZ/lvQ+zySbDlxdXH/AuqVCVawKLpqhg8jHAOmCbjpGbJM48Ag1p0XTraDLh47gX qPNEC1N5NZ92ZCKj/yHwTpafOmvzGaws0/inwdPxX+6dEXh3K3Fz0iYpCAPGDrZp a65xaMc/VY28W+pboe71T0EjXh2L5vhASMqhVsIgqixKPfJEH/7yokF82jsFO55i cfFUNCdOXQC+N3CmmY0Oql6rDDcDyPtisAjGYWTOuO2ErRj3u5k= -----END CERTIFICATE-----Generated at Sun Sep 27 16:34:57 2026 by rpki-client