$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft File: 78AB429C4579785348E8B0DFF48937716E9707FA.mft (raw, json) Hash identifier: PaqSR1NaOhbmBWjTBqgKTtsvfkkvglNyzBzJqzXu1ZY= Subject key identifier: 10:0D:32:84:B3:B6:7B:05:66:F4:C9:B0:BE:6E:F3:78:5A:79:FF:4E Authority key identifier: 78:AB:42:9C:45:79:78:53:48:E8:B0:DF:F4:89:37:71:6E:97:07:FA Certificate issuer: /CN=78AB429C4579785348E8B0DFF48937716E9707FA Certificate serial: 651BAB302D38D0140C75DCD5BCE46C39E74FD372 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft Manifest number: 0D Signing time: Tue 12 May 2026 06:37:35 +0000 Manifest this update: Tue 12 May 2026 06:32:35 +0000 Manifest next update: Wed 13 May 2026 09:10:35 +0000 Files and hashes: 1: 78AB429C4579785348E8B0DFF48937716E9707FA.crl (hash: peRbutu0Nwj2LR770L8h8tkODnbAC1Vb4ErAkRiiX9k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.crl rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1b:ab:30:2d:38:d0:14:0c:75:dc:d5:bc:e4:6c:39:e7:4f:d3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78AB429C4579785348E8B0DFF48937716E9707FA Validity Not Before: May 12 06:32:35 2026 GMT Not After : May 13 09:10:35 2026 GMT Subject: CN=100D3284B3B67B0566F4C9B0BE6EF3785A79FF4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:18:aa:63:d4:f2:56:28:ef:43:83:d5:14:9a: ab:ef:18:39:04:24:af:a3:77:3b:3b:11:08:45:f7: b6:57:59:2b:40:f3:47:92:d5:5c:f0:4b:2b:f9:7c: cf:71:b9:dd:81:2c:e3:6b:88:15:31:27:09:fe:58: e1:e5:c1:6b:0d:d8:1b:6d:8d:8d:3d:4a:fb:fa:a5: 35:85:ae:6d:59:d1:9f:75:12:5a:49:78:0e:09:54: 0d:16:76:50:e9:eb:da:43:c5:0a:0f:dd:3c:bd:6f: 48:0e:b1:74:44:d3:85:a3:31:63:e4:05:99:b9:b6: c2:bf:3a:37:08:cb:bd:6f:68:29:33:d8:c4:8c:e4: 67:cb:bc:f3:e1:33:41:9d:be:68:1f:7f:4f:77:b0: d9:0b:bf:af:9b:7a:7f:92:71:0a:7d:23:5a:3e:d1: f3:20:72:42:f6:ce:dc:58:e7:07:7d:a7:a9:5d:47: a3:0c:c0:da:6c:23:47:e7:df:92:0d:1b:1b:97:30: 3e:99:6e:9a:71:4c:a4:ea:93:af:1a:fe:af:e0:a8: 80:d9:6c:c6:86:b4:ba:6a:38:aa:e4:9f:78:89:32: 75:ec:95:20:d1:77:f8:7e:f2:08:33:0d:ec:f7:c2: 58:55:59:24:65:bf:10:5e:03:dc:73:75:b5:8c:f8: 14:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0D:32:84:B3:B6:7B:05:66:F4:C9:B0:BE:6E:F3:78:5A:79:FF:4E X509v3 Authority Key Identifier: keyid:78:AB:42:9C:45:79:78:53:48:E8:B0:DF:F4:89:37:71:6E:97:07:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7e:03:0a:b0:79:cc:0d:de:8d:02:08:dc:0a:3f:9b:58:48: b4:97:7e:3d:ea:68:5d:b7:a9:72:e1:33:5a:91:1f:03:4b:92: a0:40:70:bd:64:fb:69:5d:42:40:67:61:10:48:70:8a:18:1f: 19:1f:2e:6c:b2:a7:5b:30:61:c4:60:7a:85:dc:91:56:f9:ab: be:06:79:c5:25:c0:65:01:df:3f:a6:e9:69:ea:61:95:52:ae: b8:05:eb:6a:37:72:76:9b:ab:61:7a:62:21:5f:f9:43:84:a7: 0d:dd:a3:60:e1:d5:3d:1d:4c:1f:67:89:1a:65:51:f6:1e:9d: a8:2e:1b:47:59:fd:35:2f:43:cf:a0:bb:82:1b:50:19:52:e9: 84:12:90:69:24:57:60:67:0c:bf:cd:ba:5f:93:0f:72:16:65: f1:a2:e7:7c:7a:aa:e1:ce:4b:96:12:87:78:06:3d:74:37:ce: 10:f8:0a:74:3e:76:c2:39:bb:c2:f5:c3:10:4b:5a:c1:ee:1c: ed:97:85:22:3f:66:49:5f:c5:2a:9f:d5:77:db:6d:d2:78:82: 76:e6:f2:7a:d6:32:70:54:b6:e1:3e:69:a9:00:c9:08:5b:e2: 80:2c:e5:26:5a:dd:f7:7a:7e:5e:e1:2d:03:95:b5:75:a8:cb: 4a:4b:9c:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRurMC040BQMddzVvORsOedP03IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBQjQyOUM0NTc5Nzg1MzQ4RThCMERGRjQ4OTM3NzE2 RTk3MDdGQTAeFw0yNjA1MTIwNjMyMzVaFw0yNjA1MTMwOTEwMzVaMDMxMTAvBgNV BAMTKDEwMEQzMjg0QjNCNjdCMDU2NkY0QzlCMEJFNkVGMzc4NUE3OUZGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGKpj1PJWKO9Dg9UUmqvvGDkE JK+jdzs7EQhF97ZXWStA80eS1VzwSyv5fM9xud2BLONriBUxJwn+WOHlwWsN2Btt jY09Svv6pTWFrm1Z0Z91ElpJeA4JVA0WdlDp69pDxQoP3Ty9b0gOsXRE04WjMWPk BZm5tsK/OjcIy71vaCkz2MSM5GfLvPPhM0Gdvmgff093sNkLv6+ben+ScQp9I1o+ 0fMgckL2ztxY5wd9p6ldR6MMwNpsI0fn35INGxuXMD6ZbppxTKTqk68a/q/gqIDZ bMaGtLpqOKrkn3iJMnXslSDRd/h+8ggzDez3wlhVWSRlvxBeA9xzdbWM+BTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEA0yhLO2ewVm9Mmwvm7zeFp5/04wHwYDVR0j BBgwFoAUeKtCnEV5eFNI6LDf9Ik3cW6XB/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVmMzgxNTctYjVlOC00Y2JjLWJlMjEtZDE3NjE0NWE0NTY5LzAvNzhBQjQyOUM0 NTc5Nzg1MzQ4RThCMERGRjQ4OTM3NzE2RTk3MDdGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEFCNDI5QzQ1Nzk3ODUzNDhFOEIwREZGNDg5Mzc3MTZFOTcw N0ZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVmMzgxNTctYjVlOC00Y2JjLWJl MjEtZDE3NjE0NWE0NTY5LzAvNzhBQjQyOUM0NTc5Nzg1MzQ4RThCMERGRjQ4OTM3 NzE2RTk3MDdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJ+AwqwecwN3o0CCNwKP5tYSLSXfj3qaF23 qXLhM1qRHwNLkqBAcL1k+2ldQkBnYRBIcIoYHxkfLmyyp1swYcRgeoXckVb5q74G ecUlwGUB3z+m6WnqYZVSrrgF62o3cnabq2F6YiFf+UOEpw3do2Dh1T0dTB9niRpl UfYenaguG0dZ/TUvQ8+gu4IbUBlS6YQSkGkkV2BnDL/Nul+TD3IWZfGi53x6quHO S5YSh3gGPXQ3zhD4CnQ+dsI5u8L1wxBLWsHuHO2XhSI/ZklfxSqf1XfbbdJ4gnbm 8nrWMnBUtuE+aakAyQhb4oAs5SZa3fd6fl7hLQOVtXWoy0pLnCQ= -----END CERTIFICATE-----Generated at Wed May 13 02:49:19 2026 by rpki-client