$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft File: 78AB429C4579785348E8B0DFF48937716E9707FA.mft (raw, json) Hash identifier: +zSVVM186Aljs4tsheWUPvn8gcThXgwTfwrqFNFwl6U= Subject key identifier: 39:81:BA:D3:A1:04:7F:8D:15:8D:E9:F6:35:FF:A1:97:1B:C9:29:C1 Authority key identifier: 78:AB:42:9C:45:79:78:53:48:E8:B0:DF:F4:89:37:71:6E:97:07:FA Certificate issuer: /CN=78AB429C4579785348E8B0DFF48937716E9707FA Certificate serial: 3CCFD2E91C66040A54AAB66C4D1EBCD556E24421 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 10:03:04 +0000 Manifest this update: Fri 25 Sep 2026 09:58:04 +0000 Manifest next update: Sat 26 Sep 2026 11:50:04 +0000 Files and hashes: 1: 78AB429C4579785348E8B0DFF48937716E9707FA.crl (hash: JacJbrJ+PRObdDF3TCj7btlmtW7iuluIPvmJ/ZSDIrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.crl rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:cf:d2:e9:1c:66:04:0a:54:aa:b6:6c:4d:1e:bc:d5:56:e2:44:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78AB429C4579785348E8B0DFF48937716E9707FA Validity Not Before: Sep 25 09:58:04 2026 GMT Not After : Sep 26 11:50:04 2026 GMT Subject: CN=3981BAD3A1047F8D158DE9F635FFA1971BC929C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:f2:24:d1:0b:80:27:21:0a:ea:1d:6f:69: 01:17:ba:05:ef:10:68:b5:d0:a5:af:6b:dd:a0:2a: ba:e1:94:a9:8c:c8:81:d5:b0:87:ce:de:46:93:63: 7c:95:01:da:b5:ff:b7:af:33:d9:db:0b:75:1c:83: 7a:96:71:a0:3e:71:46:63:86:64:69:ed:8f:dd:e6: b1:93:6f:e7:dd:32:43:47:87:cd:35:6a:2a:b6:03: 84:29:ef:70:6a:9d:d5:23:9a:3d:f1:38:4d:92:2d: 2b:bb:1b:ed:f6:18:a0:0a:59:d2:09:92:dc:e9:8a: 5f:36:68:85:33:bf:d7:4b:32:ba:b2:7d:af:a5:0e: 3d:70:5b:2a:0d:73:6b:96:91:42:56:db:50:aa:6e: e9:d5:f6:57:dd:a0:9e:98:cd:f9:61:2e:78:d3:dc: e5:18:ea:02:b2:19:92:78:f0:3f:4f:bb:4b:05:fb: 19:6e:f2:c1:cc:d0:6b:39:ba:0e:0f:b6:10:a5:ac: eb:3d:8c:3a:3b:de:18:fe:54:08:ef:65:03:4a:b8: c3:55:42:a0:bf:b1:20:a9:f9:c6:28:3d:39:77:96: 87:0a:99:bd:26:78:8a:1f:b0:6c:6d:b8:90:78:65: 97:eb:af:71:d7:63:b1:f0:35:e8:cd:a5:2e:cf:ea: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:81:BA:D3:A1:04:7F:8D:15:8D:E9:F6:35:FF:A1:97:1B:C9:29:C1 X509v3 Authority Key Identifier: keyid:78:AB:42:9C:45:79:78:53:48:E8:B0:DF:F4:89:37:71:6E:97:07:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e1:1e:1b:78:db:09:bc:bb:ec:0d:33:b4:42:30:5c:6f:85: ae:60:b2:5a:e3:62:8f:01:09:73:26:a9:13:e2:3c:18:fa:25: 3d:0c:97:e0:1b:3d:4a:ff:e8:3f:a3:86:dd:c3:17:af:65:8a: 4a:ca:5f:5b:05:b8:dd:26:8d:93:4e:21:8f:eb:cc:73:c4:9f: 2c:96:7e:fd:03:20:14:7c:f1:7b:a4:88:bf:c6:67:a4:a2:73: ae:cb:ba:2f:8f:71:14:92:d1:69:fe:63:c9:f5:28:5d:30:9a: 06:88:91:58:7b:6e:89:a2:d5:c5:a8:38:27:23:42:65:6b:ce: b2:4b:ba:fd:b7:c6:11:9d:82:0d:5d:87:33:83:81:b1:fb:e4: d0:bd:d7:fd:4f:44:8a:d1:b0:65:a3:b4:3d:33:df:41:40:32: 22:52:94:06:4c:1e:f0:a2:da:08:bc:2b:95:28:5c:a1:44:7d: 7d:a8:30:6e:c9:f3:52:41:de:66:de:9f:d4:b8:35:08:94:56: 14:33:65:0a:23:ff:c0:52:b4:13:f7:69:1e:18:07:ec:be:fb: c5:79:25:fd:a6:97:5e:71:41:cc:e7:1f:58:10:b3:58:60:9e: 88:e0:90:07:ea:04:fe:93:cc:d9:8e:df:56:d4:ee:7d:b8:05: 10:ac:5f:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPM/S6RxmBApUqrZsTR681VbiRCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBQjQyOUM0NTc5Nzg1MzQ4RThCMERGRjQ4OTM3NzE2 RTk3MDdGQTAeFw0yNjA5MjUwOTU4MDRaFw0yNjA5MjYxMTUwMDRaMDMxMTAvBgNV BAMTKDM5ODFCQUQzQTEwNDdGOEQxNThERTlGNjM1RkZBMTk3MUJDOTI5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDPIk0QuAJyEK6h1vaQEXugXv EGi10KWva92gKrrhlKmMyIHVsIfO3kaTY3yVAdq1/7evM9nbC3Ucg3qWcaA+cUZj hmRp7Y/d5rGTb+fdMkNHh801aiq2A4Qp73BqndUjmj3xOE2SLSu7G+32GKAKWdIJ ktzpil82aIUzv9dLMrqyfa+lDj1wWyoNc2uWkUJW21CqbunV9lfdoJ6YzflhLnjT 3OUY6gKyGZJ48D9Pu0sF+xlu8sHM0Gs5ug4PthClrOs9jDo73hj+VAjvZQNKuMNV QqC/sSCp+cYoPTl3locKmb0meIofsGxtuJB4ZZfrr3HXY7HwNejNpS7P6k6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOYG606EEf40Vjen2Nf+hlxvJKcEwHwYDVR0j BBgwFoAUeKtCnEV5eFNI6LDf9Ik3cW6XB/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVmMzgxNTctYjVlOC00Y2JjLWJlMjEtZDE3NjE0NWE0NTY5LzAvNzhBQjQyOUM0 NTc5Nzg1MzQ4RThCMERGRjQ4OTM3NzE2RTk3MDdGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEFCNDI5QzQ1Nzk3ODUzNDhFOEIwREZGNDg5Mzc3MTZFOTcw N0ZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVmMzgxNTctYjVlOC00Y2JjLWJl MjEtZDE3NjE0NWE0NTY5LzAvNzhBQjQyOUM0NTc5Nzg1MzQ4RThCMERGRjQ4OTM3 NzE2RTk3MDdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDhHht42wm8u+wNM7RCMFxvha5gslrjYo8B CXMmqRPiPBj6JT0Ml+AbPUr/6D+jht3DF69likrKX1sFuN0mjZNOIY/rzHPEnyyW fv0DIBR88XukiL/GZ6Sic67Lui+PcRSS0Wn+Y8n1KF0wmgaIkVh7bomi1cWoOCcj QmVrzrJLuv23xhGdgg1dhzODgbH75NC91/1PRIrRsGWjtD0z30FAMiJSlAZMHvCi 2gi8K5UoXKFEfX2oMG7J81JB3mben9S4NQiUVhQzZQoj/8BStBP3aR4YB+y++8V5 Jf2ml15xQcznH1gQs1hgnojgkAfqBP6TzNmO31bU7n24BRCsXyI= -----END CERTIFICATE-----Generated at Fri Sep 25 14:23:43 2026 by rpki-client