$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft File: CB78BE291F4C68861081295C7864E4DC5943795A.mft (raw, json) Hash identifier: frRQKmItbuxnvp1pmX913Mv6zqXaV2ii15Y4RgJeMLQ= Subject key identifier: 49:C7:F4:10:AD:93:3E:63:34:4D:BC:38:5D:4F:2A:C2:E7:9A:0B:19 Authority key identifier: CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A Certificate issuer: /CN=CB78BE291F4C68861081295C7864E4DC5943795A Certificate serial: 7FBC507714AA726F26E5B8BD331D1171AE6C6088 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 13:22:23 +0000 Manifest this update: Thu 24 Sep 2026 13:17:23 +0000 Manifest next update: Fri 25 Sep 2026 13:38:23 +0000 Files and hashes: 1: CB78BE291F4C68861081295C7864E4DC5943795A.crl (hash: Cz/QKjexWEeWDFz168zDsVgS0E4DyM94HHCnBaLFXH4=) 2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: Sw+OUdszsTIUzZ+1lqD/i8/2BPm17GQD5VfJxVXp+AM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:bc:50:77:14:aa:72:6f:26:e5:b8:bd:33:1d:11:71:ae:6c:60:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB78BE291F4C68861081295C7864E4DC5943795A Validity Not Before: Sep 24 13:17:23 2026 GMT Not After : Sep 25 13:38:23 2026 GMT Subject: CN=49C7F410AD933E63344DBC385D4F2AC2E79A0B19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f3:b5:ee:75:82:89:b0:3b:6e:a6:6f:54:a6: 40:82:89:3c:24:10:55:9c:1e:b7:58:68:7b:08:07: e5:67:55:df:f9:d6:13:dc:ae:c3:15:18:ff:35:c2: 42:b8:9a:92:08:27:a0:a7:89:c7:e0:cf:8c:35:21: 3b:b2:4a:d9:2f:bb:98:80:e5:32:f8:45:ea:e0:d1: f9:4d:bd:2d:eb:19:a9:42:42:96:62:73:22:9e:8e: 6a:54:f0:c6:d4:ad:b2:aa:92:cd:79:d1:aa:dd:8c: fe:25:b4:de:ff:de:b6:4b:5f:84:0d:cd:6e:75:00: 5b:81:ab:12:f4:05:08:ea:c9:a5:a8:db:35:98:c4: 63:ce:ba:e2:0d:25:13:6b:67:82:b6:dc:89:e3:cd: 95:78:fd:88:6e:4c:a7:4c:4c:84:1c:34:35:bb:33: e7:74:6d:b5:3d:92:c0:96:a5:6a:a8:e1:75:9c:05: 95:ab:a7:fb:9a:75:b9:63:b8:a9:22:87:4a:08:49: 91:b3:3c:51:6d:b0:e5:0d:f1:68:89:2a:20:61:33: 4c:41:ba:15:e5:28:96:b8:df:22:e7:9a:40:bb:b9: e9:e7:fe:ee:ed:70:ce:b9:8b:bf:d4:5e:37:07:67: 62:80:b8:35:ba:d5:85:25:43:c0:91:f1:31:c4:a4: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C7:F4:10:AD:93:3E:63:34:4D:BC:38:5D:4F:2A:C2:E7:9A:0B:19 X509v3 Authority Key Identifier: keyid:CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:98:e9:b0:d0:e9:dc:0d:65:4d:3c:d7:21:88:83:d6:8c:f3: 33:87:3c:d8:71:e9:22:e4:56:32:10:08:5f:29:4d:2a:56:91: 95:c9:c4:a7:ce:8d:15:25:c9:d8:61:a0:7c:2a:c5:cb:40:52: 54:b7:6c:b2:78:30:38:59:a4:1a:e3:3c:67:1f:a1:63:47:d9: 77:8a:78:b1:84:c2:4c:08:f7:59:aa:64:87:a4:00:a9:9e:2a: 3a:71:03:de:df:43:3d:9c:31:e7:f9:b2:c1:3b:0a:6b:1c:c7: 04:4b:5e:93:6a:b6:0d:0c:9a:92:0b:51:07:ce:4b:f7:da:3a: 89:68:cc:6c:19:f5:df:82:73:11:c9:29:fb:44:13:5a:e5:2b: d3:68:30:ad:58:68:06:28:1c:8d:0b:86:f8:e2:9b:a5:30:7a: d6:78:95:82:3f:0c:b8:68:04:5d:21:d6:1f:b4:13:88:60:c6: 71:45:a4:4a:4e:76:1c:b9:8a:60:88:62:bb:b3:56:eb:49:35: 34:02:5b:cb:d3:c5:aa:d9:5c:c1:b4:b2:d2:91:d7:0f:a8:e5: 36:4a:c8:c5:d9:85:d9:d4:53:49:db:07:34:b0:be:6b:07:62: c7:10:b8:cb:78:b2:4e:ff:bb:0b:eb:aa:87:12:9d:18:70:92: 84:19:d7:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7xQdxSqcm8m5bi9Mx0Rca5sYIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0REM1 OTQzNzk1QTAeFw0yNjA5MjQxMzE3MjNaFw0yNjA5MjUxMzM4MjNaMDMxMTAvBgNV BAMTKDQ5QzdGNDEwQUQ5MzNFNjMzNDREQkMzODVENEYyQUMyRTc5QTBCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD87XudYKJsDtupm9UpkCCiTwk EFWcHrdYaHsIB+VnVd/51hPcrsMVGP81wkK4mpIIJ6Cnicfgz4w1ITuyStkvu5iA 5TL4Rerg0flNvS3rGalCQpZicyKejmpU8MbUrbKqks150ardjP4ltN7/3rZLX4QN zW51AFuBqxL0BQjqyaWo2zWYxGPOuuINJRNrZ4K23InjzZV4/YhuTKdMTIQcNDW7 M+d0bbU9ksCWpWqo4XWcBZWrp/uadbljuKkih0oISZGzPFFtsOUN8WiJKiBhM0xB uhXlKJa43yLnmkC7uenn/u7tcM65i7/UXjcHZ2KAuDW61YUlQ8CR8THEpDTJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUScf0EK2TPmM0Tbw4XU8qwueaCxkwHwYDVR0j BBgwFoAUy3i+KR9MaIYQgSlceGTk3FlDeVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmNiOWJhN2YtZWZkMS00OTk0LWEyYTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkx RjRDNjg4NjEwODEyOTVDNzg2NEU0REM1OTQzNzk1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjc4QkUyOTFGNEM2ODg2MTA4MTI5NUM3ODY0RTREQzU5NDM3 OTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0 REM1OTQzNzk1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiY6bDQ6dwNZU081yGIg9aM8zOHPNhx6SLk VjIQCF8pTSpWkZXJxKfOjRUlydhhoHwqxctAUlS3bLJ4MDhZpBrjPGcfoWNH2XeK eLGEwkwI91mqZIekAKmeKjpxA97fQz2cMef5ssE7CmscxwRLXpNqtg0MmpILUQfO S/faOolozGwZ9d+CcxHJKftEE1rlK9NoMK1YaAYoHI0Lhvjim6UwetZ4lYI/DLho BF0h1h+0E4hgxnFFpEpOdhy5imCIYruzVutJNTQCW8vTxarZXMG0stKR1w+o5TZK yMXZhdnUU0nbBzSwvmsHYscQuMt4sk7/uwvrqocSnRhwkoQZ10k= -----END CERTIFICATE-----Generated at Thu Sep 24 21:51:39 2026 by rpki-client