$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft File: B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft (raw, json) Hash identifier: pOj+MCnMigA13+JgYxeqvJP1bVsdNIxsMBn5yZ0XNms= Subject key identifier: 15:45:8B:73:71:9B:E2:78:68:91:B1:2B:63:11:3C:6E:D9:A2:68:66 Authority key identifier: B7:8F:92:8B:08:0D:A5:B0:F0:37:D7:BE:CB:8B:94:1F:49:D5:BC:7A Certificate issuer: /CN=B78F928B080DA5B0F037D7BECB8B941F49D5BC7A Certificate serial: 3121E8826EA90A960DB1012AF1B69896B4ADCD41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft Manifest number: CA Signing time: Tue 29 Sep 2026 07:59:14 +0000 Manifest this update: Tue 29 Sep 2026 07:54:14 +0000 Manifest next update: Wed 30 Sep 2026 11:10:14 +0000 Files and hashes: 1: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: pNmag7DqpLNIaTSD2kV29A9NQgGNcDVD3R4gOpGFNMo=) 2: B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.crl (hash: jSmMOP3lpSq7QYZFqq/ULl2uFLtkGAuNheKjYoLDxw0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.crl rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:21:e8:82:6e:a9:0a:96:0d:b1:01:2a:f1:b6:98:96:b4:ad:cd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B78F928B080DA5B0F037D7BECB8B941F49D5BC7A Validity Not Before: Sep 29 07:54:14 2026 GMT Not After : Sep 30 11:10:14 2026 GMT Subject: CN=15458B73719BE2786891B12B63113C6ED9A26866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:92:73:34:8a:bf:9d:cf:f2:65:7b:79:30: 0b:ec:37:a1:09:44:b3:af:10:5c:84:a2:66:66:01: 9f:d9:34:30:69:cf:fe:42:2a:eb:8c:12:f7:1b:f7: d1:ad:ca:57:05:e4:a5:55:63:3c:f6:33:df:c9:51: 51:7c:4f:df:e8:c1:20:8d:85:1f:f0:e6:c1:9f:13: 8c:9a:b7:3e:69:fa:0a:2a:a4:f0:ca:52:11:99:23: b8:4f:be:dc:22:61:80:ad:59:9c:ee:e9:7a:e8:be: 7a:4c:dc:9b:24:7e:69:dc:ba:4a:9b:fb:0e:bc:03: 1b:a8:4b:3d:92:b0:6a:bb:6a:22:4b:ca:24:35:5b: 7f:44:9c:a3:95:4c:cc:62:e9:e7:31:63:75:44:d9: 5e:5f:98:1b:91:92:9f:67:22:f2:44:9b:af:e7:ef: b3:e8:70:46:a5:2f:25:b5:f7:f1:15:97:46:ba:a1: ec:df:32:1a:0f:aa:61:44:c7:42:6b:b7:ef:14:bd: 30:64:bf:c1:35:ea:47:11:db:d1:4c:40:b7:72:0e: 40:f4:06:b3:19:5a:f8:f8:75:f8:cd:78:36:e5:32: 64:9c:2a:b8:9f:c3:62:4c:c2:87:29:85:2e:2d:87: ca:ff:e0:44:cb:00:94:4f:61:1e:89:92:d3:4a:70: 9f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:45:8B:73:71:9B:E2:78:68:91:B1:2B:63:11:3C:6E:D9:A2:68:66 X509v3 Authority Key Identifier: keyid:B7:8F:92:8B:08:0D:A5:B0:F0:37:D7:BE:CB:8B:94:1F:49:D5:BC:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ca:ce:d7:6d:95:a7:1d:39:dd:c0:03:3c:20:a4:b4:80:ef: 7d:4c:39:b5:bc:a1:f9:be:e0:67:9a:3e:15:7e:d1:dd:1c:c5: 67:32:a2:39:5c:68:88:19:2a:8a:92:e4:2e:2b:7a:f7:46:02: 23:18:b0:d4:3b:ee:1e:a7:08:86:89:4c:39:72:36:59:9e:d3: 67:9d:7a:c7:4c:1e:43:69:6b:0e:c9:df:39:97:89:c8:7a:ef: e8:43:03:13:77:00:fa:74:26:c7:e5:f9:07:a0:16:e7:db:4a: cd:37:b1:11:09:e5:eb:0e:5a:83:51:2c:e8:db:04:62:c5:f1: 51:67:5c:b6:5c:8b:5a:6a:f0:0a:6f:e3:ed:5b:71:f3:a3:e4: cc:5a:3a:6e:b7:4b:dc:e2:1c:5c:ea:86:ec:42:0f:5b:8d:98: a1:23:61:76:2d:9b:c0:99:ec:c3:37:ff:38:c2:a5:45:70:52: d5:2d:3c:4e:fe:8d:4e:40:41:9b:23:02:d4:a6:94:78:62:90: 7e:f6:0f:ea:04:52:14:28:2c:24:06:c0:78:93:a9:5b:ac:1f: 61:d6:ea:9c:22:9e:f8:bb:0f:1a:7d:48:b0:bd:92:39:92:99: 31:bb:b2:61:11:f9:6e:d9:e7:d5:4f:3c:75:03:85:b8:64:5f: 17:fa:2d:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSHogm6pCpYNsQEq8baYlrStzUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc4RjkyOEIwODBEQTVCMEYwMzdEN0JFQ0I4Qjk0MUY0 OUQ1QkM3QTAeFw0yNjA5MjkwNzU0MTRaFw0yNjA5MzAxMTEwMTRaMDMxMTAvBgNV BAMTKDE1NDU4QjczNzE5QkUyNzg2ODkxQjEyQjYzMTEzQzZFRDlBMjY4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDypJzNIq/nc/yZXt5MAvsN6EJ RLOvEFyEomZmAZ/ZNDBpz/5CKuuMEvcb99GtylcF5KVVYzz2M9/JUVF8T9/owSCN hR/w5sGfE4yatz5p+goqpPDKUhGZI7hPvtwiYYCtWZzu6XrovnpM3Jskfmncukqb +w68AxuoSz2SsGq7aiJLyiQ1W39EnKOVTMxi6ecxY3VE2V5fmBuRkp9nIvJEm6/n 77PocEalLyW19/EVl0a6oezfMhoPqmFEx0Jrt+8UvTBkv8E16kcR29FMQLdyDkD0 BrMZWvj4dfjNeDblMmScKrifw2JMwocphS4th8r/4ETLAJRPYR6JktNKcJ9lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUWLc3Gb4nhokbErYxE8btmiaGYwHwYDVR0j BBgwFoAUt4+SiwgNpbDwN9e+y4uUH0nVvHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJiZTRmMTgtY2VlZC00ZjIzLWEwYTQtZTI0ZTA0ZDMyMGQzLzAvQjc4RjkyOEIw ODBEQTVCMEYwMzdEN0JFQ0I4Qjk0MUY0OUQ1QkM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzhGOTI4QjA4MERBNUIwRjAzN0Q3QkVDQjhCOTQxRjQ5RDVC QzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvQjc4RjkyOEIwODBEQTVCMEYwMzdEN0JFQ0I4Qjk0 MUY0OUQ1QkM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfKztdtlacdOd3AAzwgpLSA731MObW8ofm+ 4GeaPhV+0d0cxWcyojlcaIgZKoqS5C4revdGAiMYsNQ77h6nCIaJTDlyNlme02ed esdMHkNpaw7J3zmXich67+hDAxN3APp0Jsfl+QegFufbSs03sREJ5esOWoNRLOjb BGLF8VFnXLZci1pq8Apv4+1bcfOj5MxaOm63S9ziHFzqhuxCD1uNmKEjYXYtm8CZ 7MM3/zjCpUVwUtUtPE7+jU5AQZsjAtSmlHhikH72D+oEUhQoLCQGwHiTqVusH2HW 6pwinvi7Dxp9SLC9kjmSmTG7smER+W7Z59VPPHUDhbhkXxf6LVA= -----END CERTIFICATE-----Generated at Tue Sep 29 19:40:14 2026 by rpki-client