$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft File: B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft (raw, json) Hash identifier: n1h9ofiR6dlqSwR7BsW4DbtkwMhJOeNeWLqdrPEBNh0= Subject key identifier: DE:30:37:BB:B7:0A:C1:BE:9A:15:4C:2C:FA:13:A0:45:F9:E9:AE:15 Authority key identifier: B7:8F:92:8B:08:0D:A5:B0:F0:37:D7:BE:CB:8B:94:1F:49:D5:BC:7A Certificate issuer: /CN=B78F928B080DA5B0F037D7BECB8B941F49D5BC7A Certificate serial: 12E4792518B3F42EFEAB48F77240CF5590571C3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft Manifest number: 0E Signing time: Tue 12 May 2026 02:46:18 +0000 Manifest this update: Tue 12 May 2026 02:41:18 +0000 Manifest next update: Wed 13 May 2026 06:31:18 +0000 Files and hashes: 1: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: pNmag7DqpLNIaTSD2kV29A9NQgGNcDVD3R4gOpGFNMo=) 2: B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.crl (hash: WmxAFyaEV77/eG3+lMwHfgbtkooEa4k9uMaDYWve2tU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.crl rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e4:79:25:18:b3:f4:2e:fe:ab:48:f7:72:40:cf:55:90:57:1c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B78F928B080DA5B0F037D7BECB8B941F49D5BC7A Validity Not Before: May 12 02:41:18 2026 GMT Not After : May 13 06:31:18 2026 GMT Subject: CN=DE3037BBB70AC1BE9A154C2CFA13A045F9E9AE15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:24:dc:12:45:6b:96:c6:63:12:4c:ca:8d: b0:8c:2e:3e:3c:c2:0c:42:78:5b:25:cd:f9:b1:32: d7:87:52:01:55:a7:62:34:ed:ab:b5:9d:a6:fc:42: a8:3e:9f:ff:f7:ff:07:98:35:cd:9d:50:c3:54:85: 7b:a0:55:be:57:7b:35:06:a9:82:7b:6a:90:f0:84: e5:de:cd:c9:1b:d8:12:c7:24:8a:b4:20:9e:d2:46: 0b:d8:e5:b3:89:12:c2:16:7a:68:cf:d6:d3:e6:b4: 2f:57:e9:8b:0e:66:2f:d6:4f:df:63:01:be:8d:fc: 87:38:82:2e:24:71:07:75:55:99:a4:9e:62:03:b1: 76:c8:d3:4d:ba:2f:67:ec:3d:fb:a3:6f:90:32:44: 91:8e:73:ea:e9:af:54:8e:f9:18:45:65:d9:56:c5: 50:9e:7e:5c:63:e4:92:03:b0:6a:ff:35:45:9a:ff: 95:9c:a5:85:76:fa:1d:74:27:23:b4:0d:a6:05:f3: 6a:36:4c:bb:92:dc:fb:8c:96:a7:23:49:f7:2f:89: 01:61:aa:ef:f9:5d:b8:4d:b2:f3:6b:c3:f9:f9:a8: 37:c0:c0:5f:38:cc:33:97:89:99:d9:cf:fa:0e:07: c4:7a:21:06:d4:56:bf:02:e4:4f:64:d5:11:82:4f: 17:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:30:37:BB:B7:0A:C1:BE:9A:15:4C:2C:FA:13:A0:45:F9:E9:AE:15 X509v3 Authority Key Identifier: keyid:B7:8F:92:8B:08:0D:A5:B0:F0:37:D7:BE:CB:8B:94:1F:49:D5:BC:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:67:93:22:8d:0f:6a:de:f5:f2:1a:31:03:f2:14:38:a0:fa: 8c:74:16:3c:34:70:00:ce:25:ef:17:c8:df:bf:89:74:f3:85: d0:90:2e:5f:d0:91:11:1f:09:6a:24:83:42:40:2c:e7:91:9c: 86:3c:36:ad:c3:92:c8:41:92:78:19:09:14:64:5d:61:f1:87: 11:bd:9e:38:d6:8a:7f:ed:bf:12:f6:e4:26:58:7f:1f:af:2a: 85:40:3e:73:4e:19:4e:e7:8e:77:76:35:93:6b:df:74:dc:b4: 1b:23:25:22:04:1a:a2:e2:15:79:ec:ab:95:85:e4:8b:d5:c8: 2c:87:02:af:dd:bd:dc:d1:94:62:d2:38:31:b3:70:14:98:83: 41:b5:24:8f:56:27:5d:6a:9b:cb:2c:76:2a:44:f9:d2:4a:df: 89:ff:71:20:cd:c5:56:46:5c:42:e3:0b:b8:4c:bc:38:c3:68: d4:4c:74:57:0c:0e:13:79:ad:a4:8d:36:b3:30:a8:39:9f:bb: 2a:d9:4d:07:06:9d:25:c6:2a:53:07:f8:ba:cb:5a:27:fb:47: c1:43:a4:9c:f3:be:31:7c:f1:36:60:b7:61:ea:63:0f:05:d9: df:9a:df:d2:44:c4:f4:8c:c4:0e:a6:96:38:61:ef:cd:06:1f: c0:fe:6d:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuR5JRiz9C7+q0j3ckDPVZBXHDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc4RjkyOEIwODBEQTVCMEYwMzdEN0JFQ0I4Qjk0MUY0 OUQ1QkM3QTAeFw0yNjA1MTIwMjQxMThaFw0yNjA1MTMwNjMxMThaMDMxMTAvBgNV BAMTKERFMzAzN0JCQjcwQUMxQkU5QTE1NEMyQ0ZBMTNBMDQ1RjlFOUFFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMyTcEkVrlsZjEkzKjbCMLj48 wgxCeFslzfmxMteHUgFVp2I07au1nab8Qqg+n//3/weYNc2dUMNUhXugVb5XezUG qYJ7apDwhOXezckb2BLHJIq0IJ7SRgvY5bOJEsIWemjP1tPmtC9X6YsOZi/WT99j Ab6N/Ic4gi4kcQd1VZmknmIDsXbI0026L2fsPfujb5AyRJGOc+rpr1SO+RhFZdlW xVCeflxj5JIDsGr/NUWa/5WcpYV2+h10JyO0DaYF82o2TLuS3PuMlqcjSfcviQFh qu/5XbhNsvNrw/n5qDfAwF84zDOXiZnZz/oOB8R6IQbUVr8C5E9k1RGCTxfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3jA3u7cKwb6aFUws+hOgRfnprhUwHwYDVR0j BBgwFoAUt4+SiwgNpbDwN9e+y4uUH0nVvHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJiZTRmMTgtY2VlZC00ZjIzLWEwYTQtZTI0ZTA0ZDMyMGQzLzAvQjc4RjkyOEIw ODBEQTVCMEYwMzdEN0JFQ0I4Qjk0MUY0OUQ1QkM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzhGOTI4QjA4MERBNUIwRjAzN0Q3QkVDQjhCOTQxRjQ5RDVC QzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvQjc4RjkyOEIwODBEQTVCMEYwMzdEN0JFQ0I4Qjk0 MUY0OUQ1QkM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtnkyKND2re9fIaMQPyFDig+ox0Fjw0cADO Je8XyN+/iXTzhdCQLl/QkREfCWokg0JALOeRnIY8Nq3DkshBkngZCRRkXWHxhxG9 njjWin/tvxL25CZYfx+vKoVAPnNOGU7njnd2NZNr33TctBsjJSIEGqLiFXnsq5WF 5IvVyCyHAq/dvdzRlGLSODGzcBSYg0G1JI9WJ11qm8ssdipE+dJK34n/cSDNxVZG XELjC7hMvDjDaNRMdFcMDhN5raSNNrMwqDmfuyrZTQcGnSXGKlMH+LrLWif7R8FD pJzzvjF88TZgt2HqYw8F2d+a39JExPSMxA6mljhh780GH8D+bR8= -----END CERTIFICATE-----Generated at Tue May 12 22:39:59 2026 by rpki-client