$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft File: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft (raw, json) Hash identifier: yvTzFkWo60jzq7G8KMWyaINPRPKfHHxV7g7l6k7Z1NI= Subject key identifier: 64:22:97:E9:9C:47:1C:68:4B:14:A8:DE:1F:25:C3:6E:84:BD:95:3E Authority key identifier: 78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA Certificate issuer: /CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Certificate serial: 22BA2066B75F872DAD7D38E2516F94B16743810A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:10:03 +0000 Manifest this update: Tue 02 Jun 2026 12:05:03 +0000 Manifest next update: Wed 03 Jun 2026 14:50:03 +0000 Files and hashes: 1: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl (hash: RQF/BJJJke2xrjJs6bShINdF1lpAvLqr8ttZg8cLhVA=) 2: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: rXNV58EDW9NtYxw1tsZgUKFdyItW8rTbx+PqrdGXOd8=) 3: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: lMkQ1C6m2HGJs+HDPBBo+GFoglPLrUt0++vMeyTVBPY=) 4: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: 2xL5IzsEGAiAsA9S7Fekuh6FO3TOT5kNHOKLcjwwo5c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ba:20:66:b7:5f:87:2d:ad:7d:38:e2:51:6f:94:b1:67:43:81:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Validity Not Before: Jun 2 12:05:03 2026 GMT Not After : Jun 3 14:50:03 2026 GMT Subject: CN=642297E99C471C684B14A8DE1F25C36E84BD953E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:a7:d3:a7:b5:bd:fa:39:59:75:3b:e5:21: 55:b1:f1:6f:de:b2:e5:5f:be:4a:d6:56:ff:09:ac: 18:8d:77:c0:73:54:c9:db:cd:c6:0a:2d:5b:0c:f7: 75:ee:60:51:8e:24:b6:1f:09:d1:06:2e:77:3e:b0: a7:ee:26:9c:b3:33:f0:43:10:ba:dc:9d:b3:07:31: d9:5d:61:cd:60:2b:ba:3f:42:16:22:4e:2f:a2:5c: 9a:06:e9:2f:af:8b:16:1d:48:4e:11:50:81:95:c7: 84:6d:0d:ed:2a:9f:8e:5a:82:b0:ab:26:73:21:be: e9:f6:f2:c9:15:3d:93:be:50:60:cd:1e:82:56:ac: 8b:99:72:a8:4e:61:76:d3:3f:0a:ce:88:aa:12:43: df:0d:64:49:b3:61:e7:3f:55:18:1e:c7:41:dc:10: 94:4b:1d:cd:4e:98:4c:75:ea:22:aa:7d:5e:db:87: 83:45:87:6c:e4:3f:aa:4a:a6:29:45:8d:37:72:2a: 34:50:55:a5:09:74:ea:76:a6:ae:e9:3f:0d:6b:1f: 40:fa:87:00:2f:92:01:f6:18:e6:09:31:ec:cd:93: cf:db:7d:d2:c7:99:05:0d:bb:4f:24:99:44:f3:dd: 5c:20:77:31:31:ae:3f:38:9a:f8:a1:b6:64:c5:69: 77:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:22:97:E9:9C:47:1C:68:4B:14:A8:DE:1F:25:C3:6E:84:BD:95:3E X509v3 Authority Key Identifier: keyid:78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:19:b5:c2:ac:e9:3f:b0:0c:0c:1c:c7:02:46:7e:ab:5d:20: d1:5c:d1:d8:1f:40:a5:b4:16:26:c8:0e:fa:9e:c1:0c:e6:6b: 31:32:d7:45:f8:f9:e8:51:21:57:bf:fd:bd:ad:02:c8:41:3d: bf:c5:e9:16:46:c6:2a:95:76:21:75:ee:26:19:20:24:f0:60: 19:a7:b2:82:23:e2:51:79:a8:7d:9d:25:2f:16:90:54:31:92: 89:c1:07:14:96:e4:82:17:de:c6:f6:c7:9e:a8:29:75:c5:90: 9b:81:7c:2c:b7:4c:fd:f6:80:67:d8:cc:59:36:de:a1:b5:77: ca:1a:dd:14:80:d1:e9:58:a6:dd:ee:5d:6c:6e:0c:6d:37:a1: 6f:c8:5e:e4:d4:cb:e5:c6:71:47:81:24:b4:be:d1:cc:1b:f8: 2d:38:2a:74:35:81:65:4a:e0:11:30:e1:02:db:24:cd:10:dc: 85:7a:a3:76:d3:2c:4b:85:68:dc:93:48:30:9b:92:f6:02:ae: ce:20:7d:fa:e0:63:0d:dc:8d:ab:34:af:04:c5:c5:f3:d5:71: 79:51:18:0e:a3:22:e7:17:81:57:98:78:90:fb:b7:15:db:fb: 3c:38:b0:c2:8e:86:eb:76:31:d4:da:88:08:50:ca:d8:5a:3c: be:81:7e:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIrogZrdfhy2tfTjiUW+UsWdDgQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJB MTM2RDJFQTAeFw0yNjA2MDIxMjA1MDNaFw0yNjA2MDMxNDUwMDNaMDMxMTAvBgNV BAMTKDY0MjI5N0U5OUM0NzFDNjg0QjE0QThERTFGMjVDMzZFODRCRDk1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/KfTp7W9+jlZdTvlIVWx8W/e suVfvkrWVv8JrBiNd8BzVMnbzcYKLVsM93XuYFGOJLYfCdEGLnc+sKfuJpyzM/BD ELrcnbMHMdldYc1gK7o/QhYiTi+iXJoG6S+vixYdSE4RUIGVx4RtDe0qn45agrCr JnMhvun28skVPZO+UGDNHoJWrIuZcqhOYXbTPwrOiKoSQ98NZEmzYec/VRgex0Hc EJRLHc1OmEx16iKqfV7bh4NFh2zkP6pKpilFjTdyKjRQVaUJdOp2pq7pPw1rH0D6 hwAvkgH2GOYJMezNk8/bfdLHmQUNu08kmUTz3VwgdzExrj84mvihtmTFaXevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZCKX6ZxHHGhLFKjeHyXDboS9lT4wHwYDVR0j BBgwFoAUeLIfzFfpuRJPFdW3xv4UUqE20uowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyMzRkNTAtNjdlMS00MTljLTg1YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1 N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJBMTM2RDJFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEIyMUZDQzU3RTlCOTEyNEYxNUQ1QjdDNkZFMTQ1MkExMzZE MkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0 NTJBMTM2RDJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwZtcKs6T+wDAwcxwJGfqtdINFc0dgfQKW0 FibIDvqewQzmazEy10X4+ehRIVe//b2tAshBPb/F6RZGxiqVdiF17iYZICTwYBmn soIj4lF5qH2dJS8WkFQxkonBBxSW5IIX3sb2x56oKXXFkJuBfCy3TP32gGfYzFk2 3qG1d8oa3RSA0elYpt3uXWxuDG03oW/IXuTUy+XGcUeBJLS+0cwb+C04KnQ1gWVK 4BEw4QLbJM0Q3IV6o3bTLEuFaNyTSDCbkvYCrs4gffrgYw3cjas0rwTFxfPVcXlR GA6jIucXgVeYeJD7txXb+zw4sMKOhut2MdTaiAhQythaPL6Bfjs= -----END CERTIFICATE-----Generated at Wed Jun 3 03:20:57 2026 by rpki-client