$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft File: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft (raw, json) Hash identifier: /u4X5WCSEVYAtLiO73ix9MbRtKgRLbNvWlZOKZssqog= Subject key identifier: 7E:C9:D1:1F:ED:58:E6:1C:D1:CC:B7:E8:75:66:D8:27:C5:DC:92:45 Authority key identifier: 78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA Certificate issuer: /CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Certificate serial: 2497EE29DD09C7A216A5A05BE2C4503A2A61C9B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft Manifest number: 68 Signing time: Sun 19 Jul 2026 16:52:39 +0000 Manifest this update: Sun 19 Jul 2026 16:47:39 +0000 Manifest next update: Mon 20 Jul 2026 17:47:39 +0000 Files and hashes: 1: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl (hash: VDh4qD3KcgaTXw83rlu/x/U9vqU34FYuh81LZ8J2s1Q=) 2: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: lMkQ1C6m2HGJs+HDPBBo+GFoglPLrUt0++vMeyTVBPY=) 3: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: 2xL5IzsEGAiAsA9S7Fekuh6FO3TOT5kNHOKLcjwwo5c=) 4: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: rXNV58EDW9NtYxw1tsZgUKFdyItW8rTbx+PqrdGXOd8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:97:ee:29:dd:09:c7:a2:16:a5:a0:5b:e2:c4:50:3a:2a:61:c9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Validity Not Before: Jul 19 16:47:39 2026 GMT Not After : Jul 20 17:47:39 2026 GMT Subject: CN=7EC9D11FED58E61CD1CCB7E87566D827C5DC9245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:bd:b9:2b:e6:ad:da:6f:c0:9a:9c:42:a5: 06:b8:b0:15:45:0e:77:d3:b4:5f:9a:75:f7:56:98: c2:f3:13:03:ad:00:24:70:08:e7:ae:80:18:36:6a: 96:fd:28:d3:ca:41:5b:7e:1a:fa:ef:d9:15:94:30: d2:66:6a:e1:dc:e4:74:a4:37:48:4b:9f:2c:82:54: cc:a6:fc:ed:8f:bc:aa:9d:18:38:5a:4d:43:8d:5c: 5e:89:fa:3b:2f:88:08:b0:d9:3f:1d:de:69:c8:9d: 57:d0:4e:35:03:87:d6:da:f0:db:f0:43:f9:6f:56: d1:ad:31:b0:a5:a0:64:c1:e1:2f:75:d0:36:0e:f0: 0e:a2:38:f9:6b:05:22:16:87:e9:11:d9:09:8d:1d: d5:bd:65:ef:0d:a9:1b:c2:97:25:ec:3f:04:b1:2e: ea:2d:73:d8:57:76:0b:ce:dd:b1:01:78:cb:cd:df: e8:4b:33:a6:59:83:03:67:de:0b:d5:7b:24:0a:de: af:de:78:57:c4:05:49:79:a5:2a:5a:e0:ee:b0:55: 22:96:36:59:b6:2d:37:79:ee:7d:6c:ad:7a:9e:a1: 32:59:6e:1c:a0:47:b8:44:7c:c5:84:34:9c:3e:62: b3:92:b6:88:3c:ff:72:e9:8c:5f:7f:58:ad:ac:a3: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C9:D1:1F:ED:58:E6:1C:D1:CC:B7:E8:75:66:D8:27:C5:DC:92:45 X509v3 Authority Key Identifier: keyid:78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:3f:e6:cc:35:6e:70:5a:b3:a5:5b:97:d0:ed:c0:d7:06:5f: 1a:94:bd:1f:f3:1f:86:36:50:f4:97:6b:a0:88:75:dd:20:e1: 1b:10:9b:5f:9c:b4:06:1f:b3:34:be:b5:83:71:6a:04:ac:27: bb:fb:8a:0d:7d:b2:94:ef:10:4f:bd:44:ae:2a:72:6b:b6:8a: 9e:2f:43:4a:80:a7:87:27:4e:c4:92:f3:e6:e6:e2:e4:86:00: a4:4d:e3:ef:3a:eb:30:37:d6:bd:0c:57:d4:c5:74:90:69:28: b0:6f:97:ab:0e:89:60:3f:2a:e0:a5:f5:f4:5f:b9:33:f4:c0: e6:8d:21:e7:7f:0b:48:cc:8d:d2:00:fa:ff:9a:02:c6:50:6f: 5f:31:33:ed:89:16:d0:f3:56:2d:bc:84:14:b1:09:b2:97:73: de:a8:ef:7a:1f:0d:ac:66:c7:17:35:0d:32:61:2d:ab:50:d8: f9:cc:c7:7d:9d:dc:9a:da:cb:fb:31:48:56:24:b3:3b:b4:a9: 39:c6:f3:a3:f0:6a:c2:15:2f:fe:d0:b0:0c:f9:74:92:7f:9d: ce:60:2a:23:5a:1f:62:f7:6f:a7:b5:24:e3:cd:96:4d:b5:a0: 54:b5:de:ab:1d:1c:a1:82:23:eb:7b:8e:da:b1:d3:d0:b7:b5: 5a:74:32:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJfuKd0Jx6IWpaBb4sRQOiphybkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJB MTM2RDJFQTAeFw0yNjA3MTkxNjQ3MzlaFw0yNjA3MjAxNzQ3MzlaMDMxMTAvBgNV BAMTKDdFQzlEMTFGRUQ1OEU2MUNEMUNDQjdFODc1NjZEODI3QzVEQzkyNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyr25K+at2m/AmpxCpQa4sBVF DnfTtF+adfdWmMLzEwOtACRwCOeugBg2apb9KNPKQVt+Gvrv2RWUMNJmauHc5HSk N0hLnyyCVMym/O2PvKqdGDhaTUONXF6J+jsviAiw2T8d3mnInVfQTjUDh9ba8Nvw Q/lvVtGtMbCloGTB4S910DYO8A6iOPlrBSIWh+kR2QmNHdW9Ze8NqRvClyXsPwSx Luotc9hXdgvO3bEBeMvN3+hLM6ZZgwNn3gvVeyQK3q/eeFfEBUl5pSpa4O6wVSKW Nlm2LTd57n1srXqeoTJZbhygR7hEfMWENJw+YrOStog8/3LpjF9/WK2so4ytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfsnRH+1Y5hzRzLfodWbYJ8XckkUwHwYDVR0j BBgwFoAUeLIfzFfpuRJPFdW3xv4UUqE20uowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyMzRkNTAtNjdlMS00MTljLTg1YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1 N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJBMTM2RDJFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEIyMUZDQzU3RTlCOTEyNEYxNUQ1QjdDNkZFMTQ1MkExMzZE MkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0 NTJBMTM2RDJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADM/5sw1bnBas6Vbl9DtwNcGXxqUvR/zH4Y2 UPSXa6CIdd0g4RsQm1+ctAYfszS+tYNxagSsJ7v7ig19spTvEE+9RK4qcmu2ip4v Q0qAp4cnTsSS8+bm4uSGAKRN4+866zA31r0MV9TFdJBpKLBvl6sOiWA/KuCl9fRf uTP0wOaNIed/C0jMjdIA+v+aAsZQb18xM+2JFtDzVi28hBSxCbKXc96o73ofDaxm xxc1DTJhLatQ2PnMx32d3Jray/sxSFYkszu0qTnG86PwasIVL/7QsAz5dJJ/nc5g KiNaH2L3b6e1JOPNlk21oFS13qsdHKGCI+t7jtqx09C3tVp0MuA= -----END CERTIFICATE-----Generated at Sun Jul 19 23:15:14 2026 by rpki-client