$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft File: CB78BE291F4C68861081295C7864E4DC5943795A.mft (raw, json) Hash identifier: dVkfv67lQf7IBOC54+FJU4FpeuxFBdde9H93yDc+9yQ= Subject key identifier: 27:E4:30:BE:FA:CB:88:88:52:58:3C:D8:B0:78:E4:75:FB:DA:A1:96 Authority key identifier: CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A Certificate issuer: /CN=CB78BE291F4C68861081295C7864E4DC5943795A Certificate serial: 0945A4458EC87C2BF2331F45C8781E20207CB5A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 12:37:24 +0000 Manifest this update: Thu 03 Sep 2026 12:32:24 +0000 Manifest next update: Fri 04 Sep 2026 15:42:24 +0000 Files and hashes: 1: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: Sw+OUdszsTIUzZ+1lqD/i8/2BPm17GQD5VfJxVXp+AM=) 2: CB78BE291F4C68861081295C7864E4DC5943795A.crl (hash: fKR1BY9g2juVBI7AhvDYRu5JP2YBSJaz3jpyWdfnNHc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:45:a4:45:8e:c8:7c:2b:f2:33:1f:45:c8:78:1e:20:20:7c:b5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB78BE291F4C68861081295C7864E4DC5943795A Validity Not Before: Sep 3 12:32:24 2026 GMT Not After : Sep 4 15:42:24 2026 GMT Subject: CN=27E430BEFACB888852583CD8B078E475FBDAA196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4a:2e:62:bd:a5:c7:31:32:e2:c5:8f:f0:76: 07:51:db:d8:84:89:c4:60:b7:28:ab:95:34:98:25: b7:70:37:1f:14:bf:7c:d1:96:d8:87:96:f7:d0:b4: 35:89:fe:63:4f:81:40:fa:42:b5:10:2b:9b:6b:7d: dc:cd:fd:93:8a:6e:61:32:b6:6f:a0:7a:c1:37:e1: 51:49:a1:47:5a:c4:4f:53:c3:d1:83:4e:52:11:e1: 66:a2:33:64:ba:cd:d1:5c:48:f3:14:58:73:38:31: f6:11:dc:0b:95:aa:6b:59:ce:17:96:c0:c2:76:71: 47:66:98:9c:4b:65:17:7c:11:24:50:f2:f9:cb:37: 94:23:0c:f6:34:9d:0f:f0:5d:41:c4:25:45:31:8a: 1d:ea:c5:8f:55:ba:49:cf:e2:fc:2f:a7:11:71:5a: a7:95:4f:04:0f:48:81:f1:4c:53:6a:13:81:98:bf: 45:dc:ce:ec:f9:4b:1d:b0:3f:02:e9:ec:ad:69:61: 9c:64:d1:05:af:1a:c2:36:be:d5:c9:2a:4d:dd:af: 42:32:a1:c7:e6:b3:f2:1a:1d:94:4f:6b:30:b7:54: 79:3d:d9:47:a4:92:94:6d:62:31:48:85:96:0d:44: 0d:4e:8f:7d:b0:5a:2e:1b:31:91:65:93:56:64:29: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E4:30:BE:FA:CB:88:88:52:58:3C:D8:B0:78:E4:75:FB:DA:A1:96 X509v3 Authority Key Identifier: keyid:CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0f:2b:48:66:07:08:34:21:98:77:e7:f2:25:27:6c:33:85: e9:60:d3:0c:4b:77:54:13:5d:aa:f2:fb:ae:76:af:82:05:2c: 49:7d:bf:4b:67:06:01:dc:f5:9c:95:21:ff:8e:ef:94:5d:e4: e2:dd:da:b4:9c:79:53:4e:24:d3:e8:5c:e0:72:36:db:e0:c9: 0b:ba:0e:20:6b:4c:94:e2:31:4a:c8:01:77:cb:f5:19:32:bd: 66:f4:4b:47:ed:d1:64:0f:12:8d:54:58:c8:6c:f4:80:8c:e3: e9:ad:25:c0:f2:ee:d9:b6:2a:fc:c0:cc:1f:0c:9c:89:bb:39: b4:b8:02:40:cc:be:cb:54:4a:86:af:6b:8f:ca:ad:fe:fb:56: 57:b9:b5:0f:13:86:e3:2a:d1:fb:11:7d:2b:69:2f:d9:78:05: cd:bc:2b:b3:6f:ac:6c:c4:37:12:6c:9c:dc:4d:03:f2:47:77: 68:5a:d6:d4:a5:c1:b9:cd:f8:a5:9b:03:f9:a2:c2:2e:ef:b1: 19:04:66:a9:21:87:fc:9f:ac:06:d4:d6:98:d6:da:c8:f3:c2: 95:cb:62:90:b7:fd:f9:f6:d8:d4:a1:d5:22:c9:d1:e4:a4:81: fe:af:24:5d:6c:cb:33:ae:0e:28:e0:6c:70:a8:15:45:1e:06: 7d:80:c9:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUWkRY7IfCvyMx9FyHgeICB8takwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0REM1 OTQzNzk1QTAeFw0yNjA5MDMxMjMyMjRaFw0yNjA5MDQxNTQyMjRaMDMxMTAvBgNV BAMTKDI3RTQzMEJFRkFDQjg4ODg1MjU4M0NEOEIwNzhFNDc1RkJEQUExOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSi5ivaXHMTLixY/wdgdR29iE icRgtyirlTSYJbdwNx8Uv3zRltiHlvfQtDWJ/mNPgUD6QrUQK5trfdzN/ZOKbmEy tm+gesE34VFJoUdaxE9Tw9GDTlIR4WaiM2S6zdFcSPMUWHM4MfYR3AuVqmtZzheW wMJ2cUdmmJxLZRd8ESRQ8vnLN5QjDPY0nQ/wXUHEJUUxih3qxY9VuknP4vwvpxFx WqeVTwQPSIHxTFNqE4GYv0Xczuz5Sx2wPwLp7K1pYZxk0QWvGsI2vtXJKk3dr0Iy ocfms/IaHZRPazC3VHk92UekkpRtYjFIhZYNRA1Oj32wWi4bMZFlk1ZkKSqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ+QwvvrLiIhSWDzYsHjkdfvaoZYwHwYDVR0j BBgwFoAUy3i+KR9MaIYQgSlceGTk3FlDeVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmNiOWJhN2YtZWZkMS00OTk0LWEyYTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkx RjRDNjg4NjEwODEyOTVDNzg2NEU0REM1OTQzNzk1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjc4QkUyOTFGNEM2ODg2MTA4MTI5NUM3ODY0RTREQzU5NDM3 OTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0 REM1OTQzNzk1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQPK0hmBwg0IZh35/IlJ2wzhelg0wxLd1QT Xary+652r4IFLEl9v0tnBgHc9ZyVIf+O75Rd5OLd2rSceVNOJNPoXOByNtvgyQu6 DiBrTJTiMUrIAXfL9RkyvWb0S0ft0WQPEo1UWMhs9ICM4+mtJcDy7tm2KvzAzB8M nIm7ObS4AkDMvstUSoava4/Krf77Vle5tQ8ThuMq0fsRfStpL9l4Bc28K7NvrGzE NxJsnNxNA/JHd2ha1tSlwbnN+KWbA/miwi7vsRkEZqkhh/yfrAbU1pjW2sjzwpXL YpC3/fn22NSh1SLJ0eSkgf6vJF1syzOuDijgbHCoFUUeBn2AyXI= -----END CERTIFICATE-----Generated at Thu Sep 3 18:58:03 2026 by rpki-client