$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft File: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft (raw, json) Hash identifier: J4noxl3WIvqp/t/sS7VA+eZjATcArK1fljZXUUJgY/4= Subject key identifier: 6D:D2:7C:F5:96:7E:D6:D7:48:6C:38:20:8D:15:58:EB:DD:DF:67:DF Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 Certificate issuer: /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Certificate serial: 44DDF784E4E6178944CDF01065AD76789E4D2D04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft Manifest number: E1 Signing time: Mon 20 Apr 2026 18:31:29 +0000 Manifest this update: Mon 20 Apr 2026 18:26:29 +0000 Manifest next update: Thu 23 Apr 2026 22:20:29 +0000 Files and hashes: 1: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: PB5sEIidful8Aq2vYl2cOVwqgMl/aNUVGYhSLpss8uA=) 2: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl (hash: uhgP8ZM4G2BqGvFFn6mc2gc7lhjQ4oQ09zVcDAhclkM=) 3: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: BKOeIpPmZ/JlEup668j4Ru9S2UzMSJK/Lz9NsYvcvj4=) 4: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: pcrYcQfetv/rc/0VTi5Yuk7X3ubcBjWkKo4wzgdZiSs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:dd:f7:84:e4:e6:17:89:44:cd:f0:10:65:ad:76:78:9e:4d:2d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Validity Not Before: Apr 20 18:26:29 2026 GMT Not After : Apr 23 22:20:29 2026 GMT Subject: CN=6DD27CF5967ED6D7486C38208D1558EBDDDF67DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:5d:fb:51:14:f3:6b:b0:04:39:3a:2c:6d: 3b:1e:dd:00:03:89:0a:24:de:51:ff:e3:e3:d8:48: fb:47:64:14:41:3f:e3:5b:0b:60:56:87:70:b4:db: 27:75:9a:4f:17:33:ca:c6:c9:8d:83:44:43:2b:2f: 08:f6:d3:7c:77:ae:39:1e:b7:10:d0:0f:63:29:35: 3f:4e:22:f2:83:11:9d:25:4b:9b:9d:5f:5b:3b:20: f2:dc:22:f1:4f:08:f0:9e:5c:8d:4a:1a:16:c1:6e: 6d:c6:34:7b:4a:c6:9c:a1:47:1b:64:a3:0b:1e:e1: 23:56:ae:86:f6:94:36:ea:8c:ef:3b:cb:f6:61:2b: 5f:51:61:cd:6f:4c:85:90:4f:12:cd:c7:42:5d:53: 9b:6d:6d:6b:b6:b1:cc:8c:2a:17:59:94:9c:9e:1f: ff:bc:bf:80:4b:9a:18:87:10:3e:b9:65:5e:12:15: f1:1b:49:a3:cb:f9:aa:43:c8:ce:eb:22:70:e4:10: a5:50:e9:b9:e2:9f:e3:dc:90:47:8e:80:1d:9c:43: 0b:ec:46:45:d7:c4:2c:17:6e:d6:c3:bb:36:21:9e: a2:ff:0c:b4:bd:23:d5:91:34:57:b1:3e:0f:0d:91: 69:78:da:f2:92:cb:1b:d0:d6:f6:6c:31:e7:79:5e: 90:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D2:7C:F5:96:7E:D6:D7:48:6C:38:20:8D:15:58:EB:DD:DF:67:DF X509v3 Authority Key Identifier: keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:56:c7:ee:4a:25:4c:d9:64:7e:a4:01:40:b8:ca:64:94:ed: 0b:86:b4:50:6b:4e:e7:63:e6:8d:cd:e6:b7:75:99:66:64:16: 3e:c1:89:f3:64:8d:c8:6d:fa:17:64:72:2f:76:28:b4:69:ef: 96:c8:57:cb:16:29:71:35:13:ec:37:e1:54:06:f4:5d:89:24: 92:db:72:58:54:8f:74:bc:83:d7:75:58:81:1a:7f:3f:6c:a7: 8b:ad:22:0e:85:e6:5a:10:8c:88:b2:6f:4d:d0:0d:db:c9:0f: db:ec:5f:b3:3d:3c:53:45:b2:f8:e3:69:74:8b:47:44:19:6c: 78:6d:92:c1:e8:9b:50:d6:e1:c5:f4:e0:07:bd:ec:20:98:df: 16:33:15:27:80:05:2b:c5:43:df:1d:1b:f8:df:d4:61:28:91: 8d:ae:8d:cc:b4:92:cc:f5:a9:a2:ed:f3:31:3d:7f:38:e8:1a: dc:19:d0:12:11:ff:3a:20:04:ce:66:a1:66:52:77:72:7b:f7: 94:c9:54:cb:47:33:52:32:44:59:36:f0:55:c4:ca:7a:49:27: 96:7f:07:c7:6f:0d:09:3f:23:5f:9e:28:fa:b6:7b:63:d1:16: 6a:3f:ff:13:36:91:d3:65:df:c1:12:f4:07:06:c9:f5:24:24: 4b:3d:05:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURN33hOTmF4lEzfAQZa12eJ5NLQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0 REY0MTQxNDAeFw0yNjA0MjAxODI2MjlaFw0yNjA0MjMyMjIwMjlaMDMxMTAvBgNV BAMTKDZERDI3Q0Y1OTY3RUQ2RDc0ODZDMzgyMDhEMTU1OEVCRERERjY3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/137URTza7AEOTosbTse3QAD iQok3lH/4+PYSPtHZBRBP+NbC2BWh3C02yd1mk8XM8rGyY2DREMrLwj203x3rjke txDQD2MpNT9OIvKDEZ0lS5udX1s7IPLcIvFPCPCeXI1KGhbBbm3GNHtKxpyhRxtk owse4SNWrob2lDbqjO87y/ZhK19RYc1vTIWQTxLNx0JdU5ttbWu2scyMKhdZlJye H/+8v4BLmhiHED65ZV4SFfEbSaPL+apDyM7rInDkEKVQ6bnin+PckEeOgB2cQwvs RkXXxCwXbtbDuzYhnqL/DLS9I9WRNFexPg8NkWl42vKSyxvQ1vZsMed5XpBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbdJ89ZZ+1tdIbDggjRVY693fZ98wHwYDVR0j BBgwFoAUeLf6oogav7wRfA+D7NydVU30FBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMC83OEI3RkFBMjg4 MUFCRkJDMTE3QzBGODNFQ0RDOUQ1NTRERjQxNDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0REY0 MTQxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlE NTU0REY0MTQxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRWx+5KJUzZZH6kAUC4ymSU7QuGtFBrTudj 5o3N5rd1mWZkFj7BifNkjcht+hdkci92KLRp75bIV8sWKXE1E+w34VQG9F2JJJLb clhUj3S8g9d1WIEafz9sp4utIg6F5loQjIiyb03QDdvJD9vsX7M9PFNFsvjjaXSL R0QZbHhtksHom1DW4cX04Ae97CCY3xYzFSeABSvFQ98dG/jf1GEokY2ujcy0ksz1 qaLt8zE9fzjoGtwZ0BIR/zogBM5moWZSd3J795TJVMtHM1IyRFk28FXEynpJJ5Z/ B8dvDQk/I1+eKPq2e2PRFmo//xM2kdNl38ES9AcGyfUkJEs9BS8= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:38 2026 by rpki-client