$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft File: 78578588503A7F091F1D7CD7B16BDC9E55055889.mft (raw, json) Hash identifier: BRP+tk+Quus9Go3Knj2xsz9ipmen1bdC+cs4/WjWKEw= Subject key identifier: 71:41:19:5E:72:90:96:17:6D:75:15:EB:FC:E9:62:1C:8B:2B:5B:60 Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 Certificate issuer: /CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Certificate serial: 6AED69D5DF9DDB58B17F6BE92C5D21C3F008415F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft Manifest number: 017D Signing time: Sun 22 Mar 2026 03:21:45 +0000 Manifest this update: Sun 22 Mar 2026 03:16:45 +0000 Manifest next update: Wed 25 Mar 2026 12:05:45 +0000 Files and hashes: 1: 78578588503A7F091F1D7CD7B16BDC9E55055889.crl (hash: 55cxbIIVrlk6uN5xBE7TSEW1cgIawCEqLAe81SkE17w=) 2: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: EBR+p3PkcTAiMYCAgv6PbSayq0bFAGHJD99zgOmEdFk=) 3: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: nvXxgMVYVQTfNR+4bpW+Ps8HHDED8r4qVZcdX5Y3BiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 12:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ed:69:d5:df:9d:db:58:b1:7f:6b:e9:2c:5d:21:c3:f0:08:41:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Validity Not Before: Mar 22 03:16:45 2026 GMT Not After : Mar 25 12:05:45 2026 GMT Subject: CN=7141195E729096176D7515EBFCE9621C8B2B5B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:9f:9a:9b:75:2f:2c:aa:13:12:9e:3f:8c: 12:88:ac:b1:26:ae:cd:35:4c:60:c4:e8:d3:d2:17: ff:95:ab:01:1a:3f:67:68:cf:86:b1:1f:62:59:bc: 25:17:50:3a:da:96:03:88:5a:b4:34:8c:a7:c8:a4: b6:0b:e4:80:69:84:f5:e1:da:b0:bc:b2:e6:74:ad: 91:d0:bf:ac:44:80:f8:d8:7b:11:61:9e:b4:69:d0: 65:42:56:09:3f:88:d6:00:61:f5:f3:cf:3f:d2:f5: 69:0c:5a:d0:ca:2b:ae:8c:f8:69:2b:a5:bd:18:89: 9e:ec:fa:f3:4a:61:aa:de:c5:ce:b9:66:5b:1f:94: d3:bb:0c:0e:68:46:8d:cf:0a:6d:a9:81:1a:d1:13: 73:80:29:7d:7a:49:0a:1b:c2:d4:7f:d1:34:25:59: 58:b9:4e:59:04:63:71:7d:c4:f8:36:09:ce:e8:9a: 4d:7e:e8:b5:42:f5:fa:e1:3c:87:32:ec:b2:83:f4: 81:a4:10:71:f0:4f:8e:8b:01:92:2d:4d:7f:57:cb: 3d:5d:84:1e:59:b1:2d:87:40:77:02:ff:21:f4:b4: bd:79:df:9f:d4:90:8e:9b:92:b8:fe:73:8b:ea:26: 97:81:c1:bb:ed:15:61:ba:3e:be:5a:6f:eb:d7:a6: 3d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:41:19:5E:72:90:96:17:6D:75:15:EB:FC:E9:62:1C:8B:2B:5B:60 X509v3 Authority Key Identifier: keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5e:1c:39:82:08:ba:c3:7e:91:2b:99:60:c1:c1:f0:cc:d9: ca:8f:06:cb:d5:a0:1e:ba:22:e1:9a:5e:13:f8:a5:93:96:fb: 4e:0b:bc:ff:b8:4d:a0:7a:43:8d:b5:2d:32:eb:fa:cd:b9:66: 5f:0d:b4:a1:fa:8c:61:b0:e9:cc:67:cb:af:89:eb:37:20:6c: 23:1a:a6:9f:3c:47:9d:55:61:1a:a6:6c:12:35:9e:71:8b:8b: 65:cf:d5:68:39:60:6e:14:40:0c:3e:68:58:d6:f3:cc:9e:48: f5:f0:42:36:0e:35:b4:b0:93:d2:80:de:c9:1f:75:4d:84:1f: de:75:2c:37:c4:fe:aa:33:fe:cb:7d:7d:6b:03:19:6a:eb:a3: 05:81:fb:e4:54:7b:8e:c5:32:66:d2:5e:fb:dc:3c:41:40:cc: 4e:97:9b:44:5e:d5:60:4d:37:87:27:6e:51:36:ee:87:67:b7: b5:9b:b1:44:6c:1c:40:2c:5a:37:98:c7:bd:66:5b:b5:48:d7: 1d:09:25:9d:61:f9:b1:52:33:48:98:48:9e:0f:a4:4a:53:fd: 77:df:21:ff:12:3a:bd:df:46:b9:f5:be:1d:5e:2e:62:07:09: 41:34:f9:dc:ec:aa:d0:77:d6:3b:8e:01:ae:a7:35:b8:4f:2e: 73:1c:19:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUau1p1d+d21ixf2vpLF0hw/AIQV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1 NTA1NTg4OTAeFw0yNjAzMjIwMzE2NDVaFw0yNjAzMjUxMjA1NDVaMDMxMTAvBgNV BAMTKDcxNDExOTVFNzI5MDk2MTc2RDc1MTVFQkZDRTk2MjFDOEIyQjVCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCJ+am3UvLKoTEp4/jBKIrLEm rs01TGDE6NPSF/+VqwEaP2doz4axH2JZvCUXUDralgOIWrQ0jKfIpLYL5IBphPXh 2rC8suZ0rZHQv6xEgPjYexFhnrRp0GVCVgk/iNYAYfXzzz/S9WkMWtDKK66M+Gkr pb0YiZ7s+vNKYarexc65ZlsflNO7DA5oRo3PCm2pgRrRE3OAKX16SQobwtR/0TQl WVi5TlkEY3F9xPg2Cc7omk1+6LVC9frhPIcy7LKD9IGkEHHwT46LAZItTX9Xyz1d hB5ZsS2HQHcC/yH0tL1535/UkI6bkrj+c4vqJpeBwbvtFWG6Pr5ab+vXpj1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcUEZXnKQlhdtdRXr/OliHIsrW2AwHwYDVR0j BBgwFoAUeFeFiFA6fwkfHXzXsWvcnlUFWIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGU0Y2E1NC04NTdiLTRmNjgtYWI1Zi0wZDhjNDcyZTZjOTIvMC83ODU3ODU4ODUw M0E3RjA5MUYxRDdDRDdCMTZCREM5RTU1MDU1ODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1NTA1 NTg4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlNGNhNTQtODU3Yi00ZjY4LWFi NWYtMGQ4YzQ3MmU2YzkyLzAvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRD OUU1NTA1NTg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9eHDmCCLrDfpErmWDBwfDM2cqPBsvVoB66 IuGaXhP4pZOW+04LvP+4TaB6Q421LTLr+s25Zl8NtKH6jGGw6cxny6+J6zcgbCMa pp88R51VYRqmbBI1nnGLi2XP1Wg5YG4UQAw+aFjW88yeSPXwQjYONbSwk9KA3skf dU2EH951LDfE/qoz/st9fWsDGWrrowWB++RUe47FMmbSXvvcPEFAzE6Xm0Re1WBN N4cnblE27odnt7WbsURsHEAsWjeYx71mW7VI1x0JJZ1h+bFSM0iYSJ4PpEpT/Xff If8SOr3fRrn1vh1eLmIHCUE0+dzsqtB31juOAa6nNbhPLnMcGWs= -----END CERTIFICATE-----Generated at Tue Mar 24 08:50:05 2026 by rpki-client