$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft File: 78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft (raw, json) Hash identifier: 1/Uh3qMhxu5Qs3Nh/k9JWiXGBC7XZRkYxG9MC+oIP4Q= Subject key identifier: DE:EB:05:C1:C1:86:DA:AB:94:EF:E8:CA:CE:BF:BC:0D:C4:87:86:92 Authority key identifier: 78:C9:BB:96:C0:0E:5E:4E:6A:0F:B5:83:C4:C0:E8:88:77:D4:0B:12 Certificate issuer: /CN=78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12 Certificate serial: 3B3C377EE34F143D6AD9D7E45D8D849F1C28CC2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 19:53:43 +0000 Manifest this update: Wed 16 Sep 2026 19:48:43 +0000 Manifest next update: Thu 17 Sep 2026 21:36:43 +0000 Files and hashes: 1: 78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl (hash: 4HH7S/ZMjsd6i7jsIPgKm1dcmGSuZlqrLCu/AK3rixc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3c:37:7e:e3:4f:14:3d:6a:d9:d7:e4:5d:8d:84:9f:1c:28:cc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12 Validity Not Before: Sep 16 19:48:43 2026 GMT Not After : Sep 17 21:36:43 2026 GMT Subject: CN=DEEB05C1C186DAAB94EFE8CACEBFBC0DC4878692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:23:96:4a:d8:50:13:00:c8:fa:73:06:59:3b: bb:d5:cf:7f:16:31:47:39:8a:a5:74:a3:bf:ff:32: 67:c7:07:e3:b5:5b:7b:3e:22:51:53:d6:6f:ca:94: e1:d2:96:ab:f3:eb:d2:89:f2:e3:f3:74:b9:66:92: 18:f0:a2:ba:c0:4b:85:31:7c:3a:7f:4d:a6:cb:9d: ee:f0:0e:04:b3:73:cc:55:a5:0a:bb:9a:33:56:2f: ee:a6:db:5e:e4:b3:ef:b7:04:7b:0f:63:18:9d:09: ed:aa:9c:00:2e:9b:1b:16:92:dd:8f:35:db:0e:c3: b2:1b:67:af:5b:42:19:2a:55:d0:4d:10:60:97:90: a5:96:0d:c9:7d:87:dd:71:14:63:d8:5c:67:51:c1: 62:df:a1:df:1d:93:84:e1:78:81:64:7b:81:43:e2: 0e:f5:e3:11:83:07:01:2f:08:83:39:22:24:16:c2: a2:73:1b:aa:54:98:59:2b:ae:b2:7b:68:74:90:32: b2:63:d7:80:00:f2:16:be:74:bf:8a:a9:c3:3d:54: 78:a4:d1:d4:15:84:12:93:14:f3:c6:5b:67:52:b4: e3:59:7c:b1:bf:72:e3:87:bc:18:24:30:0f:cd:34: 53:9d:a7:68:c4:7f:b3:db:a4:1e:a1:82:85:6b:ef: 40:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EB:05:C1:C1:86:DA:AB:94:EF:E8:CA:CE:BF:BC:0D:C4:87:86:92 X509v3 Authority Key Identifier: keyid:78:C9:BB:96:C0:0E:5E:4E:6A:0F:B5:83:C4:C0:E8:88:77:D4:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ef:47:de:1f:30:07:58:65:4c:d2:33:19:a6:5e:fd:11:e0: 4e:90:25:b6:fd:20:50:c4:70:3d:90:9d:6b:e9:75:06:d3:a6: db:2f:7a:9c:a4:95:93:b6:19:5e:44:49:20:e8:0c:31:79:bf: f1:f1:e2:3a:37:f3:23:e0:30:1f:8a:3c:13:80:ea:af:c5:96: 32:7a:f0:a6:d9:e0:1b:71:bb:fd:af:bd:39:aa:7f:83:06:0a: c5:1c:f6:0c:30:ae:c3:32:94:a3:84:0c:46:18:d8:58:ab:8d: 0d:06:c5:b0:30:37:4e:2f:7e:16:92:b8:d5:a2:91:7b:d5:db: 9d:17:33:22:75:dc:33:52:34:0f:dc:ba:df:68:b7:a4:f1:89: b4:d4:61:2c:8e:05:c2:b0:5b:da:0b:7f:03:57:01:36:be:5b: 03:51:5f:85:23:e8:24:bc:1d:16:ec:fb:59:31:9e:8d:cb:a1: be:24:81:6f:73:f8:97:6b:b2:a7:9e:53:22:e2:ff:58:6a:f8: f1:ab:1b:e0:e8:68:9b:ad:50:22:64:24:2c:62:57:5d:df:53: 81:cc:30:ba:c1:f7:fe:60:69:2b:46:d7:7c:f9:9a:dc:0c:5b: 12:6c:aa:33:46:80:f4:48:54:ca:7b:c2:72:83:a8:4c:b1:74: 17:de:10:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzw3fuNPFD1q2dfkXY2EnxwozCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDOUJCOTZDMDBFNUU0RTZBMEZCNTgzQzRDMEU4ODg3 N0Q0MEIxMjAeFw0yNjA5MTYxOTQ4NDNaFw0yNjA5MTcyMTM2NDNaMDMxMTAvBgNV BAMTKERFRUIwNUMxQzE4NkRBQUI5NEVGRThDQUNFQkZCQzBEQzQ4Nzg2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhI5ZK2FATAMj6cwZZO7vVz38W MUc5iqV0o7//MmfHB+O1W3s+IlFT1m/KlOHSlqvz69KJ8uPzdLlmkhjworrAS4Ux fDp/TabLne7wDgSzc8xVpQq7mjNWL+6m217ks++3BHsPYxidCe2qnAAumxsWkt2P NdsOw7IbZ69bQhkqVdBNEGCXkKWWDcl9h91xFGPYXGdRwWLfod8dk4TheIFke4FD 4g714xGDBwEvCIM5IiQWwqJzG6pUmFkrrrJ7aHSQMrJj14AA8ha+dL+KqcM9VHik 0dQVhBKTFPPGW2dStONZfLG/cuOHvBgkMA/NNFOdp2jEf7PbpB6hgoVr70DjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3usFwcGG2quU7+jKzr+8DcSHhpIwHwYDVR0j BBgwFoAUeMm7lsAOXk5qD7WDxMDoiHfUCxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgzM2YzNzUtZGJkNS00ZTQ4LTg5NmQtZjhjYjZlMDBmZTA4LzAvNzhDOUJCOTZD MDBFNUU0RTZBMEZCNTgzQzRDMEU4ODg3N0Q0MEIxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEM5QkI5NkMwMEU1RTRFNkEwRkI1ODNDNEMwRTg4ODc3RDQw QjEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgzM2YzNzUtZGJkNS00ZTQ4LTg5 NmQtZjhjYjZlMDBmZTA4LzAvNzhDOUJCOTZDMDBFNUU0RTZBMEZCNTgzQzRDMEU4 ODg3N0Q0MEIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHvR94fMAdYZUzSMxmmXv0R4E6QJbb9IFDE cD2QnWvpdQbTptsvepyklZO2GV5ESSDoDDF5v/Hx4jo38yPgMB+KPBOA6q/FljJ6 8KbZ4Btxu/2vvTmqf4MGCsUc9gwwrsMylKOEDEYY2FirjQ0GxbAwN04vfhaSuNWi kXvV250XMyJ13DNSNA/cut9ot6TxibTUYSyOBcKwW9oLfwNXATa+WwNRX4Uj6CS8 HRbs+1kxno3Lob4kgW9z+JdrsqeeUyLi/1hq+PGrG+DoaJutUCJkJCxiV13fU4HM MLrB9/5gaStG13z5mtwMWxJsqjNGgPRIVMp7wnKDqEyxdBfeEDI= -----END CERTIFICATE-----Generated at Thu Sep 17 16:24:15 2026 by rpki-client