$ rpki-client -vvf rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft File: 78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft (raw, json) Hash identifier: VBPbl3oTB3pe0+kJyUxMAoOXbLlUO5E5Gefo0EilCJA= Subject key identifier: D8:8F:E7:A9:B2:7A:29:5D:80:51:5B:F9:00:48:35:52:2C:4B:A7:01 Authority key identifier: 78:E6:D3:92:CE:D2:11:6E:3E:51:67:D5:20:6B:5F:C3:75:EA:9F:35 Certificate issuer: /CN=78E6D392CED2116E3E5167D5206B5FC375EA9F35 Certificate serial: 735A0A15EE39764EB977B04C02C8D58510FB6234 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 02:55:25 +0000 Manifest this update: Thu 18 Jun 2026 02:50:25 +0000 Manifest next update: Fri 19 Jun 2026 05:43:25 +0000 Files and hashes: 1: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: 3Berm5Gapt1UeoI40U+e3+MMW9FgSwdKP2f8X5GE7qo=) 2: 78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl (hash: J+gKQ6kNS/DTicz7n0YCyXuOjiqKWmAAbc+EA6jB4gQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5a:0a:15:ee:39:76:4e:b9:77:b0:4c:02:c8:d5:85:10:fb:62:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78E6D392CED2116E3E5167D5206B5FC375EA9F35 Validity Not Before: Jun 18 02:50:25 2026 GMT Not After : Jun 19 05:43:25 2026 GMT Subject: CN=D88FE7A9B27A295D80515BF9004835522C4BA701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:ae:5b:87:8c:c3:a2:6c:1e:2e:df:b1:bb: 0e:34:1d:76:64:c2:3b:5b:60:a0:66:3b:20:1a:57: d6:25:1d:e5:dd:10:56:94:3f:c5:c3:51:50:e2:02: 6b:2f:cc:dd:f4:ac:d8:75:56:81:fe:41:e0:ef:3b: 5f:28:ec:d6:d3:84:a5:57:83:45:f0:ac:fa:86:b3: b5:c1:e7:8f:df:fe:bc:e7:e2:6d:b6:8e:c0:92:72: 28:db:37:cf:1a:ab:ac:74:f1:82:b0:62:d3:70:72: ea:ae:8e:e5:41:e6:76:31:53:41:6e:05:82:5c:21: cf:ef:bb:03:4a:be:b6:9e:1a:59:6a:1b:1b:f9:0c: 12:be:ce:01:86:d5:3e:9b:e8:05:09:24:f8:39:c0: c3:9a:be:ab:45:15:d0:b9:7d:f2:69:e0:8b:92:3f: db:3b:3b:9d:3b:a9:33:6e:7b:90:30:78:bb:d8:0e: ce:72:55:96:0d:61:fa:7d:1b:c3:d9:24:81:68:66: d8:3d:01:2c:ac:01:7b:ab:5e:a0:88:16:b4:13:8a: 8b:2c:d7:4a:69:0c:a5:b2:61:7a:0d:b5:9b:a2:d2: 38:e2:d5:96:b1:50:44:61:f3:4f:fd:07:65:d9:f5: d8:62:a4:ff:3b:6e:0a:1d:95:96:22:06:ec:7c:8a: a8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8F:E7:A9:B2:7A:29:5D:80:51:5B:F9:00:48:35:52:2C:4B:A7:01 X509v3 Authority Key Identifier: keyid:78:E6:D3:92:CE:D2:11:6E:3E:51:67:D5:20:6B:5F:C3:75:EA:9F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b8:f9:64:65:de:f0:85:8a:f2:03:19:dc:89:d3:ea:0c:41: 01:9d:cc:b0:f8:ed:eb:b6:a2:29:e5:47:aa:93:b6:65:8e:5a: 20:78:83:30:cd:7f:ad:f9:c0:e5:99:b5:0c:3d:e4:f5:0e:0e: d2:49:31:e0:1f:44:d2:f4:05:51:da:bf:f9:fa:a8:32:79:ab: ed:37:65:b3:4b:f4:4d:d0:06:b8:85:97:26:d4:88:5d:b5:17: 07:cc:1b:89:b8:00:c7:09:23:ba:c1:ca:0b:c4:d5:9f:ef:15: 43:bb:48:26:6f:d4:98:5d:a1:a3:f8:65:40:d6:7e:1d:35:b6: aa:dc:de:05:ec:90:0f:3a:ea:ca:24:2d:69:34:a7:bc:04:65: 0e:24:f9:be:6b:84:0a:04:9b:ba:fc:b6:57:a0:6f:6c:97:7d: 3c:27:a8:6e:3d:e9:54:95:35:c6:ac:f8:35:cb:a6:61:25:f7: 32:e0:ff:76:be:78:81:5f:5c:0a:20:bb:3e:e4:c6:6c:22:97: c6:12:13:10:72:5e:22:62:b4:f6:d7:53:4c:55:4f:65:f5:e4: 02:95:f6:1a:a5:e2:a2:ab:86:95:b2:24:e7:c3:df:65:b8:b6: 00:37:e5:3f:bd:f7:00:18:6d:95:a3:9c:74:87:16:a8:71:85: 16:ba:a6:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1oKFe45dk65d7BMAsjVhRD7YjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhFNkQzOTJDRUQyMTE2RTNFNTE2N0Q1MjA2QjVGQzM3 NUVBOUYzNTAeFw0yNjA2MTgwMjUwMjVaFw0yNjA2MTkwNTQzMjVaMDMxMTAvBgNV BAMTKEQ4OEZFN0E5QjI3QTI5NUQ4MDUxNUJGOTAwNDgzNTUyMkM0QkE3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTK5bh4zDomweLt+xuw40HXZk wjtbYKBmOyAaV9YlHeXdEFaUP8XDUVDiAmsvzN30rNh1VoH+QeDvO18o7NbThKVX g0XwrPqGs7XB54/f/rzn4m22jsCScijbN88aq6x08YKwYtNwcuqujuVB5nYxU0Fu BYJcIc/vuwNKvraeGllqGxv5DBK+zgGG1T6b6AUJJPg5wMOavqtFFdC5ffJp4IuS P9s7O507qTNue5AweLvYDs5yVZYNYfp9G8PZJIFoZtg9ASysAXurXqCIFrQTioss 10ppDKWyYXoNtZui0jji1ZaxUERh80/9B2XZ9dhipP87bgodlZYiBux8iqgZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2I/nqbJ6KV2AUVv5AEg1UixLpwEwHwYDVR0j BBgwFoAUeObTks7SEW4+UWfVIGtfw3XqnzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk1ZGQ1NzMtMzFmNC00MTZjLWExYjctNjk4ZDZiMTY5N2FkLzAvNzhFNkQzOTJD RUQyMTE2RTNFNTE2N0Q1MjA2QjVGQzM3NUVBOUYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEU2RDM5MkNFRDIxMTZFM0U1MTY3RDUyMDZCNUZDMzc1RUE5 RjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvNzhFNkQzOTJDRUQyMTE2RTNFNTE2N0Q1MjA2QjVG QzM3NUVBOUYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKS4+WRl3vCFivIDGdyJ0+oMQQGdzLD47eu2 oinlR6qTtmWOWiB4gzDNf635wOWZtQw95PUODtJJMeAfRNL0BVHav/n6qDJ5q+03 ZbNL9E3QBriFlybUiF21FwfMG4m4AMcJI7rBygvE1Z/vFUO7SCZv1JhdoaP4ZUDW fh01tqrc3gXskA866sokLWk0p7wEZQ4k+b5rhAoEm7r8tlegb2yXfTwnqG496VSV Ncas+DXLpmEl9zLg/3a+eIFfXAoguz7kxmwil8YSExByXiJitPbXU0xVT2X15AKV 9hql4qKrhpWyJOfD32W4tgA35T+99wAYbZWjnHSHFqhxhRa6ptg= -----END CERTIFICATE-----Generated at Thu Jun 18 19:10:35 2026 by rpki-client