$ rpki-client -vvvf rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft File: 78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft (raw, json) Hash identifier: aYamFs+Iaa1xAkGC0NWKsccCbFICdEhY70kAUirxLOQ= Subject key identifier: 43:E2:37:C5:49:AF:DF:31:9F:84:FD:B2:B0:F3:8E:20:0A:A5:3E:A1 Authority key identifier: 78:E6:D3:92:CE:D2:11:6E:3E:51:67:D5:20:6B:5F:C3:75:EA:9F:35 Certificate issuer: /CN=78E6D392CED2116E3E5167D5206B5FC375EA9F35 Certificate serial: 05034FEB7EB2E17A495E1C03C9DBF4987EE7C795 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:09:55 +0000 Manifest this update: Thu 17 Sep 2026 09:04:55 +0000 Manifest next update: Fri 18 Sep 2026 09:27:55 +0000 Files and hashes: 1: 78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl (hash: /2ZcsjChzVDRAOie/r5aIiLZK+S2ClO8vxAofgf6b6w=) 2: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: 3Berm5Gapt1UeoI40U+e3+MMW9FgSwdKP2f8X5GE7qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:03:4f:eb:7e:b2:e1:7a:49:5e:1c:03:c9:db:f4:98:7e:e7:c7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78E6D392CED2116E3E5167D5206B5FC375EA9F35 Validity Not Before: Sep 17 09:04:55 2026 GMT Not After : Sep 18 09:27:55 2026 GMT Subject: CN=43E237C549AFDF319F84FDB2B0F38E200AA53EA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:c3:f9:0c:30:f4:ff:10:30:f1:06:a7:be: 7a:32:ec:eb:6a:a1:a0:9c:21:9d:c7:eb:ae:ff:d8: 65:e9:fe:65:be:34:f6:4b:01:f9:e2:48:27:2a:6c: 45:d2:d5:7d:63:20:c6:61:10:88:ef:e1:b1:86:18: 4a:34:5a:8f:d5:27:eb:57:b0:5a:82:09:01:4f:e2: c0:15:ec:1d:19:91:ec:cb:6f:b4:98:ec:0c:1d:40: 31:f8:f0:54:1e:02:f8:df:28:68:67:43:85:d1:8a: c1:7a:f9:5c:ce:65:bb:88:02:d2:4e:22:e9:d5:61: fa:25:8d:8c:d5:9d:12:1b:26:42:e9:17:de:f2:02: 2d:c4:ed:ce:27:8a:0f:5f:39:18:90:22:42:c9:8a: 64:a1:08:77:1b:2e:e1:90:37:5b:18:f9:b4:61:6f: f4:dc:97:98:15:e8:e1:e3:9d:aa:75:da:cc:6a:a9: 48:08:47:61:49:8d:6d:89:e9:a6:cf:b9:d4:3e:41: 8d:7f:9d:85:bf:9d:2e:1b:33:f1:02:5e:fc:2d:f2: d4:20:69:cb:1f:b1:8a:82:aa:1e:5a:45:c6:df:7c: 76:04:b0:27:7e:b8:d9:ed:f7:aa:9b:36:f5:fa:e6: 8c:6c:9c:25:99:fc:5c:7a:1e:76:36:69:58:d4:27: f6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E2:37:C5:49:AF:DF:31:9F:84:FD:B2:B0:F3:8E:20:0A:A5:3E:A1 X509v3 Authority Key Identifier: keyid:78:E6:D3:92:CE:D2:11:6E:3E:51:67:D5:20:6B:5F:C3:75:EA:9F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ba:cf:25:32:da:7d:fc:04:17:be:50:75:de:c0:c4:34:1a: bb:82:9a:fc:d8:cb:04:46:07:89:5d:17:ad:91:09:4c:08:2c: 5e:90:62:f1:d0:8d:f5:91:31:b7:2b:fc:8a:71:7c:f1:b0:40: 8b:aa:6c:3d:4a:75:9d:6b:5c:65:a3:8e:b1:51:8f:0d:d1:10: c1:27:e2:7a:87:a2:31:70:9a:43:f8:58:6d:5d:a0:c4:74:91: 84:bf:58:e9:23:f1:35:c3:ee:d5:97:d9:44:fb:34:65:0f:0e: 49:78:a8:29:03:2a:74:05:d8:84:c5:67:31:eb:75:51:a4:c7: 3a:78:f1:f0:6e:69:00:c1:e7:3f:88:ab:0f:ec:dd:a4:a4:c4: a1:59:a2:79:e0:45:f2:17:62:25:64:28:a7:d5:d4:18:e4:a1: 89:8e:66:97:1b:32:e2:2c:00:77:59:11:50:7e:29:d5:58:9c: 36:02:9c:0c:d9:68:e3:cb:9a:bd:fa:f0:18:cc:1f:62:a1:30: 17:c8:70:7c:0d:2e:ea:07:8c:fc:23:8c:1b:34:7a:d6:ba:28: 7c:c9:80:e8:32:67:b3:68:06:5c:48:62:b3:94:d8:0c:ee:ba: e4:cf:73:b1:18:23:a7:04:a2:44:c1:bd:6f:20:02:5c:68:f2: a8:9f:c9:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQNP636y4XpJXhwDydv0mH7nx5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhFNkQzOTJDRUQyMTE2RTNFNTE2N0Q1MjA2QjVGQzM3 NUVBOUYzNTAeFw0yNjA5MTcwOTA0NTVaFw0yNjA5MTgwOTI3NTVaMDMxMTAvBgNV BAMTKDQzRTIzN0M1NDlBRkRGMzE5Rjg0RkRCMkIwRjM4RTIwMEFBNTNFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxK8P5DDD0/xAw8Qanvnoy7Otq oaCcIZ3H667/2GXp/mW+NPZLAfniSCcqbEXS1X1jIMZhEIjv4bGGGEo0Wo/VJ+tX sFqCCQFP4sAV7B0ZkezLb7SY7AwdQDH48FQeAvjfKGhnQ4XRisF6+VzOZbuIAtJO IunVYfoljYzVnRIbJkLpF97yAi3E7c4nig9fORiQIkLJimShCHcbLuGQN1sY+bRh b/Tcl5gV6OHjnap12sxqqUgIR2FJjW2J6abPudQ+QY1/nYW/nS4bM/ECXvwt8tQg acsfsYqCqh5aRcbffHYEsCd+uNnt96qbNvX65oxsnCWZ/Fx6HnY2aVjUJ/ZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+I3xUmv3zGfhP2ysPOOIAqlPqEwHwYDVR0j BBgwFoAUeObTks7SEW4+UWfVIGtfw3XqnzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTk1ZGQ1NzMtMzFmNC00MTZjLWExYjctNjk4ZDZiMTY5N2FkLzAvNzhFNkQzOTJD RUQyMTE2RTNFNTE2N0Q1MjA2QjVGQzM3NUVBOUYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEU2RDM5MkNFRDIxMTZFM0U1MTY3RDUyMDZCNUZDMzc1RUE5 RjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvNzhFNkQzOTJDRUQyMTE2RTNFNTE2N0Q1MjA2QjVG QzM3NUVBOUYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKu6zyUy2n38BBe+UHXewMQ0GruCmvzYywRG B4ldF62RCUwILF6QYvHQjfWRMbcr/IpxfPGwQIuqbD1KdZ1rXGWjjrFRjw3REMEn 4nqHojFwmkP4WG1doMR0kYS/WOkj8TXD7tWX2UT7NGUPDkl4qCkDKnQF2ITFZzHr dVGkxzp48fBuaQDB5z+Iqw/s3aSkxKFZonngRfIXYiVkKKfV1BjkoYmOZpcbMuIs AHdZEVB+KdVYnDYCnAzZaOPLmr368BjMH2KhMBfIcHwNLuoHjPwjjBs0eta6KHzJ gOgyZ7NoBlxIYrOU2AzuuuTPc7EYI6cEokTBvW8gAlxo8qifyd8= -----END CERTIFICATE-----Generated at Thu Sep 17 15:26:21 2026 by rpki-client