$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft File: 2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft (raw, json) Hash identifier: oVP/SU10/2sVfB+tJDp9GDTegwGGPgzbvVEqmlSvSuU= Subject key identifier: 28:B7:E6:60:7B:D0:84:58:C6:A8:74:9F:64:ED:5C:B4:74:2A:F6:68 Authority key identifier: 2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF Certificate issuer: /CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF Certificate serial: 06AC1AC72A398C94001347F51B99F7A56D44A6E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft Manifest number: EB Signing time: Sun 25 Oct 2026 17:18:14 +0000 Manifest this update: Sun 25 Oct 2026 17:13:14 +0000 Manifest next update: Mon 26 Oct 2026 19:37:14 +0000 Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: 60R7X56SozCA5mIN8nGG4Hjmryhwz60xWHs0HKmGlWc=) 2: 2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl (hash: OT7HWGkRQ/RS0FlSV+obwDN1LhoLCL7+w7x74J7sEZg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ac:1a:c7:2a:39:8c:94:00:13:47:f5:1b:99:f7:a5:6d:44:a6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF Validity Not Before: Oct 25 17:13:14 2026 GMT Not After : Oct 26 19:37:14 2026 GMT Subject: CN=28B7E6607BD08458C6A8749F64ED5CB4742AF668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:be:38:c5:d6:91:26:df:27:d7:c4:50:2c: 3b:2f:25:fd:7d:52:54:68:e0:ea:9a:0b:83:5c:e9: 1a:75:f3:17:a7:ba:92:f5:bd:e5:0d:c5:e5:99:77: c0:57:7a:fa:44:55:5d:c7:c1:4d:34:3c:0b:42:af: 6e:26:74:a7:dc:8b:11:fd:b6:7b:2e:c4:fd:65:e4: 30:7f:26:92:3f:72:a7:fd:b0:f1:ff:f3:68:40:d8: 71:29:94:a0:85:34:b9:8a:27:6b:2e:e2:f1:3c:87: 73:65:bf:63:11:6b:ef:e7:23:0e:27:62:ff:1a:2e: e7:29:b2:bc:91:d1:d1:ec:12:e2:f0:ae:68:31:46: d0:da:1f:0a:db:be:cf:89:81:bb:ed:69:d0:2a:9d: f4:ce:e8:1c:8d:47:c2:55:15:9c:0b:f3:ff:9c:53: c7:cd:08:21:0d:f2:c0:eb:21:93:6a:cd:20:be:c4: 41:be:6f:38:9e:5a:c7:0b:9b:fc:7b:08:23:14:8d: ba:05:28:7a:b4:28:bb:36:0f:22:0e:eb:2e:e6:5a: a8:24:aa:8e:8b:55:8a:f5:8d:05:1f:37:db:fc:ea: e5:02:f6:33:b1:f1:35:96:a3:6e:30:3d:9e:8e:b7: 82:97:ff:24:6f:65:32:06:e5:21:f3:c5:8b:a5:2a: 14:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B7:E6:60:7B:D0:84:58:C6:A8:74:9F:64:ED:5C:B4:74:2A:F6:68 X509v3 Authority Key Identifier: keyid:2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:34:fd:f6:3d:43:52:9f:fd:e3:ed:90:cb:fb:a8:6e:c4:e4: 15:04:ee:46:e1:be:26:98:dd:60:c1:30:82:74:27:f4:7e:c1: e3:bb:06:10:1d:4d:ef:5c:38:0f:b8:33:7d:fc:41:6a:b9:fd: 86:2a:1d:0e:94:7b:07:63:76:44:e4:32:45:63:e9:99:13:ee: e2:16:db:46:c8:12:5e:c2:00:82:d4:a7:2d:db:b1:2a:3f:bb: 21:c8:ce:1b:e6:7d:5b:f4:af:b5:8b:35:e5:3e:86:9b:2d:5f: fb:a1:b2:74:8d:b4:4b:7a:e8:5e:fc:3b:67:79:b2:41:aa:17: 97:c1:90:87:22:43:93:80:8b:29:e3:78:a1:0d:13:1d:ae:86: ee:71:00:55:18:46:66:d6:65:0b:ec:97:35:2e:f5:44:68:89: ba:a5:a6:d1:47:00:de:2b:88:56:3a:60:5c:df:0f:77:c0:16: fb:48:f0:b8:ce:da:dc:a3:c2:9f:cc:18:bb:16:4e:14:63:19: b3:fc:05:c4:d8:68:eb:e4:87:c3:51:eb:38:e0:65:73:73:3c: c8:02:68:91:93:cb:bb:6d:97:c1:e6:d2:21:a8:d4:24:cd:ae: f8:9c:f8:1a:e1:ee:06:c6:c7:5f:b5:44:9b:fb:4b:02:24:e0: a0:f1:74:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBqwaxyo5jJQAE0f1G5n3pW1EpuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY3ODc5NEVDMDc1RkU5NUU3ODMxREYwQjE0RTc0Qjg4 RTBFM0ZERjAeFw0yNjEwMjUxNzEzMTRaFw0yNjEwMjYxOTM3MTRaMDMxMTAvBgNV BAMTKDI4QjdFNjYwN0JEMDg0NThDNkE4NzQ5RjY0RUQ1Q0I0NzQyQUY2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Kr44xdaRJt8n18RQLDsvJf19 UlRo4OqaC4Nc6Rp18xenupL1veUNxeWZd8BXevpEVV3HwU00PAtCr24mdKfcixH9 tnsuxP1l5DB/JpI/cqf9sPH/82hA2HEplKCFNLmKJ2su4vE8h3Nlv2MRa+/nIw4n Yv8aLucpsryR0dHsEuLwrmgxRtDaHwrbvs+JgbvtadAqnfTO6ByNR8JVFZwL8/+c U8fNCCEN8sDrIZNqzSC+xEG+bzieWscLm/x7CCMUjboFKHq0KLs2DyIO6y7mWqgk qo6LVYr1jQUfN9v86uUC9jOx8TWWo24wPZ6Ot4KX/yRvZTIG5SHzxYulKhRpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKLfmYHvQhFjGqHSfZO1ctHQq9mgwHwYDVR0j BBgwFoAUL3h5TsB1/pXngx3wsU50uI4OP98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThhN2YzNTUtZjIyNS00OGYzLTg3ZjgtMGJmYjBjOGU1OGYwLzAvMkY3ODc5NEVD MDc1RkU5NUU3ODMxREYwQjE0RTc0Qjg4RTBFM0ZERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjc4Nzk0RUMwNzVGRTk1RTc4MzFERjBCMTRFNzRCODhFMEUz RkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvMkY3ODc5NEVDMDc1RkU5NUU3ODMxREYwQjE0RTc0 Qjg4RTBFM0ZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJA0/fY9Q1Kf/ePtkMv7qG7E5BUE7kbhviaY 3WDBMIJ0J/R+weO7BhAdTe9cOA+4M338QWq5/YYqHQ6UewdjdkTkMkVj6ZkT7uIW 20bIEl7CAILUpy3bsSo/uyHIzhvmfVv0r7WLNeU+hpstX/uhsnSNtEt66F78O2d5 skGqF5fBkIciQ5OAiynjeKENEx2uhu5xAFUYRmbWZQvslzUu9URoibqlptFHAN4r iFY6YFzfD3fAFvtI8LjO2tyjwp/MGLsWThRjGbP8BcTYaOvkh8NR6zjgZXNzPMgC aJGTy7ttl8Hm0iGo1CTNrvic+Brh7gbGx1+1RJv7SwIk4KDxdHw= -----END CERTIFICATE-----Generated at Mon Oct 26 05:52:41 2026 by rpki-client