$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft File: 2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft (raw, json) Hash identifier: cvAB1RJx+OwKPT8gfCRgqVm26iqnbdAye8pHR27zA9s= Subject key identifier: DD:37:6E:1F:4C:6E:C9:B1:FB:7C:D3:62:E8:11:F8:53:FD:84:23:A8 Authority key identifier: 2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF Certificate issuer: /CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF Certificate serial: 61ED27E02866EAB8C8926755E434D455116BE061 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft Manifest number: A3 Signing time: Tue 01 Sep 2026 00:19:45 +0000 Manifest this update: Tue 01 Sep 2026 00:14:45 +0000 Manifest next update: Wed 02 Sep 2026 04:18:45 +0000 Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: 60R7X56SozCA5mIN8nGG4Hjmryhwz60xWHs0HKmGlWc=) 2: 2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl (hash: RqSvYta50yDP0R0udMbpdyo0/z06we3Ij6nS1Y7qtjM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 02:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ed:27:e0:28:66:ea:b8:c8:92:67:55:e4:34:d4:55:11:6b:e0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF Validity Not Before: Sep 1 00:14:45 2026 GMT Not After : Sep 2 04:18:45 2026 GMT Subject: CN=DD376E1F4C6EC9B1FB7CD362E811F853FD8423A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:56:3b:d1:18:c3:e4:93:22:95:3c:3c:a1:75: e5:ce:80:01:ab:d9:38:de:2b:3d:5d:40:d9:fa:a9: e5:0d:8f:7f:a4:5c:47:e7:a9:04:4b:1e:47:8f:b3: 1f:da:fe:c4:7b:03:6e:e8:11:e5:ad:55:73:d9:b3: 8e:c7:df:5c:2b:ce:5c:05:45:05:4c:5e:90:bd:72: 33:a7:24:8e:24:fa:60:be:52:ba:db:6d:6d:60:e8: 25:c5:20:f1:35:08:8b:25:f5:23:76:47:55:62:cd: 2a:fd:9a:96:e9:b8:a0:b1:18:2b:50:02:0d:be:bb: 00:e5:e1:d5:71:89:37:ea:2b:4c:79:45:63:36:85: 77:e3:89:28:c7:64:27:6d:29:90:39:65:ce:00:86: 1d:5b:23:38:02:dd:92:17:eb:9b:51:2a:c0:72:fc: 21:8a:2f:0f:38:92:29:1a:f9:af:08:82:46:ad:b4: e7:a3:30:94:23:df:71:ad:6a:c5:fb:41:f3:01:5d: 8f:ce:61:00:26:e8:a2:9d:fb:1f:dd:de:7c:01:1d: 9a:b6:70:ec:0e:ae:12:bf:68:ea:7e:21:af:6c:3c: 4d:4b:4c:dc:21:15:4e:9f:85:f0:ba:a3:a5:8f:dc: 13:c1:5f:a0:91:cd:b5:99:a1:1a:cd:2c:a0:95:ec: 4f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:37:6E:1F:4C:6E:C9:B1:FB:7C:D3:62:E8:11:F8:53:FD:84:23:A8 X509v3 Authority Key Identifier: keyid:2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:12:c3:07:75:1e:48:9c:58:13:58:de:29:03:4a:96:54:9f: 4d:d1:94:2c:db:5a:33:69:9d:6a:06:3a:7c:00:cb:ed:bc:39: fc:7b:ee:f1:b4:3f:d9:58:f1:21:e6:e5:5e:33:ea:a5:6d:30: 06:b9:e6:d8:9b:24:1e:53:cb:d3:f5:3d:b7:03:fd:b6:14:e3: 3e:2e:0d:55:3e:46:54:a7:83:50:72:13:cd:7b:a0:31:0c:3e: 7e:d3:34:61:fd:b7:d7:07:41:a7:a3:ff:f9:a9:30:6f:10:9d: ae:01:ba:ba:96:13:50:e5:ab:dd:d7:86:2d:c5:ba:8e:50:ec: 33:f9:ec:27:b9:dd:2d:c2:0d:6c:eb:28:c4:29:e3:c6:66:ea: ab:06:7f:f7:b7:f6:de:df:98:e7:82:c7:1b:76:cd:fa:a3:cf: a7:ec:6a:37:8a:5b:00:03:2f:0f:31:5f:78:e2:2e:c0:dd:b6: 1f:ad:ce:a4:a9:db:4b:39:e2:79:22:d8:0d:9c:4e:b0:4d:61: b9:fb:5f:ba:e8:c1:39:36:9f:bb:bd:59:c6:c7:5d:5c:e4:26: 44:ed:2a:d1:90:9c:fc:1f:9e:fb:3d:85:c5:9d:13:05:d4:94: 6f:23:83:64:3e:b6:d6:80:e4:ee:57:e5:1c:e4:8c:1c:43:83: f6:4e:38:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYe0n4Chm6rjIkmdV5DTUVRFr4GEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY3ODc5NEVDMDc1RkU5NUU3ODMxREYwQjE0RTc0Qjg4 RTBFM0ZERjAeFw0yNjA5MDEwMDE0NDVaFw0yNjA5MDIwNDE4NDVaMDMxMTAvBgNV BAMTKEREMzc2RTFGNEM2RUM5QjFGQjdDRDM2MkU4MTFGODUzRkQ4NDIzQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQVjvRGMPkkyKVPDyhdeXOgAGr 2TjeKz1dQNn6qeUNj3+kXEfnqQRLHkePsx/a/sR7A27oEeWtVXPZs47H31wrzlwF RQVMXpC9cjOnJI4k+mC+UrrbbW1g6CXFIPE1CIsl9SN2R1VizSr9mpbpuKCxGCtQ Ag2+uwDl4dVxiTfqK0x5RWM2hXfjiSjHZCdtKZA5Zc4Ahh1bIzgC3ZIX65tRKsBy /CGKLw84kika+a8IgkattOejMJQj33GtasX7QfMBXY/OYQAm6KKd+x/d3nwBHZq2 cOwOrhK/aOp+Ia9sPE1LTNwhFU6fhfC6o6WP3BPBX6CRzbWZoRrNLKCV7E9lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3TduH0xuybH7fNNi6BH4U/2EI6gwHwYDVR0j BBgwFoAUL3h5TsB1/pXngx3wsU50uI4OP98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThhN2YzNTUtZjIyNS00OGYzLTg3ZjgtMGJmYjBjOGU1OGYwLzAvMkY3ODc5NEVD MDc1RkU5NUU3ODMxREYwQjE0RTc0Qjg4RTBFM0ZERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjc4Nzk0RUMwNzVGRTk1RTc4MzFERjBCMTRFNzRCODhFMEUz RkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvMkY3ODc5NEVDMDc1RkU5NUU3ODMxREYwQjE0RTc0 Qjg4RTBFM0ZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMSwwd1HkicWBNY3ikDSpZUn03RlCzbWjNp nWoGOnwAy+28Ofx77vG0P9lY8SHm5V4z6qVtMAa55tibJB5Ty9P1PbcD/bYU4z4u DVU+RlSng1ByE817oDEMPn7TNGH9t9cHQaej//mpMG8Qna4BurqWE1Dlq93Xhi3F uo5Q7DP57Ce53S3CDWzrKMQp48Zm6qsGf/e39t7fmOeCxxt2zfqjz6fsajeKWwAD Lw8xX3jiLsDdth+tzqSp20s54nki2A2cTrBNYbn7X7rowTk2n7u9WcbHXVzkJkTt KtGQnPwfnvs9hcWdEwXUlG8jg2Q+ttaA5O5X5RzkjBxDg/ZOOBw= -----END CERTIFICATE-----Generated at Tue Sep 1 06:21:24 2026 by rpki-client