$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft File: 78AB429C4579785348E8B0DFF48937716E9707FA.mft (raw, json) Hash identifier: 2eJbqFdsHaV4SsA1KtZF4CYBz5wUFhosaUdBx0mJaSw= Subject key identifier: AE:96:10:A7:55:01:FC:46:3A:D1:F2:58:EF:2F:1A:07:49:F6:08:1D Authority key identifier: 78:AB:42:9C:45:79:78:53:48:E8:B0:DF:F4:89:37:71:6E:97:07:FA Certificate issuer: /CN=78AB429C4579785348E8B0DFF48937716E9707FA Certificate serial: 666AF9776F544F911D880C17D87E55F73F39611B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 09:09:53 +0000 Manifest this update: Thu 17 Sep 2026 09:04:53 +0000 Manifest next update: Fri 18 Sep 2026 10:09:53 +0000 Files and hashes: 1: 78AB429C4579785348E8B0DFF48937716E9707FA.crl (hash: oHIZSwEbmlJQU8CQ1ig/0i9ionzvXsgewOREhoxtT4A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.crl rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6a:f9:77:6f:54:4f:91:1d:88:0c:17:d8:7e:55:f7:3f:39:61:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78AB429C4579785348E8B0DFF48937716E9707FA Validity Not Before: Sep 17 09:04:53 2026 GMT Not After : Sep 18 10:09:53 2026 GMT Subject: CN=AE9610A75501FC463AD1F258EF2F1A0749F6081D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:a0:4a:e3:50:c5:54:62:de:cd:f4:86:f7: 7d:8f:38:00:88:1d:72:59:5c:8c:c9:01:a5:4c:d9: be:6b:24:17:60:44:90:22:64:57:c0:2c:0b:37:df: 6d:90:84:7d:46:fb:e1:b5:2a:19:8c:88:9f:1d:96: 7c:9c:1d:e7:9d:77:5a:6e:3e:31:5a:0b:cd:82:4a: d3:2b:70:ac:85:93:f3:2a:e4:14:cf:05:96:e9:e0: 78:b4:b1:12:b4:1c:d2:61:fa:ec:48:d9:ed:6a:96: b8:38:7e:ab:0f:6b:be:18:12:af:68:9b:eb:49:29: cf:1c:86:8d:6c:d0:e9:eb:80:5b:9b:6c:20:71:00: d8:8e:85:76:62:ac:2a:72:74:02:14:c6:9f:2b:96: 5c:12:e6:67:63:d7:74:d4:61:ed:01:c6:15:9d:6d: de:ed:39:f8:61:5f:ad:62:83:7e:57:18:db:05:da: 09:6b:bf:3e:c1:fd:e9:4a:ad:77:b4:f8:2a:68:b4: dd:6f:7f:c0:6d:33:3d:23:2d:a2:77:fa:d3:b4:35: b5:55:2b:1d:28:15:02:9a:13:8e:c2:f2:d2:3b:d8: e1:3b:78:58:ca:4b:4a:fd:ef:99:03:b3:c2:70:e4: 10:a9:74:a2:1e:3b:50:3e:25:95:e9:fa:d3:8e:d0: be:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:96:10:A7:55:01:FC:46:3A:D1:F2:58:EF:2F:1A:07:49:F6:08:1D X509v3 Authority Key Identifier: keyid:78:AB:42:9C:45:79:78:53:48:E8:B0:DF:F4:89:37:71:6E:97:07:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4f:9c:e9:17:54:58:d8:b5:19:07:d6:26:0b:e9:1c:00:67: a9:7a:fd:06:43:76:eb:2b:80:98:7b:07:01:e5:3f:ed:da:8e: 8a:20:45:25:f6:53:92:a4:12:5e:05:6d:73:31:2f:b5:37:6d: 79:08:65:55:b0:ba:37:a7:b9:8e:6d:e0:6b:aa:95:53:4c:49: 1e:a1:ba:5c:98:57:6a:c6:e2:dd:38:17:e1:0e:fa:ef:97:5c: 67:09:7e:7e:32:35:4f:e9:f5:de:21:21:e7:04:6c:00:ae:e9: 73:e1:95:e7:8f:7c:fb:1f:ac:2f:7b:c8:35:e4:11:46:68:21: 90:32:e3:d7:5c:83:47:04:a5:ff:66:51:84:bf:c4:10:46:96: 40:a0:47:c2:bd:d9:9d:24:ec:5f:3e:26:91:35:be:7f:99:03: 65:68:db:88:10:7a:ca:36:fd:e6:02:41:5a:bc:b4:c1:ab:05: b1:fd:e0:83:86:22:75:86:1d:74:00:74:fe:80:38:54:84:d1: af:71:32:66:97:d3:43:3e:a1:25:8b:83:b6:b0:fa:61:b5:68: 64:f2:ae:96:9b:1d:42:94:18:85:f9:37:af:ab:26:50:84:72: 52:df:ad:1d:c9:57:9f:7f:d3:2f:d4:b5:95:1a:a6:37:40:63: 9b:8e:1f:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZmr5d29UT5EdiAwX2H5V9z85YRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBQjQyOUM0NTc5Nzg1MzQ4RThCMERGRjQ4OTM3NzE2 RTk3MDdGQTAeFw0yNjA5MTcwOTA0NTNaFw0yNjA5MTgxMDA5NTNaMDMxMTAvBgNV BAMTKEFFOTYxMEE3NTUwMUZDNDYzQUQxRjI1OEVGMkYxQTA3NDlGNjA4MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCod6BK41DFVGLezfSG932POACI HXJZXIzJAaVM2b5rJBdgRJAiZFfALAs3322QhH1G++G1KhmMiJ8dlnycHeedd1pu PjFaC82CStMrcKyFk/Mq5BTPBZbp4Hi0sRK0HNJh+uxI2e1qlrg4fqsPa74YEq9o m+tJKc8cho1s0OnrgFubbCBxANiOhXZirCpydAIUxp8rllwS5mdj13TUYe0BxhWd bd7tOfhhX61ig35XGNsF2glrvz7B/elKrXe0+CpotN1vf8BtMz0jLaJ3+tO0NbVV Kx0oFQKaE47C8tI72OE7eFjKS0r975kDs8Jw5BCpdKIeO1A+JZXp+tOO0L6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrpYQp1UB/EY60fJY7y8aB0n2CB0wHwYDVR0j BBgwFoAUeKtCnEV5eFNI6LDf9Ik3cW6XB/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVmMzgxNTctYjVlOC00Y2JjLWJlMjEtZDE3NjE0NWE0NTY5LzAvNzhBQjQyOUM0 NTc5Nzg1MzQ4RThCMERGRjQ4OTM3NzE2RTk3MDdGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEFCNDI5QzQ1Nzk3ODUzNDhFOEIwREZGNDg5Mzc3MTZFOTcw N0ZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVmMzgxNTctYjVlOC00Y2JjLWJl MjEtZDE3NjE0NWE0NTY5LzAvNzhBQjQyOUM0NTc5Nzg1MzQ4RThCMERGRjQ4OTM3 NzE2RTk3MDdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRPnOkXVFjYtRkH1iYL6RwAZ6l6/QZDdusr gJh7BwHlP+3ajoogRSX2U5KkEl4FbXMxL7U3bXkIZVWwujenuY5t4GuqlVNMSR6h ulyYV2rG4t04F+EO+u+XXGcJfn4yNU/p9d4hIecEbACu6XPhleePfPsfrC97yDXk EUZoIZAy49dcg0cEpf9mUYS/xBBGlkCgR8K92Z0k7F8+JpE1vn+ZA2Vo24gQeso2 /eYCQVq8tMGrBbH94IOGInWGHXQAdP6AOFSE0a9xMmaX00M+oSWLg7aw+mG1aGTy rpabHUKUGIX5N6+rJlCEclLfrR3JV59/0y/UtZUapjdAY5uOH90= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:26 2026 by rpki-client