$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft File: 78AB429C4579785348E8B0DFF48937716E9707FA.mft (raw, json) Hash identifier: sX8qNCBow7UTGRI82czdOc6Ib2pa2+uDeYWCTbw+v2g= Subject key identifier: EC:B7:A1:59:31:E5:1C:B0:95:54:8E:6E:CD:2B:D6:9C:2D:CB:F5:E6 Authority key identifier: 78:AB:42:9C:45:79:78:53:48:E8:B0:DF:F4:89:37:71:6E:97:07:FA Certificate issuer: /CN=78AB429C4579785348E8B0DFF48937716E9707FA Certificate serial: 16401F7BFA0564A08FD91BA1F10ADD3041E538FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 03:59:34 +0000 Manifest this update: Sat 20 Jun 2026 03:54:34 +0000 Manifest next update: Sun 21 Jun 2026 04:46:34 +0000 Files and hashes: 1: 78AB429C4579785348E8B0DFF48937716E9707FA.crl (hash: TxxiLdQSd5SLEKduWzW/llv60WEweEbfe1StM6PMGTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.crl rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:40:1f:7b:fa:05:64:a0:8f:d9:1b:a1:f1:0a:dd:30:41:e5:38:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78AB429C4579785348E8B0DFF48937716E9707FA Validity Not Before: Jun 20 03:54:34 2026 GMT Not After : Jun 21 04:46:34 2026 GMT Subject: CN=ECB7A15931E51CB095548E6ECD2BD69C2DCBF5E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:c2:2a:c9:7d:25:61:d3:c2:5f:d3:60:bb: bd:8d:6a:43:d5:a8:75:32:84:25:20:0d:42:e0:ed: 9f:e0:d8:34:ed:07:f7:dd:f8:b5:a5:25:70:8f:c5: 7f:ef:8a:0d:a1:f6:62:73:bc:24:e0:1a:31:f4:9c: 06:c3:a9:cc:87:43:ae:0b:36:3e:87:6e:a9:99:f6: b4:b2:4e:a9:f7:ea:86:10:c4:5e:7d:d1:32:e4:e3: e7:67:57:3d:91:c0:44:18:ba:15:c1:64:f9:3e:13: 9f:71:28:ac:48:da:c6:a0:41:92:e9:56:26:39:51: cf:35:42:5c:26:6d:00:0b:b3:3c:eb:f3:58:92:73: 36:bf:d1:8f:16:85:f9:b9:45:61:69:f9:ce:eb:43: d7:36:22:19:f6:b1:0a:80:ee:48:3e:fc:04:88:a0: 31:35:c2:17:af:5b:08:8e:80:24:e7:a7:64:06:54: d6:37:6b:ec:5e:81:06:4d:80:79:89:f5:df:63:d3: 06:e8:6c:31:3a:a8:52:d4:d5:76:3c:07:fc:6a:88: b7:d1:89:f3:4f:21:5a:95:23:d3:22:9e:c8:29:12: c2:ed:12:07:19:46:28:ba:38:9e:5a:7d:dc:75:96: 9c:96:a9:23:bf:33:0d:71:84:1a:1f:0e:c9:95:3c: 0c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B7:A1:59:31:E5:1C:B0:95:54:8E:6E:CD:2B:D6:9C:2D:CB:F5:E6 X509v3 Authority Key Identifier: keyid:78:AB:42:9C:45:79:78:53:48:E8:B0:DF:F4:89:37:71:6E:97:07:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:20:06:27:13:5a:47:8b:6f:01:89:5e:e1:cf:e5:aa:ff:de: 40:3f:13:76:97:95:4c:41:25:7b:79:e3:f1:c1:5c:15:af:22: 6d:84:12:c9:9e:31:cb:c2:08:e5:51:8b:a6:7e:e1:30:be:7f: 87:77:65:39:fa:a4:32:92:9a:d8:2d:32:cf:aa:57:e9:a9:31: 11:51:82:c5:29:e5:ad:be:08:4d:a4:38:64:d4:6f:a6:71:88: ec:ac:99:f0:a8:da:70:6e:41:7d:bf:ed:29:49:77:b5:b0:98: c7:ca:d4:de:23:ed:7b:f7:74:84:92:84:1d:1d:4c:f4:7d:7f: 46:29:ee:15:ea:45:ce:3c:02:ed:93:9a:d4:95:65:07:15:ae: 1e:ec:e9:82:30:62:94:a0:10:aa:63:da:42:8e:b3:9b:c1:24: 0c:75:38:b1:81:26:c2:42:88:0c:bf:81:b4:bc:de:80:9e:11: 31:b0:f9:1d:01:b7:3e:c3:0a:9f:7a:4a:fd:6b:e8:7e:a2:56: 11:15:bd:89:64:6e:74:da:1b:3e:f8:5d:e9:bc:1b:b7:76:1c: 82:65:a2:cc:a9:91:94:42:08:84:6a:62:f0:8a:d6:21:a0:11: 24:bc:2f:e3:91:85:70:8e:5a:89:49:fb:f9:e4:7e:ee:ab:2d: fd:9f:d9:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkAfe/oFZKCP2Ruh8QrdMEHlOPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBQjQyOUM0NTc5Nzg1MzQ4RThCMERGRjQ4OTM3NzE2 RTk3MDdGQTAeFw0yNjA2MjAwMzU0MzRaFw0yNjA2MjEwNDQ2MzRaMDMxMTAvBgNV BAMTKEVDQjdBMTU5MzFFNTFDQjA5NTU0OEU2RUNEMkJENjlDMkRDQkY1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgq8IqyX0lYdPCX9Ngu72NakPV qHUyhCUgDULg7Z/g2DTtB/fd+LWlJXCPxX/vig2h9mJzvCTgGjH0nAbDqcyHQ64L Nj6HbqmZ9rSyTqn36oYQxF590TLk4+dnVz2RwEQYuhXBZPk+E59xKKxI2sagQZLp ViY5Uc81QlwmbQALszzr81iScza/0Y8Whfm5RWFp+c7rQ9c2Ihn2sQqA7kg+/ASI oDE1whevWwiOgCTnp2QGVNY3a+xegQZNgHmJ9d9j0wbobDE6qFLU1XY8B/xqiLfR ifNPIVqVI9MinsgpEsLtEgcZRii6OJ5afdx1lpyWqSO/Mw1xhBofDsmVPAwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7LehWTHlHLCVVI5uzSvWnC3L9eYwHwYDVR0j BBgwFoAUeKtCnEV5eFNI6LDf9Ik3cW6XB/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVmMzgxNTctYjVlOC00Y2JjLWJlMjEtZDE3NjE0NWE0NTY5LzAvNzhBQjQyOUM0 NTc5Nzg1MzQ4RThCMERGRjQ4OTM3NzE2RTk3MDdGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEFCNDI5QzQ1Nzk3ODUzNDhFOEIwREZGNDg5Mzc3MTZFOTcw N0ZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVmMzgxNTctYjVlOC00Y2JjLWJl MjEtZDE3NjE0NWE0NTY5LzAvNzhBQjQyOUM0NTc5Nzg1MzQ4RThCMERGRjQ4OTM3 NzE2RTk3MDdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIgBicTWkeLbwGJXuHP5ar/3kA/E3aXlUxB JXt54/HBXBWvIm2EEsmeMcvCCOVRi6Z+4TC+f4d3ZTn6pDKSmtgtMs+qV+mpMRFR gsUp5a2+CE2kOGTUb6ZxiOysmfCo2nBuQX2/7SlJd7WwmMfK1N4j7Xv3dISShB0d TPR9f0Yp7hXqRc48Au2TmtSVZQcVrh7s6YIwYpSgEKpj2kKOs5vBJAx1OLGBJsJC iAy/gbS83oCeETGw+R0Btz7DCp96Sv1r6H6iVhEVvYlkbnTaGz74Xem8G7d2HIJl osypkZRCCIRqYvCK1iGgESS8L+ORhXCOWolJ+/nkfu6rLf2f2YY= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:57 2026 by rpki-client