$ rpki-client -vvf rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft File: CB78BE291F4C68861081295C7864E4DC5943795A.mft (raw, json) Hash identifier: 6v8IYsXHdi7aN5cSqMTbbje2hps+hbNhBBg15/LwTMU= Subject key identifier: B7:6C:D9:33:A5:32:F9:7A:9C:2A:38:B4:7A:11:8B:8B:90:B7:98:4E Authority key identifier: CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A Certificate issuer: /CN=CB78BE291F4C68861081295C7864E4DC5943795A Certificate serial: 235CAB147BE078F27608FE4592866D956E261A94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:54:59 +0000 Manifest this update: Fri 19 Jun 2026 19:49:59 +0000 Manifest next update: Sat 20 Jun 2026 20:39:59 +0000 Files and hashes: 1: CB78BE291F4C68861081295C7864E4DC5943795A.crl (hash: JnORsTBd1SvHV2kgo8Qqj0mHN1kQ1TjxXoC1csgWThI=) 2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: Sw+OUdszsTIUzZ+1lqD/i8/2BPm17GQD5VfJxVXp+AM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5c:ab:14:7b:e0:78:f2:76:08:fe:45:92:86:6d:95:6e:26:1a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB78BE291F4C68861081295C7864E4DC5943795A Validity Not Before: Jun 19 19:49:59 2026 GMT Not After : Jun 20 20:39:59 2026 GMT Subject: CN=B76CD933A532F97A9C2A38B47A118B8B90B7984E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:df:9b:83:19:21:b9:a1:88:be:00:5c:f0: 6c:6f:93:36:c7:1b:10:54:fe:d1:ea:19:fc:a5:86: 86:7b:fe:6c:b5:c6:d0:dd:5b:f4:48:e1:a9:5d:33: a5:56:f7:39:9b:45:de:92:13:83:09:8e:1c:43:a0: 98:75:5d:37:00:09:58:40:49:d6:69:aa:e7:aa:23: b7:9e:9c:2c:6e:42:bd:4b:cb:ac:3d:be:38:5d:e2: 98:5f:e9:59:27:28:70:cb:db:6e:bd:24:63:0f:a8: a7:bd:4c:de:e0:48:fc:8f:3d:f8:90:08:fc:3b:83: b9:1b:54:8a:07:ed:d8:bd:6e:60:85:fd:82:6e:6c: 9c:e0:b9:70:07:cf:d3:80:dd:b7:eb:79:f2:32:e8: 0e:de:91:9b:54:c2:3d:0e:a5:d9:90:ec:d4:fa:3b: 06:8e:c4:57:60:fa:15:b8:e0:21:67:83:23:14:f4: 55:ed:eb:4b:a3:24:cf:ff:d9:de:39:bd:28:da:9d: ab:be:1c:6a:cf:3a:67:f6:76:51:3d:fd:54:62:7c: 58:29:c7:1f:bc:05:c1:f8:8b:63:cc:20:5c:3c:fe: cc:3d:6a:45:74:47:b5:dd:54:74:37:e4:b9:be:b3: 50:ef:f2:5a:47:9f:f9:19:1b:3d:ea:5f:e1:0e:b3: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6C:D9:33:A5:32:F9:7A:9C:2A:38:B4:7A:11:8B:8B:90:B7:98:4E X509v3 Authority Key Identifier: keyid:CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:f7:5f:69:27:9d:07:18:f0:1b:55:fc:7e:96:ea:f5:4a:37: 5c:ca:c2:19:67:59:31:7b:e2:11:86:46:d8:90:9c:8d:85:e6: a0:67:e7:50:2f:2f:38:12:4d:7b:52:77:c0:c0:4c:54:55:98: f3:b4:c5:a3:51:07:36:5b:dd:70:60:05:dc:24:53:31:21:9a: 30:e3:7d:39:13:8d:a3:f9:3b:04:bc:90:8c:37:1c:96:08:14: 3b:ff:cd:78:9a:d4:e3:cf:de:94:91:02:63:4a:7a:8b:6e:ff: 82:38:36:8a:9b:db:fa:86:42:4e:70:db:ea:e0:e1:1a:6a:30: 1f:d0:7e:bb:2d:21:fc:9f:15:a7:75:f0:b7:9b:1d:7d:f6:7d: 74:41:ae:47:82:9c:72:39:bf:41:02:5f:6b:12:ae:20:a8:30: a7:24:4c:fc:e8:e5:1d:5b:d7:ba:d0:7d:8f:e3:b1:cf:d1:1a: df:94:29:a9:b9:88:6b:fd:4a:72:e9:0c:81:16:49:97:f6:21: fb:8b:32:d8:97:94:80:74:fc:34:da:69:12:69:20:c0:e6:fa: f5:33:bb:d4:17:29:d4:7c:95:0a:6b:78:4d:31:2f:a7:2f:e6: 7e:cc:95:f3:5e:34:02:e8:02:77:cb:60:1f:6f:4b:2e:fc:ce: c3:14:6f:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1yrFHvgePJ2CP5FkoZtlW4mGpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0REM1 OTQzNzk1QTAeFw0yNjA2MTkxOTQ5NTlaFw0yNjA2MjAyMDM5NTlaMDMxMTAvBgNV BAMTKEI3NkNEOTMzQTUzMkY5N0E5QzJBMzhCNDdBMTE4QjhCOTBCNzk4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXot+bgxkhuaGIvgBc8GxvkzbH GxBU/tHqGfylhoZ7/my1xtDdW/RI4aldM6VW9zmbRd6SE4MJjhxDoJh1XTcACVhA SdZpqueqI7eenCxuQr1Ly6w9vjhd4phf6VknKHDL2269JGMPqKe9TN7gSPyPPfiQ CPw7g7kbVIoH7di9bmCF/YJubJzguXAHz9OA3bfrefIy6A7ekZtUwj0OpdmQ7NT6 OwaOxFdg+hW44CFngyMU9FXt60ujJM//2d45vSjanau+HGrPOmf2dlE9/VRifFgp xx+8BcH4i2PMIFw8/sw9akV0R7XdVHQ35Lm+s1Dv8lpHn/kZGz3qX+EOs5cJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt2zZM6Uy+XqcKji0ehGLi5C3mE4wHwYDVR0j BBgwFoAUy3i+KR9MaIYQgSlceGTk3FlDeVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmNiOWJhN2YtZWZkMS00OTk0LWEyYTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkx RjRDNjg4NjEwODEyOTVDNzg2NEU0REM1OTQzNzk1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjc4QkUyOTFGNEM2ODg2MTA4MTI5NUM3ODY0RTREQzU5NDM3 OTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0 REM1OTQzNzk1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANP3X2knnQcY8BtV/H6W6vVKN1zKwhlnWTF7 4hGGRtiQnI2F5qBn51AvLzgSTXtSd8DATFRVmPO0xaNRBzZb3XBgBdwkUzEhmjDj fTkTjaP5OwS8kIw3HJYIFDv/zXia1OPP3pSRAmNKeotu/4I4Noqb2/qGQk5w2+rg 4RpqMB/QfrstIfyfFad18LebHX32fXRBrkeCnHI5v0ECX2sSriCoMKckTPzo5R1b 17rQfY/jsc/RGt+UKam5iGv9SnLpDIEWSZf2IfuLMtiXlIB0/DTaaRJpIMDm+vUz u9QXKdR8lQpreE0xL6cv5n7MlfNeNALoAnfLYB9vSy78zsMUb9w= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:59 2026 by rpki-client