$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft File: CB78BE291F4C68861081295C7864E4DC5943795A.mft (raw, json) Hash identifier: 8vBl8AAAnDH11iF8nFPA7ACXPVoFye9GF2aXS/ehJtE= Subject key identifier: 5E:A5:8B:F3:EE:0F:D1:BD:03:0A:29:B7:02:5B:DB:C7:9B:57:FA:60 Authority key identifier: CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A Certificate issuer: /CN=CB78BE291F4C68861081295C7864E4DC5943795A Certificate serial: 68FFF4562FFEF672D86449EB09119A1BA7EDF8A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft Manifest number: E8 Signing time: Sat 24 Oct 2026 01:56:26 +0000 Manifest this update: Sat 24 Oct 2026 01:51:26 +0000 Manifest next update: Sun 25 Oct 2026 02:45:26 +0000 Files and hashes: 1: CB78BE291F4C68861081295C7864E4DC5943795A.crl (hash: tad4Ywtnp/2fOyszHmtfSMTm7uDTnQKooAiMdJNwI0s=) 2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: Sw+OUdszsTIUzZ+1lqD/i8/2BPm17GQD5VfJxVXp+AM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 02:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ff:f4:56:2f:fe:f6:72:d8:64:49:eb:09:11:9a:1b:a7:ed:f8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB78BE291F4C68861081295C7864E4DC5943795A Validity Not Before: Oct 24 01:51:26 2026 GMT Not After : Oct 25 02:45:26 2026 GMT Subject: CN=5EA58BF3EE0FD1BD030A29B7025BDBC79B57FA60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:c8:be:89:8d:85:1d:eb:10:64:39:71:a9: 70:bf:4e:33:c6:7d:83:b8:f6:78:75:b3:62:53:af: 4c:d4:17:93:2c:48:08:63:6c:e8:ac:6d:f9:37:35: 47:bc:f8:49:88:e2:ef:8f:0a:97:c7:df:85:15:7b: 71:2b:49:90:b8:b0:3b:12:4f:c2:1f:92:77:c8:32: f0:ff:7e:62:37:b0:d1:dc:47:10:c7:0c:b3:6d:d0: e0:24:dc:b2:ab:b2:48:d1:ba:f7:f9:73:f5:9b:0c: ef:b5:fa:b2:a6:65:9b:ba:5b:a7:bc:ef:9a:1e:67: 9a:7f:d9:3f:3c:32:18:97:24:de:fc:57:3f:2e:0a: 61:bd:fd:a9:87:c4:7f:4e:eb:05:56:7c:d8:5a:21: 0f:dc:d3:93:c1:67:14:81:00:65:b8:63:48:18:32: d3:77:b5:a0:3a:de:6b:59:93:e1:c3:74:0d:3e:9b: a5:ff:04:f8:31:8c:bb:35:a0:75:5e:7e:22:0c:5b: ab:db:c5:51:94:45:af:cd:d2:44:d6:54:9a:23:81: 1b:9c:9a:86:40:59:86:46:44:f4:ba:05:15:25:a1: 8e:cb:3d:6d:7f:c4:79:7a:cd:11:d2:72:25:9e:23: a4:5e:9d:7f:53:95:9f:29:39:6b:a1:33:90:71:d2: 2e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A5:8B:F3:EE:0F:D1:BD:03:0A:29:B7:02:5B:DB:C7:9B:57:FA:60 X509v3 Authority Key Identifier: keyid:CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:44:6e:44:d2:a5:c6:9f:b0:75:ce:34:a0:22:a5:80:7f:6c: 84:e5:ac:30:fe:8b:47:c2:cf:81:76:f4:e0:18:d3:98:e0:1f: 78:6e:4a:4a:27:50:f4:01:24:58:5a:de:04:eb:73:47:66:b3: 03:7c:e7:53:3f:6a:f6:ba:db:ad:63:48:dd:1b:35:5c:96:73: 88:7e:f6:67:47:d3:48:da:5e:fc:18:fa:d9:e3:19:d6:e2:18: 11:ae:bb:dc:67:13:b0:70:24:3c:a8:b3:75:a4:8e:a8:7a:26: 51:0b:06:05:77:93:7c:d1:68:7d:44:08:a1:c9:32:e8:cb:29: 1a:d5:4d:4d:28:7f:9f:39:9e:fb:66:a9:82:60:2a:63:f9:3a: b4:c1:6c:51:e7:ca:3d:77:e2:0f:8c:46:86:4d:b6:2e:66:e7: bc:50:5e:2e:0e:43:09:77:d2:bc:24:28:19:2a:0a:da:7c:8a: 5d:c9:37:a1:8f:1f:16:12:cd:7a:1a:84:5d:6c:95:03:dc:f2: e7:c6:9d:33:22:11:b6:8d:b2:4b:c1:aa:e8:a2:4f:31:db:43: 4e:32:00:49:1b:d7:03:b3:09:f4:cb:a0:24:d4:1c:1f:82:86: 17:c3:2b:b5:59:33:80:a1:69:f9:ff:83:50:6d:4f:14:8e:53: 31:d7:24:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaP/0Vi/+9nLYZEnrCRGaG6ft+KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0REM1 OTQzNzk1QTAeFw0yNjEwMjQwMTUxMjZaFw0yNjEwMjUwMjQ1MjZaMDMxMTAvBgNV BAMTKDVFQTU4QkYzRUUwRkQxQkQwMzBBMjlCNzAyNUJEQkM3OUI1N0ZBNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/ci+iY2FHesQZDlxqXC/TjPG fYO49nh1s2JTr0zUF5MsSAhjbOisbfk3NUe8+EmI4u+PCpfH34UVe3ErSZC4sDsS T8IfknfIMvD/fmI3sNHcRxDHDLNt0OAk3LKrskjRuvf5c/WbDO+1+rKmZZu6W6e8 75oeZ5p/2T88MhiXJN78Vz8uCmG9/amHxH9O6wVWfNhaIQ/c05PBZxSBAGW4Y0gY MtN3taA63mtZk+HDdA0+m6X/BPgxjLs1oHVefiIMW6vbxVGURa/N0kTWVJojgRuc moZAWYZGRPS6BRUloY7LPW1/xHl6zRHSciWeI6RenX9TlZ8pOWuhM5Bx0i6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXqWL8+4P0b0DCim3Alvbx5tX+mAwHwYDVR0j BBgwFoAUy3i+KR9MaIYQgSlceGTk3FlDeVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmNiOWJhN2YtZWZkMS00OTk0LWEyYTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkx RjRDNjg4NjEwODEyOTVDNzg2NEU0REM1OTQzNzk1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjc4QkUyOTFGNEM2ODg2MTA4MTI5NUM3ODY0RTREQzU5NDM3 OTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0 REM1OTQzNzk1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVEbkTSpcafsHXONKAipYB/bITlrDD+i0fC z4F29OAY05jgH3huSkonUPQBJFha3gTrc0dmswN851M/ava6261jSN0bNVyWc4h+ 9mdH00jaXvwY+tnjGdbiGBGuu9xnE7BwJDyos3Wkjqh6JlELBgV3k3zRaH1ECKHJ MujLKRrVTU0of585nvtmqYJgKmP5OrTBbFHnyj134g+MRoZNti5m57xQXi4OQwl3 0rwkKBkqCtp8il3JN6GPHxYSzXoahF1slQPc8ufGnTMiEbaNskvBquiiTzHbQ04y AEkb1wOzCfTLoCTUHB+ChhfDK7VZM4Chafn/g1BtTxSOUzHXJJc= -----END CERTIFICATE-----Generated at Sat Oct 24 08:29:07 2026 by rpki-client