$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft File: B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft (raw, json) Hash identifier: LXLcLIll2hm/CDPzZ5ve28p6VJvE4gBuIzPB28VvOik= Subject key identifier: F0:95:6F:73:EA:3D:2A:59:BC:AF:82:1B:9B:C7:6F:0F:AC:49:E2:B4 Authority key identifier: B7:8F:92:8B:08:0D:A5:B0:F0:37:D7:BE:CB:8B:94:1F:49:D5:BC:7A Certificate issuer: /CN=B78F928B080DA5B0F037D7BECB8B941F49D5BC7A Certificate serial: 7D1027A4B0DEFFDA2E2D7DA573DBE711D3D64E66 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft Manifest number: 0A Signing time: Sat 09 May 2026 02:13:08 +0000 Manifest this update: Sat 09 May 2026 02:08:08 +0000 Manifest next update: Sun 10 May 2026 03:54:08 +0000 Files and hashes: 1: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: pNmag7DqpLNIaTSD2kV29A9NQgGNcDVD3R4gOpGFNMo=) 2: B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.crl (hash: 6dqLBdgD5H3DwLtIiUWVwII8jTJh2gHUTo8ats0MB5g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.crl rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 May 2026 03:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:10:27:a4:b0:de:ff:da:2e:2d:7d:a5:73:db:e7:11:d3:d6:4e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B78F928B080DA5B0F037D7BECB8B941F49D5BC7A Validity Not Before: May 9 02:08:08 2026 GMT Not After : May 10 03:54:08 2026 GMT Subject: CN=F0956F73EA3D2A59BCAF821B9BC76F0FAC49E2B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:18:d5:84:41:37:df:d6:27:ea:c3:f3:38:32: ee:fc:ed:00:ed:8f:6c:f3:9e:37:1a:7d:6a:3f:b2: 00:1b:00:86:86:61:64:74:46:8d:9c:3e:12:cb:35: be:91:a8:47:c5:6e:44:01:34:9e:d2:18:d6:f6:4d: 4a:dc:f5:66:46:7d:cf:41:cc:c5:bb:68:57:0c:9c: 04:09:bd:b8:ac:1d:f0:7a:e7:59:7c:82:09:56:f9: 44:55:cb:0e:65:61:3c:fe:6d:18:46:1d:17:b5:10: b7:c2:f3:42:86:15:14:7e:2c:47:f1:18:c3:06:a0: 81:a9:17:db:01:9d:0a:ee:69:49:33:52:e2:86:7c: b6:12:bd:97:91:6f:58:49:fe:55:b7:02:3a:11:11: 23:45:4f:eb:89:95:53:9b:25:fe:2c:a2:a0:db:3c: 3b:41:c1:bf:d9:01:c6:00:7c:60:b0:fd:4f:6d:a2: 85:52:56:ec:7d:d9:54:5f:24:b2:39:87:6e:53:af: 5a:05:66:5a:c3:09:44:64:a7:74:26:7f:f4:db:24: c9:30:55:77:57:a2:02:7e:7f:39:d7:a2:4e:ec:40: d6:c1:de:62:f7:ae:1a:b0:aa:5c:c6:31:4b:98:5a: 5a:66:ca:99:de:60:c4:5a:ca:81:f5:9c:6f:09:13: 11:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:95:6F:73:EA:3D:2A:59:BC:AF:82:1B:9B:C7:6F:0F:AC:49:E2:B4 X509v3 Authority Key Identifier: keyid:B7:8F:92:8B:08:0D:A5:B0:F0:37:D7:BE:CB:8B:94:1F:49:D5:BC:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e0:fd:4f:e6:2f:91:12:c5:47:94:ab:6e:29:05:27:d2:b1: ea:67:4c:de:22:e7:a2:c4:75:3d:c7:8e:6d:fb:e1:9b:c5:b5: ac:be:7f:b8:a1:29:2e:ee:88:54:27:b9:3f:97:f3:ed:fe:f5: c8:68:4e:66:6d:6c:d9:80:dc:c5:02:c3:07:87:e2:70:f5:72: 23:68:34:17:62:61:a5:0a:70:9c:ff:e2:f7:54:25:46:07:ca: 33:6a:94:e3:7b:ec:b6:71:7a:83:96:65:c9:f8:53:69:49:01: 48:bd:7d:20:90:d0:76:d0:44:4b:a6:b4:1f:5b:b7:9f:d1:f3: 83:43:ae:0e:7e:98:d2:b9:2b:7a:ea:1c:eb:d8:bc:46:52:61: 1a:49:8c:b5:71:e5:7b:a4:f3:e6:64:a0:79:22:70:02:c1:07: db:f1:63:81:98:5a:eb:b2:80:d5:8c:58:30:12:2c:c1:7e:65: d8:63:fe:e8:ce:a5:a0:3d:cb:f0:a2:15:0e:dc:53:a0:c7:51: 4a:99:1f:1a:91:d1:7c:2e:96:de:08:ef:24:12:75:b3:1a:6e: 8a:4a:41:79:3b:a0:a1:54:da:b9:43:e4:34:fc:10:26:b0:c9: 5b:84:73:d1:87:72:65:13:8b:e0:1e:98:4e:b3:06:2d:c3:d6: 68:0c:43:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRAnpLDe/9ouLX2lc9vnEdPWTmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc4RjkyOEIwODBEQTVCMEYwMzdEN0JFQ0I4Qjk0MUY0 OUQ1QkM3QTAeFw0yNjA1MDkwMjA4MDhaFw0yNjA1MTAwMzU0MDhaMDMxMTAvBgNV BAMTKEYwOTU2RjczRUEzRDJBNTlCQ0FGODIxQjlCQzc2RjBGQUM0OUUyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjGNWEQTff1ifqw/M4Mu787QDt j2zznjcafWo/sgAbAIaGYWR0Ro2cPhLLNb6RqEfFbkQBNJ7SGNb2TUrc9WZGfc9B zMW7aFcMnAQJvbisHfB651l8gglW+URVyw5lYTz+bRhGHRe1ELfC80KGFRR+LEfx GMMGoIGpF9sBnQruaUkzUuKGfLYSvZeRb1hJ/lW3AjoRESNFT+uJlVObJf4soqDb PDtBwb/ZAcYAfGCw/U9tooVSVux92VRfJLI5h25Tr1oFZlrDCURkp3Qmf/TbJMkw VXdXogJ+fznXok7sQNbB3mL3rhqwqlzGMUuYWlpmypneYMRayoH1nG8JExFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8JVvc+o9Klm8r4Ibm8dvD6xJ4rQwHwYDVR0j BBgwFoAUt4+SiwgNpbDwN9e+y4uUH0nVvHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJiZTRmMTgtY2VlZC00ZjIzLWEwYTQtZTI0ZTA0ZDMyMGQzLzAvQjc4RjkyOEIw ODBEQTVCMEYwMzdEN0JFQ0I4Qjk0MUY0OUQ1QkM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzhGOTI4QjA4MERBNUIwRjAzN0Q3QkVDQjhCOTQxRjQ5RDVC QzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvQjc4RjkyOEIwODBEQTVCMEYwMzdEN0JFQ0I4Qjk0 MUY0OUQ1QkM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrg/U/mL5ESxUeUq24pBSfSsepnTN4i56LE dT3Hjm374ZvFtay+f7ihKS7uiFQnuT+X8+3+9choTmZtbNmA3MUCwweH4nD1ciNo NBdiYaUKcJz/4vdUJUYHyjNqlON77LZxeoOWZcn4U2lJAUi9fSCQ0HbQREumtB9b t5/R84NDrg5+mNK5K3rqHOvYvEZSYRpJjLVx5Xuk8+ZkoHkicALBB9vxY4GYWuuy gNWMWDASLMF+Zdhj/ujOpaA9y/CiFQ7cU6DHUUqZHxqR0Xwult4I7yQSdbMabopK QXk7oKFU2rlD5DT8ECawyVuEc9GHcmUTi+AemE6zBi3D1mgMQ84= -----END CERTIFICATE-----Generated at Sat May 9 11:47:12 2026 by rpki-client