$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft File: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft (raw, json) Hash identifier: LnRparlfYOGf2M58O56ghiTjTXDvH9h7Hc27VVHxLLE= Subject key identifier: 77:68:E2:E4:8F:77:AF:0E:27:8C:BB:E3:B2:36:40:E7:F8:A9:B9:6C Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 Certificate issuer: /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Certificate serial: 23274BBDBC01112C5A826FCAC3D30FB68108C350 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft Manifest number: CB Signing time: Sun 01 Mar 2026 18:01:27 +0000 Manifest this update: Sun 01 Mar 2026 17:56:27 +0000 Manifest next update: Wed 04 Mar 2026 18:18:27 +0000 Files and hashes: 1: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl (hash: K6L2Fe/8LL+G4I8hxM2+712nYikGz22+m/wFJbyeUqA=) 2: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: BKOeIpPmZ/JlEup668j4Ru9S2UzMSJK/Lz9NsYvcvj4=) 3: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: PB5sEIidful8Aq2vYl2cOVwqgMl/aNUVGYhSLpss8uA=) 4: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: pcrYcQfetv/rc/0VTi5Yuk7X3ubcBjWkKo4wzgdZiSs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:27:4b:bd:bc:01:11:2c:5a:82:6f:ca:c3:d3:0f:b6:81:08:c3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Validity Not Before: Mar 1 17:56:27 2026 GMT Not After : Mar 4 18:18:27 2026 GMT Subject: CN=7768E2E48F77AF0E278CBBE3B23640E7F8A9B96C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:a8:39:fe:5d:c5:f4:c8:d2:90:03:a9:a0: 1f:1c:ee:c0:2d:47:fd:74:c5:0b:9a:e8:36:be:5d: c2:0c:3a:e5:6c:f5:8f:37:a5:c7:07:c4:1e:2e:2b: 16:e0:eb:8e:e4:8a:55:99:00:7e:6b:ad:0e:96:7c: 5a:38:00:23:9e:d2:fd:44:59:b3:ee:df:67:e6:b2: 87:48:4b:9c:80:8c:28:da:cb:5a:af:9c:6d:9f:16: b8:2f:49:1a:91:dd:e6:f6:77:a7:94:f0:7b:de:0c: 7d:07:e9:ca:aa:b0:07:ee:1f:f4:68:c7:c9:4d:7c: 8b:65:25:0e:09:89:2b:6e:6f:ea:47:bc:cc:a1:3f: 9b:ac:a5:fe:c9:95:d6:d9:9e:c1:17:b2:52:ce:90: 88:94:a6:85:7b:4d:9c:10:f4:95:dc:0b:2f:36:44: 9c:b5:01:6b:8f:ac:e2:5c:73:7d:b5:aa:be:20:15: 7e:7b:ba:be:89:df:0c:02:22:f8:26:af:b3:d3:02: c3:d8:13:55:b3:7d:2f:9e:d6:9f:b0:ba:c6:50:27: 0a:4f:c8:75:28:60:3d:86:35:3d:e5:75:d7:f4:ed: 11:06:ef:fa:44:c5:59:43:08:73:54:e6:4b:ed:9e: 13:7e:7a:5d:52:54:c2:b5:5f:1c:0d:7c:89:2a:5f: 5b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:68:E2:E4:8F:77:AF:0E:27:8C:BB:E3:B2:36:40:E7:F8:A9:B9:6C X509v3 Authority Key Identifier: keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:cf:9c:44:be:43:92:c8:4d:ad:89:00:c7:e3:3c:bf:d4:c8: 52:05:eb:85:40:ab:74:fb:14:df:d0:83:25:4a:71:a7:ab:37: 85:4f:e0:86:da:ab:a2:74:1c:18:7c:71:54:08:f8:98:49:79: bb:67:ab:5f:7c:2d:56:61:c9:50:c3:e9:30:f5:95:ae:0b:53: ae:f4:11:24:65:0b:c5:29:9c:45:1c:5c:42:82:af:6a:5e:e3: 1c:ca:00:1f:4d:c6:0d:73:58:79:cf:3d:a6:dd:8d:51:7a:10: 3f:d9:d0:aa:07:6f:bb:81:44:e9:e0:a3:15:ef:6f:89:72:37: 5b:ca:9d:60:fb:6d:83:d9:31:0a:72:3f:ed:36:97:b9:46:e1: d6:2f:18:78:9e:45:f7:37:e5:be:d9:c5:40:4e:ae:ab:47:af: 87:0a:30:35:ba:99:5f:e6:2c:56:b8:5b:59:4d:b7:6c:95:09: 77:2c:5e:99:27:23:3b:42:ef:73:a3:34:68:03:5a:a2:68:50: 50:1d:04:f4:ea:3e:0f:33:ce:60:a3:77:35:dd:f1:95:64:ef: 08:e1:32:3f:9d:a1:34:df:fb:45:f1:10:a2:a2:7e:9d:02:1b: c4:af:25:49:97:df:e3:3e:f5:c7:e7:2e:d0:e0:31:eb:16:5b: df:54:db:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIydLvbwBESxagm/Kw9MPtoEIw1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0 REY0MTQxNDAeFw0yNjAzMDExNzU2MjdaFw0yNjAzMDQxODE4MjdaMDMxMTAvBgNV BAMTKDc3NjhFMkU0OEY3N0FGMEUyNzhDQkJFM0IyMzY0MEU3RjhBOUI5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Yqg5/l3F9MjSkAOpoB8c7sAt R/10xQua6Da+XcIMOuVs9Y83pccHxB4uKxbg647kilWZAH5rrQ6WfFo4ACOe0v1E WbPu32fmsodIS5yAjCjay1qvnG2fFrgvSRqR3eb2d6eU8HveDH0H6cqqsAfuH/Ro x8lNfItlJQ4JiStub+pHvMyhP5uspf7JldbZnsEXslLOkIiUpoV7TZwQ9JXcCy82 RJy1AWuPrOJcc321qr4gFX57ur6J3wwCIvgmr7PTAsPYE1WzfS+e1p+wusZQJwpP yHUoYD2GNT3lddf07REG7/pExVlDCHNU5kvtnhN+el1SVMK1XxwNfIkqX1u1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd2ji5I93rw4njLvjsjZA5/ipuWwwHwYDVR0j BBgwFoAUeLf6oogav7wRfA+D7NydVU30FBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMC83OEI3RkFBMjg4 MUFCRkJDMTE3QzBGODNFQ0RDOUQ1NTRERjQxNDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0REY0 MTQxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzAvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlE NTU0REY0MTQxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnPnES+Q5LITa2JAMfjPL/UyFIF64VAq3T7 FN/QgyVKcaerN4VP4Ibaq6J0HBh8cVQI+JhJebtnq198LVZhyVDD6TD1la4LU670 ESRlC8UpnEUcXEKCr2pe4xzKAB9Nxg1zWHnPPabdjVF6ED/Z0KoHb7uBROngoxXv b4lyN1vKnWD7bYPZMQpyP+02l7lG4dYvGHieRfc35b7ZxUBOrqtHr4cKMDW6mV/m LFa4W1lNt2yVCXcsXpknIztC73OjNGgDWqJoUFAdBPTqPg8zzmCjdzXd8ZVk7wjh Mj+doTTf+0XxEKKifp0CG8SvJUmX3+M+9cfnLtDgMesWW99U28w= -----END CERTIFICATE-----Generated at Mon Mar 2 16:46:51 2026 by rpki-client