$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft File: 78E0160248ABDDA316B054457CAC9C2878172E3F.mft (raw, json) Hash identifier: YijpPum8EOQ/SUtCiBbBlwiE8ACiqTq6nAGaudIemGU= Subject key identifier: 18:5F:CB:62:1A:05:7C:5C:98:AD:DE:97:6C:6A:63:AD:52:5F:3C:4E Authority key identifier: 78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F Certificate issuer: /CN=78E0160248ABDDA316B054457CAC9C2878172E3F Certificate serial: 3C3B5779F34CD9CE44F3326E55D9F14D6E517FBD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 11:30:19 +0000 Manifest this update: Tue 10 Nov 2026 11:25:19 +0000 Manifest next update: Wed 11 Nov 2026 14:27:19 +0000 Files and hashes: 1: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: VA9x1JUvw0UogZupkAioG4JuD1sEwt/f57IrckxZ3dI=) 2: 78E0160248ABDDA316B054457CAC9C2878172E3F.crl (hash: /gxlFaFLcRmUwrEdOvrlky1eFhxmQYLCRN890mjShpQ=) 3: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: 2+XchGapSoCutP6h9YZdHEQH9u3BfkhAjpO15GhIZ5w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3b:57:79:f3:4c:d9:ce:44:f3:32:6e:55:d9:f1:4d:6e:51:7f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78E0160248ABDDA316B054457CAC9C2878172E3F Validity Not Before: Nov 10 11:25:19 2026 GMT Not After : Nov 11 14:27:19 2026 GMT Subject: CN=185FCB621A057C5C98ADDE976C6A63AD525F3C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:12:76:2d:a4:52:f9:90:fa:eb:ea:7c:5e: 6c:a0:a6:ad:84:09:e4:1b:cb:1d:f4:0c:82:0e:f5: 03:26:ba:ac:54:35:12:a2:bb:9c:85:f7:95:d3:9d: 04:e1:79:77:91:e1:c7:25:32:7e:df:b1:3e:ac:59: cc:3f:f0:f9:ec:c4:59:14:8e:9f:f7:a8:0e:9a:11: b6:34:08:1b:a5:80:8c:85:01:61:a0:1d:95:c2:71: 63:f3:eb:b8:5e:d9:b7:14:ce:39:71:ab:ac:63:29: d2:96:02:c2:53:9b:93:5f:1a:28:46:32:e9:7e:71: f7:22:25:5a:6b:31:00:ba:57:6e:49:c6:0a:fb:e7: e8:d0:b6:3c:b1:4c:09:c9:ac:42:00:df:a3:e7:f5: 09:08:bd:a9:98:26:48:96:19:6e:2d:eb:fb:2c:72: 22:04:81:14:33:32:50:d2:0f:87:7b:d2:fa:56:76: 1e:e6:a2:f7:3e:d8:bb:97:50:51:a4:2c:95:02:12: 15:69:c7:bd:6e:cc:53:68:2e:db:b7:37:d6:38:ce: 82:11:44:fe:ec:a6:7c:33:31:fb:44:4c:5f:6c:84: ae:16:35:50:73:96:ce:90:6c:4e:fd:07:ec:85:97: 24:eb:18:11:59:c4:ac:ee:87:f7:f8:66:a5:eb:0d: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5F:CB:62:1A:05:7C:5C:98:AD:DE:97:6C:6A:63:AD:52:5F:3C:4E X509v3 Authority Key Identifier: keyid:78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:09:3f:65:b0:24:79:79:a5:b7:7a:5a:ce:88:e4:ff:e1:eb: 0b:3a:d3:0f:41:8f:69:f8:95:e4:3c:e1:6b:1a:59:cc:30:e7: ee:c2:92:b2:40:70:81:0b:16:ba:01:b3:59:52:15:f5:44:10: 0f:89:89:24:06:bf:b1:e8:f0:bf:cf:68:5f:86:1a:4f:bb:c0: cb:68:7a:22:f3:f3:a8:5a:21:5e:96:87:cc:22:8c:9e:74:b4: 77:de:72:29:fb:6b:76:81:40:bc:bf:73:49:d9:4b:83:be:7b: b4:8e:ac:6e:27:05:da:44:41:31:8e:55:c0:c8:eb:ca:02:56: e5:0d:e8:ed:ce:95:55:6e:e3:72:ee:7d:1b:a1:d7:d6:87:96: 58:25:c7:f3:77:06:80:b7:3f:3d:df:23:5a:95:90:f8:b2:cb: 44:77:25:ab:e1:20:91:4f:d4:49:dd:ff:18:a4:bf:91:47:5f: ea:dc:be:0c:cc:6a:30:0a:cd:da:eb:d0:bf:95:2a:f1:88:c3: c4:c9:92:df:87:7a:b5:16:1d:b7:bd:95:f4:7a:3a:7e:93:7d: c0:2e:32:dc:3b:a4:6a:12:f9:e7:37:d3:b1:de:80:4c:7d:58: 6d:a4:5f:d0:d5:59:a2:74:66:1f:34:99:f7:32:07:ae:1a:ea: d1:80:6a:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDtXefNM2c5E8zJuVdnxTW5Rf70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhFMDE2MDI0OEFCRERBMzE2QjA1NDQ1N0NBQzlDMjg3 ODE3MkUzRjAeFw0yNjExMTAxMTI1MTlaFw0yNjExMTExNDI3MTlaMDMxMTAvBgNV BAMTKDE4NUZDQjYyMUEwNTdDNUM5OEFEREU5NzZDNkE2M0FENTI1RjNDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLBJ2LaRS+ZD66+p8Xmygpq2E CeQbyx30DIIO9QMmuqxUNRKiu5yF95XTnQTheXeR4cclMn7fsT6sWcw/8PnsxFkU jp/3qA6aEbY0CBulgIyFAWGgHZXCcWPz67he2bcUzjlxq6xjKdKWAsJTm5NfGihG Mul+cfciJVprMQC6V25Jxgr75+jQtjyxTAnJrEIA36Pn9QkIvamYJkiWGW4t6/ss ciIEgRQzMlDSD4d70vpWdh7movc+2LuXUFGkLJUCEhVpx71uzFNoLtu3N9Y4zoIR RP7spnwzMftETF9shK4WNVBzls6QbE79B+yFlyTrGBFZxKzuh/f4ZqXrDZojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGF/LYhoFfFyYrd6XbGpjrVJfPE4wHwYDVR0j BBgwFoAUeOAWAkir3aMWsFRFfKycKHgXLj8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDdhMWNlNGUtNTljOC00MWNjLWI1ZTYtYmQ3YjdhNzA0MzU2LzAvNzhFMDE2MDI0 OEFCRERBMzE2QjA1NDQ1N0NBQzlDMjg3ODE3MkUzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEUwMTYwMjQ4QUJEREEzMTZCMDU0NDU3Q0FDOUMyODc4MTcy RTNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDdhMWNlNGUtNTljOC00MWNjLWI1 ZTYtYmQ3YjdhNzA0MzU2LzAvNzhFMDE2MDI0OEFCRERBMzE2QjA1NDQ1N0NBQzlD Mjg3ODE3MkUzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIJP2WwJHl5pbd6Ws6I5P/h6ws60w9Bj2n4 leQ84WsaWcww5+7CkrJAcIELFroBs1lSFfVEEA+JiSQGv7Ho8L/PaF+GGk+7wMto eiLz86haIV6Wh8wijJ50tHfecin7a3aBQLy/c0nZS4O+e7SOrG4nBdpEQTGOVcDI 68oCVuUN6O3OlVVu43LufRuh19aHllglx/N3BoC3Pz3fI1qVkPiyy0R3JavhIJFP 1End/xikv5FHX+rcvgzMajAKzdrr0L+VKvGIw8TJkt+HerUWHbe9lfR6On6TfcAu Mtw7pGoS+ec307HegEx9WG2kX9DVWaJ0Zh80mfcyB64a6tGAarQ= -----END CERTIFICATE-----Generated at Wed Nov 11 04:09:54 2026 by rpki-client