$ rpki-client -vvf rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft File: 78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft (raw, json) Hash identifier: BpxY2jJijQLYiUeH2Fd4ltcf1ZvVxuCuqw7KP7rY6h0= Subject key identifier: 3A:55:EA:43:02:9D:24:51:6C:C6:08:1F:C3:5B:3E:95:5F:5F:F7:8B Authority key identifier: 78:C9:BB:96:C0:0E:5E:4E:6A:0F:B5:83:C4:C0:E8:88:77:D4:0B:12 Certificate issuer: /CN=78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12 Certificate serial: 04B08FE5F32AA3B7A4FAEAC2CF7E32152C2DF7DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 04:43:00 +0000 Manifest this update: Tue 28 Jul 2026 04:38:00 +0000 Manifest next update: Wed 29 Jul 2026 05:55:00 +0000 Files and hashes: 1: 78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl (hash: JJ1UiRKMDc1JyvciK959lzdW9bOzka/GEzbUXcuDCFs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 05:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b0:8f:e5:f3:2a:a3:b7:a4:fa:ea:c2:cf:7e:32:15:2c:2d:f7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12 Validity Not Before: Jul 28 04:38:00 2026 GMT Not After : Jul 29 05:55:00 2026 GMT Subject: CN=3A55EA43029D24516CC6081FC35B3E955F5FF78B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:f9:04:df:ba:9c:bd:4e:38:78:d1:b3:b8: 8f:ad:ad:6a:47:4b:a7:e0:b5:64:9e:69:30:54:cd: 12:2d:94:a1:33:0c:57:43:4c:d6:56:c3:41:fb:df: e4:c4:2c:b1:e6:be:c7:3d:57:94:ed:f5:1f:a9:a9: 9b:18:a5:7b:d1:35:09:04:40:ed:2a:9b:2d:e8:35: 02:7f:59:fc:5a:8b:7e:1d:6c:f1:98:f6:68:01:1d: 96:54:f2:b4:83:33:63:53:7d:9f:68:14:ff:fc:c3: a0:ef:91:a8:e9:ad:30:c1:3c:56:e3:db:0c:0b:5d: fd:a4:f7:0d:7c:ae:dc:48:f1:a6:49:2c:5e:94:fb: 7c:92:5d:b2:57:00:99:55:06:a9:6d:52:84:d3:a4: 2b:d1:cd:e2:d2:b4:12:77:dd:16:aa:1c:12:31:79: 22:d4:6c:b0:9d:01:79:64:a5:1a:6e:9d:9e:40:4d: 04:7c:6d:a9:47:39:ef:7c:ea:1f:6d:5d:9c:ae:85: 09:47:15:e8:96:ff:21:c5:cb:3c:18:9a:8f:cb:06: b8:ce:fa:c6:08:3c:8d:44:f8:52:64:ab:dc:1c:53: 5f:58:64:3a:ff:da:2d:d7:ec:bd:0d:ad:5b:01:a5: 1a:85:73:35:36:0f:5d:6c:c6:93:f2:1d:62:bc:f9: 69:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:55:EA:43:02:9D:24:51:6C:C6:08:1F:C3:5B:3E:95:5F:5F:F7:8B X509v3 Authority Key Identifier: keyid:78:C9:BB:96:C0:0E:5E:4E:6A:0F:B5:83:C4:C0:E8:88:77:D4:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:01:f1:53:5d:a2:11:0a:d2:ad:4b:0a:0a:98:4c:70:97:78: d3:c1:5a:05:fa:a9:1c:e6:ea:21:c9:6e:b9:f0:d2:33:d2:88: 4f:c6:4b:a4:34:48:51:3a:dd:6a:76:3d:2b:ef:8d:e0:31:4d: 7e:ae:cc:1c:a5:50:df:9a:b0:ee:2c:9b:9b:38:0c:24:62:dc: 60:5f:7a:1b:f6:fe:e7:ea:da:82:bf:88:cd:4f:49:e5:18:06: 9a:ed:23:e7:fe:27:87:ff:34:9a:b4:f2:71:f4:c2:30:1c:55: 06:78:ec:21:1e:de:db:34:9f:d6:e2:b6:e3:8e:1d:d2:12:38: f6:77:2b:ff:9e:bd:8e:94:2c:19:fe:29:4e:c7:d9:a9:4f:e5: 0b:c0:a6:3e:c2:a0:67:32:f1:87:1e:45:04:df:f3:64:1a:5c: bd:5c:51:80:59:d7:10:1a:c1:1d:5c:f0:5c:09:a0:1c:43:12: 1e:eb:2c:21:63:94:2c:39:0c:9a:b9:ff:6f:24:cc:c7:09:4c: b6:aa:74:61:98:5d:76:a6:40:ea:c2:41:22:0d:10:0f:c9:62: 18:94:39:82:a7:73:50:4e:3d:bd:0e:d5:5c:51:a2:57:17:2c: fe:a9:b0:29:0f:a9:35:e9:41:18:6c:ed:63:41:ae:35:7e:ee: 0b:65:3d:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLCP5fMqo7ek+urCz34yFSwt99owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDOUJCOTZDMDBFNUU0RTZBMEZCNTgzQzRDMEU4ODg3 N0Q0MEIxMjAeFw0yNjA3MjgwNDM4MDBaFw0yNjA3MjkwNTU1MDBaMDMxMTAvBgNV BAMTKDNBNTVFQTQzMDI5RDI0NTE2Q0M2MDgxRkMzNUIzRTk1NUY1RkY3OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLPkE37qcvU44eNGzuI+trWpH S6fgtWSeaTBUzRItlKEzDFdDTNZWw0H73+TELLHmvsc9V5Tt9R+pqZsYpXvRNQkE QO0qmy3oNQJ/Wfxai34dbPGY9mgBHZZU8rSDM2NTfZ9oFP/8w6DvkajprTDBPFbj 2wwLXf2k9w18rtxI8aZJLF6U+3ySXbJXAJlVBqltUoTTpCvRzeLStBJ33RaqHBIx eSLUbLCdAXlkpRpunZ5ATQR8balHOe986h9tXZyuhQlHFeiW/yHFyzwYmo/LBrjO +sYIPI1E+FJkq9wcU19YZDr/2i3X7L0NrVsBpRqFczU2D11sxpPyHWK8+Wn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOlXqQwKdJFFsxggfw1s+lV9f94swHwYDVR0j BBgwFoAUeMm7lsAOXk5qD7WDxMDoiHfUCxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgzM2YzNzUtZGJkNS00ZTQ4LTg5NmQtZjhjYjZlMDBmZTA4LzAvNzhDOUJCOTZD MDBFNUU0RTZBMEZCNTgzQzRDMEU4ODg3N0Q0MEIxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEM5QkI5NkMwMEU1RTRFNkEwRkI1ODNDNEMwRTg4ODc3RDQw QjEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgzM2YzNzUtZGJkNS00ZTQ4LTg5 NmQtZjhjYjZlMDBmZTA4LzAvNzhDOUJCOTZDMDBFNUU0RTZBMEZCNTgzQzRDMEU4 ODg3N0Q0MEIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsB8VNdohEK0q1LCgqYTHCXeNPBWgX6qRzm 6iHJbrnw0jPSiE/GS6Q0SFE63Wp2PSvvjeAxTX6uzBylUN+asO4sm5s4DCRi3GBf ehv2/ufq2oK/iM1PSeUYBprtI+f+J4f/NJq08nH0wjAcVQZ47CEe3ts0n9bituOO HdISOPZ3K/+evY6ULBn+KU7H2alP5QvApj7CoGcy8YceRQTf82QaXL1cUYBZ1xAa wR1c8FwJoBxDEh7rLCFjlCw5DJq5/28kzMcJTLaqdGGYXXamQOrCQSINEA/JYhiU OYKnc1BOPb0O1VxRolcXLP6psCkPqTXpQRhs7WNBrjV+7gtlPak= -----END CERTIFICATE-----Generated at Tue Jul 28 22:26:35 2026 by rpki-client