$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft File: 78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft (raw, json) Hash identifier: 6GxvYBs6TOSfYHiPRglmTo+bXCRWJV775cqaaf8n3xo= Subject key identifier: 37:72:3E:84:8A:21:83:07:D1:F1:F1:84:9E:70:C2:01:A3:52:2B:6B Authority key identifier: 78:C9:BB:96:C0:0E:5E:4E:6A:0F:B5:83:C4:C0:E8:88:77:D4:0B:12 Certificate issuer: /CN=78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12 Certificate serial: 283FF0937ED44619D5EB5E0E7B09A05C74696649 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 00:50:25 +0000 Manifest this update: Sun 27 Sep 2026 00:45:25 +0000 Manifest next update: Mon 28 Sep 2026 03:31:25 +0000 Files and hashes: 1: 78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl (hash: Bu8X66rhY/NVVV+HAMHiVXr7LUBubSi5ya58fJrXnwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3f:f0:93:7e:d4:46:19:d5:eb:5e:0e:7b:09:a0:5c:74:69:66:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12 Validity Not Before: Sep 27 00:45:25 2026 GMT Not After : Sep 28 03:31:25 2026 GMT Subject: CN=37723E848A218307D1F1F1849E70C201A3522B6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:c0:a6:2b:94:cf:67:4d:5f:1c:4f:5f:4c: 56:82:30:46:0b:c5:21:91:be:58:22:6c:05:3a:7d: 5a:7f:e4:ce:f4:1b:af:3a:f6:58:d1:91:ac:32:48: 98:59:93:a1:40:0e:2b:d1:8c:03:cf:d9:7c:12:7d: c7:b9:06:31:13:28:92:2f:29:9a:d7:d1:cb:62:b1: 8d:29:12:17:b2:8c:08:06:92:61:fb:8a:c2:9c:ae: b1:cd:dc:a5:80:1d:34:e7:0f:8f:a2:18:28:d8:b1: 40:2c:38:ee:77:46:d0:88:94:8c:fd:71:ce:67:64: cb:65:99:be:25:ac:fc:7f:90:c4:27:6a:86:b3:b8: 16:ef:a8:8a:37:03:ba:37:50:69:43:6a:07:0c:23: c8:39:af:4c:37:0a:fd:5a:3f:44:79:20:07:a9:f1: cc:47:8e:7d:2c:da:ab:39:7b:4b:17:d7:57:18:dc: 99:f8:ba:32:6b:d9:28:98:0f:ff:54:6f:f7:62:71: 9c:c2:5b:ee:ef:d8:eb:e5:36:b1:04:32:21:1b:40: 89:d7:d6:9d:7f:f2:cb:bb:5c:be:84:24:17:c9:e9: 89:fc:16:d2:83:a6:bf:cd:61:69:5d:f8:17:e7:41: 79:0b:74:11:5a:06:0f:20:aa:08:60:9d:21:46:fb: 17:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:72:3E:84:8A:21:83:07:D1:F1:F1:84:9E:70:C2:01:A3:52:2B:6B X509v3 Authority Key Identifier: keyid:78:C9:BB:96:C0:0E:5E:4E:6A:0F:B5:83:C4:C0:E8:88:77:D4:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2833f375-dbd5-4e48-896d-f8cb6e00fe08/0/78C9BB96C00E5E4E6A0FB583C4C0E88877D40B12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:df:cd:8e:8d:cd:27:5c:b7:f5:7d:e5:3d:46:a0:f6:8d:68: 0c:0b:b9:f0:86:7d:13:03:79:8b:a4:da:1e:96:a3:d3:fa:72: e2:20:ab:54:e1:7b:69:11:4d:e1:99:56:17:00:dc:2a:46:23: 0b:79:ce:a3:3e:50:e7:ef:40:c2:e7:4a:81:f2:30:f3:fd:19: 9d:9c:e7:26:5d:6f:3e:16:b0:4e:18:1e:4d:be:de:99:cd:4a: cf:52:16:15:03:84:ac:bb:45:c5:52:92:8d:3e:8b:3f:a1:d0: a3:48:f9:44:82:b5:8e:3f:9a:ac:e0:1d:04:9b:93:35:38:08: b1:c5:b4:db:ad:ad:b5:a9:6a:a3:b5:34:53:02:45:59:7c:64: a4:21:6a:8d:e7:fb:df:1d:97:33:93:b0:3c:c6:90:91:1b:21: b6:90:e4:53:27:69:ba:77:d2:d1:a5:88:77:c8:eb:e8:d4:e8: d4:01:b6:12:4a:fd:25:1a:e5:fc:ee:9b:ab:9b:35:bc:33:bd: 0c:7a:44:08:11:ab:c9:4c:41:76:31:0f:72:7e:96:b0:28:1e: a5:88:9a:0d:98:3e:84:53:35:ae:e8:ca:02:76:80:94:a2:45: 11:05:e6:1c:9b:da:1e:18:57:b9:68:ec:99:4d:be:08:e2:48: 2e:95:11:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKD/wk37URhnV614OewmgXHRpZkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDOUJCOTZDMDBFNUU0RTZBMEZCNTgzQzRDMEU4ODg3 N0Q0MEIxMjAeFw0yNjA5MjcwMDQ1MjVaFw0yNjA5MjgwMzMxMjVaMDMxMTAvBgNV BAMTKDM3NzIzRTg0OEEyMTgzMDdEMUYxRjE4NDlFNzBDMjAxQTM1MjJCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdOcCmK5TPZ01fHE9fTFaCMEYL xSGRvlgibAU6fVp/5M70G6869ljRkawySJhZk6FADivRjAPP2XwSfce5BjETKJIv KZrX0ctisY0pEheyjAgGkmH7isKcrrHN3KWAHTTnD4+iGCjYsUAsOO53RtCIlIz9 cc5nZMtlmb4lrPx/kMQnaoazuBbvqIo3A7o3UGlDagcMI8g5r0w3Cv1aP0R5IAep 8cxHjn0s2qs5e0sX11cY3Jn4ujJr2SiYD/9Ub/dicZzCW+7v2OvlNrEEMiEbQInX 1p1/8su7XL6EJBfJ6Yn8FtKDpr/NYWld+BfnQXkLdBFaBg8gqghgnSFG+xcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN3I+hIohgwfR8fGEnnDCAaNSK2swHwYDVR0j BBgwFoAUeMm7lsAOXk5qD7WDxMDoiHfUCxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgzM2YzNzUtZGJkNS00ZTQ4LTg5NmQtZjhjYjZlMDBmZTA4LzAvNzhDOUJCOTZD MDBFNUU0RTZBMEZCNTgzQzRDMEU4ODg3N0Q0MEIxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEM5QkI5NkMwMEU1RTRFNkEwRkI1ODNDNEMwRTg4ODc3RDQw QjEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjgzM2YzNzUtZGJkNS00ZTQ4LTg5 NmQtZjhjYjZlMDBmZTA4LzAvNzhDOUJCOTZDMDBFNUU0RTZBMEZCNTgzQzRDMEU4 ODg3N0Q0MEIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/fzY6NzSdct/V95T1GoPaNaAwLufCGfRMD eYuk2h6Wo9P6cuIgq1The2kRTeGZVhcA3CpGIwt5zqM+UOfvQMLnSoHyMPP9GZ2c 5yZdbz4WsE4YHk2+3pnNSs9SFhUDhKy7RcVSko0+iz+h0KNI+USCtY4/mqzgHQSb kzU4CLHFtNutrbWpaqO1NFMCRVl8ZKQhao3n+98dlzOTsDzGkJEbIbaQ5FMnabp3 0tGliHfI6+jU6NQBthJK/SUa5fzum6ubNbwzvQx6RAgRq8lMQXYxD3J+lrAoHqWI mg2YPoRTNa7oygJ2gJSiRREF5hyb2h4YV7lo7JlNvgjiSC6VEU4= -----END CERTIFICATE-----Generated at Sun Sep 27 06:49:09 2026 by rpki-client