$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft File: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft (raw, json) Hash identifier: qjYSG1aLwPb4RcTnAH3keIi2ojGfaaqzV6Q5BMVxeKg= Subject key identifier: 3A:5F:D6:21:1C:43:F7:65:C6:46:8E:A9:B1:9E:E1:EF:1D:2A:8B:70 Authority key identifier: 78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA Certificate issuer: /CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Certificate serial: 7C875445D9C37FDE2430C06C994D4C67BCCFDC21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft Manifest number: BD Signing time: Mon 21 Sep 2026 17:02:40 +0000 Manifest this update: Mon 21 Sep 2026 16:57:40 +0000 Manifest next update: Tue 22 Sep 2026 20:34:40 +0000 Files and hashes: 1: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: lMkQ1C6m2HGJs+HDPBBo+GFoglPLrUt0++vMeyTVBPY=) 2: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: rXNV58EDW9NtYxw1tsZgUKFdyItW8rTbx+PqrdGXOd8=) 3: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl (hash: mTG+VuIgjXGREnDRwZHDmuENPU6kLxj8qQCczGjmDUQ=) 4: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: 2xL5IzsEGAiAsA9S7Fekuh6FO3TOT5kNHOKLcjwwo5c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:87:54:45:d9:c3:7f:de:24:30:c0:6c:99:4d:4c:67:bc:cf:dc:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Validity Not Before: Sep 21 16:57:40 2026 GMT Not After : Sep 22 20:34:40 2026 GMT Subject: CN=3A5FD6211C43F765C6468EA9B19EE1EF1D2A8B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:18:e3:20:56:06:a4:22:80:21:20:7c:a7:7a: ef:3e:ae:24:cc:c0:26:32:09:37:70:44:74:b5:46: e5:d9:95:92:61:5b:ce:84:17:c2:ac:9f:74:b3:43: 20:f6:87:6c:21:86:cb:ca:f1:87:00:87:52:a6:59: e6:2b:4f:08:a4:d5:36:e0:30:19:bd:48:0a:78:d7: 2c:fd:a2:7c:2e:dc:fe:4c:ca:62:39:d6:14:fb:d3: c1:35:66:fe:e7:c2:bd:8d:7a:78:0b:22:77:26:ed: 0f:3e:c3:e1:84:d6:38:d1:a0:f9:ee:33:26:2c:01: 81:03:f4:bb:b6:45:62:1d:f2:0b:cf:92:48:b5:80: 84:2b:21:eb:f8:64:9f:8e:7f:14:3b:cc:fc:68:83: 60:e1:dc:cf:2f:99:ac:49:9d:c4:3c:9f:f1:70:75: b8:77:5b:8a:1f:a0:f6:d9:6e:16:d6:94:97:60:ad: e7:1e:53:f6:6c:1c:da:8b:da:41:e6:66:b9:0f:5c: 18:9c:db:f2:8b:50:28:97:6c:9c:a2:e2:23:85:17: d8:56:3a:d3:19:89:df:58:c0:09:43:00:6b:67:c2: 9e:73:81:90:26:91:07:ab:d4:dd:d8:cf:7d:4a:71: 84:e2:22:9b:20:c5:79:ce:7a:d5:e8:c6:32:b7:2d: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5F:D6:21:1C:43:F7:65:C6:46:8E:A9:B1:9E:E1:EF:1D:2A:8B:70 X509v3 Authority Key Identifier: keyid:78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:62:63:0f:15:6d:13:54:80:11:11:d6:c1:06:bc:cb:d8:e7: 7d:58:c1:01:83:2b:57:2b:e4:8c:63:4c:d5:04:6b:f4:87:3c: 5f:a5:be:39:6f:59:ce:08:94:51:3b:c0:60:f8:8e:a6:b8:d0: fa:35:c4:8b:0f:76:73:76:c3:56:95:13:0a:11:1d:31:3c:1b: ea:35:3c:f2:91:9b:62:f8:b4:a0:d0:d8:d5:7c:60:b6:bd:85: dc:cc:4e:ee:e1:93:5c:75:f1:a0:4c:36:0b:3e:86:e3:ec:49: e2:d7:3d:cf:1d:d4:a3:13:35:21:51:57:a2:ca:ef:0a:46:82: 0c:4d:09:30:05:c7:7f:0d:e5:94:89:34:94:7e:3b:1f:ed:ea: 33:5d:66:c7:47:c3:3e:e6:dd:97:30:cc:5e:f6:7a:ae:c6:dc: 0e:29:54:19:26:a9:d1:45:24:6b:c0:7b:8b:c8:2d:cf:8e:d1: f9:40:9b:ba:aa:d3:2e:54:c0:e9:98:ca:45:f7:7d:8c:ef:ec: 41:90:45:11:4c:45:68:94:4d:52:23:c2:bb:91:8b:7d:fc:0e: a5:4a:da:12:77:1d:5b:f1:f1:0d:55:40:54:ad:22:15:2b:a8: 6f:cd:a4:7b:e6:ba:85:e3:c7:3c:6d:63:ab:ac:cb:b2:56:e6: 10:bd:6c:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIdURdnDf94kMMBsmU1MZ7zP3CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJB MTM2RDJFQTAeFw0yNjA5MjExNjU3NDBaFw0yNjA5MjIyMDM0NDBaMDMxMTAvBgNV BAMTKDNBNUZENjIxMUM0M0Y3NjVDNjQ2OEVBOUIxOUVFMUVGMUQyQThCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJGOMgVgakIoAhIHyneu8+riTM wCYyCTdwRHS1RuXZlZJhW86EF8Ksn3SzQyD2h2whhsvK8YcAh1KmWeYrTwik1Tbg MBm9SAp41yz9onwu3P5MymI51hT708E1Zv7nwr2NengLIncm7Q8+w+GE1jjRoPnu MyYsAYED9Lu2RWId8gvPkki1gIQrIev4ZJ+OfxQ7zPxog2Dh3M8vmaxJncQ8n/Fw dbh3W4ofoPbZbhbWlJdgreceU/ZsHNqL2kHmZrkPXBic2/KLUCiXbJyi4iOFF9hW OtMZid9YwAlDAGtnwp5zgZAmkQer1N3Yz31KcYTiIpsgxXnOetXoxjK3LRzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOl/WIRxD92XGRo6psZ7h7x0qi3AwHwYDVR0j BBgwFoAUeLIfzFfpuRJPFdW3xv4UUqE20uowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyMzRkNTAtNjdlMS00MTljLTg1YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1 N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJBMTM2RDJFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEIyMUZDQzU3RTlCOTEyNEYxNUQ1QjdDNkZFMTQ1MkExMzZE MkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0 NTJBMTM2RDJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdiYw8VbRNUgBER1sEGvMvY531YwQGDK1cr 5IxjTNUEa/SHPF+lvjlvWc4IlFE7wGD4jqa40Po1xIsPdnN2w1aVEwoRHTE8G+o1 PPKRm2L4tKDQ2NV8YLa9hdzMTu7hk1x18aBMNgs+huPsSeLXPc8d1KMTNSFRV6LK 7wpGggxNCTAFx38N5ZSJNJR+Ox/t6jNdZsdHwz7m3ZcwzF72eq7G3A4pVBkmqdFF JGvAe4vILc+O0flAm7qq0y5UwOmYykX3fYzv7EGQRRFMRWiUTVIjwruRi338DqVK 2hJ3HVvx8Q1VQFStIhUrqG/NpHvmuoXjxzxtY6usy7JW5hC9bGc= -----END CERTIFICATE-----Generated at Tue Sep 22 14:11:11 2026 by rpki-client