$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft File: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft (raw, json) Hash identifier: ETXhmOZdZO3J3RI7NPkk6fUGrwD+YE/+OGTTPFdD2xY= Subject key identifier: 33:73:2F:A5:B5:7D:12:E0:DE:D3:B5:63:91:9A:44:4D:60:65:3F:43 Authority key identifier: 78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA Certificate issuer: /CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Certificate serial: 6B1ED226DEE95AA0833D0B7D1F5834BC67A746EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 04:23:07 +0000 Manifest this update: Wed 17 Jun 2026 04:18:07 +0000 Manifest next update: Thu 18 Jun 2026 06:35:07 +0000 Files and hashes: 1: 78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl (hash: QT1CEp46qKpJIsjn/5w1htDlKwoDoK8D7n8rEEFrARY=) 2: 3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (hash: 2xL5IzsEGAiAsA9S7Fekuh6FO3TOT5kNHOKLcjwwo5c=) 3: 3130332e3136332e38312e302f32342d3234203d3e20313431363734.roa (hash: rXNV58EDW9NtYxw1tsZgUKFdyItW8rTbx+PqrdGXOd8=) 4: 3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (hash: lMkQ1C6m2HGJs+HDPBBo+GFoglPLrUt0++vMeyTVBPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1e:d2:26:de:e9:5a:a0:83:3d:0b:7d:1f:58:34:bc:67:a7:46:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA Validity Not Before: Jun 17 04:18:07 2026 GMT Not After : Jun 18 06:35:07 2026 GMT Subject: CN=33732FA5B57D12E0DED3B563919A444D60653F43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:ae:2d:52:6e:3f:36:3b:f4:05:7f:3c:db: 9d:88:b1:9c:af:a3:31:c4:49:ff:97:22:15:65:67: 64:a9:56:59:6f:6e:2f:95:4d:56:77:b7:de:e3:66: 3b:53:d9:15:ae:f3:a3:fc:7c:20:61:83:52:a2:02: 94:57:dd:ea:bc:25:2e:2c:a5:0d:78:11:ed:98:5f: d5:95:49:eb:80:d6:e3:ef:41:8b:0e:db:ea:a1:a7: 99:cd:c8:5d:4e:aa:ce:e3:ec:91:5a:e6:10:3e:4a: 23:f9:3f:51:93:a3:bf:eb:9e:26:02:34:5c:21:09: a2:19:ac:7d:9a:f0:3f:97:9a:6a:56:25:83:db:db: 0f:a0:5b:cb:49:49:ea:4a:66:48:58:1c:2f:aa:2c: cb:aa:39:ea:b9:1f:35:1b:9a:31:3f:a8:98:cd:a6: 2c:be:75:ff:09:2c:5c:62:c0:ea:70:be:4a:e8:a1: ef:be:99:f3:88:d0:e9:5d:b3:31:b9:55:ac:1b:da: 6b:82:1b:f3:e0:34:a8:0a:77:4c:fb:c1:17:1c:94: dc:97:de:59:84:b9:80:3e:c4:b5:61:7b:72:ae:e9: 7b:fe:a0:b4:07:dc:93:83:8c:7f:66:2c:23:af:41: 03:80:19:6f:07:48:f2:95:f4:0c:4a:d7:a8:19:47: 87:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:73:2F:A5:B5:7D:12:E0:DE:D3:B5:63:91:9A:44:4D:60:65:3F:43 X509v3 Authority Key Identifier: keyid:78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:55:58:9c:56:8e:29:ba:03:c8:bf:8b:b5:05:97:41:4e:2e: 0f:3c:90:f2:56:35:ac:61:82:a6:a2:21:9e:dc:68:2d:2a:7b: aa:5a:15:8e:14:9b:7a:68:96:1d:35:97:8e:7c:9d:f5:a4:83: b2:c9:4b:c5:1a:64:13:9b:2a:34:ff:3b:08:28:c6:8d:9b:df: 64:f7:b9:1c:11:e5:4c:4f:aa:b9:97:ab:f9:88:ad:c7:d4:c5: 50:76:50:53:39:77:66:99:57:47:b6:b2:b7:68:4f:d8:fe:a5: 8e:e4:87:fe:9c:b0:0f:7b:55:46:39:79:ba:a8:71:76:0b:02: ee:96:15:0b:cc:61:13:60:31:f0:26:64:bc:9e:21:a1:5d:9b: d1:c1:88:57:7a:f7:d4:a8:32:c7:95:84:6c:f7:ad:8c:21:a6: 95:12:55:fc:e3:90:4a:da:d3:ef:2c:8e:d9:2d:f6:d8:e2:c8: e5:df:f4:2d:db:f1:7d:1f:3e:b3:fe:6f:bb:40:94:d7:5e:c1: 2c:d5:2d:7c:6d:23:78:86:27:59:5c:21:d9:ae:c3:e6:91:2f: 68:68:eb:7e:5d:5a:c4:c3:b3:d9:ff:66:6f:77:14:b3:df:de: b6:2a:f6:28:91:3a:b7:9e:ef:51:3c:b2:6e:40:c3:c2:eb:4e: 46:0c:b3:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUax7SJt7pWqCDPQt9H1g0vGenRu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJB MTM2RDJFQTAeFw0yNjA2MTcwNDE4MDdaFw0yNjA2MTgwNjM1MDdaMDMxMTAvBgNV BAMTKDMzNzMyRkE1QjU3RDEyRTBERUQzQjU2MzkxOUE0NDRENjA2NTNGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLq4tUm4/Njv0BX88252IsZyv ozHESf+XIhVlZ2SpVllvbi+VTVZ3t97jZjtT2RWu86P8fCBhg1KiApRX3eq8JS4s pQ14Ee2YX9WVSeuA1uPvQYsO2+qhp5nNyF1Oqs7j7JFa5hA+SiP5P1GTo7/rniYC NFwhCaIZrH2a8D+XmmpWJYPb2w+gW8tJSepKZkhYHC+qLMuqOeq5HzUbmjE/qJjN piy+df8JLFxiwOpwvkrooe++mfOI0OldszG5Vawb2muCG/PgNKgKd0z7wRcclNyX 3lmEuYA+xLVhe3Ku6Xv+oLQH3JODjH9mLCOvQQOAGW8HSPKV9AxK16gZR4d7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM3MvpbV9EuDe07VjkZpETWBlP0MwHwYDVR0j BBgwFoAUeLIfzFfpuRJPFdW3xv4UUqE20uowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyMzRkNTAtNjdlMS00MTljLTg1YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1 N0U5QjkxMjRGMTVENUI3QzZGRTE0NTJBMTM2RDJFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEIyMUZDQzU3RTlCOTEyNEYxNUQ1QjdDNkZFMTQ1MkExMzZE MkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyMzRkNTAtNjdlMS00MTljLTg1 YmEtNjRiYThjMTExMjI1LzAvNzhCMjFGQ0M1N0U5QjkxMjRGMTVENUI3QzZGRTE0 NTJBMTM2RDJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5VWJxWjim6A8i/i7UFl0FOLg88kPJWNaxh gqaiIZ7caC0qe6paFY4Um3polh01l458nfWkg7LJS8UaZBObKjT/Owgoxo2b32T3 uRwR5UxPqrmXq/mIrcfUxVB2UFM5d2aZV0e2srdoT9j+pY7kh/6csA97VUY5ebqo cXYLAu6WFQvMYRNgMfAmZLyeIaFdm9HBiFd699SoMseVhGz3rYwhppUSVfzjkEra 0+8sjtkt9tjiyOXf9C3b8X0fPrP+b7tAlNdewSzVLXxtI3iGJ1lcIdmuw+aRL2ho 635dWsTDs9n/Zm93FLPf3rYq9iiROree71E8sm5Aw8LrTkYMs1o= -----END CERTIFICATE-----Generated at Wed Jun 17 11:14:19 2026 by rpki-client