$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft File: 2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft (raw, json) Hash identifier: GYjLVT9Q+kiiPpY94fTSYBkiOn+mcFBAzwEGkf35GOU= Subject key identifier: 67:38:C5:E5:14:58:AD:71:43:86:34:38:43:E4:75:37:8F:30:3E:30 Authority key identifier: 2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF Certificate issuer: /CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF Certificate serial: 656BE9EE108EEB7D2DC31AEE7ED2ED9032CB0D2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft Manifest number: BF Signing time: Tue 22 Sep 2026 02:44:57 +0000 Manifest this update: Tue 22 Sep 2026 02:39:57 +0000 Manifest next update: Wed 23 Sep 2026 02:58:57 +0000 Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: 60R7X56SozCA5mIN8nGG4Hjmryhwz60xWHs0HKmGlWc=) 2: 2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl (hash: D1osjPAhbecWLEB7jHe0kW+IJLAgJ5DMV4c9Z/H0F/Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:6b:e9:ee:10:8e:eb:7d:2d:c3:1a:ee:7e:d2:ed:90:32:cb:0d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF Validity Not Before: Sep 22 02:39:57 2026 GMT Not After : Sep 23 02:58:57 2026 GMT Subject: CN=6738C5E51458AD714386343843E475378F303E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:ea:69:a0:b2:3d:6c:5e:79:0d:16:c6:04: 7b:36:f8:d1:a0:01:6b:79:f0:02:13:8f:ee:cf:ef: 10:1a:11:b5:8c:33:6c:42:ce:c7:cc:c6:bd:27:90: 8c:f2:bf:a3:2d:fa:16:ae:81:a7:31:7e:d4:76:dc: 13:c8:55:62:78:81:4a:92:36:5a:d5:7f:1a:a6:d3: f5:71:6f:4f:b6:3c:2e:d9:7e:33:a8:a2:e7:e7:52: 6f:04:3d:ac:72:a8:5d:11:32:da:9f:71:29:2b:8f: a3:f7:b8:09:d0:00:8b:8d:9f:da:c4:4e:ed:62:bd: 1c:52:70:c0:af:27:b5:58:d1:b0:e9:56:5b:1e:a2: bf:f3:49:f3:75:d3:db:c1:2d:09:c2:68:5e:06:34: 01:15:33:e6:3f:23:df:b9:5b:fe:a5:83:44:9e:1c: 0b:88:64:82:ca:94:04:b8:c7:fd:b6:00:34:b6:64: 5c:a6:ce:06:7c:dc:85:0b:02:ef:4d:8d:c3:70:1f: 1d:ed:74:84:97:01:8c:5d:f7:09:6c:9e:df:67:27: 03:56:6f:e2:85:a5:1b:3e:e7:a8:a2:82:14:5f:fd: 60:17:6a:51:36:e1:84:68:e2:71:b1:e5:54:24:c4: 5d:f7:c3:ac:03:83:2e:2e:30:8e:53:b4:d6:91:07: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:38:C5:E5:14:58:AD:71:43:86:34:38:43:E4:75:37:8F:30:3E:30 X509v3 Authority Key Identifier: keyid:2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:25:7f:71:04:b9:a3:cb:96:81:24:82:e9:e3:48:73:0f:06: cf:66:c8:de:06:44:1a:44:ca:1a:78:25:6b:70:22:40:14:24: bf:17:67:8f:20:62:49:30:09:0f:ea:7d:96:49:e6:5c:6e:ec: 76:d9:9d:35:54:2d:a2:d9:02:b9:68:91:80:05:2a:f4:a0:1c: 35:87:6f:81:f0:eb:bf:21:6e:6e:df:e8:bb:53:9f:7e:76:f7: 6f:41:3c:d7:7f:0a:e7:e9:e7:8f:99:d1:21:49:e5:1d:aa:b1: 0b:a1:67:75:60:8e:ed:3e:e3:58:46:3e:68:eb:28:19:a3:af: 0d:bc:3f:1d:76:70:0b:5b:39:43:b8:b3:4c:fb:ec:bc:3f:60: 6d:28:e4:02:b6:bc:68:e6:36:c4:b6:f1:da:3f:31:38:6c:d9: 27:4e:f4:1a:6b:cc:e8:29:f9:91:8f:7e:b8:89:09:0c:a6:88: 0e:df:17:b2:64:0e:5f:1c:14:af:0d:10:4f:3c:15:7f:9f:69: a4:2a:c1:6a:43:c2:a5:28:fd:a2:dd:6d:9c:fd:88:b9:8f:03: d8:bc:ae:eb:4e:29:7f:be:17:ad:47:bc:40:cb:71:73:bd:37: ae:19:dc:21:3b:e1:c2:4c:6c:1c:df:5c:65:aa:ad:84:37:78: 9c:02:bc:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWvp7hCO630twxruftLtkDLLDS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY3ODc5NEVDMDc1RkU5NUU3ODMxREYwQjE0RTc0Qjg4 RTBFM0ZERjAeFw0yNjA5MjIwMjM5NTdaFw0yNjA5MjMwMjU4NTdaMDMxMTAvBgNV BAMTKDY3MzhDNUU1MTQ1OEFENzE0Mzg2MzQzODQzRTQ3NTM3OEYzMDNFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgtuppoLI9bF55DRbGBHs2+NGg AWt58AITj+7P7xAaEbWMM2xCzsfMxr0nkIzyv6Mt+haugacxftR23BPIVWJ4gUqS NlrVfxqm0/Vxb0+2PC7ZfjOooufnUm8EPaxyqF0RMtqfcSkrj6P3uAnQAIuNn9rE Tu1ivRxScMCvJ7VY0bDpVlseor/zSfN109vBLQnCaF4GNAEVM+Y/I9+5W/6lg0Se HAuIZILKlAS4x/22ADS2ZFymzgZ83IULAu9NjcNwHx3tdISXAYxd9wlsnt9nJwNW b+KFpRs+56iighRf/WAXalE24YRo4nGx5VQkxF33w6wDgy4uMI5TtNaRB3oHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZzjF5RRYrXFDhjQ4Q+R1N48wPjAwHwYDVR0j BBgwFoAUL3h5TsB1/pXngx3wsU50uI4OP98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThhN2YzNTUtZjIyNS00OGYzLTg3ZjgtMGJmYjBjOGU1OGYwLzAvMkY3ODc5NEVD MDc1RkU5NUU3ODMxREYwQjE0RTc0Qjg4RTBFM0ZERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjc4Nzk0RUMwNzVGRTk1RTc4MzFERjBCMTRFNzRCODhFMEUz RkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvMkY3ODc5NEVDMDc1RkU5NUU3ODMxREYwQjE0RTc0 Qjg4RTBFM0ZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQlf3EEuaPLloEkgunjSHMPBs9myN4GRBpE yhp4JWtwIkAUJL8XZ48gYkkwCQ/qfZZJ5lxu7HbZnTVULaLZArlokYAFKvSgHDWH b4Hw678hbm7f6LtTn352929BPNd/Cufp54+Z0SFJ5R2qsQuhZ3Vgju0+41hGPmjr KBmjrw28Px12cAtbOUO4s0z77Lw/YG0o5AK2vGjmNsS28do/MThs2SdO9BprzOgp +ZGPfriJCQymiA7fF7JkDl8cFK8NEE88FX+faaQqwWpDwqUo/aLdbZz9iLmPA9i8 rutOKX++F61HvEDLcXO9N64Z3CE74cJMbBzfXGWqrYQ3eJwCvMA= -----END CERTIFICATE-----Generated at Tue Sep 22 16:16:56 2026 by rpki-client