$ rpki-client -vvvf rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft File: 78A2C1B7FD05098A611E198E8481B7297F924590.mft (raw, json) Hash identifier: PIEtoGdd/IxBH81a4tJlYX3kDqBKO4pngRVVlaxNsVg= Subject key identifier: 95:1F:C5:31:43:C1:8F:80:8D:8B:87:5B:F7:4B:D6:0D:6D:86:BF:D2 Authority key identifier: 78:A2:C1:B7:FD:05:09:8A:61:1E:19:8E:84:81:B7:29:7F:92:45:90 Certificate issuer: /CN=78A2C1B7FD05098A611E198E8481B7297F924590 Certificate serial: 0896F71A17A1AAFC1B41A031BA18FC7EE4A2DEEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft Manifest number: BF Signing time: Mon 21 Sep 2026 17:12:53 +0000 Manifest this update: Mon 21 Sep 2026 17:07:53 +0000 Manifest next update: Tue 22 Sep 2026 19:49:53 +0000 Files and hashes: 1: 78A2C1B7FD05098A611E198E8481B7297F924590.crl (hash: FqQ2WHBdPwPHoOM+Nens1Gv+da6P80RkWzuLekQlaHA=) 2: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: I4d4M5kb/PaS52EXblXxmrUeQhD789o5zOZWBGwmGC8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.crl rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:96:f7:1a:17:a1:aa:fc:1b:41:a0:31:ba:18:fc:7e:e4:a2:de:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78A2C1B7FD05098A611E198E8481B7297F924590 Validity Not Before: Sep 21 17:07:53 2026 GMT Not After : Sep 22 19:49:53 2026 GMT Subject: CN=951FC53143C18F808D8B875BF74BD60D6D86BFD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2c:59:9d:c2:02:fe:ce:75:ba:47:48:65:f3: 42:4c:fb:6f:0b:85:ca:7f:72:13:4d:49:4a:cc:ff: cf:f8:c3:e6:c3:c9:a9:43:4d:90:15:54:60:88:02: fa:25:3f:4e:87:52:b2:a0:c8:8b:ab:bd:dc:50:17: 80:78:1e:2f:78:71:7f:87:b9:de:79:dd:6e:60:64: fd:70:bf:64:f9:39:10:ea:44:90:b1:f6:41:db:f3: 2e:4d:5d:ea:8c:60:ae:ee:02:99:02:6d:22:7a:bb: 3e:e7:60:07:6e:9e:20:79:1a:3d:e7:77:3c:48:b0: 50:60:e3:30:2d:59:a0:26:84:96:64:63:1b:5d:ac: 5c:55:7e:13:98:3c:c3:48:24:9f:c9:ba:e5:05:cc: 63:ff:28:d2:fa:0d:a4:4d:fe:7c:84:30:67:e9:96: da:d4:eb:60:7d:1a:a0:7b:23:c5:82:33:69:22:69: c1:b7:9e:22:9e:94:22:f0:c9:16:a8:56:b3:32:73: b9:a8:c7:4e:92:6c:7d:e0:da:56:59:f5:9a:bb:61: 40:87:2b:b5:a4:30:50:4b:25:44:14:b7:f9:7c:15: e0:8e:ae:a7:67:60:56:ac:79:bd:d3:81:27:72:b8: 6d:b9:92:d3:e2:03:c5:60:50:9b:f8:c0:33:08:bb: 16:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1F:C5:31:43:C1:8F:80:8D:8B:87:5B:F7:4B:D6:0D:6D:86:BF:D2 X509v3 Authority Key Identifier: keyid:78:A2:C1:B7:FD:05:09:8A:61:1E:19:8E:84:81:B7:29:7F:92:45:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a8:a7:c6:73:47:87:45:6f:2c:74:47:23:b1:b5:93:7e:32: 4f:a1:51:ea:b2:8f:26:05:52:cc:8b:f5:9b:1a:b9:1d:e0:a3: 73:2d:a5:a5:18:c3:5b:34:61:b5:78:22:89:23:2a:f4:33:ab: d1:fc:81:b6:f4:58:34:d4:83:ca:4b:22:fd:3f:eb:d5:d0:ed: ed:c9:cf:3d:73:c0:93:d2:4b:c1:81:c6:75:d8:8a:48:4f:02: 50:a8:2d:29:03:07:a6:5a:11:c6:7d:98:c1:54:e1:1c:bc:e7: 89:b7:57:9c:e1:0a:c4:a9:a8:17:c7:8c:5a:0d:94:6d:5e:2c: 08:a0:10:31:ed:b5:b5:60:c7:c0:7d:63:0f:7b:c2:61:fa:b4: 0f:9c:58:c0:6a:78:69:11:41:7f:52:4a:e2:59:c4:93:48:87: 52:76:a7:4a:b4:f1:11:d1:49:82:cb:9f:b7:a5:ac:3d:84:38: 5f:53:50:f6:1d:16:43:20:56:6e:50:4d:06:a2:4a:5f:db:32: 6c:be:34:f3:09:37:e3:78:cd:79:ea:f1:09:0a:eb:52:d3:dc: 7b:6e:e5:cb:ab:9f:84:6d:8c:df:ba:8a:c2:a4:e7:30:db:60: 05:2b:5b:48:b6:fe:ec:21:77:15:3b:49:dd:c8:cc:33:f2:90: c1:36:20:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJb3GhehqvwbQaAxuhj8fuSi3uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBMkMxQjdGRDA1MDk4QTYxMUUxOThFODQ4MUI3Mjk3 RjkyNDU5MDAeFw0yNjA5MjExNzA3NTNaFw0yNjA5MjIxOTQ5NTNaMDMxMTAvBgNV BAMTKDk1MUZDNTMxNDNDMThGODA4RDhCODc1QkY3NEJENjBENkQ4NkJGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcLFmdwgL+znW6R0hl80JM+28L hcp/chNNSUrM/8/4w+bDyalDTZAVVGCIAvolP06HUrKgyIurvdxQF4B4Hi94cX+H ud553W5gZP1wv2T5ORDqRJCx9kHb8y5NXeqMYK7uApkCbSJ6uz7nYAduniB5Gj3n dzxIsFBg4zAtWaAmhJZkYxtdrFxVfhOYPMNIJJ/JuuUFzGP/KNL6DaRN/nyEMGfp ltrU62B9GqB7I8WCM2kiacG3niKelCLwyRaoVrMyc7mox06SbH3g2lZZ9Zq7YUCH K7WkMFBLJUQUt/l8FeCOrqdnYFaseb3TgSdyuG25ktPiA8VgUJv4wDMIuxZ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlR/FMUPBj4CNi4db90vWDW2Gv9IwHwYDVR0j BBgwFoAUeKLBt/0FCYphHhmOhIG3KX+SRZAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTllM2IxZDgtYmYxOS00NmUzLWI2MDktMGQxNjA5ODhkYWM4LzAvNzhBMkMxQjdG RDA1MDk4QTYxMUUxOThFODQ4MUI3Mjk3RjkyNDU5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEEyQzFCN0ZEMDUwOThBNjExRTE5OEU4NDgxQjcyOTdGOTI0 NTkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTllM2IxZDgtYmYxOS00NmUzLWI2 MDktMGQxNjA5ODhkYWM4LzAvNzhBMkMxQjdGRDA1MDk4QTYxMUUxOThFODQ4MUI3 Mjk3RjkyNDU5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGop8ZzR4dFbyx0RyOxtZN+Mk+hUeqyjyYF UsyL9ZsauR3go3MtpaUYw1s0YbV4IokjKvQzq9H8gbb0WDTUg8pLIv0/69XQ7e3J zz1zwJPSS8GBxnXYikhPAlCoLSkDB6ZaEcZ9mMFU4Ry854m3V5zhCsSpqBfHjFoN lG1eLAigEDHttbVgx8B9Yw97wmH6tA+cWMBqeGkRQX9SSuJZxJNIh1J2p0q08RHR SYLLn7elrD2EOF9TUPYdFkMgVm5QTQaiSl/bMmy+NPMJN+N4zXnq8QkK61LT3Htu 5curn4RtjN+6isKk5zDbYAUrW0i2/uwhdxU7Sd3IzDPykME2IMw= -----END CERTIFICATE-----Generated at Tue Sep 22 06:34:05 2026 by rpki-client