$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.mft File: B78A1ED892FB248A8B9BD980AD2B97821308CD15.mft (raw, json) Hash identifier: n+k1IKJGruT9C95yuPpRBnAsP4vpbGNrpImUGs2Fszw= Subject key identifier: D0:5C:56:55:17:1F:F2:A4:91:2D:78:DD:75:22:AA:DA:DC:2D:F7:72 Authority key identifier: B7:8A:1E:D8:92:FB:24:8A:8B:9B:D9:80:AD:2B:97:82:13:08:CD:15 Certificate issuer: /CN=B78A1ED892FB248A8B9BD980AD2B97821308CD15 Certificate serial: 620A698FB5115030E994F0E9F6D36891742E4461 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78A1ED892FB248A8B9BD980AD2B97821308CD15.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.mft Manifest number: BD Signing time: Tue 22 Sep 2026 04:01:26 +0000 Manifest this update: Tue 22 Sep 2026 03:56:26 +0000 Manifest next update: Wed 23 Sep 2026 07:42:26 +0000 Files and hashes: 1: B78A1ED892FB248A8B9BD980AD2B97821308CD15.crl (hash: dkC8P4FW9YNB1pLAroUN11mDucUywRgdZ9wAY79kmm0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.crl rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78A1ED892FB248A8B9BD980AD2B97821308CD15.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0a:69:8f:b5:11:50:30:e9:94:f0:e9:f6:d3:68:91:74:2e:44:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B78A1ED892FB248A8B9BD980AD2B97821308CD15 Validity Not Before: Sep 22 03:56:26 2026 GMT Not After : Sep 23 07:42:26 2026 GMT Subject: CN=D05C5655171FF2A4912D78DD7522AADADC2DF772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:c5:7d:18:2f:73:a2:92:1e:9c:93:d5:2f: 31:c8:a5:69:9c:02:84:17:ba:17:18:69:7f:5a:0d: 96:a6:a9:12:35:59:39:9d:59:e0:d5:53:43:84:6f: 4a:18:6d:0b:70:7f:7f:c9:ae:53:e7:3a:b2:64:28: 88:ce:a3:ce:41:31:49:80:f5:d1:00:9e:94:09:f4: 59:5b:bc:f3:06:16:08:71:f3:99:af:42:38:e7:2b: a3:5d:81:1c:13:1b:ae:a0:f5:62:ab:c8:bf:4e:7a: 4f:f2:18:26:f7:d9:d1:6b:c2:6d:10:84:ec:17:17: 9c:94:6b:39:bc:55:53:c6:79:b9:b3:8b:35:72:d4: 90:ae:61:58:83:78:8f:28:29:89:3a:4b:22:f7:5d: 3f:eb:8e:f7:e3:a7:77:90:44:19:df:88:18:61:4b: 36:bb:c3:4b:d6:7f:d9:70:d4:d8:5a:c7:36:fa:0e: 70:32:83:3c:25:33:c7:da:8e:d6:75:2d:e6:13:cc: 13:e6:64:40:4a:4b:f5:e0:47:4b:94:cc:c9:82:2e: 6b:1b:f8:b3:0d:1c:22:3a:5b:3c:e3:a1:a3:37:68: 15:3a:ab:9d:29:77:1e:66:c5:d3:d0:ae:15:22:39: d2:59:f0:fb:15:f9:5d:3a:98:7e:00:49:05:36:4a: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5C:56:55:17:1F:F2:A4:91:2D:78:DD:75:22:AA:DA:DC:2D:F7:72 X509v3 Authority Key Identifier: keyid:B7:8A:1E:D8:92:FB:24:8A:8B:9B:D9:80:AD:2B:97:82:13:08:CD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78A1ED892FB248A8B9BD980AD2B97821308CD15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/B78A1ED892FB248A8B9BD980AD2B97821308CD15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d0:ba:78:4f:01:d5:08:41:c8:5c:fe:b4:fb:d1:12:b6:de: b9:44:b1:4f:f9:49:65:3a:58:17:fa:e5:53:10:f2:a2:ce:31: 70:de:34:18:b0:08:2f:53:6a:04:ce:91:1e:02:e6:7a:64:d8: ec:cf:17:35:e1:b9:c8:b9:01:a6:26:e2:21:20:01:9d:90:9d: e8:a7:e9:49:3a:a6:29:62:32:34:e6:43:76:50:80:7a:8c:19: 21:a6:be:70:9a:26:63:dd:97:47:50:c1:84:8d:0d:7a:b3:29: 11:20:bf:36:2c:88:f6:f4:1a:29:7c:99:11:bd:ac:7b:7e:8d: 15:e5:6e:56:a1:ad:61:67:c9:ec:01:b4:8a:7b:e9:fb:27:27: 55:69:73:61:46:d4:72:a1:7d:d5:23:26:1a:a7:b4:cd:36:b4: cc:1a:63:bc:bf:da:00:21:76:d8:55:b6:93:95:4f:71:e8:61: f3:37:cb:11:3d:31:41:50:b8:b8:d9:9a:77:b2:81:75:d8:de: 2b:d6:0b:51:c2:9b:76:35:36:8f:67:ab:53:75:b8:f0:fb:ce: 00:63:c0:b7:ea:f7:5c:88:b0:45:db:c9:00:e0:65:5a:4e:fe: a5:e4:d2:2f:60:35:fa:fd:68:e7:bc:fe:e1:50:d5:78:87:61: 13:9b:d6:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgppj7URUDDplPDp9tNokXQuRGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc4QTFFRDg5MkZCMjQ4QThCOUJEOTgwQUQyQjk3ODIx MzA4Q0QxNTAeFw0yNjA5MjIwMzU2MjZaFw0yNjA5MjMwNzQyMjZaMDMxMTAvBgNV BAMTKEQwNUM1NjU1MTcxRkYyQTQ5MTJENzhERDc1MjJBQURBREMyREY3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqN8V9GC9zopIenJPVLzHIpWmc AoQXuhcYaX9aDZamqRI1WTmdWeDVU0OEb0oYbQtwf3/JrlPnOrJkKIjOo85BMUmA 9dEAnpQJ9FlbvPMGFghx85mvQjjnK6NdgRwTG66g9WKryL9Oek/yGCb32dFrwm0Q hOwXF5yUazm8VVPGebmzizVy1JCuYViDeI8oKYk6SyL3XT/rjvfjp3eQRBnfiBhh Sza7w0vWf9lw1Nhaxzb6DnAygzwlM8fajtZ1LeYTzBPmZEBKS/XgR0uUzMmCLmsb +LMNHCI6WzzjoaM3aBU6q50pdx5mxdPQrhUiOdJZ8PsV+V06mH4ASQU2Sm7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0FxWVRcf8qSRLXjddSKq2twt93IwHwYDVR0j BBgwFoAUt4oe2JL7JIqLm9mArSuXghMIzRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTkwYWExNTgtNjU4MS00Y2JlLWI2Y2UtZDg3MjFjNzE5ZmEwLzAvQjc4QTFFRDg5 MkZCMjQ4QThCOUJEOTgwQUQyQjk3ODIxMzA4Q0QxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzhBMUVEODkyRkIyNDhBOEI5QkQ5ODBBRDJCOTc4MjEzMDhD RDE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvQjc4QTFFRDg5MkZCMjQ4QThCOUJEOTgwQUQyQjk3 ODIxMzA4Q0QxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHQunhPAdUIQchc/rT70RK23rlEsU/5SWU6 WBf65VMQ8qLOMXDeNBiwCC9TagTOkR4C5npk2OzPFzXhuci5AaYm4iEgAZ2Qnein 6Uk6piliMjTmQ3ZQgHqMGSGmvnCaJmPdl0dQwYSNDXqzKREgvzYsiPb0Gil8mRG9 rHt+jRXlblahrWFnyewBtIp76fsnJ1Vpc2FG1HKhfdUjJhqntM02tMwaY7y/2gAh dthVtpOVT3HoYfM3yxE9MUFQuLjZmneygXXY3ivWC1HCm3Y1No9nq1N1uPD7zgBj wLfq91yIsEXbyQDgZVpO/qXk0i9gNfr9aOe8/uFQ1XiHYROb1jc= -----END CERTIFICATE-----Generated at Tue Sep 22 12:10:50 2026 by rpki-client