$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft File: 78AB429C4579785348E8B0DFF48937716E9707FA.mft (raw, json) Hash identifier: mjNCBmfWsBDmUWa04pumaqWjCA/RJ3uPrK5/cgX/5Ag= Subject key identifier: CC:C3:2B:63:52:34:55:15:44:B5:32:D1:71:7E:37:1D:04:F8:0A:FF Authority key identifier: 78:AB:42:9C:45:79:78:53:48:E8:B0:DF:F4:89:37:71:6E:97:07:FA Certificate issuer: /CN=78AB429C4579785348E8B0DFF48937716E9707FA Certificate serial: 6ED3F14DB973147260D669930E02987CABBACD40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 06:25:38 +0000 Manifest this update: Wed 17 Jun 2026 06:20:38 +0000 Manifest next update: Thu 18 Jun 2026 06:27:38 +0000 Files and hashes: 1: 78AB429C4579785348E8B0DFF48937716E9707FA.crl (hash: Aq9qpamS3sCLkRhgQ4rK7kn+lpQtYM+AqMPJLEEMZms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.crl rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d3:f1:4d:b9:73:14:72:60:d6:69:93:0e:02:98:7c:ab:ba:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78AB429C4579785348E8B0DFF48937716E9707FA Validity Not Before: Jun 17 06:20:38 2026 GMT Not After : Jun 18 06:27:38 2026 GMT Subject: CN=CCC32B635234551544B532D1717E371D04F80AFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:e0:e1:1a:95:ea:13:44:40:41:98:94:4c: 88:9e:a9:ea:46:ab:56:9f:4e:5e:c9:2d:b1:0b:f9: 35:58:4a:c0:01:33:ec:c1:d7:9b:66:b3:9b:74:6e: fb:2d:65:d4:4b:84:c4:32:1f:a4:b7:80:c0:e7:c1: a2:b0:fb:1f:77:4a:7a:1b:6f:42:00:55:6f:7d:fc: 51:f6:b1:c3:40:66:99:62:16:73:06:07:53:b5:fd: ae:ba:b9:1f:1d:e7:0e:98:ad:72:76:75:2b:f5:ae: 2a:b3:74:69:c3:25:a0:0c:9b:b6:c1:a1:de:ed:a8: 08:8e:83:79:9e:10:49:d6:9b:4b:ad:7b:a8:47:9f: 6b:d3:3a:0a:e9:6c:47:57:b4:83:f4:fa:2b:7a:69: db:4b:65:7e:d9:44:6e:5e:a7:5c:f8:e3:fa:9a:34: b3:0e:2e:0e:6b:d0:41:ff:20:10:7c:c0:c7:07:2a: b6:08:c9:7a:00:e6:85:8f:b5:53:9c:a7:ae:0a:30: 07:bf:39:f6:a7:70:58:73:64:82:36:ec:5d:58:3c: 9f:22:19:7c:53:cc:68:42:5f:1a:a8:66:4f:b1:4c: 39:a1:25:2e:9a:9e:dc:0a:f7:26:86:70:22:48:af: 77:c6:9a:71:84:de:46:80:7d:d4:c1:e6:ab:97:56: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C3:2B:63:52:34:55:15:44:B5:32:D1:71:7E:37:1D:04:F8:0A:FF X509v3 Authority Key Identifier: keyid:78:AB:42:9C:45:79:78:53:48:E8:B0:DF:F4:89:37:71:6E:97:07:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:47:8b:b0:7e:89:4e:dd:2c:04:c6:d8:1b:52:da:b5:b6:79: a4:95:07:69:c8:9c:c9:52:13:aa:55:de:51:02:51:3e:f9:46: be:ab:32:6d:60:13:e2:a1:f8:9d:2f:b9:9d:43:e3:f4:f5:19: 14:ed:f7:01:1f:b7:ff:4a:c4:f0:d0:43:9b:d0:a4:78:3b:d2: 48:50:3f:d3:ba:95:7e:9d:ce:33:94:d0:70:a4:94:07:9c:de: e9:79:ac:f9:89:0f:98:66:5e:a0:dd:1e:9f:7b:a3:00:51:72: 9d:bd:66:f1:3b:3e:67:fe:91:70:7e:7b:0f:c0:bc:4d:b0:6f: b9:3b:b6:46:34:d2:55:bd:2d:72:76:55:d6:ca:55:bc:6c:a7: 0d:5b:f0:cc:f5:a8:91:e4:6f:0b:96:1e:fb:0d:71:25:8f:3c: 52:0a:41:16:6f:2d:3f:03:af:72:94:54:67:ff:e8:e1:58:1b: ae:15:62:85:19:3b:c3:9a:9b:d5:7e:1e:64:0d:1b:27:7b:7b: ec:9a:7d:ae:10:01:91:be:a6:7a:0f:7d:ae:d3:9f:51:36:04: 0d:db:d2:fe:89:88:db:38:dc:35:0e:0f:5b:67:89:d3:da:13: e7:d5:f9:1a:3d:3c:9f:28:8f:ce:01:99:25:3c:7c:09:9f:1c: 1f:34:a2:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtPxTblzFHJg1mmTDgKYfKu6zUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBQjQyOUM0NTc5Nzg1MzQ4RThCMERGRjQ4OTM3NzE2 RTk3MDdGQTAeFw0yNjA2MTcwNjIwMzhaFw0yNjA2MTgwNjI3MzhaMDMxMTAvBgNV BAMTKENDQzMyQjYzNTIzNDU1MTU0NEI1MzJEMTcxN0UzNzFEMDRGODBBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWV+DhGpXqE0RAQZiUTIieqepG q1afTl7JLbEL+TVYSsABM+zB15tms5t0bvstZdRLhMQyH6S3gMDnwaKw+x93Snob b0IAVW99/FH2scNAZpliFnMGB1O1/a66uR8d5w6YrXJ2dSv1riqzdGnDJaAMm7bB od7tqAiOg3meEEnWm0ute6hHn2vTOgrpbEdXtIP0+it6adtLZX7ZRG5ep1z44/qa NLMOLg5r0EH/IBB8wMcHKrYIyXoA5oWPtVOcp64KMAe/OfancFhzZII27F1YPJ8i GXxTzGhCXxqoZk+xTDmhJS6antwK9yaGcCJIr3fGmnGE3kaAfdTB5quXVs7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzMMrY1I0VRVEtTLRcX43HQT4Cv8wHwYDVR0j BBgwFoAUeKtCnEV5eFNI6LDf9Ik3cW6XB/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVmMzgxNTctYjVlOC00Y2JjLWJlMjEtZDE3NjE0NWE0NTY5LzAvNzhBQjQyOUM0 NTc5Nzg1MzQ4RThCMERGRjQ4OTM3NzE2RTk3MDdGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEFCNDI5QzQ1Nzk3ODUzNDhFOEIwREZGNDg5Mzc3MTZFOTcw N0ZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVmMzgxNTctYjVlOC00Y2JjLWJl MjEtZDE3NjE0NWE0NTY5LzAvNzhBQjQyOUM0NTc5Nzg1MzQ4RThCMERGRjQ4OTM3 NzE2RTk3MDdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBHi7B+iU7dLATG2BtS2rW2eaSVB2nInMlS E6pV3lECUT75Rr6rMm1gE+Kh+J0vuZ1D4/T1GRTt9wEft/9KxPDQQ5vQpHg70khQ P9O6lX6dzjOU0HCklAec3ul5rPmJD5hmXqDdHp97owBRcp29ZvE7Pmf+kXB+ew/A vE2wb7k7tkY00lW9LXJ2VdbKVbxspw1b8Mz1qJHkbwuWHvsNcSWPPFIKQRZvLT8D r3KUVGf/6OFYG64VYoUZO8Oam9V+HmQNGyd7e+yafa4QAZG+pnoPfa7Tn1E2BA3b 0v6JiNs43DUOD1tnidPaE+fV+Ro9PJ8oj84BmSU8fAmfHB80om4= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:26 2026 by rpki-client