$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft File: 78AB429C4579785348E8B0DFF48937716E9707FA.mft (raw, json) Hash identifier: AlsFxMaG6pZAHs2lltVQoGX21ElU0sgFDpL3vqj/kH0= Subject key identifier: C5:1A:C2:79:F5:8E:6C:D5:C7:81:65:91:27:62:8A:20:3F:5A:85:3E Authority key identifier: 78:AB:42:9C:45:79:78:53:48:E8:B0:DF:F4:89:37:71:6E:97:07:FA Certificate issuer: /CN=78AB429C4579785348E8B0DFF48937716E9707FA Certificate serial: 0CF4E103E323F3BDEA76312940CFA8C9F8020EAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft Manifest number: BB Signing time: Sun 20 Sep 2026 09:39:07 +0000 Manifest this update: Sun 20 Sep 2026 09:34:07 +0000 Manifest next update: Mon 21 Sep 2026 12:33:07 +0000 Files and hashes: 1: 78AB429C4579785348E8B0DFF48937716E9707FA.crl (hash: H2XrhDszsrDsBcGaaLntGvBKGp8YJ/MACWjz991Rqeg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.crl rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f4:e1:03:e3:23:f3:bd:ea:76:31:29:40:cf:a8:c9:f8:02:0e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78AB429C4579785348E8B0DFF48937716E9707FA Validity Not Before: Sep 20 09:34:07 2026 GMT Not After : Sep 21 12:33:07 2026 GMT Subject: CN=C51AC279F58E6CD5C781659127628A203F5A853E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:a1:5a:7e:f5:0f:f1:71:80:23:5f:cc:09: c6:b0:d8:14:8b:e5:b5:71:2f:6f:96:20:89:26:7d: b0:b0:5b:62:2f:7e:0c:41:1d:97:74:61:34:c2:81: 54:c0:a0:a8:e5:9a:4f:fa:14:0a:6a:19:b7:f6:8d: 07:58:dc:6a:ad:c0:f3:21:b0:58:0d:03:ca:c3:75: 6f:48:af:7a:b3:1a:be:25:1a:f4:33:70:bf:68:f3: 48:79:64:df:47:cb:fc:f7:26:52:32:d0:52:b2:67: e2:fe:c1:59:d9:3b:ec:37:f1:1c:fe:7f:e1:be:98: 32:71:a9:50:5c:9e:d2:85:91:76:a1:86:6f:1d:25: 3a:98:c1:2d:24:ea:a3:9a:1b:02:72:1e:22:f4:8d: 0e:fb:c8:12:23:79:4a:97:76:7d:3b:f4:45:0e:59: bb:4b:e2:3a:cf:d9:65:53:3b:b1:8d:7c:fd:36:e3: e1:2c:a7:1b:2f:18:10:a7:73:0b:60:38:a8:1e:ca: be:c6:85:c0:80:9e:0b:5b:f7:1f:7f:1a:7b:e1:d4: d1:0e:fa:b2:c6:8f:86:f3:4b:b0:97:c2:6d:75:25: 5e:ac:0a:ce:a6:6f:43:a1:f1:81:98:40:95:94:80: c4:d4:1b:5a:ff:b4:cf:75:28:44:9f:c8:0f:32:61: 8e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1A:C2:79:F5:8E:6C:D5:C7:81:65:91:27:62:8A:20:3F:5A:85:3E X509v3 Authority Key Identifier: keyid:78:AB:42:9C:45:79:78:53:48:E8:B0:DF:F4:89:37:71:6E:97:07:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78AB429C4579785348E8B0DFF48937716E9707FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5f38157-b5e8-4cbc-be21-d176145a4569/0/78AB429C4579785348E8B0DFF48937716E9707FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4d:d1:d1:3b:b9:f4:71:bd:e0:1e:1e:d3:41:41:50:cb:f3: cb:93:3c:d8:ad:e7:3b:92:39:5f:15:a4:c2:27:af:b2:02:5e: b1:70:72:ed:15:3e:eb:6a:60:a4:8d:d3:d1:d8:90:4e:bb:66: 95:a3:8c:11:54:99:9e:fc:f6:00:d8:97:db:d7:d5:c7:ee:c3: 3b:1b:f6:09:0d:a5:f0:01:38:7b:15:67:16:87:ca:24:e8:f9: 13:9d:36:71:fd:c9:ac:ca:9c:dc:f0:41:1e:d2:3e:cd:98:f5: d1:0c:48:c2:16:46:05:96:79:93:1e:a1:fe:c9:03:7e:2d:1e: 97:e3:f8:7c:24:12:ed:85:63:24:0e:a3:b2:af:c3:7c:66:27: 24:0a:e4:a3:f5:eb:98:d3:17:7c:4c:2b:75:6e:bd:3f:62:a5: 2e:b6:d4:62:8e:71:c2:d1:15:0c:21:ec:9a:51:f4:76:cb:cd: c0:09:84:fe:59:8b:f7:35:89:40:87:78:6b:61:2c:9a:06:43: c3:14:6e:b8:e2:26:01:1d:79:b3:49:3d:8a:b5:79:97:e6:70: 8a:fa:9f:3f:11:6c:29:50:f2:d7:47:ec:90:c5:ac:34:bb:f5: 48:f4:9e:f4:41:64:f0:6d:ce:e7:90:b9:20:ea:8f:c7:76:cb: 5e:3f:8f:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPThA+Mj873qdjEpQM+oyfgCDq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhBQjQyOUM0NTc5Nzg1MzQ4RThCMERGRjQ4OTM3NzE2 RTk3MDdGQTAeFw0yNjA5MjAwOTM0MDdaFw0yNjA5MjExMjMzMDdaMDMxMTAvBgNV BAMTKEM1MUFDMjc5RjU4RTZDRDVDNzgxNjU5MTI3NjI4QTIwM0Y1QTg1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrO6FafvUP8XGAI1/MCcaw2BSL 5bVxL2+WIIkmfbCwW2IvfgxBHZd0YTTCgVTAoKjlmk/6FApqGbf2jQdY3GqtwPMh sFgNA8rDdW9Ir3qzGr4lGvQzcL9o80h5ZN9Hy/z3JlIy0FKyZ+L+wVnZO+w38Rz+ f+G+mDJxqVBcntKFkXahhm8dJTqYwS0k6qOaGwJyHiL0jQ77yBIjeUqXdn079EUO WbtL4jrP2WVTO7GNfP024+EspxsvGBCncwtgOKgeyr7GhcCAngtb9x9/Gnvh1NEO +rLGj4bzS7CXwm11JV6sCs6mb0Oh8YGYQJWUgMTUG1r/tM91KESfyA8yYY7DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxRrCefWObNXHgWWRJ2KKID9ahT4wHwYDVR0j BBgwFoAUeKtCnEV5eFNI6LDf9Ik3cW6XB/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVmMzgxNTctYjVlOC00Y2JjLWJlMjEtZDE3NjE0NWE0NTY5LzAvNzhBQjQyOUM0 NTc5Nzg1MzQ4RThCMERGRjQ4OTM3NzE2RTk3MDdGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OEFCNDI5QzQ1Nzk3ODUzNDhFOEIwREZGNDg5Mzc3MTZFOTcw N0ZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVmMzgxNTctYjVlOC00Y2JjLWJl MjEtZDE3NjE0NWE0NTY5LzAvNzhBQjQyOUM0NTc5Nzg1MzQ4RThCMERGRjQ4OTM3 NzE2RTk3MDdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhN0dE7ufRxveAeHtNBQVDL88uTPNit5zuS OV8VpMInr7ICXrFwcu0VPutqYKSN09HYkE67ZpWjjBFUmZ789gDYl9vX1cfuwzsb 9gkNpfABOHsVZxaHyiTo+ROdNnH9yazKnNzwQR7SPs2Y9dEMSMIWRgWWeZMeof7J A34tHpfj+HwkEu2FYyQOo7Kvw3xmJyQK5KP165jTF3xMK3VuvT9ipS621GKOccLR FQwh7JpR9HbLzcAJhP5Zi/c1iUCHeGthLJoGQ8MUbrjiJgEdebNJPYq1eZfmcIr6 nz8RbClQ8tdH7JDFrDS79Uj0nvRBZPBtzueQuSDqj8d2y14/j2s= -----END CERTIFICATE-----Generated at Sun Sep 20 21:41:38 2026 by rpki-client