$ rpki-client -vvf rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft File: CB78BE291F4C68861081295C7864E4DC5943795A.mft (raw, json) Hash identifier: tjCqenfiYQiwOPH32QfQyWKScU/YqabAcFzYHU82JJY= Subject key identifier: 5B:1D:BF:79:84:9A:98:B1:0A:5B:9F:D8:8F:1E:5E:E0:D9:BE:5F:01 Authority key identifier: CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A Certificate issuer: /CN=CB78BE291F4C68861081295C7864E4DC5943795A Certificate serial: 0F31A2D42D8F422C26FEE32A15897432F53DA240 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 14:29:17 +0000 Manifest this update: Tue 28 Jul 2026 14:24:17 +0000 Manifest next update: Wed 29 Jul 2026 16:38:17 +0000 Files and hashes: 1: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: Sw+OUdszsTIUzZ+1lqD/i8/2BPm17GQD5VfJxVXp+AM=) 2: CB78BE291F4C68861081295C7864E4DC5943795A.crl (hash: qd/DCpBTdS2K9XkYzUhgp7xZW6EFyjFM6pI81+r214k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:31:a2:d4:2d:8f:42:2c:26:fe:e3:2a:15:89:74:32:f5:3d:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB78BE291F4C68861081295C7864E4DC5943795A Validity Not Before: Jul 28 14:24:17 2026 GMT Not After : Jul 29 16:38:17 2026 GMT Subject: CN=5B1DBF79849A98B10A5B9FD88F1E5EE0D9BE5F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:60:34:9f:99:c8:e2:64:6c:ef:9e:cf:ad:01: 1e:24:c3:b9:80:22:b6:88:54:46:1c:12:73:fc:e3: 36:10:9e:c2:11:96:ad:1d:ea:88:24:7d:69:a1:35: 16:b6:13:bf:43:8a:58:c8:ba:62:cc:9f:f9:c1:6a: 16:4c:c9:17:f4:fb:6d:88:5b:d4:cd:b1:90:a0:69: de:88:6b:70:b1:1a:3a:58:7d:b6:0b:7d:df:c6:34: e0:da:59:55:fc:9f:96:24:8e:83:35:6d:89:e7:86: b9:09:df:1e:1c:a0:3a:95:aa:d3:f5:33:1f:e0:39: 79:f5:9f:64:50:ce:43:8d:94:c1:bb:21:50:4e:ab: 5e:f0:cc:79:48:0d:39:2d:a9:d4:bf:28:54:b9:ce: bd:c3:1a:6b:81:a1:dc:ca:84:a0:c1:7b:67:d0:69: 36:c7:09:fe:78:af:e8:4c:46:9f:a9:2b:f8:eb:68: 36:1b:34:64:a4:72:a1:13:f0:1c:a4:2c:06:42:79: df:fa:55:fb:ea:50:ca:f0:90:65:20:40:c7:0e:c6: 81:00:10:e4:1a:7d:48:fe:d0:a7:90:54:17:19:34: 4e:b8:4a:eb:e4:d4:9f:99:fd:b3:c9:26:80:4f:a0: 8c:57:32:12:36:f1:47:ed:b8:41:db:26:be:bb:43: b3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1D:BF:79:84:9A:98:B1:0A:5B:9F:D8:8F:1E:5E:E0:D9:BE:5F:01 X509v3 Authority Key Identifier: keyid:CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:08:97:a2:fe:6a:57:9a:bf:4c:22:2f:90:92:58:5c:8d:75: 16:a8:4f:88:08:bb:c7:bd:e9:7b:67:c8:62:a2:1a:47:d3:f8: 3e:f5:00:d8:aa:af:1c:31:39:c5:4f:bb:d7:09:41:bf:68:80: 69:3c:c5:6f:ff:a8:b0:ee:38:61:09:f6:88:b4:78:ab:43:75: eb:45:b7:b2:1c:bb:0f:da:8d:b8:cc:4f:5f:c7:35:0c:24:e1: e1:0a:a8:06:9c:2e:fa:d7:cd:b7:01:7e:2e:29:37:7c:c3:5f: 33:94:58:d1:74:4d:c2:d0:63:29:26:87:92:d8:49:1d:b7:94: 07:2b:fe:f6:e5:1e:a7:2f:be:79:17:51:dd:32:24:93:d7:8d: 02:a5:84:92:17:f5:08:98:4b:a5:16:15:49:0c:71:6f:f4:e9: 88:e0:84:a5:21:9d:1b:eb:e1:64:5f:a6:10:be:9b:3b:ed:e9: a3:ef:ec:57:64:5e:66:42:9a:35:0f:92:f2:20:d9:86:e4:8c: 8c:2a:a0:85:6f:34:79:8c:ad:4a:27:27:15:97:2a:5b:6f:4f: ea:f4:a1:81:a5:46:d2:a9:f1:6e:4c:d3:9a:3d:ee:1f:05:8c: 32:d5:f6:b5:49:35:3c:2f:f7:e7:bb:f8:58:38:f4:69:c0:97: 75:34:41:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzGi1C2PQiwm/uMqFYl0MvU9okAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0REM1 OTQzNzk1QTAeFw0yNjA3MjgxNDI0MTdaFw0yNjA3MjkxNjM4MTdaMDMxMTAvBgNV BAMTKDVCMURCRjc5ODQ5QTk4QjEwQTVCOUZEODhGMUU1RUUwRDlCRTVGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyYDSfmcjiZGzvns+tAR4kw7mA IraIVEYcEnP84zYQnsIRlq0d6ogkfWmhNRa2E79DiljIumLMn/nBahZMyRf0+22I W9TNsZCgad6Ia3CxGjpYfbYLfd/GNODaWVX8n5YkjoM1bYnnhrkJ3x4coDqVqtP1 Mx/gOXn1n2RQzkONlMG7IVBOq17wzHlIDTktqdS/KFS5zr3DGmuBodzKhKDBe2fQ aTbHCf54r+hMRp+pK/jraDYbNGSkcqET8BykLAZCed/6VfvqUMrwkGUgQMcOxoEA EOQafUj+0KeQVBcZNE64Suvk1J+Z/bPJJoBPoIxXMhI28UftuEHbJr67Q7PJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWx2/eYSamLEKW5/Yjx5e4Nm+XwEwHwYDVR0j BBgwFoAUy3i+KR9MaIYQgSlceGTk3FlDeVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmNiOWJhN2YtZWZkMS00OTk0LWEyYTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkx RjRDNjg4NjEwODEyOTVDNzg2NEU0REM1OTQzNzk1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjc4QkUyOTFGNEM2ODg2MTA4MTI5NUM3ODY0RTREQzU5NDM3 OTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0 REM1OTQzNzk1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0Il6L+aleav0wiL5CSWFyNdRaoT4gIu8e9 6XtnyGKiGkfT+D71ANiqrxwxOcVPu9cJQb9ogGk8xW//qLDuOGEJ9oi0eKtDdetF t7Icuw/ajbjMT1/HNQwk4eEKqAacLvrXzbcBfi4pN3zDXzOUWNF0TcLQYykmh5LY SR23lAcr/vblHqcvvnkXUd0yJJPXjQKlhJIX9QiYS6UWFUkMcW/06YjghKUhnRvr 4WRfphC+mzvt6aPv7FdkXmZCmjUPkvIg2YbkjIwqoIVvNHmMrUonJxWXKltvT+r0 oYGlRtKp8W5M05o97h8FjDLV9rVJNTwv9+e7+Fg49GnAl3U0Qa4= -----END CERTIFICATE-----Generated at Tue Jul 28 19:53:12 2026 by rpki-client