$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft File: CB78BE291F4C68861081295C7864E4DC5943795A.mft (raw, json) Hash identifier: +Up8JTdWUMl2H2LXXZlgRUmHOixMo2TDSnVscDB6WA8= Subject key identifier: 05:B8:7E:D4:47:47:F6:8E:F8:23:23:EE:73:D4:4A:DA:03:D7:ED:32 Authority key identifier: CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A Certificate issuer: /CN=CB78BE291F4C68861081295C7864E4DC5943795A Certificate serial: 2C7ACFE5674A00877F31DAE00293ED6CD41151BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft Manifest number: BE Signing time: Tue 22 Sep 2026 04:57:35 +0000 Manifest this update: Tue 22 Sep 2026 04:52:35 +0000 Manifest next update: Wed 23 Sep 2026 06:28:35 +0000 Files and hashes: 1: CB78BE291F4C68861081295C7864E4DC5943795A.crl (hash: scnX4Hqw1nMK67Keldq3vhmtF/viQAxtb/OXyV0jArM=) 2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: Sw+OUdszsTIUzZ+1lqD/i8/2BPm17GQD5VfJxVXp+AM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7a:cf:e5:67:4a:00:87:7f:31:da:e0:02:93:ed:6c:d4:11:51:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB78BE291F4C68861081295C7864E4DC5943795A Validity Not Before: Sep 22 04:52:35 2026 GMT Not After : Sep 23 06:28:35 2026 GMT Subject: CN=05B87ED44747F68EF82323EE73D44ADA03D7ED32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6f:72:bb:b1:65:51:86:14:a0:81:d0:ae:ab: 34:e3:1e:7b:39:e6:23:e4:e3:d0:40:1e:bd:94:bf: d6:22:74:7c:c2:3e:70:67:82:ea:c0:e5:1b:57:bf: d9:7e:6f:e5:c1:96:c7:e7:dc:53:15:10:4c:91:ef: 7d:6f:f4:e6:82:97:c7:46:ac:bb:96:ca:37:bc:4b: aa:af:2f:70:58:b8:cb:d0:bf:d0:23:68:b2:c7:e3: d0:d2:09:35:3e:66:41:34:aa:ab:f2:67:98:56:91: e7:2e:61:c1:6c:71:61:c4:da:4b:6e:28:d3:4a:2b: 6f:49:2f:d2:25:a3:e8:4f:fd:d8:ee:a2:13:e8:f7: b2:49:e4:fa:1c:4a:ae:74:12:fc:b6:be:e9:cc:46: 26:cb:99:fc:0b:65:ba:93:37:0e:ef:d6:d7:47:36: a1:b0:03:4c:26:46:69:13:77:24:a7:e6:81:af:49: 1e:c3:ce:45:94:79:3d:69:04:91:0d:ce:7a:00:b3: f0:55:4b:be:fc:0a:20:ba:db:71:33:f9:1a:65:aa: c7:b5:3c:63:bf:0e:55:6e:c5:34:f3:53:74:42:5d: e0:17:82:dc:62:69:2d:bb:4c:e2:74:6a:4d:ba:32: 70:ea:43:54:7c:a7:03:db:8c:13:63:4b:21:78:d7: 12:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B8:7E:D4:47:47:F6:8E:F8:23:23:EE:73:D4:4A:DA:03:D7:ED:32 X509v3 Authority Key Identifier: keyid:CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:92:59:df:f5:fc:1b:10:84:35:ed:17:a3:ce:1d:01:f0:5e: 69:d4:ff:6d:53:9c:85:0d:b4:d2:42:a5:c0:b8:e0:10:c5:b0: 40:de:89:65:a9:c9:53:48:5e:ab:1d:72:41:6e:f7:ba:36:33: b0:42:ff:fc:f9:16:52:2c:cf:77:79:8c:e1:ea:9b:4c:4e:3d: 23:ed:e6:20:f2:f9:42:80:9d:51:c1:88:b2:97:9e:91:4a:ad: 83:4b:ce:b0:7e:72:96:80:63:ad:1d:e1:0b:0b:72:41:c6:82: 98:2a:56:0a:a3:15:70:28:22:7a:e0:f3:d1:cb:09:af:f1:3a: 5f:f0:f1:95:7c:a6:08:f5:06:f2:dd:53:81:55:9d:6e:83:db: d3:f8:39:35:a3:a1:8c:5e:2e:b0:4d:65:a5:da:9c:95:91:7f: 10:f9:bd:67:b1:89:d5:65:f1:d7:93:a2:90:fa:65:57:a6:57: f2:3a:c3:bb:1c:57:44:9d:67:14:6b:3b:46:b1:3f:12:2a:11: 58:76:b6:48:e1:ac:a2:f6:4a:61:c3:5b:f7:c5:11:16:de:39: c8:c0:4a:34:cb:fe:60:7c:4b:e6:f4:aa:2a:2d:f8:ea:30:c4: a3:bc:e1:55:e1:f0:db:1c:9e:8b:76:f1:50:16:fb:db:e2:5c: 1c:89:b1:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHrP5WdKAId/MdrgApPtbNQRUbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0REM1 OTQzNzk1QTAeFw0yNjA5MjIwNDUyMzVaFw0yNjA5MjMwNjI4MzVaMDMxMTAvBgNV BAMTKDA1Qjg3RUQ0NDc0N0Y2OEVGODIzMjNFRTczRDQ0QURBMDNEN0VEMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmb3K7sWVRhhSggdCuqzTjHns5 5iPk49BAHr2Uv9YidHzCPnBngurA5RtXv9l+b+XBlsfn3FMVEEyR731v9OaCl8dG rLuWyje8S6qvL3BYuMvQv9AjaLLH49DSCTU+ZkE0qqvyZ5hWkecuYcFscWHE2ktu KNNKK29JL9Ilo+hP/djuohPo97JJ5PocSq50Evy2vunMRibLmfwLZbqTNw7v1tdH NqGwA0wmRmkTdySn5oGvSR7DzkWUeT1pBJENznoAs/BVS778CiC623Ez+Rplqse1 PGO/DlVuxTTzU3RCXeAXgtxiaS27TOJ0ak26MnDqQ1R8pwPbjBNjSyF41xJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBbh+1EdH9o74IyPuc9RK2gPX7TIwHwYDVR0j BBgwFoAUy3i+KR9MaIYQgSlceGTk3FlDeVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmNiOWJhN2YtZWZkMS00OTk0LWEyYTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkx RjRDNjg4NjEwODEyOTVDNzg2NEU0REM1OTQzNzk1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjc4QkUyOTFGNEM2ODg2MTA4MTI5NUM3ODY0RTREQzU5NDM3 OTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0 REM1OTQzNzk1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeSWd/1/BsQhDXtF6POHQHwXmnU/21TnIUN tNJCpcC44BDFsEDeiWWpyVNIXqsdckFu97o2M7BC//z5FlIsz3d5jOHqm0xOPSPt 5iDy+UKAnVHBiLKXnpFKrYNLzrB+cpaAY60d4QsLckHGgpgqVgqjFXAoInrg89HL Ca/xOl/w8ZV8pgj1BvLdU4FVnW6D29P4OTWjoYxeLrBNZaXanJWRfxD5vWexidVl 8deTopD6ZVemV/I6w7scV0SdZxRrO0axPxIqEVh2tkjhrKL2SmHDW/fFERbeOcjA SjTL/mB8S+b0qiot+OowxKO84VXh8Nscnot28VAW+9viXByJsTc= -----END CERTIFICATE-----Generated at Tue Sep 22 16:46:36 2026 by rpki-client