$ rpki-client -vvf rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft File: CB78BE291F4C68861081295C7864E4DC5943795A.mft (raw, json) Hash identifier: zImKpjc28rvRNh2yl2tkz/e1TsLXdmw8+8qN69T3oyo= Subject key identifier: C6:E7:AE:C5:22:87:0A:9E:1A:C1:13:41:75:A7:1F:F6:56:23:6D:A0 Authority key identifier: CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A Certificate issuer: /CN=CB78BE291F4C68861081295C7864E4DC5943795A Certificate serial: 765BFF0261DAA667EFB20272F03A54AB0B5FF382 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 00:55:27 +0000 Manifest this update: Sat 13 Jun 2026 00:50:27 +0000 Manifest next update: Sun 14 Jun 2026 01:00:27 +0000 Files and hashes: 1: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: Sw+OUdszsTIUzZ+1lqD/i8/2BPm17GQD5VfJxVXp+AM=) 2: CB78BE291F4C68861081295C7864E4DC5943795A.crl (hash: itMxRUrl6Y7jSPSVXJxHmuJ/w7IA7Kmacut+loNw9JQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 01:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:5b:ff:02:61:da:a6:67:ef:b2:02:72:f0:3a:54:ab:0b:5f:f3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB78BE291F4C68861081295C7864E4DC5943795A Validity Not Before: Jun 13 00:50:27 2026 GMT Not After : Jun 14 01:00:27 2026 GMT Subject: CN=C6E7AEC522870A9E1AC1134175A71FF656236DA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:6a:87:47:08:32:e4:2d:d3:05:43:a1:b6: cc:ec:d5:de:93:aa:c4:b5:8b:52:2c:00:18:8c:8b: 1f:77:c2:a4:39:c6:06:bf:68:c4:3f:38:5e:88:e4: d5:84:88:43:5e:0d:11:eb:dc:e9:e1:e0:62:63:af: 32:09:df:a3:86:94:2f:cb:5e:a1:f5:a4:af:f5:41: 31:f2:68:bc:8e:97:cd:13:e2:b7:ae:ee:c0:31:e6: ee:4a:2d:44:61:42:1e:2c:8b:08:9b:ff:db:25:40: ac:6b:d3:06:35:7c:47:47:5c:8a:b5:7a:6c:95:76: 68:d8:31:72:12:7e:04:a2:e4:54:b5:93:8a:9b:7a: a3:09:57:18:9f:f5:a5:d9:b8:d0:ca:b0:4f:56:8d: 3e:18:64:fc:4f:54:60:ca:3c:d7:89:5a:ae:5f:38: fe:6e:33:a2:83:aa:4b:ac:78:33:ee:b5:5f:84:ed: ff:40:4e:d9:77:6c:8c:8d:0e:e4:25:78:27:f5:b5: 4f:55:2d:20:36:68:44:61:be:f8:77:5e:7d:c7:a3: 1e:55:bc:b5:cd:6a:c8:e8:d9:6c:db:41:33:b6:a5: 8b:87:07:f1:a3:d3:4a:60:4d:f3:7f:3d:58:e0:66: 66:9c:fb:00:92:04:18:60:05:bc:94:a4:01:88:2b: 6c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E7:AE:C5:22:87:0A:9E:1A:C1:13:41:75:A7:1F:F6:56:23:6D:A0 X509v3 Authority Key Identifier: keyid:CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ed:37:95:28:ad:f7:17:c4:33:d4:f9:62:4d:c6:5e:5a:c4:61: 06:08:7c:42:f5:d6:37:ed:e6:e7:64:52:26:12:da:b9:54:4e: 3c:7b:9c:6c:7c:08:59:26:f2:6e:21:73:d0:f0:30:c4:6f:c0: 6a:98:98:c1:21:b2:f4:a4:f0:e9:39:62:1b:1c:6a:c2:c0:99: 5c:85:8b:ce:9e:93:e3:c8:55:a7:2e:f3:51:e8:93:66:80:6d: 0c:3f:d1:cb:9a:e4:59:cf:0f:23:a0:0a:be:1b:f4:33:eb:66: 84:e9:a3:1b:b5:29:71:aa:23:71:e7:ad:21:1d:13:9a:61:ba: 1c:64:1a:0a:a4:57:0f:0c:80:ae:ad:4c:34:94:6a:11:76:f3: 71:31:86:03:58:12:9e:ad:58:9b:7e:42:83:2f:eb:2e:1b:59: cb:4c:8b:fd:d0:59:be:35:d8:33:ba:f4:d6:9d:f2:81:7d:12: 57:43:06:2b:4e:ed:42:3e:c5:05:f4:6e:44:45:d7:24:0d:46: 4f:9a:d5:c4:7f:a5:0d:f4:46:7d:6f:31:f6:9c:ce:e3:84:a0: db:29:83:ed:4c:21:72:0c:f6:cb:db:ff:cf:a9:e7:79:dc:d3: da:38:98:7d:3d:fb:f6:38:46:60:30:2d:c4:e0:68:e7:cc:7e: dd:eb:7f:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlv/AmHapmfvsgJy8DpUqwtf84IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0REM1 OTQzNzk1QTAeFw0yNjA2MTMwMDUwMjdaFw0yNjA2MTQwMTAwMjdaMDMxMTAvBgNV BAMTKEM2RTdBRUM1MjI4NzBBOUUxQUMxMTM0MTc1QTcxRkY2NTYyMzZEQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgNmqHRwgy5C3TBUOhtszs1d6T qsS1i1IsABiMix93wqQ5xga/aMQ/OF6I5NWEiENeDRHr3Onh4GJjrzIJ36OGlC/L XqH1pK/1QTHyaLyOl80T4reu7sAx5u5KLURhQh4siwib/9slQKxr0wY1fEdHXIq1 emyVdmjYMXISfgSi5FS1k4qbeqMJVxif9aXZuNDKsE9WjT4YZPxPVGDKPNeJWq5f OP5uM6KDqkuseDPutV+E7f9ATtl3bIyNDuQleCf1tU9VLSA2aERhvvh3Xn3Hox5V vLXNasjo2WzbQTO2pYuHB/Gj00pgTfN/PVjgZmac+wCSBBhgBbyUpAGIK2xpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxueuxSKHCp4awRNBdacf9lYjbaAwHwYDVR0j BBgwFoAUy3i+KR9MaIYQgSlceGTk3FlDeVowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmNiOWJhN2YtZWZkMS00OTk0LWEyYTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkx RjRDNjg4NjEwODEyOTVDNzg2NEU0REM1OTQzNzk1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQjc4QkUyOTFGNEM2ODg2MTA4MTI5NUM3ODY0RTREQzU5NDM3 OTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvQ0I3OEJFMjkxRjRDNjg4NjEwODEyOTVDNzg2NEU0 REM1OTQzNzk1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO03lSit9xfEM9T5Yk3GXlrEYQYIfEL11jft 5udkUiYS2rlUTjx7nGx8CFkm8m4hc9DwMMRvwGqYmMEhsvSk8Ok5YhscasLAmVyF i86ek+PIVacu81Hok2aAbQw/0cua5FnPDyOgCr4b9DPrZoTpoxu1KXGqI3HnrSEd E5phuhxkGgqkVw8MgK6tTDSUahF283ExhgNYEp6tWJt+QoMv6y4bWctMi/3QWb41 2DO69Nad8oF9EldDBitO7UI+xQX0bkRF1yQNRk+a1cR/pQ30Rn1vMfaczuOEoNsp g+1MIXIM9svb/8+p53nc09o4mH09+/Y4RmAwLcTgaOfMft3rfzQ= -----END CERTIFICATE-----Generated at Sat Jun 13 15:55:16 2026 by rpki-client