$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft File: B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft (raw, json) Hash identifier: dGNnZOVeBCEtKeXuyv2u6T/l6oAZ6IUnoQPo1EReXhU= Subject key identifier: 96:61:20:FB:C8:26:51:43:FB:7A:50:75:99:09:F5:50:93:A6:A4:C0 Authority key identifier: B7:8F:92:8B:08:0D:A5:B0:F0:37:D7:BE:CB:8B:94:1F:49:D5:BC:7A Certificate issuer: /CN=B78F928B080DA5B0F037D7BECB8B941F49D5BC7A Certificate serial: 64909E642F66D5BB3504FB180F4B5CB5FC6B7887 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft Manifest number: 0101 Signing time: Mon 09 Nov 2026 12:41:40 +0000 Manifest this update: Mon 09 Nov 2026 12:36:40 +0000 Manifest next update: Tue 10 Nov 2026 14:03:40 +0000 Files and hashes: 1: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: pNmag7DqpLNIaTSD2kV29A9NQgGNcDVD3R4gOpGFNMo=) 2: B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.crl (hash: NjithHwK1ggJ4of+Q0LEesSKn67YM8j2UuQvsaMsMSk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.crl rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:90:9e:64:2f:66:d5:bb:35:04:fb:18:0f:4b:5c:b5:fc:6b:78:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B78F928B080DA5B0F037D7BECB8B941F49D5BC7A Validity Not Before: Nov 9 12:36:40 2026 GMT Not After : Nov 10 14:03:40 2026 GMT Subject: CN=966120FBC8265143FB7A50759909F55093A6A4C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:d2:c4:c6:b1:c0:9c:e3:b3:ad:df:77:59: d0:fe:65:c4:03:e8:3a:9a:c2:d1:75:e2:db:60:e2: 3c:08:0a:9d:82:2f:68:00:a5:96:d5:f2:fb:03:26: c8:96:05:e5:61:68:81:34:3e:d8:58:91:e5:2f:c6: 1d:8c:5d:bd:0e:54:86:23:be:34:98:a5:db:01:d9: eb:22:74:fc:4a:d4:29:74:f0:10:3d:b5:0e:ae:45: d3:6c:69:0d:1e:98:2c:c2:a2:9c:9a:82:77:69:08: fd:51:92:5b:d5:24:39:e1:dd:ff:99:f8:0f:f3:99: 89:94:d9:ee:28:fb:ba:11:f5:bb:a7:a7:ba:fa:a9: 6e:66:0d:dc:41:41:01:f3:6d:f1:e9:f6:e5:e5:e9: 79:57:76:e0:fd:21:d2:19:e8:0a:41:d0:f6:2b:27: 1f:77:5c:da:0b:bd:bb:a6:f3:10:dd:c5:58:ac:f0: f8:2d:71:5f:04:69:42:fa:f9:34:2f:e2:4b:b8:d4: 7a:24:76:10:0b:d9:16:9e:0e:16:7a:de:8f:17:0c: fe:f3:67:eb:ef:73:5e:5d:87:f2:fb:1e:5d:29:c6: d3:ab:8c:73:eb:13:36:e1:7f:72:60:07:a1:27:99: 27:54:2d:9c:56:47:6e:d5:ec:15:12:14:a3:e6:8f: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:61:20:FB:C8:26:51:43:FB:7A:50:75:99:09:F5:50:93:A6:A4:C0 X509v3 Authority Key Identifier: keyid:B7:8F:92:8B:08:0D:A5:B0:F0:37:D7:BE:CB:8B:94:1F:49:D5:BC:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/B78F928B080DA5B0F037D7BECB8B941F49D5BC7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d4:74:50:93:65:01:b0:af:d3:e6:b0:2a:a9:de:57:10:11: 91:07:66:8c:0f:84:94:24:91:f4:d9:90:8c:0f:cd:fa:ea:16: c1:41:10:05:34:1e:c8:e9:df:cd:7b:ed:69:4d:3a:b9:3b:00: 68:ff:5b:63:6c:4e:b6:4a:f2:7b:01:cb:a1:87:1a:fc:dc:a7: 5d:ca:d2:b8:41:3c:8a:a3:d8:de:39:42:54:71:70:ce:4f:11: e7:40:16:f6:ec:83:44:ab:f2:11:b3:34:f1:ee:af:01:c8:99: e8:aa:3f:61:2e:0f:2c:7a:b6:e5:6f:d5:09:0c:f4:6e:ff:72: 45:2a:42:9c:fe:a9:4e:bf:e4:f1:93:b2:69:7a:68:9c:d0:55: fd:aa:7f:f4:e9:e2:00:25:ee:49:a2:ce:3f:1c:e2:4b:66:ab: 14:21:2f:11:74:f0:e6:60:5e:24:33:d6:de:f9:eb:37:27:58: 0b:59:6b:cb:d4:6c:cb:65:03:fd:52:26:64:9a:d6:82:05:c4: 19:f3:e7:e1:23:c1:74:b8:96:cf:7d:cb:3e:37:42:07:ef:8d: 29:8b:bc:d4:75:77:e4:32:56:72:2a:59:98:b1:62:5a:d7:c3: 08:f4:8d:88:5b:81:c6:34:dd:3c:dd:b6:a9:82:8e:b3:d8:50: 31:c2:0d:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJCeZC9m1bs1BPsYD0tctfxreIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc4RjkyOEIwODBEQTVCMEYwMzdEN0JFQ0I4Qjk0MUY0 OUQ1QkM3QTAeFw0yNjExMDkxMjM2NDBaFw0yNjExMTAxNDAzNDBaMDMxMTAvBgNV BAMTKDk2NjEyMEZCQzgyNjUxNDNGQjdBNTA3NTk5MDlGNTUwOTNBNkE0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ89LExrHAnOOzrd93WdD+ZcQD 6DqawtF14ttg4jwICp2CL2gApZbV8vsDJsiWBeVhaIE0PthYkeUvxh2MXb0OVIYj vjSYpdsB2esidPxK1Cl08BA9tQ6uRdNsaQ0emCzCopyagndpCP1RklvVJDnh3f+Z +A/zmYmU2e4o+7oR9bunp7r6qW5mDdxBQQHzbfHp9uXl6XlXduD9IdIZ6ApB0PYr Jx93XNoLvbum8xDdxVis8PgtcV8EaUL6+TQv4ku41HokdhAL2RaeDhZ63o8XDP7z Z+vvc15dh/L7Hl0pxtOrjHPrEzbhf3JgB6EnmSdULZxWR27V7BUSFKPmj7vPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlmEg+8gmUUP7elB1mQn1UJOmpMAwHwYDVR0j BBgwFoAUt4+SiwgNpbDwN9e+y4uUH0nVvHowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzJiZTRmMTgtY2VlZC00ZjIzLWEwYTQtZTI0ZTA0ZDMyMGQzLzAvQjc4RjkyOEIw ODBEQTVCMEYwMzdEN0JFQ0I4Qjk0MUY0OUQ1QkM3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzhGOTI4QjA4MERBNUIwRjAzN0Q3QkVDQjhCOTQxRjQ5RDVC QzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvQjc4RjkyOEIwODBEQTVCMEYwMzdEN0JFQ0I4Qjk0 MUY0OUQ1QkM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnUdFCTZQGwr9PmsCqp3lcQEZEHZowPhJQk kfTZkIwPzfrqFsFBEAU0Hsjp38177WlNOrk7AGj/W2NsTrZK8nsBy6GHGvzcp13K 0rhBPIqj2N45QlRxcM5PEedAFvbsg0Sr8hGzNPHurwHImeiqP2EuDyx6tuVv1QkM 9G7/ckUqQpz+qU6/5PGTsml6aJzQVf2qf/Tp4gAl7kmizj8c4ktmqxQhLxF08OZg XiQz1t756zcnWAtZa8vUbMtlA/1SJmSa1oIFxBnz5+EjwXS4ls99yz43QgfvjSmL vNR1d+QyVnIqWZixYlrXwwj0jYhbgcY03TzdtqmCjrPYUDHCDVE= -----END CERTIFICATE-----Generated at Mon Nov 9 18:51:17 2026 by rpki-client