$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft File: 766F922EBE6693B4C229A00631F97A88C3ED7E42.mft (raw, json) Hash identifier: RFcoDdogxnDgzR1enB43WyU2K5MWmENS7XdtKI49HUY= Subject key identifier: 1F:BD:9E:AF:FD:46:38:01:9F:76:D8:3D:7C:EA:A3:94:11:5B:8E:71 Authority key identifier: 76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42 Certificate issuer: /CN=766F922EBE6693B4C229A00631F97A88C3ED7E42 Certificate serial: 5A518936A6C9766A71348848F4048D7024278D3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 01:40:04 +0000 Manifest this update: Thu 03 Sep 2026 01:35:04 +0000 Manifest next update: Fri 04 Sep 2026 05:21:04 +0000 Files and hashes: 1: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: bC6bKRWDg0Wg0P6AUiYBKd/mAgFiPv8qaxAU9zI3St0=) 2: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: CcTYmyX7VKsqrze+tnxJ2xXPrQIZB/9bxrpZpXXFkew=) 3: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: jV9xZ4rWaJsfRT1YZup0w1zHla32pmpYrsEdtDLU9Uk=) 4: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: TPWfaDGF6n/Mep4wo2U4Mey+BVeKel6FmH9UjXBlRwE=) 5: 766F922EBE6693B4C229A00631F97A88C3ED7E42.crl (hash: 6VxZggh4kSrwD8NJcVfYuOvNC22UcqqgTQ1B2ZZEWB4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 05:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:51:89:36:a6:c9:76:6a:71:34:88:48:f4:04:8d:70:24:27:8d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=766F922EBE6693B4C229A00631F97A88C3ED7E42 Validity Not Before: Sep 3 01:35:04 2026 GMT Not After : Sep 4 05:21:04 2026 GMT Subject: CN=1FBD9EAFFD4638019F76D83D7CEAA394115B8E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:6b:a5:b1:6b:8f:a1:a7:5f:d9:94:04:be: 89:04:f6:b3:9a:b8:15:6e:d3:ad:63:ef:45:8f:ad: 9e:07:b9:ff:84:86:13:5a:97:0d:43:36:84:03:ff: 7e:4c:96:0e:cc:52:59:9a:20:be:86:14:e2:ed:19: e5:a6:76:ee:26:56:1a:96:a8:4f:2e:2a:f8:16:35: 79:2e:92:fe:af:49:30:93:d6:97:76:31:35:77:ef: 2f:ee:14:7b:2b:b6:67:21:ed:20:c2:8a:5c:59:d2: f2:de:cb:57:94:0c:6a:3c:1e:a3:2b:0c:ef:b4:e3: 00:8b:fe:f5:6b:17:48:65:16:22:80:c3:c6:55:ad: 5a:01:07:17:b0:db:2f:6a:17:5d:86:ab:4f:3d:eb: e8:f4:0b:0c:c6:3f:2a:40:79:01:eb:27:51:c5:70: ca:fa:6c:60:3c:3a:e7:1f:37:5f:29:60:e0:82:71: 0a:eb:b7:9c:c1:a8:7b:7c:a4:60:0d:ec:ea:2d:a5: 38:44:ba:b9:a9:aa:ac:98:b1:21:77:d1:63:6f:65: e7:d1:55:7f:e5:21:d7:ad:e7:26:33:5f:f0:1a:3e: 63:0b:5b:35:2f:af:22:2d:54:d4:61:4d:77:b8:89: 76:a6:93:df:8b:67:f8:b9:ba:82:c0:23:3e:74:a2: 91:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BD:9E:AF:FD:46:38:01:9F:76:D8:3D:7C:EA:A3:94:11:5B:8E:71 X509v3 Authority Key Identifier: keyid:76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:1b:1c:49:b6:ce:ab:bc:0a:ce:2f:ed:3d:79:fb:4c:12:3a: f4:9a:ab:f9:fe:fc:b9:c7:8a:32:16:ea:84:00:98:d8:c5:76: a1:84:17:b3:d8:62:b9:9e:e5:02:70:bc:64:c5:e7:eb:8d:92: e1:64:e7:7f:9a:a3:ae:42:ff:8f:22:c0:80:ef:cc:19:2c:18: 4e:e2:51:17:ae:0e:51:b4:65:e4:82:76:50:cd:41:65:78:30: 39:95:0e:de:73:c4:85:3e:29:35:1c:87:72:31:9b:f1:f5:88: cd:ab:dd:88:8a:cd:00:90:e1:78:c9:fb:72:c2:3a:d5:e3:34: 24:71:10:91:56:9f:35:a9:17:d9:89:5c:2f:8e:23:51:16:fa: 16:ed:32:63:d4:91:e1:2a:8e:a9:ee:67:24:23:fb:c4:f4:60: 9f:0e:e1:a4:97:7e:c8:fd:56:3d:92:f5:73:6e:03:00:0c:14: 60:d1:a0:79:c9:28:ac:d0:48:34:dc:2d:69:c6:cf:04:0a:8e: f5:4a:87:37:27:aa:35:74:82:4b:57:53:6c:e6:d0:13:a5:cd: 8d:d7:ae:63:bb:17:4b:61:3a:5e:ab:a7:50:cf:03:19:4f:1e: 2a:d7:43:fb:89:fd:0c:76:64:c3:86:fa:bc:c5:ee:05:b8:22: b6:d7:dd:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlGJNqbJdmpxNIhI9ASNcCQnjT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY2RjkyMkVCRTY2OTNCNEMyMjlBMDA2MzFGOTdBODhD M0VEN0U0MjAeFw0yNjA5MDMwMTM1MDRaFw0yNjA5MDQwNTIxMDRaMDMxMTAvBgNV BAMTKDFGQkQ5RUFGRkQ0NjM4MDE5Rjc2RDgzRDdDRUFBMzk0MTE1QjhFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkWulsWuPoadf2ZQEvokE9rOa uBVu061j70WPrZ4Huf+EhhNalw1DNoQD/35Mlg7MUlmaIL6GFOLtGeWmdu4mVhqW qE8uKvgWNXkukv6vSTCT1pd2MTV37y/uFHsrtmch7SDCilxZ0vLey1eUDGo8HqMr DO+04wCL/vVrF0hlFiKAw8ZVrVoBBxew2y9qF12Gq0896+j0CwzGPypAeQHrJ1HF cMr6bGA8OucfN18pYOCCcQrrt5zBqHt8pGAN7OotpThEurmpqqyYsSF30WNvZefR VX/lIdet5yYzX/AaPmMLWzUvryItVNRhTXe4iXamk9+LZ/i5uoLAIz50opHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH72er/1GOAGfdtg9fOqjlBFbjnEwHwYDVR0j BBgwFoAUdm+SLr5mk7TCKaAGMfl6iMPtfkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3ODhiNGEtZDQ1MS00OWZiLWI3Y2QtNzE5ODEwODcwZjFhLzAvNzY2RjkyMkVC RTY2OTNCNEMyMjlBMDA2MzFGOTdBODhDM0VEN0U0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NjZGOTIyRUJFNjY5M0I0QzIyOUEwMDYzMUY5N0E4OEMzRUQ3 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvNzY2RjkyMkVCRTY2OTNCNEMyMjlBMDA2MzFGOTdB ODhDM0VEN0U0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgbHEm2zqu8Cs4v7T15+0wSOvSaq/n+/LnH ijIW6oQAmNjFdqGEF7PYYrme5QJwvGTF5+uNkuFk53+ao65C/48iwIDvzBksGE7i UReuDlG0ZeSCdlDNQWV4MDmVDt5zxIU+KTUch3Ixm/H1iM2r3YiKzQCQ4XjJ+3LC OtXjNCRxEJFWnzWpF9mJXC+OI1EW+hbtMmPUkeEqjqnuZyQj+8T0YJ8O4aSXfsj9 Vj2S9XNuAwAMFGDRoHnJKKzQSDTcLWnGzwQKjvVKhzcnqjV0gktXU2zm0BOlzY3X rmO7F0thOl6rp1DPAxlPHirXQ/uJ/Qx2ZMOG+rzF7gW4IrbX3YI= -----END CERTIFICATE-----Generated at Thu Sep 3 18:07:22 2026 by rpki-client