$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft File: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft (raw, json) Hash identifier: NjqK4w7kXRVSm849DURTJOBG8ahg3SprH8cyNiUVHes= Subject key identifier: 7F:22:8C:DA:34:68:3E:F7:E7:DF:8A:2E:85:07:B0:62:6A:FD:1C:16 Authority key identifier: 77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4 Certificate issuer: /CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4 Certificate serial: 2A1AA65FF5E0FABF01C317D3B10B1915057C8E14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 15:57:28 +0000 Manifest this update: Wed 02 Sep 2026 15:52:28 +0000 Manifest next update: Thu 03 Sep 2026 18:44:28 +0000 Files and hashes: 1: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: ccnKpMhAZ50WINER3EYQ3VYvFkNVbacY8s+OufsENRg=) 2: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: YndAlxaqXYkWW68P17cuw0iGsOCiRy+p2CjBviV7Rok=) 3: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl (hash: /eDKALsxEU08fEREgJK6Ooc1J4OVzpQB034qXW2DdDE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 18:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1a:a6:5f:f5:e0:fa:bf:01:c3:17:d3:b1:0b:19:15:05:7c:8e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4 Validity Not Before: Sep 2 15:52:28 2026 GMT Not After : Sep 3 18:44:28 2026 GMT Subject: CN=7F228CDA34683EF7E7DF8A2E8507B0626AFD1C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:6d:fd:c5:24:b3:af:7b:df:a0:31:30:63: 58:08:84:d4:b2:5f:0c:f9:33:44:39:55:c2:97:66: e7:31:b1:d1:d9:94:16:29:35:a2:ba:72:b0:20:65: 1d:c6:4c:9f:5d:13:c3:57:2c:13:ff:91:cc:4a:63: 97:6b:72:84:9b:7c:72:c7:c0:9c:5e:06:43:55:4a: 3a:d1:88:7f:99:a7:35:48:cd:64:ed:93:07:30:6e: 03:4c:af:af:5b:36:62:c8:27:ad:ab:67:6d:d2:99: 09:68:0b:79:54:27:8c:35:98:5c:59:94:f5:0f:7e: e1:6b:0a:bb:66:f7:9c:92:ef:55:d6:2d:4e:9f:98: 44:53:41:34:e7:fe:31:95:34:40:c1:c2:a4:25:6a: d3:a5:09:6e:ac:a0:12:b1:53:ba:7a:e9:5f:5e:2a: 8b:17:6d:76:bb:d8:df:3c:93:d1:df:d9:01:8a:5c: e2:12:78:a3:eb:b1:0b:a9:6e:bf:98:97:79:98:38: 6d:5e:91:55:1d:43:c8:ec:9a:96:17:e8:55:8f:99: 1d:6f:cf:4d:dc:92:90:cf:3f:4d:a7:46:5d:fd:7f: 86:3c:2e:c5:0b:de:54:d3:c6:87:af:94:54:d9:db: 0f:cf:9d:f1:d4:01:97:cd:f5:81:7f:d0:cc:62:0b: c0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:22:8C:DA:34:68:3E:F7:E7:DF:8A:2E:85:07:B0:62:6A:FD:1C:16 X509v3 Authority Key Identifier: keyid:77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:27:b1:63:1a:7f:88:e3:d8:07:b1:3b:3e:42:82:a0:22:42: 1c:3c:69:af:47:f2:8e:27:c3:e2:d5:b9:0e:c4:c4:e5:6d:76: ec:43:a1:6e:2c:c7:c1:e0:d6:fb:89:10:11:e6:b3:70:82:dc: 9b:84:f1:f8:ad:ac:7b:b5:b9:95:d5:ac:01:b7:ab:bd:7e:9a: e5:64:11:44:f6:8a:6e:4e:36:c8:b0:a3:7f:cb:9e:c2:13:4c: d4:cc:24:ec:c7:21:69:c9:53:51:0e:c3:81:c0:f0:d1:20:4d: c9:3a:02:51:ec:46:b8:8d:ce:9b:ef:73:48:d7:20:cf:fe:4b: 2e:f6:b7:1f:33:ec:14:e1:fc:cc:36:7e:54:87:86:b1:b6:3c: 05:fe:bd:30:9b:32:ea:c0:95:49:b9:cf:e5:67:41:a8:fd:a7: c7:d9:c2:82:b4:b1:f1:6a:d0:59:31:83:f6:86:ba:f4:52:91: 6f:8b:98:2c:59:bd:6f:ce:51:18:91:48:1b:51:d2:db:ac:b9: fa:9b:2c:3f:6a:26:4d:01:81:2e:c1:f9:14:72:80:c6:ce:24: db:52:37:f1:ec:e5:e0:50:ec:86:9f:30:68:28:d1:98:c7:b7: df:58:7a:0a:06:3d:1a:45:c9:f9:b9:3e:8d:56:aa:62:f2:3e: 05:e7:20:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhqmX/Xg+r8BwxfTsQsZFQV8jhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0MDNE QkQxRTJDNDAeFw0yNjA5MDIxNTUyMjhaFw0yNjA5MDMxODQ0MjhaMDMxMTAvBgNV BAMTKDdGMjI4Q0RBMzQ2ODNFRjdFN0RGOEEyRTg1MDdCMDYyNkFGRDFDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TG39xSSzr3vfoDEwY1gIhNSy Xwz5M0Q5VcKXZucxsdHZlBYpNaK6crAgZR3GTJ9dE8NXLBP/kcxKY5drcoSbfHLH wJxeBkNVSjrRiH+ZpzVIzWTtkwcwbgNMr69bNmLIJ62rZ23SmQloC3lUJ4w1mFxZ lPUPfuFrCrtm95yS71XWLU6fmERTQTTn/jGVNEDBwqQlatOlCW6soBKxU7p66V9e KosXbXa72N88k9Hf2QGKXOISeKPrsQupbr+Yl3mYOG1ekVUdQ8jsmpYX6FWPmR1v z03ckpDPP02nRl39f4Y8LsUL3lTTxoevlFTZ2w/PnfHUAZfN9YF/0MxiC8BfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfyKM2jRoPvfn34ouhQewYmr9HBYwHwYDVR0j BBgwFoAUd4pxuzyRNoxlbeuBjp20A9vR4sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhmNWJhNWUtMWY1Yy00Mjg0LTlhMTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIz QzkxMzY4QzY1NkRFQjgxOEU5REI0MDNEQkQxRTJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzhBNzFCQjNDOTEzNjhDNjU2REVCODE4RTlEQjQwM0RCRDFF MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0 MDNEQkQxRTJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcnsWMaf4jj2AexOz5CgqAiQhw8aa9H8o4n w+LVuQ7ExOVtduxDoW4sx8Hg1vuJEBHms3CC3JuE8fitrHu1uZXVrAG3q71+muVk EUT2im5ONsiwo3/LnsITTNTMJOzHIWnJU1EOw4HA8NEgTck6AlHsRriNzpvvc0jX IM/+Sy72tx8z7BTh/Mw2flSHhrG2PAX+vTCbMurAlUm5z+VnQaj9p8fZwoK0sfFq 0Fkxg/aGuvRSkW+LmCxZvW/OURiRSBtR0tusufqbLD9qJk0BgS7B+RRygMbOJNtS N/Hs5eBQ7IafMGgo0ZjHt99YegoGPRpFyfm5Po1WqmLyPgXnIIo= -----END CERTIFICATE-----Generated at Thu Sep 3 04:19:29 2026 by rpki-client