$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft File: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft (raw, json) Hash identifier: YIhwlWIRjctCn+9WcDujMqU5Iz1vV2SdMCshgJP6eMs= Subject key identifier: 3B:24:BF:40:FC:58:B6:C7:BB:FE:EF:D6:B0:1C:18:CE:06:0B:F0:12 Authority key identifier: 78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA Certificate issuer: /CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Certificate serial: 359CE94460414104501944A8547DDA4D224CCFC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft Manifest number: F3 Signing time: Sun 01 Nov 2026 03:16:57 +0000 Manifest this update: Sun 01 Nov 2026 03:11:57 +0000 Manifest next update: Mon 02 Nov 2026 04:24:57 +0000 Files and hashes: 1: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl (hash: 8jIY+mqPCZgyid13equxdl9dMsXmqSYxVS+tABI348c=) 2: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 2BQf1MoYT0XGiyUxqcqKQM552NzemZjiZh/eJ1HL/Ow=) 3: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: wJR2nuwydbqFCTFbU0MKnXlorFv2QpV5ZLVXkfDfe78=) 4: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: ezj7o418kHVsUpxHI+JsvUw+jteTe5LJOavPTf4FP1A=) 5: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: +WPVozpZcn/3/eLncGOKTtGwOiKAcol7sdk9fs/XBJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 04:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9c:e9:44:60:41:41:04:50:19:44:a8:54:7d:da:4d:22:4c:cf:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Validity Not Before: Nov 1 03:11:57 2026 GMT Not After : Nov 2 04:24:57 2026 GMT Subject: CN=3B24BF40FC58B6C7BBFEEFD6B01C18CE060BF012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:8b:c7:9f:4b:cf:84:60:aa:d9:9c:e0:5a: cd:95:b2:1a:23:7c:0b:b9:07:3b:01:8c:86:36:4f: 24:47:a8:46:10:4e:2e:22:8a:cc:63:75:ae:ce:62: 3a:22:e7:9e:ad:84:70:11:c0:7c:c4:da:66:89:dd: d0:83:bb:9b:4c:b1:27:86:5a:ef:99:f1:a2:09:c1: 49:f6:e2:02:a8:ae:3d:01:16:a6:46:24:1d:5c:42: 3e:9e:83:d9:03:c5:ea:2d:e5:01:00:a2:e6:ad:ba: 13:ca:86:ae:a6:34:50:16:5c:c8:b3:36:26:a3:3c: 4d:22:96:c6:69:f8:a2:06:ed:48:f7:54:f4:77:33: 4a:5b:32:15:2d:5f:d2:07:46:07:03:9b:5e:e5:34: f7:e4:65:d6:14:09:b6:6a:9a:59:fb:b0:6b:1d:6b: d9:3f:c7:a7:cb:bc:83:0e:5a:ef:7e:24:32:b1:c7: 89:89:b4:b0:da:69:33:a7:33:51:c3:ca:83:cd:63: 55:a3:c2:96:78:b9:f9:1a:4f:f3:bf:5a:4f:0f:e6: ed:59:89:2b:12:46:b7:78:80:00:03:b8:f7:7f:a3: a9:6c:a0:c7:13:a8:71:27:44:f7:08:da:a0:af:5c: dd:ff:8c:f2:57:3d:37:e6:e4:d9:9f:cc:a4:2f:c5: 2b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:24:BF:40:FC:58:B6:C7:BB:FE:EF:D6:B0:1C:18:CE:06:0B:F0:12 X509v3 Authority Key Identifier: keyid:78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:38:99:8b:2e:79:0a:29:9c:ad:e0:56:a6:46:8a:48:c2:1a: fa:18:1e:4a:bc:72:7e:f5:67:10:c1:7d:81:12:52:15:a3:15: 6d:4b:e9:68:0b:81:41:b6:8c:47:a7:f4:9a:e3:9b:31:f4:c1: 93:a3:65:c4:77:90:aa:1b:70:6e:b9:e5:e0:78:e3:64:1a:ff: 04:9c:98:3c:6b:b2:3d:88:d5:6f:e9:24:fe:fe:62:7c:0b:2b: 5d:de:b3:90:09:d7:09:b6:5e:30:ac:12:80:c1:9b:18:15:5f: d5:b7:01:8f:7e:12:b3:e6:96:5a:a3:ea:e3:e9:7f:94:65:d7: bb:e4:11:77:47:06:0c:02:79:66:18:16:fb:ed:48:b5:b7:f4: 79:15:e8:84:a3:eb:03:8a:8f:73:43:be:02:a6:68:eb:c4:8c: 2a:f0:be:f7:2a:4d:df:d5:f3:06:cc:a4:5c:c8:74:93:29:36: 61:c0:d5:fc:ba:d9:08:ac:98:52:5e:b6:8f:21:3d:cf:c7:c6: ac:9c:ff:45:3c:77:a0:d6:62:cc:f4:ef:52:04:9b:51:c3:f4: 43:73:7b:69:f2:83:e7:ce:dd:a6:f8:26:37:50:95:fc:dd:13: ca:a3:fe:55:f7:c5:18:45:bb:bd:5b:f2:d4:b6:b5:be:5a:91: 90:a7:45:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZzpRGBBQQRQGUSoVH3aTSJMz8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJB RkY3MkJGQTAeFw0yNjExMDEwMzExNTdaFw0yNjExMDIwNDI0NTdaMDMxMTAvBgNV BAMTKDNCMjRCRjQwRkM1OEI2QzdCQkZFRUZENkIwMUMxOENFMDYwQkYwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWYvHn0vPhGCq2ZzgWs2Vshoj fAu5BzsBjIY2TyRHqEYQTi4iisxjda7OYjoi556thHARwHzE2maJ3dCDu5tMsSeG Wu+Z8aIJwUn24gKorj0BFqZGJB1cQj6eg9kDxeot5QEAouatuhPKhq6mNFAWXMiz NiajPE0ilsZp+KIG7Uj3VPR3M0pbMhUtX9IHRgcDm17lNPfkZdYUCbZqmln7sGsd a9k/x6fLvIMOWu9+JDKxx4mJtLDaaTOnM1HDyoPNY1WjwpZ4ufkaT/O/Wk8P5u1Z iSsSRrd4gAADuPd/o6lsoMcTqHEnRPcI2qCvXN3/jPJXPTfm5NmfzKQvxSszAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOyS/QPxYtse7/u/WsBwYzgYL8BIwHwYDVR0j BBgwFoAUeIxgHq03PgwQkV6z1dmfUq/3K/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZkNzIwZDUtYjdkNC00Mzk1LWEwNmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVB RDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJBRkY3MkJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODhDNjAxRUFEMzczRTBDMTA5MTVFQjNENUQ5OUY1MkFGRjcy QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlG NTJBRkY3MkJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw4mYsueQopnK3gVqZGikjCGvoYHkq8cn71 ZxDBfYESUhWjFW1L6WgLgUG2jEen9JrjmzH0wZOjZcR3kKobcG655eB442Qa/wSc mDxrsj2I1W/pJP7+YnwLK13es5AJ1wm2XjCsEoDBmxgVX9W3AY9+ErPmllqj6uPp f5Rl17vkEXdHBgwCeWYYFvvtSLW39HkV6ISj6wOKj3NDvgKmaOvEjCrwvvcqTd/V 8wbMpFzIdJMpNmHA1fy62QismFJeto8hPc/Hxqyc/0U8d6DWYsz071IEm1HD9ENz e2nyg+fO3ab4JjdQlfzdE8qj/lX3xRhFu71b8tS2tb5akZCnRT8= -----END CERTIFICATE-----Generated at Sun Nov 1 21:07:43 2026 by rpki-client