$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft File: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft (raw, json) Hash identifier: /Xvn/c0zpvP4QeePxhgn+awXHYVeba8mFFttTo43tPQ= Subject key identifier: 27:14:D4:9C:D6:1D:62:A1:8B:F2:80:8F:E4:67:35:92:04:21:4C:38 Authority key identifier: 78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA Certificate issuer: /CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Certificate serial: 5156273C30A98807B8B10CDB57B50659A80E1191 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft Manifest number: F2 Signing time: Sat 31 Oct 2026 10:59:20 +0000 Manifest this update: Sat 31 Oct 2026 10:54:20 +0000 Manifest next update: Sun 01 Nov 2026 11:12:20 +0000 Files and hashes: 1: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: wJR2nuwydbqFCTFbU0MKnXlorFv2QpV5ZLVXkfDfe78=) 2: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl (hash: dkvrp4fVOAfpqt2tPz3xFxTZxF52Zfb4tIwbpBcImOs=) 3: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: +WPVozpZcn/3/eLncGOKTtGwOiKAcol7sdk9fs/XBJg=) 4: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: ezj7o418kHVsUpxHI+JsvUw+jteTe5LJOavPTf4FP1A=) 5: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 2BQf1MoYT0XGiyUxqcqKQM552NzemZjiZh/eJ1HL/Ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 11:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:56:27:3c:30:a9:88:07:b8:b1:0c:db:57:b5:06:59:a8:0e:11:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Validity Not Before: Oct 31 10:54:20 2026 GMT Not After : Nov 1 11:12:20 2026 GMT Subject: CN=2714D49CD61D62A18BF2808FE467359204214C38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:c4:ad:bc:88:54:6d:d1:ea:d1:ec:89:06: c0:23:b8:2a:a9:56:72:39:85:26:5b:d6:64:85:8a: 79:7e:d4:1c:e1:63:75:4c:8b:b0:36:6d:6d:01:78: a8:9b:85:bb:51:3e:04:45:ba:b4:b5:48:b3:b9:38: bd:12:2f:15:e7:97:2d:a2:b6:90:f5:64:77:ea:f2: c9:f0:ec:5e:3f:1b:6b:df:0f:d5:b8:7c:c0:34:d1: e1:4a:65:b8:2f:26:93:74:04:52:8f:b3:82:94:eb: 9e:5e:d0:8c:72:6a:4a:a2:43:a6:f3:d3:0e:4c:c5: 88:c5:c4:db:58:01:e5:26:e6:ea:e2:1e:dd:84:14: 80:d1:a6:94:0a:8b:d0:c1:0b:3e:f8:fd:6f:93:95: 76:5c:59:1c:6b:c6:c8:11:89:15:59:99:b4:64:e7: 4c:a5:e0:f5:7b:1a:2f:1a:08:d0:f5:70:d9:ba:78: 68:8c:46:eb:4c:c4:2d:ed:0c:7b:07:8a:ed:07:85: 97:a4:4a:c7:98:83:ca:9f:e7:59:71:bd:31:f4:be: b4:12:c6:ea:7d:f9:12:78:78:48:d1:22:86:c1:15: 20:73:1a:5f:e6:7c:eb:c9:9a:6d:22:05:18:67:43: 89:20:e7:c9:84:ca:8f:32:4c:87:6f:1b:e8:19:65: 9b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:14:D4:9C:D6:1D:62:A1:8B:F2:80:8F:E4:67:35:92:04:21:4C:38 X509v3 Authority Key Identifier: keyid:78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:39:68:7d:dd:ad:3b:1a:02:88:27:84:ef:18:34:be:07:a5: 40:39:80:24:df:19:09:96:72:81:af:84:e5:bf:a4:dd:80:e5: 54:26:06:d6:bb:08:77:af:5f:8a:3d:21:07:ad:f8:37:ab:45: 11:86:33:b1:61:80:14:b5:fa:01:99:67:54:d7:40:1e:4f:c1: 35:58:2c:ce:30:3c:1e:b2:69:66:47:5b:a2:76:88:d3:19:e8: b3:55:9f:7a:6e:cb:59:f0:b9:3b:fa:ef:14:ea:d4:50:3c:65: 6e:8a:cf:a6:6e:2d:f0:2e:9a:b1:39:bb:e0:e6:d5:79:9e:79: df:dc:da:20:5a:24:be:27:78:ae:7a:c9:be:9b:0e:25:b3:21: 1d:6d:af:88:45:96:f4:c0:4d:25:dd:f7:2d:a5:71:04:a5:ef: d7:02:70:fc:f5:0c:8c:7f:8c:48:be:bb:61:85:44:02:c8:f9: 5b:9f:e6:4c:9a:f3:52:d1:e0:31:6f:ce:51:27:27:04:ed:6c: d9:b6:ab:d5:12:9b:eb:0c:85:9f:cc:3c:72:b1:9f:87:d5:4d: fd:18:26:1b:98:88:88:ce:f0:99:d4:19:2a:5d:f4:16:2d:3c: 01:7e:fc:42:fe:3d:28:23:fc:75:3a:ed:a7:72:c0:f9:ee:68: 3e:4a:71:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUVYnPDCpiAe4sQzbV7UGWagOEZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJB RkY3MkJGQTAeFw0yNjEwMzExMDU0MjBaFw0yNjExMDExMTEyMjBaMDMxMTAvBgNV BAMTKDI3MTRENDlDRDYxRDYyQTE4QkYyODA4RkU0NjczNTkyMDQyMTRDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10sStvIhUbdHq0eyJBsAjuCqp VnI5hSZb1mSFinl+1BzhY3VMi7A2bW0BeKibhbtRPgRFurS1SLO5OL0SLxXnly2i tpD1ZHfq8snw7F4/G2vfD9W4fMA00eFKZbgvJpN0BFKPs4KU655e0IxyakqiQ6bz 0w5MxYjFxNtYAeUm5uriHt2EFIDRppQKi9DBCz74/W+TlXZcWRxrxsgRiRVZmbRk 50yl4PV7Gi8aCND1cNm6eGiMRutMxC3tDHsHiu0HhZekSseYg8qf51lxvTH0vrQS xup9+RJ4eEjRIobBFSBzGl/mfOvJmm0iBRhnQ4kg58mEyo8yTIdvG+gZZZsTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJxTUnNYdYqGL8oCP5Gc1kgQhTDgwHwYDVR0j BBgwFoAUeIxgHq03PgwQkV6z1dmfUq/3K/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZkNzIwZDUtYjdkNC00Mzk1LWEwNmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVB RDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJBRkY3MkJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODhDNjAxRUFEMzczRTBDMTA5MTVFQjNENUQ5OUY1MkFGRjcy QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlG NTJBRkY3MkJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQ5aH3drTsaAognhO8YNL4HpUA5gCTfGQmW coGvhOW/pN2A5VQmBta7CHevX4o9IQet+DerRRGGM7FhgBS1+gGZZ1TXQB5PwTVY LM4wPB6yaWZHW6J2iNMZ6LNVn3puy1nwuTv67xTq1FA8ZW6Kz6ZuLfAumrE5u+Dm 1Xmeed/c2iBaJL4neK56yb6bDiWzIR1tr4hFlvTATSXd9y2lcQSl79cCcPz1DIx/ jEi+u2GFRALI+Vuf5kya81LR4DFvzlEnJwTtbNm2q9USm+sMhZ/MPHKxn4fVTf0Y JhuYiIjO8JnUGSpd9BYtPAF+/EL+PSgj/HU67adywPnuaD5KcT4= -----END CERTIFICATE-----Generated at Sat Oct 31 21:56:45 2026 by rpki-client