$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft File: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft (raw, json) Hash identifier: wfE3NFKnmPu0AfUE3stpAopatDaxaXSKO8MWZqcLDn4= Subject key identifier: F8:BA:2F:35:3D:03:C8:3E:50:8F:15:F8:17:A1:41:16:2F:D9:79:35 Authority key identifier: 77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4 Certificate issuer: /CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4 Certificate serial: 66C085692E497D760A772D48A43CD3F5A140DAC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft Manifest number: EC Signing time: Sun 25 Oct 2026 10:24:34 +0000 Manifest this update: Sun 25 Oct 2026 10:19:34 +0000 Manifest next update: Mon 26 Oct 2026 14:22:34 +0000 Files and hashes: 1: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: ccnKpMhAZ50WINER3EYQ3VYvFkNVbacY8s+OufsENRg=) 2: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl (hash: YEy3IdVjnWBhcA1bx7DxzIJOw1fFkKgMwUeH7wbPEXU=) 3: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: YndAlxaqXYkWW68P17cuw0iGsOCiRy+p2CjBviV7Rok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c0:85:69:2e:49:7d:76:0a:77:2d:48:a4:3c:d3:f5:a1:40:da:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4 Validity Not Before: Oct 25 10:19:34 2026 GMT Not After : Oct 26 14:22:34 2026 GMT Subject: CN=F8BA2F353D03C83E508F15F817A141162FD97935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:94:aa:b1:00:f4:e5:ce:6b:83:e0:96:fe: 29:6e:f6:b8:f7:f9:b5:13:f8:f0:a3:e3:1e:3d:6c: f9:22:ab:7c:72:41:f3:1f:05:10:10:c2:3f:bd:3e: 12:12:bb:ea:3e:4a:1f:0a:22:4a:ac:59:1f:67:38: ef:14:47:0b:ec:3e:b6:e7:4e:a2:76:15:9c:cc:e6: 32:fe:f3:c2:65:d9:c9:17:36:7e:d0:56:25:67:b5: 1d:6f:d9:01:66:63:f9:f9:14:85:f4:7c:6c:6b:f8: 2b:06:9c:a3:ac:18:eb:25:cc:01:f2:26:d2:1f:15: f8:5e:ee:ea:8b:7f:7c:df:79:75:5f:e0:a6:69:8f: 9d:9c:85:c9:64:7d:14:61:00:c9:1f:d5:fc:18:64: ac:9a:fa:6a:31:6f:b0:75:fc:32:17:c0:33:82:3c: a7:55:50:72:5d:f5:f6:bc:0c:af:c1:2c:43:63:f2: 91:4a:1f:34:d2:96:b9:90:b5:cd:21:46:83:e9:0c: 8d:f0:da:79:70:f8:8b:22:d2:c1:9e:68:5c:53:93: cf:ca:35:ae:15:d9:41:51:71:41:4c:ca:2d:4d:82: 55:fc:89:0d:a2:e6:36:38:60:17:9a:a1:07:64:ef: 4d:f5:dd:93:43:9d:a0:4e:f9:92:e2:75:d9:9c:62: 47:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BA:2F:35:3D:03:C8:3E:50:8F:15:F8:17:A1:41:16:2F:D9:79:35 X509v3 Authority Key Identifier: keyid:77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:82:1c:ee:b3:f2:fb:38:86:a6:43:28:84:9e:78:e5:cf:b5: 41:df:13:24:37:70:3e:d0:8e:f0:cf:99:e0:ad:cc:8a:76:3f: ce:b4:50:dc:14:7e:37:e5:76:57:25:8d:a5:dd:09:94:53:58: b0:2f:b7:49:48:01:df:1f:76:0f:2c:35:fe:bb:74:9b:ff:03: 8e:c6:1b:00:b0:22:5b:9b:ea:76:2d:32:3d:fa:b7:a9:4f:42: 79:ec:3e:d5:00:1a:c4:30:f1:2f:55:46:c5:89:46:d2:cc:18: e9:14:58:1f:27:6d:c4:d7:d8:32:27:85:27:34:6d:25:3e:49: 20:fa:7f:cf:34:f1:1d:66:a1:c9:61:89:ce:4a:68:62:5c:83: de:d2:ab:ad:bb:8a:9f:94:ce:55:84:fb:8a:1e:20:64:13:17: 4d:41:cf:6d:fb:ec:ee:ba:99:0b:79:da:29:b4:f2:52:da:93: f2:ef:28:05:f7:0d:b5:5c:74:b8:da:48:10:77:00:a1:6e:23: 34:b7:f0:b8:7b:0a:18:dd:90:d2:63:7e:7b:56:09:68:91:b6: 53:6a:03:b0:79:13:f8:59:b3:fe:13:b3:8d:1f:d9:c1:2b:4b: e8:72:09:c2:bb:26:e4:59:e1:15:0a:e0:fb:1a:c3:52:ff:2a: 94:4e:e9:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsCFaS5JfXYKdy1IpDzT9aFA2sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0MDNE QkQxRTJDNDAeFw0yNjEwMjUxMDE5MzRaFw0yNjEwMjYxNDIyMzRaMDMxMTAvBgNV BAMTKEY4QkEyRjM1M0QwM0M4M0U1MDhGMTVGODE3QTE0MTE2MkZEOTc5MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XJSqsQD05c5rg+CW/ilu9rj3 +bUT+PCj4x49bPkiq3xyQfMfBRAQwj+9PhISu+o+Sh8KIkqsWR9nOO8URwvsPrbn TqJ2FZzM5jL+88Jl2ckXNn7QViVntR1v2QFmY/n5FIX0fGxr+CsGnKOsGOslzAHy JtIfFfhe7uqLf3zfeXVf4KZpj52chclkfRRhAMkf1fwYZKya+moxb7B1/DIXwDOC PKdVUHJd9fa8DK/BLENj8pFKHzTSlrmQtc0hRoPpDI3w2nlw+Isi0sGeaFxTk8/K Na4V2UFRcUFMyi1NglX8iQ2i5jY4YBeaoQdk70313ZNDnaBO+ZLiddmcYkfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+LovNT0DyD5QjxX4F6FBFi/ZeTUwHwYDVR0j BBgwFoAUd4pxuzyRNoxlbeuBjp20A9vR4sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhmNWJhNWUtMWY1Yy00Mjg0LTlhMTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIz QzkxMzY4QzY1NkRFQjgxOEU5REI0MDNEQkQxRTJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzhBNzFCQjNDOTEzNjhDNjU2REVCODE4RTlEQjQwM0RCRDFF MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0 MDNEQkQxRTJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyCHO6z8vs4hqZDKISeeOXPtUHfEyQ3cD7Q jvDPmeCtzIp2P860UNwUfjfldlcljaXdCZRTWLAvt0lIAd8fdg8sNf67dJv/A47G GwCwIlub6nYtMj36t6lPQnnsPtUAGsQw8S9VRsWJRtLMGOkUWB8nbcTX2DInhSc0 bSU+SSD6f8808R1moclhic5KaGJcg97Sq627ip+UzlWE+4oeIGQTF01Bz2377O66 mQt52im08lLak/LvKAX3DbVcdLjaSBB3AKFuIzS38Lh7ChjdkNJjfntWCWiRtlNq A7B5E/hZs/4Ts40f2cErS+hyCcK7JuRZ4RUK4Psaw1L/KpRO6dQ= -----END CERTIFICATE-----Generated at Sun Oct 25 14:24:33 2026 by rpki-client