$ rpki-client -vvf rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft File: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft (raw, json) Hash identifier: 79Q4gLNnag4n5B/KPQSfTZRYfbD3g0nYIutTlc9CSyo= Subject key identifier: 95:8C:75:3B:4B:7F:B4:A0:F1:E8:5E:2D:A2:05:D1:B1:1C:60:49:9C Authority key identifier: 77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4 Certificate issuer: /CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4 Certificate serial: 2127B3F5A3ED3798AF245C03F37378A77804285F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft Manifest number: 43 Signing time: Sat 20 Jun 2026 03:18:47 +0000 Manifest this update: Sat 20 Jun 2026 03:13:47 +0000 Manifest next update: Sun 21 Jun 2026 06:45:47 +0000 Files and hashes: 1: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: ccnKpMhAZ50WINER3EYQ3VYvFkNVbacY8s+OufsENRg=) 2: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: YndAlxaqXYkWW68P17cuw0iGsOCiRy+p2CjBviV7Rok=) 3: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl (hash: 3UGXCwrKLoy+XOAwYeI7mDPy4+REgnf84yqtLVlI5Fs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:27:b3:f5:a3:ed:37:98:af:24:5c:03:f3:73:78:a7:78:04:28:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4 Validity Not Before: Jun 20 03:13:47 2026 GMT Not After : Jun 21 06:45:47 2026 GMT Subject: CN=958C753B4B7FB4A0F1E85E2DA205D1B11C60499C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:7e:08:eb:81:53:e6:ac:e2:99:09:14:cd: 6f:0b:ac:d2:2b:e8:bf:aa:50:ff:b9:2c:dc:0d:04: fa:15:86:31:62:fc:6d:9a:b2:27:d7:c0:12:76:8f: 68:64:15:25:ef:19:02:c8:e4:34:fd:70:c7:1d:cb: ce:81:99:9d:ac:51:3a:4d:74:df:2b:b5:e9:a0:26: d8:02:26:37:af:98:d0:1f:42:80:be:7b:be:4f:d9: ea:5c:57:fc:af:14:76:f9:37:78:a0:ff:79:ed:e0: 29:0a:8b:13:cf:a0:56:0f:f3:d8:8c:63:69:00:84: 88:b2:f7:ce:2f:50:37:64:97:82:bf:ae:a5:b1:a4: 0d:53:da:af:89:1f:ba:52:31:6b:80:c9:95:9c:9f: d0:3e:21:53:5f:a7:53:92:c3:5b:c3:dd:40:93:3d: 3c:ea:aa:c9:f2:66:53:c3:94:08:97:fd:b8:a2:25: 57:c1:e8:73:96:24:28:d3:11:53:59:2a:47:26:64: 92:b2:24:c9:20:1f:16:ef:56:04:7d:af:44:2f:8d: 5a:d3:1f:5c:8e:4c:23:c3:c4:52:cb:8f:9e:05:ad: 28:b1:6e:7e:bd:22:39:db:eb:3f:6a:4d:99:ce:72: 8c:0d:7a:9e:d0:21:55:6e:ed:95:a7:72:65:4c:33: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8C:75:3B:4B:7F:B4:A0:F1:E8:5E:2D:A2:05:D1:B1:1C:60:49:9C X509v3 Authority Key Identifier: keyid:77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:07:4f:cd:a2:25:cd:3b:b8:25:e0:ac:c0:14:28:3d:29:b7: 70:5e:73:ba:bd:6d:58:a4:ae:d8:5c:c4:9f:42:70:ac:e6:c2: 46:0c:08:e5:eb:ef:20:33:a0:aa:e3:b3:60:05:74:b8:bb:a2: 7c:e6:18:c5:55:8e:14:1c:1e:9c:80:96:9b:d6:47:76:65:af: f5:47:c0:e2:93:7d:32:41:6f:50:15:bd:dd:12:54:e7:59:d8: d0:9a:d9:bf:5a:4b:bf:1d:e9:1f:79:fb:b4:2b:d7:90:f4:70: 0e:c0:23:58:65:1b:2f:31:bc:02:b2:44:91:bb:08:ad:b4:0b: 58:4f:9d:a7:c9:bc:98:69:22:86:a5:67:98:f2:bb:8f:ca:2f: 2a:dc:e8:ab:00:27:30:e6:9d:c0:ad:53:f7:4b:40:2b:f4:d5: 13:d0:b1:b8:92:fb:17:21:9e:17:66:11:83:61:6a:4b:01:28: 59:86:71:a0:25:1c:3d:fe:8b:88:c7:94:39:7a:73:8a:08:b3: b7:57:36:00:66:2a:4a:ea:22:1f:85:25:0c:9c:95:54:4f:10: 93:67:6e:12:78:52:29:4c:fd:bc:d0:62:98:13:82:f4:4b:8c: 90:19:d7:af:f4:50:10:64:b6:ad:a6:7f:2f:27:65:c3:59:fe: de:e2:41:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISez9aPtN5ivJFwD83N4p3gEKF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0MDNE QkQxRTJDNDAeFw0yNjA2MjAwMzEzNDdaFw0yNjA2MjEwNjQ1NDdaMDMxMTAvBgNV BAMTKDk1OEM3NTNCNEI3RkI0QTBGMUU4NUUyREEyMDVEMUIxMUM2MDQ5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ3H4I64FT5qzimQkUzW8LrNIr 6L+qUP+5LNwNBPoVhjFi/G2asifXwBJ2j2hkFSXvGQLI5DT9cMcdy86BmZ2sUTpN dN8rtemgJtgCJjevmNAfQoC+e75P2epcV/yvFHb5N3ig/3nt4CkKixPPoFYP89iM Y2kAhIiy984vUDdkl4K/rqWxpA1T2q+JH7pSMWuAyZWcn9A+IVNfp1OSw1vD3UCT PTzqqsnyZlPDlAiX/biiJVfB6HOWJCjTEVNZKkcmZJKyJMkgHxbvVgR9r0QvjVrT H1yOTCPDxFLLj54FrSixbn69Ijnb6z9qTZnOcowNep7QIVVu7ZWncmVMM2DtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlYx1O0t/tKDx6F4togXRsRxgSZwwHwYDVR0j BBgwFoAUd4pxuzyRNoxlbeuBjp20A9vR4sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhmNWJhNWUtMWY1Yy00Mjg0LTlhMTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIz QzkxMzY4QzY1NkRFQjgxOEU5REI0MDNEQkQxRTJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzhBNzFCQjNDOTEzNjhDNjU2REVCODE4RTlEQjQwM0RCRDFF MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0 MDNEQkQxRTJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUHT82iJc07uCXgrMAUKD0pt3Bec7q9bVik rthcxJ9CcKzmwkYMCOXr7yAzoKrjs2AFdLi7onzmGMVVjhQcHpyAlpvWR3Zlr/VH wOKTfTJBb1AVvd0SVOdZ2NCa2b9aS78d6R95+7Qr15D0cA7AI1hlGy8xvAKyRJG7 CK20C1hPnafJvJhpIoalZ5jyu4/KLyrc6KsAJzDmncCtU/dLQCv01RPQsbiS+xch nhdmEYNhaksBKFmGcaAlHD3+i4jHlDl6c4oIs7dXNgBmKkrqIh+FJQyclVRPEJNn bhJ4UilM/bzQYpgTgvRLjJAZ16/0UBBktq2mfy8nZcNZ/t7iQYU= -----END CERTIFICATE-----Generated at Sat Jun 20 09:34:19 2026 by rpki-client