$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft File: 778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft (raw, json) Hash identifier: tzynxraS7Ju3/5Grt1vRdDY49ANt9glFVfh/OjrYviQ= Subject key identifier: 8E:9C:AF:CC:8B:F4:A3:E6:61:AB:63:A1:10:41:C8:BE:FC:53:7B:21 Authority key identifier: 77:8D:09:4F:59:A4:A4:DE:EF:A7:C8:AA:DB:CA:9B:EF:4F:A4:24:BA Certificate issuer: /CN=778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA Certificate serial: 69CA2010BE91E97F9DB64EE407BFEC8F6ABEBE41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 05:36:50 +0000 Manifest this update: Tue 02 Jun 2026 05:31:50 +0000 Manifest next update: Wed 03 Jun 2026 07:41:50 +0000 Files and hashes: 1: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: YiGgOB+BsUIwFQzJbwEYZBUNvXOElouRLoHqR6mJHoc=) 2: 3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa (hash: ymmdsCmMaq7HWg5BTKlN2Tj5x/5jdnU3tBcu+76+hJ4=) 3: 778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl (hash: or87DiBF6YtkKAKhopQy+XipCRWmVCGs+zkVweek84k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 07:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ca:20:10:be:91:e9:7f:9d:b6:4e:e4:07:bf:ec:8f:6a:be:be:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA Validity Not Before: Jun 2 05:31:50 2026 GMT Not After : Jun 3 07:41:50 2026 GMT Subject: CN=8E9CAFCC8BF4A3E661AB63A11041C8BEFC537B21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cb:cb:ec:bd:d8:29:72:24:c6:9f:89:e6:e3: 26:f8:b1:73:95:d1:3b:79:25:8e:88:6f:0d:e1:fa: ce:9e:e7:9f:21:9f:c9:39:46:74:8d:de:ee:33:0e: 0a:30:ba:7f:5a:59:db:55:cb:2b:04:53:86:a1:32: 56:59:3c:0f:2d:2b:74:df:d7:d8:fd:71:81:78:25: 97:7c:47:91:e5:49:1b:64:0a:e0:80:dd:59:c1:7c: 6d:03:f5:04:6e:1a:74:a9:cd:74:1b:1c:cb:17:f0: 21:52:6f:a3:cc:fb:da:bd:f4:39:d0:3e:f6:38:f6: d0:6d:79:8c:d7:e3:2a:cc:c0:55:f1:c3:7c:06:fd: 5b:9c:5a:ff:de:ac:a1:24:50:3f:07:2e:bb:4d:dd: 1a:45:2e:a8:98:52:9e:7f:15:3e:1b:28:be:4e:82: d5:94:5d:06:fb:7a:f4:06:38:ef:35:9c:78:3c:76: 76:8a:c9:4b:64:55:3f:85:e8:1a:87:d2:18:0a:d5: 71:84:4b:8c:67:31:e1:07:9c:f4:f2:c4:5d:1b:6d: 6f:7b:48:5c:b0:25:10:e1:05:a1:76:01:1c:94:66: 63:c6:8e:89:50:f6:64:c3:3e:aa:28:d0:b5:73:03: 50:37:2b:6e:25:02:d2:fe:e8:65:80:fe:7b:82:13: be:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9C:AF:CC:8B:F4:A3:E6:61:AB:63:A1:10:41:C8:BE:FC:53:7B:21 X509v3 Authority Key Identifier: keyid:77:8D:09:4F:59:A4:A4:DE:EF:A7:C8:AA:DB:CA:9B:EF:4F:A4:24:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:82:d3:fb:42:1c:bb:4d:48:32:85:20:18:4a:4b:32:f9:bd: 39:de:9b:2f:0b:f3:cb:a6:89:53:32:5a:ef:66:86:ed:80:c5: 1c:31:16:e3:d7:fc:eb:67:db:9f:51:aa:f4:10:74:f8:40:73: 23:a4:27:d3:87:f5:ff:1f:e8:97:b1:6c:83:04:c8:05:ed:17: c0:49:2b:83:73:ab:eb:61:46:14:1c:c1:ee:89:1d:7c:23:a5: 8e:27:1c:42:72:56:2f:48:cf:51:97:14:0e:a0:ff:99:42:2c: 65:dc:84:be:25:73:c4:ee:b8:94:02:09:ab:9c:ae:15:3b:ff: 88:80:a9:ca:ce:62:03:f5:70:f8:48:bb:45:ce:fb:ab:0a:c5: 34:99:73:ee:e5:ed:6b:8d:8a:ae:89:1d:df:55:e3:2b:38:fc: e5:c5:44:a1:5a:79:7b:ff:42:a1:75:5d:18:c1:e0:9c:22:08: 89:7b:62:03:11:e1:a2:df:f6:af:a3:01:5c:e2:0b:17:d1:eb: 9d:2b:e9:ec:a5:db:b7:cb:8f:7b:01:bb:72:dd:f1:4a:f6:3a: ba:d0:9c:26:c3:23:fd:6f:6f:93:31:b9:28:a2:94:f8:7c:c2: de:88:d5:5a:4f:3c:21:c1:63:4c:3c:b2:aa:cb:b7:01:11:86: 73:3d:24:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacogEL6R6X+dtk7kB7/sj2q+vkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc4RDA5NEY1OUE0QTRERUVGQTdDOEFBREJDQTlCRUY0 RkE0MjRCQTAeFw0yNjA2MDIwNTMxNTBaFw0yNjA2MDMwNzQxNTBaMDMxMTAvBgNV BAMTKDhFOUNBRkNDOEJGNEEzRTY2MUFCNjNBMTEwNDFDOEJFRkM1MzdCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMy8vsvdgpciTGn4nm4yb4sXOV 0Tt5JY6Ibw3h+s6e558hn8k5RnSN3u4zDgowun9aWdtVyysEU4ahMlZZPA8tK3Tf 19j9cYF4JZd8R5HlSRtkCuCA3VnBfG0D9QRuGnSpzXQbHMsX8CFSb6PM+9q99DnQ PvY49tBteYzX4yrMwFXxw3wG/VucWv/erKEkUD8HLrtN3RpFLqiYUp5/FT4bKL5O gtWUXQb7evQGOO81nHg8dnaKyUtkVT+F6BqH0hgK1XGES4xnMeEHnPTyxF0bbW97 SFywJRDhBaF2ARyUZmPGjolQ9mTDPqoo0LVzA1A3K24lAtL+6GWA/nuCE751AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjpyvzIv0o+Zhq2OhEEHIvvxTeyEwHwYDVR0j BBgwFoAUd40JT1mkpN7vp8iq28qb70+kJLowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkYzAzNGYtMzgyMy00OGFmLTk1M2QtYWFhODczYjBmYjZhLzAvNzc4RDA5NEY1 OUE0QTRERUVGQTdDOEFBREJDQTlCRUY0RkE0MjRCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83NzhEMDk0RjU5QTRBNERFRUZBN0M4QUFEQkNBOUJFRjRGQTQy NEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvNzc4RDA5NEY1OUE0QTRERUVGQTdDOEFBREJDQTlC RUY0RkE0MjRCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKC0/tCHLtNSDKFIBhKSzL5vTnemy8L88um iVMyWu9mhu2AxRwxFuPX/Otn259RqvQQdPhAcyOkJ9OH9f8f6JexbIMEyAXtF8BJ K4Nzq+thRhQcwe6JHXwjpY4nHEJyVi9Iz1GXFA6g/5lCLGXchL4lc8TuuJQCCauc rhU7/4iAqcrOYgP1cPhIu0XO+6sKxTSZc+7l7WuNiq6JHd9V4ys4/OXFRKFaeXv/ QqF1XRjB4JwiCIl7YgMR4aLf9q+jAVziCxfR650r6eyl27fLj3sBu3Ld8Ur2OrrQ nCbDI/1vb5MxuSiilPh8wt6I1VpPPCHBY0w8sqrLtwERhnM9JPs= -----END CERTIFICATE-----Generated at Tue Jun 2 21:43:22 2026 by rpki-client