$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft File: 778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft (raw, json) Hash identifier: ASV5DC5yZ1Zrm/mKyJBFnr+d+nlbsW9ZOJijf8cwjJ0= Subject key identifier: DA:D3:FD:BA:C0:A1:D0:8D:37:FC:7F:38:BD:31:43:43:F2:21:5D:DA Authority key identifier: 77:8D:09:4F:59:A4:A4:DE:EF:A7:C8:AA:DB:CA:9B:EF:4F:A4:24:BA Certificate issuer: /CN=778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA Certificate serial: 347411A3E6393D826BCCDA14743C2D572B521073 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 21:05:01 +0000 Manifest this update: Wed 16 Sep 2026 21:00:01 +0000 Manifest next update: Thu 17 Sep 2026 21:39:01 +0000 Files and hashes: 1: 778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl (hash: mIXPVKwm6Sgy/DKsuLeDwsJ+hDBqVnoh0O2VKUeoIQ4=) 2: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: YiGgOB+BsUIwFQzJbwEYZBUNvXOElouRLoHqR6mJHoc=) 3: 3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa (hash: ymmdsCmMaq7HWg5BTKlN2Tj5x/5jdnU3tBcu+76+hJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:74:11:a3:e6:39:3d:82:6b:cc:da:14:74:3c:2d:57:2b:52:10:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA Validity Not Before: Sep 16 21:00:01 2026 GMT Not After : Sep 17 21:39:01 2026 GMT Subject: CN=DAD3FDBAC0A1D08D37FC7F38BD314343F2215DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ee:ec:b3:83:22:e2:19:95:e1:a6:79:84:ac: c8:1e:6a:22:e6:a4:20:08:23:71:9b:ff:2e:de:f2: 25:dc:7f:ac:b4:56:4b:17:c5:19:4c:4e:ab:af:99: d8:3d:aa:e6:ca:e5:e3:de:3a:ca:e0:32:b9:72:d7: 9e:da:b0:5f:8f:94:50:8f:00:fa:fc:25:bf:f3:fd: b2:62:25:64:f2:50:44:bf:ab:c1:da:72:ab:9d:90: 48:1d:29:9a:24:26:47:f4:57:05:ea:6b:e9:8f:cc: 59:67:25:12:54:23:42:4c:b5:0c:cf:71:71:2f:66: d4:db:2d:3b:ef:0d:7c:9c:9f:14:e1:ce:f7:90:f1: 3f:44:c6:81:c9:d6:40:6f:15:38:12:bc:94:54:a2: f5:b5:22:ef:7e:ae:93:ac:50:20:a5:6e:f9:94:ff: 50:26:17:a2:1d:c9:1b:c2:64:79:af:c7:c7:4f:dd: 5c:ce:d4:e7:19:9e:2e:53:fc:27:ea:bc:ad:ef:42: a8:95:34:65:ef:7c:71:a3:87:64:b3:5c:dc:27:fd: 24:fb:3d:32:f9:93:b3:9f:28:1e:c1:6a:6f:44:9a: 58:70:8f:1e:2d:4d:33:7f:64:c8:3a:56:f6:5d:53: fb:af:9f:b8:17:92:0f:7f:8a:90:b9:ee:f9:a3:ea: eb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D3:FD:BA:C0:A1:D0:8D:37:FC:7F:38:BD:31:43:43:F2:21:5D:DA X509v3 Authority Key Identifier: keyid:77:8D:09:4F:59:A4:A4:DE:EF:A7:C8:AA:DB:CA:9B:EF:4F:A4:24:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b0:f2:d4:02:41:b1:8b:6b:0d:e7:40:15:f1:19:d1:61:2c: 3e:f4:e1:45:1d:06:23:16:d4:25:04:af:f5:3b:35:d4:86:bf: 1b:59:fc:58:14:3c:24:7e:7b:10:eb:e4:68:e0:02:33:78:28: e5:34:20:cc:20:83:c2:12:ad:91:33:62:55:87:8b:f3:e8:c9: 06:8d:ea:15:e5:e1:22:46:38:a7:fd:6c:62:37:4d:ed:e2:54: 21:19:0e:cf:7b:0c:31:08:aa:0c:e5:29:4a:95:39:2d:32:6e: c2:16:d9:44:95:2e:4f:6e:ec:f5:dc:6f:ea:9c:df:1f:22:ce: 4d:1d:aa:db:72:11:d4:77:0a:29:b8:3c:d5:b7:dd:c1:c7:da: 0b:32:b0:d4:66:5f:de:88:df:09:fe:3f:4d:44:f4:ae:e1:4b: c4:07:38:8b:54:8f:88:ec:78:a5:60:85:5c:bd:42:3d:b4:81: d3:c6:00:8c:1a:aa:0a:ff:ef:02:39:78:1f:1c:3a:69:e3:c0: 7f:ae:d6:9a:25:cb:66:74:c4:c2:e4:c9:b5:f4:c7:e4:0e:32: 3e:eb:33:46:06:c6:69:90:c1:74:da:d1:75:4f:09:33:dd:d3: 46:ee:0a:39:36:9e:0a:c7:5a:38:e0:c7:93:ca:57:0a:48:18: 30:46:3b:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHQRo+Y5PYJrzNoUdDwtVytSEHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc4RDA5NEY1OUE0QTRERUVGQTdDOEFBREJDQTlCRUY0 RkE0MjRCQTAeFw0yNjA5MTYyMTAwMDFaFw0yNjA5MTcyMTM5MDFaMDMxMTAvBgNV BAMTKERBRDNGREJBQzBBMUQwOEQzN0ZDN0YzOEJEMzE0MzQzRjIyMTVEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn7uyzgyLiGZXhpnmErMgeaiLm pCAII3Gb/y7e8iXcf6y0VksXxRlMTquvmdg9qubK5ePeOsrgMrly157asF+PlFCP APr8Jb/z/bJiJWTyUES/q8HacqudkEgdKZokJkf0VwXqa+mPzFlnJRJUI0JMtQzP cXEvZtTbLTvvDXycnxThzveQ8T9ExoHJ1kBvFTgSvJRUovW1Iu9+rpOsUCClbvmU /1AmF6IdyRvCZHmvx8dP3VzO1OcZni5T/CfqvK3vQqiVNGXvfHGjh2SzXNwn/ST7 PTL5k7OfKB7Bam9Emlhwjx4tTTN/ZMg6VvZdU/uvn7gXkg9/ipC57vmj6uvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2tP9usCh0I03/H84vTFDQ/IhXdowHwYDVR0j BBgwFoAUd40JT1mkpN7vp8iq28qb70+kJLowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkYzAzNGYtMzgyMy00OGFmLTk1M2QtYWFhODczYjBmYjZhLzAvNzc4RDA5NEY1 OUE0QTRERUVGQTdDOEFBREJDQTlCRUY0RkE0MjRCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83NzhEMDk0RjU5QTRBNERFRUZBN0M4QUFEQkNBOUJFRjRGQTQy NEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvNzc4RDA5NEY1OUE0QTRERUVGQTdDOEFBREJDQTlC RUY0RkE0MjRCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWw8tQCQbGLaw3nQBXxGdFhLD704UUdBiMW 1CUEr/U7NdSGvxtZ/FgUPCR+exDr5GjgAjN4KOU0IMwgg8ISrZEzYlWHi/PoyQaN 6hXl4SJGOKf9bGI3Te3iVCEZDs97DDEIqgzlKUqVOS0ybsIW2USVLk9u7PXcb+qc 3x8izk0dqttyEdR3Cim4PNW33cHH2gsysNRmX96I3wn+P01E9K7hS8QHOItUj4js eKVghVy9Qj20gdPGAIwaqgr/7wI5eB8cOmnjwH+u1poly2Z0xMLkybX0x+QOMj7r M0YGxmmQwXTa0XVPCTPd00buCjk2ngrHWjjgx5PKVwpIGDBGO1M= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:59 2026 by rpki-client