$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.mft File: 57789CB78D85714C21EE6022D183A8D40AFE4063.mft (raw, json) Hash identifier: XcnJZjKXCO3RSEk7AFY/u+ACyR5jolYrfHTtAuwvqFc= Subject key identifier: CE:50:B9:59:D6:3B:D5:36:16:77:90:F1:FC:81:BA:EA:7C:0A:CE:BB Authority key identifier: 57:78:9C:B7:8D:85:71:4C:21:EE:60:22:D1:83:A8:D4:0A:FE:40:63 Certificate issuer: /CN=57789CB78D85714C21EE6022D183A8D40AFE4063 Certificate serial: 38BA0A192A88DB5E2BC10DADB0C77D23B8698FE6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57789CB78D85714C21EE6022D183A8D40AFE4063.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.mft Manifest number: D3 Signing time: Wed 07 Oct 2026 18:46:47 +0000 Manifest this update: Wed 07 Oct 2026 18:41:47 +0000 Manifest next update: Thu 08 Oct 2026 21:43:47 +0000 Files and hashes: 1: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: 7H1B1QNYupN1EPyviDEhtIBX9AU52B9C8kCqqxvSyn4=) 2: 57789CB78D85714C21EE6022D183A8D40AFE4063.crl (hash: McVl7Ov2KSIbwFhIhSLyV0Ig7lHwGye8zMo2qd8d03Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.crl rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57789CB78D85714C21EE6022D183A8D40AFE4063.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 21:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ba:0a:19:2a:88:db:5e:2b:c1:0d:ad:b0:c7:7d:23:b8:69:8f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57789CB78D85714C21EE6022D183A8D40AFE4063 Validity Not Before: Oct 7 18:41:47 2026 GMT Not After : Oct 8 21:43:47 2026 GMT Subject: CN=CE50B959D63BD536167790F1FC81BAEA7C0ACEBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:f1:0b:ab:93:6a:80:0c:12:c3:98:97:09: 78:bd:2a:bf:ca:09:18:98:b4:d8:0a:ac:f5:2f:43: 0f:69:c1:68:07:c3:04:1c:c2:7d:24:a8:1b:b4:89: 22:a5:3a:b9:90:83:0f:8a:16:41:91:c8:33:3e:fb: c8:10:42:1e:6f:c3:a8:27:7b:53:2c:df:c8:69:73: a3:53:5c:69:3f:fb:c2:ba:48:99:2d:8e:41:63:2a: c6:56:3e:b8:a2:84:d5:dc:96:ab:e1:69:7e:fb:b3: 1e:e5:92:2c:ea:ab:b3:9f:f0:fc:2f:55:b8:fa:90: 7a:e2:fb:d6:d0:c6:3b:68:47:af:50:f1:e7:d4:a7: cb:32:03:4e:37:6d:0d:8c:e2:66:a5:ea:bd:3c:3b: 26:99:95:b9:1a:f9:4d:1a:9f:09:f6:db:25:2f:21: 00:75:4b:16:4d:4e:1c:13:fa:84:d6:d3:f4:53:b5: cc:f3:f3:80:95:79:39:f9:6a:51:8f:7c:32:29:43: 2d:df:8e:ed:a1:a6:05:60:e4:49:f0:f8:a2:a2:a7: e0:6a:05:5c:de:50:b2:d9:8e:6d:43:41:5c:73:b9: 72:a2:ba:ce:61:d1:9b:0a:f9:b3:5f:d9:af:6f:e5: ba:58:58:de:21:91:7a:5b:22:61:bf:2f:4a:c7:61: db:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:50:B9:59:D6:3B:D5:36:16:77:90:F1:FC:81:BA:EA:7C:0A:CE:BB X509v3 Authority Key Identifier: keyid:57:78:9C:B7:8D:85:71:4C:21:EE:60:22:D1:83:A8:D4:0A:FE:40:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57789CB78D85714C21EE6022D183A8D40AFE4063.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:9c:9d:c6:c7:1f:6c:ce:02:62:03:a9:30:42:c7:5a:a6:ab: 46:32:85:3f:1c:f6:76:f7:ef:c3:8a:ce:f9:8a:da:f5:51:5d: ba:fa:ea:0a:65:bc:92:fd:1f:62:f5:cc:48:5c:38:c5:7a:5a: 82:08:47:bf:85:81:b0:85:a4:bc:93:42:4d:41:ef:54:75:5d: 73:5a:f9:56:9d:ae:f2:11:9d:1e:03:91:90:e6:1d:df:f6:26: 3e:48:d8:b9:2a:c5:5d:1c:b8:71:01:20:67:6a:a2:25:31:74: 5e:e9:c6:cc:84:d6:fc:58:77:ca:ae:70:4c:8b:12:f9:60:a4: d0:5e:89:b1:54:3a:e8:1e:61:da:a6:b4:b3:ea:20:06:42:06: 7e:46:a3:fc:69:81:d2:dd:f7:dd:c3:0c:fd:00:0d:b2:4d:05: 6b:6b:d4:98:46:b0:84:48:b9:76:13:36:cd:d7:b0:7e:06:c8: 52:c2:ad:e1:21:87:46:cc:b3:99:eb:50:4c:3b:3f:10:b2:33: cd:79:48:d9:ea:a9:9f:db:e3:e2:2b:d1:44:dd:cc:b3:04:22: e1:32:24:9f:87:a6:65:be:56:ff:1e:77:65:42:52:19:6a:8f: 3e:f4:35:99:96:bd:56:7f:1d:3f:ff:c1:15:06:e7:ee:9f:6f: 77:63:7d:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLoKGSqI214rwQ2tsMd9I7hpj+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc3ODlDQjc4RDg1NzE0QzIxRUU2MDIyRDE4M0E4RDQw QUZFNDA2MzAeFw0yNjEwMDcxODQxNDdaFw0yNjEwMDgyMTQzNDdaMDMxMTAvBgNV BAMTKENFNTBCOTU5RDYzQkQ1MzYxNjc3OTBGMUZDODFCQUVBN0MwQUNFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cPELq5NqgAwSw5iXCXi9Kr/K CRiYtNgKrPUvQw9pwWgHwwQcwn0kqBu0iSKlOrmQgw+KFkGRyDM++8gQQh5vw6gn e1Ms38hpc6NTXGk/+8K6SJktjkFjKsZWPriihNXclqvhaX77sx7lkizqq7Of8Pwv Vbj6kHri+9bQxjtoR69Q8efUp8syA043bQ2M4mal6r08OyaZlbka+U0anwn22yUv IQB1SxZNThwT+oTW0/RTtczz84CVeTn5alGPfDIpQy3fju2hpgVg5Enw+KKip+Bq BVzeULLZjm1DQVxzuXKius5h0ZsK+bNf2a9v5bpYWN4hkXpbImG/L0rHYduxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzlC5WdY71TYWd5Dx/IG66nwKzrswHwYDVR0j BBgwFoAUV3ict42FcUwh7mAi0YOo1Ar+QGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZkYjRjYjgtZmFlYS00NTMwLWIyOWUtMGI3YTRhZmZjMzE2LzAvNTc3ODlDQjc4 RDg1NzE0QzIxRUU2MDIyRDE4M0E4RDQwQUZFNDA2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Nzc4OUNCNzhEODU3MTRDMjFFRTYwMjJEMTgzQThENDBBRkU0 MDYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZkYjRjYjgtZmFlYS00NTMwLWIy OWUtMGI3YTRhZmZjMzE2LzAvNTc3ODlDQjc4RDg1NzE0QzIxRUU2MDIyRDE4M0E4 RDQwQUZFNDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCcncbHH2zOAmIDqTBCx1qmq0YyhT8c9nb3 78OKzvmK2vVRXbr66gplvJL9H2L1zEhcOMV6WoIIR7+FgbCFpLyTQk1B71R1XXNa +VadrvIRnR4DkZDmHd/2Jj5I2LkqxV0cuHEBIGdqoiUxdF7pxsyE1vxYd8qucEyL EvlgpNBeibFUOugeYdqmtLPqIAZCBn5Go/xpgdLd993DDP0ADbJNBWtr1JhGsIRI uXYTNs3XsH4GyFLCreEhh0bMs5nrUEw7PxCyM815SNnqqZ/b4+Ir0UTdzLMEIuEy JJ+HpmW+Vv8ed2VCUhlqjz70NZmWvVZ/HT//wRUG5+6fb3djfS8= -----END CERTIFICATE-----Generated at Thu Oct 8 14:15:57 2026 by rpki-client