$ rpki-client -vvf rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft File: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft (raw, json) Hash identifier: AQJkDolmGnQTXpvymTqd7sXJs2KkOcBy4DebJHrwCPM= Subject key identifier: E9:FD:56:78:18:3A:84:BD:FF:57:7A:0C:39:EC:DE:4B:7D:6C:4F:27 Authority key identifier: 78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA Certificate issuer: /CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Certificate serial: 194C726B425957016E882FA4A29B491FFA20A07C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 21:00:07 +0000 Manifest this update: Fri 24 Jul 2026 20:55:07 +0000 Manifest next update: Sat 25 Jul 2026 22:33:07 +0000 Files and hashes: 1: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: +WPVozpZcn/3/eLncGOKTtGwOiKAcol7sdk9fs/XBJg=) 2: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: wJR2nuwydbqFCTFbU0MKnXlorFv2QpV5ZLVXkfDfe78=) 3: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 2BQf1MoYT0XGiyUxqcqKQM552NzemZjiZh/eJ1HL/Ow=) 4: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl (hash: lPhucmfLOYw74Orbt5h1BJYNiJkjEFIxtY7lWaDNtNc=) 5: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: ezj7o418kHVsUpxHI+JsvUw+jteTe5LJOavPTf4FP1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 22:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4c:72:6b:42:59:57:01:6e:88:2f:a4:a2:9b:49:1f:fa:20:a0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Validity Not Before: Jul 24 20:55:07 2026 GMT Not After : Jul 25 22:33:07 2026 GMT Subject: CN=E9FD5678183A84BDFF577A0C39ECDE4B7D6C4F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:9b:9c:dc:3d:5b:0f:38:6f:5a:14:36:b6: 36:54:75:e8:8d:d5:43:18:a6:36:cf:cb:0e:04:a5: 36:30:3a:f1:30:15:40:a6:01:f0:a1:e8:53:f6:3e: 0d:09:fb:b1:c2:60:3d:d4:c3:ed:74:0e:c9:91:23: 3d:90:51:77:fb:28:f4:c0:8d:c6:67:33:c0:07:80: dd:27:5a:95:f4:57:c7:8c:7a:63:6e:d1:11:46:14: 33:a0:3a:ab:fd:7a:7e:91:be:9a:5e:90:10:e6:95: d8:f8:c8:a9:aa:8c:0f:00:63:a6:a6:bf:a1:19:2a: 48:6d:c1:d3:bd:a1:a1:7c:98:3a:bf:ee:61:3c:d8: 59:24:bf:fa:4c:30:7e:c4:83:3e:87:e9:1e:1c:82: 56:49:0f:e2:88:ae:ab:1a:b7:41:2d:07:86:b2:c8: 1a:0d:9d:ce:4d:6a:0b:a5:c6:f7:e0:fa:f6:64:f0: 1a:3f:81:c3:0d:7a:c0:ab:09:ae:58:15:07:06:3b: 6a:4f:78:48:91:2f:d9:c3:ae:a4:06:2b:69:2d:2e: 2a:7d:d0:15:9d:77:9c:5d:0b:fb:95:20:da:43:cf: 6e:69:86:4b:64:38:5c:b0:90:88:55:bf:b0:96:5a: 1d:c7:d5:3b:21:46:ff:fd:fd:a4:0c:0e:44:c0:33: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FD:56:78:18:3A:84:BD:FF:57:7A:0C:39:EC:DE:4B:7D:6C:4F:27 X509v3 Authority Key Identifier: keyid:78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8a:d8:f7:86:bc:e8:cb:ad:f1:61:9f:d7:bd:64:61:f7:ce: 45:c1:bd:68:f3:87:20:d9:0a:61:10:73:06:e5:6f:21:87:3f: 8f:7f:6c:c3:69:a2:61:9e:87:df:6e:67:56:13:04:de:ba:6f: 7f:cb:40:80:2d:2a:58:34:b4:6a:74:74:8b:b6:03:4d:6a:f7: 0e:e2:cf:ca:0a:a9:9b:b2:ab:1d:51:48:37:67:22:3a:a8:ea: 51:9f:bd:2c:57:d7:a9:30:ff:cc:7b:73:f4:62:13:34:c8:72: e8:58:3c:8a:ec:8a:ef:47:32:d0:81:2d:03:d7:02:32:db:ee: 6a:33:26:76:7b:90:55:2e:8d:10:05:e2:f6:dd:fb:0f:f3:fe: a7:af:81:d4:e2:29:13:56:a0:b9:7b:db:8f:b3:31:a3:ef:31: a2:8b:65:63:4c:12:47:7a:2b:46:0b:5a:4b:e4:c0:e1:90:3e: 0a:3b:de:f6:75:20:f5:2d:c6:be:4e:74:ff:97:ad:d3:41:b7: 68:b1:d8:5e:d7:c6:e3:f8:d1:63:da:79:c4:cb:93:7d:b1:09: 13:35:6e:00:cd:13:d7:56:dc:b3:8f:84:43:99:34:2c:1e:fd: d0:8d:88:c0:13:9f:14:32:76:c4:ea:92:bd:0f:cb:bf:7d:0a: 85:0e:30:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGUxya0JZVwFuiC+koptJH/ogoHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJB RkY3MkJGQTAeFw0yNjA3MjQyMDU1MDdaFw0yNjA3MjUyMjMzMDdaMDMxMTAvBgNV BAMTKEU5RkQ1Njc4MTgzQTg0QkRGRjU3N0EwQzM5RUNERTRCN0Q2QzRGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15puc3D1bDzhvWhQ2tjZUdeiN 1UMYpjbPyw4EpTYwOvEwFUCmAfCh6FP2Pg0J+7HCYD3Uw+10DsmRIz2QUXf7KPTA jcZnM8AHgN0nWpX0V8eMemNu0RFGFDOgOqv9en6RvppekBDmldj4yKmqjA8AY6am v6EZKkhtwdO9oaF8mDq/7mE82Fkkv/pMMH7Egz6H6R4cglZJD+KIrqsat0EtB4ay yBoNnc5Nagulxvfg+vZk8Bo/gcMNesCrCa5YFQcGO2pPeEiRL9nDrqQGK2ktLip9 0BWdd5xdC/uVINpDz25phktkOFywkIhVv7CWWh3H1TshRv/9/aQMDkTAM0dNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6f1WeBg6hL3/V3oMOezeS31sTycwHwYDVR0j BBgwFoAUeIxgHq03PgwQkV6z1dmfUq/3K/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZkNzIwZDUtYjdkNC00Mzk1LWEwNmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVB RDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJBRkY3MkJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODhDNjAxRUFEMzczRTBDMTA5MTVFQjNENUQ5OUY1MkFGRjcy QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlG NTJBRkY3MkJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6K2PeGvOjLrfFhn9e9ZGH3zkXBvWjzhyDZ CmEQcwblbyGHP49/bMNpomGeh99uZ1YTBN66b3/LQIAtKlg0tGp0dIu2A01q9w7i z8oKqZuyqx1RSDdnIjqo6lGfvSxX16kw/8x7c/RiEzTIcuhYPIrsiu9HMtCBLQPX AjLb7mozJnZ7kFUujRAF4vbd+w/z/qevgdTiKRNWoLl724+zMaPvMaKLZWNMEkd6 K0YLWkvkwOGQPgo73vZ1IPUtxr5OdP+XrdNBt2ix2F7XxuP40WPaecTLk32xCRM1 bgDNE9dW3LOPhEOZNCwe/dCNiMATnxQydsTqkr0Py799CoUOMLE= -----END CERTIFICATE-----Generated at Sat Jul 25 05:13:10 2026 by rpki-client