$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft File: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft (raw, json) Hash identifier: H3M0KYdo+iwZCciaSvS4wSOfTcz8eVS+BtCJWbblnPU= Subject key identifier: B2:6D:E4:9B:D5:BA:6B:0A:C4:6D:B8:52:B1:F7:86:2D:94:5E:12:77 Authority key identifier: 78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA Certificate issuer: /CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Certificate serial: 7A271106D833983639AAE733E72A834CDC029408 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft Manifest number: B0 Signing time: Fri 11 Sep 2026 23:55:23 +0000 Manifest this update: Fri 11 Sep 2026 23:50:23 +0000 Manifest next update: Sun 13 Sep 2026 01:49:23 +0000 Files and hashes: 1: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl (hash: JC9jBQMILzkeQM8l5Fz6lIotkh3Ttcp/qVvWs+OapM8=) 2: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: +WPVozpZcn/3/eLncGOKTtGwOiKAcol7sdk9fs/XBJg=) 3: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: ezj7o418kHVsUpxHI+JsvUw+jteTe5LJOavPTf4FP1A=) 4: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: wJR2nuwydbqFCTFbU0MKnXlorFv2QpV5ZLVXkfDfe78=) 5: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 2BQf1MoYT0XGiyUxqcqKQM552NzemZjiZh/eJ1HL/Ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:27:11:06:d8:33:98:36:39:aa:e7:33:e7:2a:83:4c:dc:02:94:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Validity Not Before: Sep 11 23:50:23 2026 GMT Not After : Sep 13 01:49:23 2026 GMT Subject: CN=B26DE49BD5BA6B0AC46DB852B1F7862D945E1277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ad:6a:04:68:8a:65:90:a0:c3:61:a1:f7:83: ea:43:a9:05:fd:58:de:9d:5b:44:78:ea:97:e7:ab: 86:f7:f6:74:70:6b:03:de:83:02:40:30:3f:2d:b9: fd:0e:c1:90:e6:d2:c4:01:de:b6:9c:5f:6f:a7:56: c4:e1:c2:5d:82:8b:83:31:c9:0f:32:2a:af:9d:6b: 03:bf:4b:3a:4f:57:45:f8:55:1c:c7:1a:3e:54:84: a7:7e:ca:64:2e:f9:ab:30:1f:e0:25:72:20:28:83: 77:fb:2a:c1:3f:6e:13:bf:da:fa:25:06:e6:d7:04: eb:32:3a:15:73:cd:54:40:36:9d:aa:da:19:e7:ac: 2b:cc:73:ba:91:6b:71:dd:74:78:50:eb:bd:d3:94: c6:5a:2e:43:29:46:6e:8c:51:49:0b:cc:63:4e:ee: 85:a8:90:2d:ad:5f:d4:3c:6c:ec:f5:66:cd:f6:96: d1:d8:d4:86:42:f2:41:45:86:31:e6:6d:c4:1e:28: ae:5d:23:e4:1c:29:7a:a6:8e:98:df:d1:99:0c:4f: b7:f8:ab:d3:41:c1:ae:0f:48:12:a0:da:25:b4:9f: 5b:87:49:87:d5:ac:8f:08:61:a0:2f:7e:a2:3e:b7: 4e:74:b6:0f:38:f2:cf:b2:d4:6f:aa:36:1c:36:c4: 90:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6D:E4:9B:D5:BA:6B:0A:C4:6D:B8:52:B1:F7:86:2D:94:5E:12:77 X509v3 Authority Key Identifier: keyid:78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ac:1e:61:b5:2c:e7:db:67:fc:c2:61:cb:8e:98:d4:11:3e: f0:89:b0:87:d9:b9:b2:42:36:d0:ce:32:80:b9:67:04:69:90: 3d:be:13:bb:62:e4:dd:55:f4:55:c9:dc:2c:1e:cb:24:50:fb: dc:9b:70:20:7f:6a:5b:5e:96:ea:76:88:0d:5e:e0:8f:5c:27: 42:48:43:e3:7f:a1:ce:3a:5d:17:11:4c:99:8d:85:b5:be:c4: b9:6d:18:4c:db:32:e5:9a:b0:c0:f0:a2:a8:86:d0:b9:cc:8b: 79:e8:97:5b:7b:ec:aa:aa:91:47:e5:4d:ef:ba:bf:b8:92:ff: 31:1d:41:f7:e7:43:70:f1:52:be:84:42:57:22:46:94:82:0b: ba:c9:d3:3d:b7:b5:b1:e8:50:04:87:2b:eb:d6:20:a8:07:53: 90:b6:ae:ca:86:44:6f:03:f2:88:65:60:43:df:a5:84:35:2a: cf:20:e1:6d:46:0b:ee:86:25:8e:6a:80:cd:96:ac:90:cc:0f: 30:73:4e:ac:8e:42:a8:55:78:a7:bf:05:b1:35:ad:55:6e:e0: 54:d8:7a:5d:e9:20:28:8c:72:09:13:75:dc:3f:bc:4d:b5:c8: 3a:1f:40:fb:c9:ef:64:28:65:27:11:07:31:f3:a7:3f:b5:04: 0d:f9:bd:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeicRBtgzmDY5qucz5yqDTNwClAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJB RkY3MkJGQTAeFw0yNjA5MTEyMzUwMjNaFw0yNjA5MTMwMTQ5MjNaMDMxMTAvBgNV BAMTKEIyNkRFNDlCRDVCQTZCMEFDNDZEQjg1MkIxRjc4NjJEOTQ1RTEyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCirWoEaIplkKDDYaH3g+pDqQX9 WN6dW0R46pfnq4b39nRwawPegwJAMD8tuf0OwZDm0sQB3racX2+nVsThwl2Ci4Mx yQ8yKq+dawO/SzpPV0X4VRzHGj5UhKd+ymQu+aswH+AlciAog3f7KsE/bhO/2vol BubXBOsyOhVzzVRANp2q2hnnrCvMc7qRa3HddHhQ673TlMZaLkMpRm6MUUkLzGNO 7oWokC2tX9Q8bOz1Zs32ltHY1IZC8kFFhjHmbcQeKK5dI+QcKXqmjpjf0ZkMT7f4 q9NBwa4PSBKg2iW0n1uHSYfVrI8IYaAvfqI+t050tg848s+y1G+qNhw2xJApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsm3km9W6awrEbbhSsfeGLZReEncwHwYDVR0j BBgwFoAUeIxgHq03PgwQkV6z1dmfUq/3K/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZkNzIwZDUtYjdkNC00Mzk1LWEwNmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVB RDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJBRkY3MkJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODhDNjAxRUFEMzczRTBDMTA5MTVFQjNENUQ5OUY1MkFGRjcy QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlG NTJBRkY3MkJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2sHmG1LOfbZ/zCYcuOmNQRPvCJsIfZubJC NtDOMoC5ZwRpkD2+E7ti5N1V9FXJ3CweyyRQ+9ybcCB/altelup2iA1e4I9cJ0JI Q+N/oc46XRcRTJmNhbW+xLltGEzbMuWasMDwoqiG0LnMi3nol1t77KqqkUflTe+6 v7iS/zEdQffnQ3DxUr6EQlciRpSCC7rJ0z23tbHoUASHK+vWIKgHU5C2rsqGRG8D 8ohlYEPfpYQ1Ks8g4W1GC+6GJY5qgM2WrJDMDzBzTqyOQqhVeKe/BbE1rVVu4FTY el3pICiMcgkTddw/vE21yDofQPvJ72QoZScRBzHzpz+1BA35vUU= -----END CERTIFICATE-----Generated at Sat Sep 12 11:05:48 2026 by rpki-client