$ rpki-client -vvf rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft File: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft (raw, json) Hash identifier: vm6qjBEpFL5Ul08RQEtmcVP1wdqNZG4AZqDJQ4Ik1j4= Subject key identifier: 21:C3:5B:2F:AC:71:23:74:22:FA:84:E0:CE:7E:1E:29:20:8E:BA:30 Authority key identifier: 78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA Certificate issuer: /CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Certificate serial: 684F116D49A8198D52CA94B175E2A5884BF39B31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft Manifest number: 2E Signing time: Fri 05 Jun 2026 16:36:33 +0000 Manifest this update: Fri 05 Jun 2026 16:31:33 +0000 Manifest next update: Sat 06 Jun 2026 18:56:33 +0000 Files and hashes: 1: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: wJR2nuwydbqFCTFbU0MKnXlorFv2QpV5ZLVXkfDfe78=) 2: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: +WPVozpZcn/3/eLncGOKTtGwOiKAcol7sdk9fs/XBJg=) 3: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 2BQf1MoYT0XGiyUxqcqKQM552NzemZjiZh/eJ1HL/Ow=) 4: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl (hash: BfTZpEOJI0sAVE324YpHWzbNm+MdKE8ITFT8Gagp0Dc=) 5: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: ezj7o418kHVsUpxHI+JsvUw+jteTe5LJOavPTf4FP1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 09:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4f:11:6d:49:a8:19:8d:52:ca:94:b1:75:e2:a5:88:4b:f3:9b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Validity Not Before: Jun 5 16:31:33 2026 GMT Not After : Jun 6 18:56:33 2026 GMT Subject: CN=21C35B2FAC71237422FA84E0CE7E1E29208EBA30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ca:fd:61:a3:ca:14:f4:f4:7b:6e:fc:0f:6d: bd:0e:f0:07:5e:1a:e1:c9:08:cf:64:c2:be:e8:06: 34:7a:16:ad:3a:94:10:a5:29:d9:cd:3a:1a:1a:0d: 80:61:fc:47:a6:87:36:b3:a6:f3:8d:b4:03:e4:3b: 7a:dc:31:49:9e:a2:b3:10:2c:13:08:7b:41:01:55: c6:fe:a7:c9:d5:61:91:d5:04:e9:f2:35:3e:e8:56: 3c:1b:d2:4f:58:86:87:92:65:0e:74:04:b6:24:32: 69:4f:51:a6:bd:71:71:0b:30:65:fa:5d:39:05:04: 21:69:ac:57:30:8a:92:79:31:99:b9:b7:0c:06:b7: 53:f0:6a:3f:c0:3b:0d:5f:8b:ed:51:e4:e8:cb:f9: fb:7b:83:bc:38:38:de:38:d3:36:5b:24:ec:8e:4c: 1c:08:72:6e:06:e9:71:f0:b3:01:27:93:1d:70:77: a2:dd:a1:4b:0c:a0:60:e7:fa:fd:59:56:c6:9b:74: 19:13:57:71:d5:ed:25:5b:6e:81:3e:ac:8e:23:18: 1e:4c:49:db:03:07:49:63:29:1c:dc:83:77:78:91: 70:34:50:21:17:63:87:9c:56:69:05:7c:04:de:1a: 45:f0:06:a7:b6:e0:75:0e:42:cf:6e:19:21:0a:4b: 04:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C3:5B:2F:AC:71:23:74:22:FA:84:E0:CE:7E:1E:29:20:8E:BA:30 X509v3 Authority Key Identifier: keyid:78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:49:9b:ad:9c:80:a2:8d:c0:58:f2:28:8c:de:fa:ec:c0:e9: 20:a0:7c:e5:11:cf:c1:3f:27:96:f6:8d:9a:ff:af:f7:3d:00: 1d:27:6e:7c:af:27:f7:14:b8:e8:f9:88:08:90:5d:de:ac:eb: cb:42:93:ae:2a:89:16:d2:bd:81:1a:59:ca:a1:41:1a:1c:b7: 2b:11:67:93:86:e6:ac:e0:43:3a:28:d3:16:a4:11:82:e0:29: 72:48:be:f8:e2:1a:6e:5b:01:28:f9:82:f6:5a:d6:90:2b:2e: bd:a2:8a:3d:86:c6:36:3d:31:02:48:a7:6d:cd:8d:30:32:4f: 2b:c6:eb:8f:a8:64:63:f9:d8:f2:71:84:ae:51:be:70:61:39: f9:4a:86:87:ee:19:a2:e4:44:ed:19:7f:17:ca:c6:05:56:f1: 69:01:2c:01:c4:eb:86:6b:a2:27:3d:c0:e2:4b:a2:bb:3c:35: af:50:11:35:79:15:bc:71:0b:f3:84:86:8e:69:30:31:76:5e: c1:62:f6:e4:83:3c:da:a7:73:9b:72:d1:e7:d0:ae:c4:52:4d: d6:a9:d1:29:a5:32:b6:6f:17:27:dc:e2:9f:54:d4:f1:f0:87: d0:9b:1b:07:27:df:ea:56:fd:ad:f8:0c:c6:14:0c:5e:06:79: d6:bf:ed:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaE8RbUmoGY1SypSxdeKliEvzmzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJB RkY3MkJGQTAeFw0yNjA2MDUxNjMxMzNaFw0yNjA2MDYxODU2MzNaMDMxMTAvBgNV BAMTKDIxQzM1QjJGQUM3MTIzNzQyMkZBODRFMENFN0UxRTI5MjA4RUJBMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeyv1ho8oU9PR7bvwPbb0O8Ade GuHJCM9kwr7oBjR6Fq06lBClKdnNOhoaDYBh/EemhzazpvONtAPkO3rcMUmeorMQ LBMIe0EBVcb+p8nVYZHVBOnyNT7oVjwb0k9YhoeSZQ50BLYkMmlPUaa9cXELMGX6 XTkFBCFprFcwipJ5MZm5twwGt1Pwaj/AOw1fi+1R5OjL+ft7g7w4ON440zZbJOyO TBwIcm4G6XHwswEnkx1wd6LdoUsMoGDn+v1ZVsabdBkTV3HV7SVbboE+rI4jGB5M SdsDB0ljKRzcg3d4kXA0UCEXY4ecVmkFfATeGkXwBqe24HUOQs9uGSEKSwRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIcNbL6xxI3Qi+oTgzn4eKSCOujAwHwYDVR0j BBgwFoAUeIxgHq03PgwQkV6z1dmfUq/3K/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZkNzIwZDUtYjdkNC00Mzk1LWEwNmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVB RDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJBRkY3MkJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODhDNjAxRUFEMzczRTBDMTA5MTVFQjNENUQ5OUY1MkFGRjcy QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlG NTJBRkY3MkJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1Jm62cgKKNwFjyKIze+uzA6SCgfOURz8E/ J5b2jZr/r/c9AB0nbnyvJ/cUuOj5iAiQXd6s68tCk64qiRbSvYEaWcqhQRoctysR Z5OG5qzgQzoo0xakEYLgKXJIvvjiGm5bASj5gvZa1pArLr2iij2GxjY9MQJIp23N jTAyTyvG64+oZGP52PJxhK5RvnBhOflKhofuGaLkRO0ZfxfKxgVW8WkBLAHE64Zr oic9wOJLors8Na9QETV5FbxxC/OEho5pMDF2XsFi9uSDPNqnc5ty0efQrsRSTdap 0SmlMrZvFyfc4p9U1PHwh9CbGwcn3+pW/a34DMYUDF4Geda/7bc= -----END CERTIFICATE-----Generated at Fri Jun 5 19:51:59 2026 by rpki-client