$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft File: 766F922EBE6693B4C229A00631F97A88C3ED7E42.mft (raw, json) Hash identifier: NoD+du3w9ZXEmrNkAoCD6TJG7G1Hx3GCV4ENDs7kbxE= Subject key identifier: 0A:16:2F:21:4C:14:C1:63:49:61:D4:65:03:50:77:0D:7F:3D:83:71 Authority key identifier: 76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42 Certificate issuer: /CN=766F922EBE6693B4C229A00631F97A88C3ED7E42 Certificate serial: 20C8BD87867534617EB127E2D64CE983E445606F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 15:55:25 +0000 Manifest this update: Thu 24 Sep 2026 15:50:25 +0000 Manifest next update: Fri 25 Sep 2026 15:55:25 +0000 Files and hashes: 1: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: jV9xZ4rWaJsfRT1YZup0w1zHla32pmpYrsEdtDLU9Uk=) 2: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: CcTYmyX7VKsqrze+tnxJ2xXPrQIZB/9bxrpZpXXFkew=) 3: 766F922EBE6693B4C229A00631F97A88C3ED7E42.crl (hash: P20r3svU4sTz/wgLrYR+Nl3CoZ5sHUkgCKQp+kwGRYs=) 4: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: TPWfaDGF6n/Mep4wo2U4Mey+BVeKel6FmH9UjXBlRwE=) 5: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: bC6bKRWDg0Wg0P6AUiYBKd/mAgFiPv8qaxAU9zI3St0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c8:bd:87:86:75:34:61:7e:b1:27:e2:d6:4c:e9:83:e4:45:60:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=766F922EBE6693B4C229A00631F97A88C3ED7E42 Validity Not Before: Sep 24 15:50:25 2026 GMT Not After : Sep 25 15:55:25 2026 GMT Subject: CN=0A162F214C14C1634961D4650350770D7F3D8371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:94:e5:f0:f7:45:bc:d6:b2:71:3e:54:d0:81: 09:2d:e4:89:44:58:49:e2:e0:0e:f0:8e:5b:29:28: 4f:77:73:e6:b5:64:df:e2:34:e0:08:55:c6:54:74: 5f:4a:fa:a7:45:34:78:ba:68:07:16:f8:fc:d4:e5: e9:7d:f3:6e:7f:95:e7:88:f7:38:49:ac:e9:0a:56: 88:26:6e:f6:70:5a:ae:55:3b:b2:22:1b:64:b5:ad: 4a:9a:82:6f:2a:40:22:12:78:bc:78:8d:76:ef:0e: 94:96:4b:11:9d:67:55:e0:f5:14:00:14:25:ed:ea: 97:0b:6c:65:62:03:af:73:db:a2:57:8d:bb:e7:f7: a8:94:2a:9f:ee:f6:68:66:b2:c5:f2:aa:0c:cf:ea: ce:18:8c:52:12:4d:34:f9:33:24:f4:b5:a3:b8:ca: 6c:ff:73:c1:97:9d:b4:0e:38:78:ec:82:4a:d1:41: ec:2d:64:3f:48:39:bc:5e:fd:29:9f:11:ad:78:55: 78:b0:b7:de:b5:be:1a:b6:a3:ac:01:dc:6f:ae:91: 33:f2:55:57:5e:64:0d:89:53:ea:a4:33:9f:0e:82: 56:67:f7:0f:89:9e:2a:64:c5:94:d8:11:20:36:42: c2:6c:8f:e8:1b:d2:d8:72:71:f2:09:74:a2:95:1b: 4d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:16:2F:21:4C:14:C1:63:49:61:D4:65:03:50:77:0D:7F:3D:83:71 X509v3 Authority Key Identifier: keyid:76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a8:c5:98:72:63:c7:c9:20:e8:9c:f6:30:b4:30:08:12:11: af:a3:55:b1:c6:e4:fd:ee:69:10:ec:9d:4b:6b:62:f0:92:17: 5c:6b:6f:8d:e5:a8:56:9b:bc:43:8b:46:e2:76:79:0d:bb:c4: d9:2a:02:17:07:e4:2d:95:07:38:a4:40:df:bd:2c:65:3a:e0: 66:6b:8b:c2:c6:34:1f:9a:19:35:f4:77:93:8b:8d:28:7b:d5: e4:cb:01:4c:33:a6:ff:6b:0b:e9:d8:09:aa:23:82:0c:de:f0: b1:8e:e8:a2:37:26:89:a3:94:d6:ed:88:7e:ba:71:84:7a:6f: 0a:45:ee:1d:1f:d6:7c:f1:8d:7c:95:d1:2a:7e:6f:b1:5a:1a: f2:2c:05:5e:36:cf:c1:6c:c0:32:ca:8d:86:f4:36:56:b3:e4: 72:b0:a7:6e:37:90:5c:cc:f7:10:c5:de:69:a4:01:d0:c6:86: a4:d4:be:db:95:22:79:f2:25:c2:84:a2:89:a1:db:22:19:4a: f2:69:60:62:52:7b:ca:21:63:a9:13:74:61:47:0d:ef:be:b3: fa:e5:f0:a8:e3:32:2b:18:e1:26:45:ff:47:17:30:59:7e:d9: 09:13:63:a1:4e:82:1b:69:a0:f6:dc:fd:c0:f4:fb:29:bd:54: 79:43:36:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMi9h4Z1NGF+sSfi1kzpg+RFYG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY2RjkyMkVCRTY2OTNCNEMyMjlBMDA2MzFGOTdBODhD M0VEN0U0MjAeFw0yNjA5MjQxNTUwMjVaFw0yNjA5MjUxNTU1MjVaMDMxMTAvBgNV BAMTKDBBMTYyRjIxNEMxNEMxNjM0OTYxRDQ2NTAzNTA3NzBEN0YzRDgzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLlOXw90W81rJxPlTQgQkt5IlE WEni4A7wjlspKE93c+a1ZN/iNOAIVcZUdF9K+qdFNHi6aAcW+PzU5el9825/leeI 9zhJrOkKVogmbvZwWq5VO7IiG2S1rUqagm8qQCISeLx4jXbvDpSWSxGdZ1Xg9RQA FCXt6pcLbGViA69z26JXjbvn96iUKp/u9mhmssXyqgzP6s4YjFISTTT5MyT0taO4 ymz/c8GXnbQOOHjsgkrRQewtZD9IObxe/SmfEa14VXiwt961vhq2o6wB3G+ukTPy VVdeZA2JU+qkM58OglZn9w+JnipkxZTYESA2QsJsj+gb0thycfIJdKKVG03FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUChYvIUwUwWNJYdRlA1B3DX89g3EwHwYDVR0j BBgwFoAUdm+SLr5mk7TCKaAGMfl6iMPtfkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3ODhiNGEtZDQ1MS00OWZiLWI3Y2QtNzE5ODEwODcwZjFhLzAvNzY2RjkyMkVC RTY2OTNCNEMyMjlBMDA2MzFGOTdBODhDM0VEN0U0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NjZGOTIyRUJFNjY5M0I0QzIyOUEwMDYzMUY5N0E4OEMzRUQ3 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvNzY2RjkyMkVCRTY2OTNCNEMyMjlBMDA2MzFGOTdB ODhDM0VEN0U0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGioxZhyY8fJIOic9jC0MAgSEa+jVbHG5P3u aRDsnUtrYvCSF1xrb43lqFabvEOLRuJ2eQ27xNkqAhcH5C2VBzikQN+9LGU64GZr i8LGNB+aGTX0d5OLjSh71eTLAUwzpv9rC+nYCaojggze8LGO6KI3JomjlNbtiH66 cYR6bwpF7h0f1nzxjXyV0Sp+b7FaGvIsBV42z8FswDLKjYb0Nlaz5HKwp243kFzM 9xDF3mmkAdDGhqTUvtuVInnyJcKEoomh2yIZSvJpYGJSe8ohY6kTdGFHDe++s/rl 8KjjMisY4SZF/0cXMFl+2QkTY6FOghtpoPbc/cD0+ym9VHlDNs0= -----END CERTIFICATE-----Generated at Fri Sep 25 01:37:38 2026 by rpki-client