$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft File: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft (raw, json) Hash identifier: +eYsEqx4Ye0vXlfanzYTglAu9DFrlMmfrGyXHUwUDWw= Subject key identifier: F7:BF:D2:11:71:DA:87:0D:51:51:E1:DF:91:E8:F1:81:85:1F:A7:55 Authority key identifier: 77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4 Certificate issuer: /CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4 Certificate serial: 0FF8573BFDD2F004A5C16DD838F435A8091096EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 14:37:59 +0000 Manifest this update: Sat 26 Sep 2026 14:32:59 +0000 Manifest next update: Sun 27 Sep 2026 15:38:59 +0000 Files and hashes: 1: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: ccnKpMhAZ50WINER3EYQ3VYvFkNVbacY8s+OufsENRg=) 2: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: YndAlxaqXYkWW68P17cuw0iGsOCiRy+p2CjBviV7Rok=) 3: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl (hash: e4HQD76H8/Rb57Dh/IDcMRxEmuZDGVzibRzhhLSaCmE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f8:57:3b:fd:d2:f0:04:a5:c1:6d:d8:38:f4:35:a8:09:10:96:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4 Validity Not Before: Sep 26 14:32:59 2026 GMT Not After : Sep 27 15:38:59 2026 GMT Subject: CN=F7BFD21171DA870D5151E1DF91E8F181851FA755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:83:f2:94:5f:50:fb:42:ec:5f:eb:72:8e: 02:0d:ac:de:9c:45:2e:9a:14:b1:f7:fd:09:41:83: 63:48:40:68:43:8c:5f:04:ed:ba:1c:0b:30:d0:6e: 6b:26:7f:5e:2a:6c:80:91:b8:17:46:08:94:95:f0: 32:cb:8f:88:99:b7:14:a3:51:de:c5:eb:11:8f:19: 03:77:fb:64:f1:eb:06:1a:0f:78:1e:fa:2a:0a:3d: c3:56:a1:99:55:19:10:0e:91:c4:ce:b2:bd:41:1d: ae:40:9e:90:7f:8b:c0:b8:03:e9:59:81:96:8e:b0: 7f:0a:09:b2:6b:c0:39:bc:ef:32:ab:72:f9:18:e5: 21:e6:f2:52:94:74:57:72:a5:c9:51:48:60:bc:f8: 23:0e:a9:41:32:ae:85:91:dc:68:3d:3d:b2:a7:bb: e9:fe:e1:36:37:c0:72:d9:3a:4f:cd:10:0f:d3:8b: a2:e3:56:25:3d:7d:f1:21:0e:36:ed:7e:b6:b8:92: 12:fe:55:fa:c0:c4:ae:97:e1:c5:5b:b2:46:8c:80: 6f:5b:f1:e9:f7:36:20:29:1a:de:72:c6:04:6b:9a: 36:17:06:bc:14:9a:81:75:fb:dd:74:b3:31:57:d1: 7b:1f:e7:e0:cb:fc:09:69:3e:0b:ca:d6:a2:aa:35: 2e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BF:D2:11:71:DA:87:0D:51:51:E1:DF:91:E8:F1:81:85:1F:A7:55 X509v3 Authority Key Identifier: keyid:77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:82:ed:b6:49:31:51:5a:b5:0c:c7:7b:c8:ad:69:20:38:5e: 7f:05:3c:aa:d7:04:b3:4c:70:1e:63:30:14:e5:99:3e:cf:e2: c1:f8:b0:14:c9:6e:75:ae:c1:aa:6f:9c:84:d2:e3:03:44:35: 2f:c0:3f:e5:88:07:3c:74:c5:84:31:4e:15:56:ad:07:32:0c: 5c:bf:df:60:29:12:01:22:05:f6:3c:fa:11:38:10:c1:4d:a0: 00:45:f4:00:9c:1d:b1:a9:ab:af:82:f5:56:06:0f:0d:58:81: 5b:14:51:70:ee:18:9d:b9:27:c5:a6:c0:be:35:ef:4a:0c:0e: f3:d1:f8:98:90:97:72:73:b2:57:97:21:0e:b1:05:46:a2:34: 54:de:fb:ce:65:fa:5d:93:30:2a:10:78:2d:54:79:89:59:ef: 00:1b:8a:91:1e:94:f0:d4:67:3d:8c:db:ae:14:af:54:f3:a9: f9:d3:f7:2b:e0:21:e9:6d:93:f8:9d:47:07:9d:9c:bd:2d:6b: c1:94:b4:79:47:82:99:1c:c4:27:19:7d:87:9e:15:02:e2:c2: 6b:d3:52:2d:a4:ef:fb:c7:31:79:dc:0c:a0:02:89:88:b9:b1: 60:25:b0:de:31:b7:c8:bc:4b:e9:81:9d:61:8f:84:86:50:23: 1b:a4:27:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/hXO/3S8ASlwW3YOPQ1qAkQlu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0MDNE QkQxRTJDNDAeFw0yNjA5MjYxNDMyNTlaFw0yNjA5MjcxNTM4NTlaMDMxMTAvBgNV BAMTKEY3QkZEMjExNzFEQTg3MEQ1MTUxRTFERjkxRThGMTgxODUxRkE3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC304PylF9Q+0LsX+tyjgINrN6c RS6aFLH3/QlBg2NIQGhDjF8E7bocCzDQbmsmf14qbICRuBdGCJSV8DLLj4iZtxSj Ud7F6xGPGQN3+2Tx6wYaD3ge+ioKPcNWoZlVGRAOkcTOsr1BHa5AnpB/i8C4A+lZ gZaOsH8KCbJrwDm87zKrcvkY5SHm8lKUdFdypclRSGC8+CMOqUEyroWR3Gg9PbKn u+n+4TY3wHLZOk/NEA/Ti6LjViU9ffEhDjbtfra4khL+VfrAxK6X4cVbskaMgG9b 8en3NiApGt5yxgRrmjYXBrwUmoF1+910szFX0Xsf5+DL/AlpPgvK1qKqNS4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU97/SEXHahw1RUeHfkejxgYUfp1UwHwYDVR0j BBgwFoAUd4pxuzyRNoxlbeuBjp20A9vR4sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhmNWJhNWUtMWY1Yy00Mjg0LTlhMTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIz QzkxMzY4QzY1NkRFQjgxOEU5REI0MDNEQkQxRTJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzhBNzFCQjNDOTEzNjhDNjU2REVCODE4RTlEQjQwM0RCRDFF MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0 MDNEQkQxRTJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyC7bZJMVFatQzHe8itaSA4Xn8FPKrXBLNM cB5jMBTlmT7P4sH4sBTJbnWuwapvnITS4wNENS/AP+WIBzx0xYQxThVWrQcyDFy/ 32ApEgEiBfY8+hE4EMFNoABF9ACcHbGpq6+C9VYGDw1YgVsUUXDuGJ25J8WmwL41 70oMDvPR+JiQl3JzsleXIQ6xBUaiNFTe+85l+l2TMCoQeC1UeYlZ7wAbipEelPDU Zz2M264Ur1TzqfnT9yvgIeltk/idRwednL0ta8GUtHlHgpkcxCcZfYeeFQLiwmvT Ui2k7/vHMXncDKACiYi5sWAlsN4xt8i8S+mBnWGPhIZQIxukJ3E= -----END CERTIFICATE-----Generated at Sun Sep 27 07:31:49 2026 by rpki-client