$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.mft File: 57789CB78D85714C21EE6022D183A8D40AFE4063.mft (raw, json) Hash identifier: NJYU9+tbbvzB4d6C0BpngJp1U3BbndqlM62jJW8C07o= Subject key identifier: 8E:95:4A:79:C4:DA:50:25:3A:9B:D8:85:B9:30:0B:2B:4D:02:C1:D8 Authority key identifier: 57:78:9C:B7:8D:85:71:4C:21:EE:60:22:D1:83:A8:D4:0A:FE:40:63 Certificate issuer: /CN=57789CB78D85714C21EE6022D183A8D40AFE4063 Certificate serial: 7EE64ADA343B4CE6E46820DDA71BE247A4A748F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57789CB78D85714C21EE6022D183A8D40AFE4063.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 03:04:29 +0000 Manifest this update: Thu 24 Sep 2026 02:59:29 +0000 Manifest next update: Fri 25 Sep 2026 06:24:29 +0000 Files and hashes: 1: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: 7H1B1QNYupN1EPyviDEhtIBX9AU52B9C8kCqqxvSyn4=) 2: 57789CB78D85714C21EE6022D183A8D40AFE4063.crl (hash: BoiPHXYhkOIy6Y2e1KCRX5hyPJXx3YBtDBLtPIfz854=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.crl rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57789CB78D85714C21EE6022D183A8D40AFE4063.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e6:4a:da:34:3b:4c:e6:e4:68:20:dd:a7:1b:e2:47:a4:a7:48:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57789CB78D85714C21EE6022D183A8D40AFE4063 Validity Not Before: Sep 24 02:59:29 2026 GMT Not After : Sep 25 06:24:29 2026 GMT Subject: CN=8E954A79C4DA50253A9BD885B9300B2B4D02C1D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:56:09:3f:70:b9:57:21:9c:65:ac:a7:c6:b7: 71:7f:ef:22:78:8e:35:53:81:50:ec:26:2e:91:95: e8:c4:e1:8c:15:30:bd:89:60:ac:27:74:91:32:a0: ca:53:ef:9b:f2:92:f0:85:b6:29:59:09:c3:45:10: 2b:0d:c6:a2:6d:dc:5a:80:a7:77:ae:ea:7a:06:6c: fe:b6:1e:94:d6:7c:f6:6a:fe:93:62:5a:93:8f:f9: 01:6a:46:11:a4:cf:5e:cc:fe:ed:d0:1c:35:28:44: ec:cb:d4:a2:9e:e2:fb:d0:5d:79:22:3f:40:71:3e: 9f:85:b8:35:47:3e:8b:8e:3f:9c:7c:92:bf:f3:c7: 3e:f5:b8:a6:27:26:e5:cf:95:cb:35:5f:a7:97:64: fe:8c:a4:6c:89:55:3d:df:d7:ac:1d:e7:69:99:a2: 98:e4:03:4a:c9:c4:4c:a7:79:0a:66:9e:82:7c:12: c9:b1:4b:c6:17:79:87:c6:ab:d9:dc:33:5b:86:9b: 09:f2:e9:73:03:ae:3a:bd:08:0b:06:91:bb:55:d9: 05:5d:5c:95:56:89:a4:57:c9:cb:96:71:5a:d4:91: d9:f2:cf:c7:1c:f0:6b:d0:bc:1a:b6:1b:d2:61:ff: b5:cc:a9:bd:43:8d:b8:21:2e:11:bc:9c:18:ac:12: cb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:95:4A:79:C4:DA:50:25:3A:9B:D8:85:B9:30:0B:2B:4D:02:C1:D8 X509v3 Authority Key Identifier: keyid:57:78:9C:B7:8D:85:71:4C:21:EE:60:22:D1:83:A8:D4:0A:FE:40:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57789CB78D85714C21EE6022D183A8D40AFE4063.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/57789CB78D85714C21EE6022D183A8D40AFE4063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:b6:45:bd:e1:25:47:4d:be:61:a0:3b:75:26:ed:c4:2d:da: 52:21:2c:78:6b:8b:37:a4:d4:e7:bb:e4:e7:ab:52:13:e8:36: 9c:13:21:91:b6:c3:d0:e9:7d:cb:a0:de:85:e9:45:94:23:56: da:10:d2:a0:a6:79:b0:e6:e1:14:c9:d6:42:3d:ca:c1:1f:d9: 75:38:11:c3:1f:9e:86:84:2f:e5:15:56:c0:ec:7b:67:ba:c3: 35:f9:21:bb:b5:59:75:df:a7:80:90:59:e7:a2:e8:a1:10:60: fa:c1:2c:9a:7b:06:c0:2b:d9:6c:1d:15:8f:fa:56:3b:69:ed: cc:b4:65:2c:6e:ad:c3:89:a7:f8:73:99:78:64:0c:40:1c:89: b3:3a:71:de:6d:54:15:41:e9:81:89:32:91:8c:8c:1d:b0:57: 3b:f6:8e:9b:b9:13:0a:f8:cb:fc:dc:ba:e6:b0:58:d9:03:7c: 6c:75:79:49:fb:1d:7c:ea:11:80:65:99:9c:77:63:6b:bd:ca: b6:56:1b:8c:11:26:d2:bf:e3:30:27:03:1b:4e:86:ee:10:41: 31:c9:17:67:f8:eb:f0:45:8c:d1:6e:97:36:13:17:93:85:fd: ce:51:11:06:37:86:87:7f:20:b5:ea:fd:13:1e:a9:31:4a:a0: 19:9e:35:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfuZK2jQ7TObkaCDdpxviR6SnSPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc3ODlDQjc4RDg1NzE0QzIxRUU2MDIyRDE4M0E4RDQw QUZFNDA2MzAeFw0yNjA5MjQwMjU5MjlaFw0yNjA5MjUwNjI0MjlaMDMxMTAvBgNV BAMTKDhFOTU0QTc5QzREQTUwMjUzQTlCRDg4NUI5MzAwQjJCNEQwMkMxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlVgk/cLlXIZxlrKfGt3F/7yJ4 jjVTgVDsJi6RlejE4YwVML2JYKwndJEyoMpT75vykvCFtilZCcNFECsNxqJt3FqA p3eu6noGbP62HpTWfPZq/pNiWpOP+QFqRhGkz17M/u3QHDUoROzL1KKe4vvQXXki P0BxPp+FuDVHPouOP5x8kr/zxz71uKYnJuXPlcs1X6eXZP6MpGyJVT3f16wd52mZ opjkA0rJxEyneQpmnoJ8EsmxS8YXeYfGq9ncM1uGmwny6XMDrjq9CAsGkbtV2QVd XJVWiaRXycuWcVrUkdnyz8cc8GvQvBq2G9Jh/7XMqb1DjbghLhG8nBisEstBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjpVKecTaUCU6m9iFuTALK00CwdgwHwYDVR0j BBgwFoAUV3ict42FcUwh7mAi0YOo1Ar+QGMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZkYjRjYjgtZmFlYS00NTMwLWIyOWUtMGI3YTRhZmZjMzE2LzAvNTc3ODlDQjc4 RDg1NzE0QzIxRUU2MDIyRDE4M0E4RDQwQUZFNDA2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81Nzc4OUNCNzhEODU3MTRDMjFFRTYwMjJEMTgzQThENDBBRkU0 MDYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZkYjRjYjgtZmFlYS00NTMwLWIy OWUtMGI3YTRhZmZjMzE2LzAvNTc3ODlDQjc4RDg1NzE0QzIxRUU2MDIyRDE4M0E4 RDQwQUZFNDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALe2Rb3hJUdNvmGgO3Um7cQt2lIhLHhrizek 1Oe75OerUhPoNpwTIZG2w9Dpfcug3oXpRZQjVtoQ0qCmebDm4RTJ1kI9ysEf2XU4 EcMfnoaEL+UVVsDse2e6wzX5Ibu1WXXfp4CQWeei6KEQYPrBLJp7BsAr2WwdFY/6 Vjtp7cy0ZSxurcOJp/hzmXhkDEAcibM6cd5tVBVB6YGJMpGMjB2wVzv2jpu5Ewr4 y/zcuuawWNkDfGx1eUn7HXzqEYBlmZx3Y2u9yrZWG4wRJtK/4zAnAxtOhu4QQTHJ F2f46/BFjNFulzYTF5OF/c5REQY3hod/ILXq/RMeqTFKoBmeNZA= -----END CERTIFICATE-----Generated at Thu Sep 24 18:12:44 2026 by rpki-client