$ rpki-client -vvvf rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft File: C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft (raw, json) Hash identifier: eqFhFunhIQPwXEnUJgexx4g3EbIwbla1xvMxfyNx01M= Subject key identifier: 5D:0C:1C:09:E1:E8:6F:9F:76:B1:F8:6D:07:5D:BE:3F:49:C6:B6:69 Authority key identifier: C7:87:E8:C7:96:2B:2E:2C:DD:5E:08:D0:7B:3B:74:FA:30:2B:A3:2F Certificate issuer: /CN=C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F Certificate serial: 53044AB869B14A76DA254202B37956BF92D5AF2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 08:31:06 +0000 Manifest this update: Thu 24 Sep 2026 08:26:06 +0000 Manifest next update: Fri 25 Sep 2026 09:58:06 +0000 Files and hashes: 1: C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.crl (hash: 9mY+9cbWpNXC2svtma4I6ZbsOPueIGiBoFJHweoFVTc=) 2: 3130332e3235352e3136322e302f32332d3234203d3e20313532303137.roa (hash: ifnyMHFdQS3hNFL1UztiRIG0xxWbzt5hK/4aXfUamCA=) 3: 3130332e3235352e3136332e302f32342d3234203d3e20313532303137.roa (hash: N8k4+vbIytN8X+BgIqxZ13ZVEKymwSRIkwT06kQXGFM=) 4: 3130332e3235352e3136322e302f32342d3234203d3e20313532303137.roa (hash: rpGHy0jo68Uol/+mmOLB7REbf0gEZAKFJzwOTNprwy0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.crl rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:04:4a:b8:69:b1:4a:76:da:25:42:02:b3:79:56:bf:92:d5:af:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F Validity Not Before: Sep 24 08:26:06 2026 GMT Not After : Sep 25 09:58:06 2026 GMT Subject: CN=5D0C1C09E1E86F9F76B1F86D075DBE3F49C6B669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:fa:75:35:ba:e5:ff:4d:29:f0:e5:35:d6: ec:34:da:59:a5:d5:fb:00:1a:d4:32:68:dd:ee:08: 58:7d:35:cd:30:5f:d8:7a:01:4d:7d:3e:d7:e3:7f: c0:64:50:81:53:7f:e7:52:0c:18:4d:c5:9c:69:70: 86:c5:f3:6b:a4:26:3a:94:ef:9d:b1:7b:6e:31:39: 67:61:62:a0:a0:42:65:24:59:45:65:c4:8b:59:55: 11:c6:d9:89:04:05:d4:5f:1b:81:db:f1:88:e4:3e: e4:6c:bf:5e:81:c5:dc:a5:54:46:46:67:f3:1e:e4: 6c:99:6f:8b:d5:3f:b8:62:b8:47:3c:77:a1:88:da: 91:5c:da:b7:6f:1e:fb:df:01:b6:c3:c3:37:20:ac: 96:1b:8d:81:4e:b4:25:c5:73:2b:b0:30:46:c2:13: 20:e1:3b:74:4a:3b:74:2f:c0:49:72:7d:8a:85:4e: 21:3f:c7:ac:64:55:f2:96:b7:f3:09:d2:b4:73:60: 56:83:2d:78:c0:bf:87:4b:75:02:32:49:a2:1e:c9: 48:5c:30:5c:06:b5:01:6b:ee:60:64:cf:84:96:55: b9:b7:84:71:c2:67:73:ea:f8:fc:99:c7:ee:72:0a: 1f:44:85:25:04:35:4e:e6:5c:0b:ec:45:bf:98:e8: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0C:1C:09:E1:E8:6F:9F:76:B1:F8:6D:07:5D:BE:3F:49:C6:B6:69 X509v3 Authority Key Identifier: keyid:C7:87:E8:C7:96:2B:2E:2C:DD:5E:08:D0:7B:3B:74:FA:30:2B:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1f:11:9c:32:c1:c4:24:2a:2d:6b:54:03:e8:3c:0d:99:90: 95:67:c0:8a:7c:e1:51:b0:1e:db:a4:a7:a5:f4:1c:4f:c2:0c: 7d:32:ad:bc:23:73:fc:6c:6c:80:c2:36:64:64:6d:c4:00:44: 4e:dd:bc:86:04:9e:ce:f5:74:73:9a:b8:47:51:9b:48:e6:0c: e3:b4:37:21:c1:2d:40:9b:31:bf:38:e9:f6:fb:05:fc:22:9b: 76:ca:67:40:d0:34:cb:7f:d0:03:15:88:fd:d0:44:90:c2:fd: 88:f9:16:e3:e3:56:9e:d0:a8:64:07:62:83:b8:cd:df:01:5f: 42:4c:55:2b:94:ae:bb:22:6f:7a:21:69:1e:b3:a0:61:b2:57: 7e:eb:ff:d4:b9:de:22:31:37:95:bc:ad:02:76:f6:f3:40:fd: aa:6c:86:9c:f4:07:ca:1c:ca:c2:0d:ff:ac:e9:5f:6a:84:95: 3e:54:57:01:3a:5e:0a:7b:81:66:cf:1d:f9:14:51:8e:d6:ea: 2f:ff:fa:90:48:f5:c7:37:e6:c8:51:e9:8e:1b:b5:c1:87:d6: 73:1f:91:10:24:64:27:b8:c5:e9:c0:e0:6c:a8:b0:27:ac:ca: 75:78:c6:ce:da:29:25:3d:cc:58:44:d8:36:e8:81:69:1a:95: 65:f7:b5:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwRKuGmxSnbaJUICs3lWv5LVryswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4N0U4Qzc5NjJCMkUyQ0RENUUwOEQwN0IzQjc0RkEz MDJCQTMyRjAeFw0yNjA5MjQwODI2MDZaFw0yNjA5MjUwOTU4MDZaMDMxMTAvBgNV BAMTKDVEMEMxQzA5RTFFODZGOUY3NkIxRjg2RDA3NURCRTNGNDlDNkI2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgn/p1Nbrl/00p8OU11uw02lml 1fsAGtQyaN3uCFh9Nc0wX9h6AU19Ptfjf8BkUIFTf+dSDBhNxZxpcIbF82ukJjqU 752xe24xOWdhYqCgQmUkWUVlxItZVRHG2YkEBdRfG4Hb8YjkPuRsv16BxdylVEZG Z/Me5GyZb4vVP7hiuEc8d6GI2pFc2rdvHvvfAbbDwzcgrJYbjYFOtCXFcyuwMEbC EyDhO3RKO3QvwElyfYqFTiE/x6xkVfKWt/MJ0rRzYFaDLXjAv4dLdQIySaIeyUhc MFwGtQFr7mBkz4SWVbm3hHHCZ3Pq+PyZx+5yCh9EhSUENU7mXAvsRb+Y6Di1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXQwcCeHob592sfhtB12+P0nGtmkwHwYDVR0j BBgwFoAUx4fox5YrLizdXgjQezt0+jAroy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc3NDI1MTYtYjQ1OS00NTA2LWI0ZGUtZjY5ZTE5M2Q1Y2RlLzAvQzc4N0U4Qzc5 NjJCMkUyQ0RENUUwOEQwN0IzQjc0RkEzMDJCQTMyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzg3RThDNzk2MkIyRTJDREQ1RTA4RDA3QjNCNzRGQTMwMkJB MzJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc3NDI1MTYtYjQ1OS00NTA2LWI0 ZGUtZjY5ZTE5M2Q1Y2RlLzAvQzc4N0U4Qzc5NjJCMkUyQ0RENUUwOEQwN0IzQjc0 RkEzMDJCQTMyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0fEZwywcQkKi1rVAPoPA2ZkJVnwIp84VGw Htukp6X0HE/CDH0yrbwjc/xsbIDCNmRkbcQARE7dvIYEns71dHOauEdRm0jmDOO0 NyHBLUCbMb846fb7Bfwim3bKZ0DQNMt/0AMViP3QRJDC/Yj5FuPjVp7QqGQHYoO4 zd8BX0JMVSuUrrsib3ohaR6zoGGyV37r/9S53iIxN5W8rQJ29vNA/apshpz0B8oc ysIN/6zpX2qElT5UVwE6Xgp7gWbPHfkUUY7W6i//+pBI9cc35shR6Y4btcGH1nMf kRAkZCe4xenA4GyosCesynV4xs7aKSU9zFhE2DbogWkalWX3tZs= -----END CERTIFICATE-----Generated at Thu Sep 24 14:24:31 2026 by rpki-client