$ rpki-client -vvf rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft File: C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft (raw, json) Hash identifier: cWzhV5n14wka3eGNVbC3mGCiQR7Id9KHrR81sEiaU/g= Subject key identifier: 5C:22:F1:9E:E7:82:F1:D7:19:52:43:69:7C:58:FE:F1:FA:2F:D4:AF Authority key identifier: C7:87:E8:C7:96:2B:2E:2C:DD:5E:08:D0:7B:3B:74:FA:30:2B:A3:2F Certificate issuer: /CN=C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F Certificate serial: 0CD8B99D4737C7976238D4A79AA09072B6EDCD2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:13:19 +0000 Manifest this update: Tue 12 May 2026 18:08:19 +0000 Manifest next update: Wed 13 May 2026 19:02:19 +0000 Files and hashes: 1: 3130332e3235352e3136322e302f32332d3234203d3e20313532303137.roa (hash: ifnyMHFdQS3hNFL1UztiRIG0xxWbzt5hK/4aXfUamCA=) 2: 3130332e3235352e3136332e302f32342d3234203d3e20313532303137.roa (hash: N8k4+vbIytN8X+BgIqxZ13ZVEKymwSRIkwT06kQXGFM=) 3: 3130332e3235352e3136322e302f32342d3234203d3e20313532303137.roa (hash: rpGHy0jo68Uol/+mmOLB7REbf0gEZAKFJzwOTNprwy0=) 4: C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.crl (hash: NT81jtGozvZOjQK+ZaiXuNnS7eGJqqeYIm+GmtbTMUA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.crl rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d8:b9:9d:47:37:c7:97:62:38:d4:a7:9a:a0:90:72:b6:ed:cd:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F Validity Not Before: May 12 18:08:19 2026 GMT Not After : May 13 19:02:19 2026 GMT Subject: CN=5C22F19EE782F1D7195243697C58FEF1FA2FD4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:32:b1:b5:70:b6:7e:63:d5:57:f8:25:3a: 39:85:58:e2:25:35:75:16:ce:57:04:88:da:35:d8: c8:b9:d7:0f:1e:35:19:21:d5:af:01:98:f0:72:a1: 61:4e:78:d2:dd:bc:81:c4:73:db:40:8c:3c:37:b0: 39:6c:b8:ba:27:2a:df:ef:02:57:4b:fc:d6:7f:a8: 7d:8f:14:89:29:e0:39:67:67:67:cf:0d:20:6e:30: 43:c2:b0:2c:02:43:a5:2c:52:4c:70:fa:f6:c9:6e: e1:0a:8c:7d:87:60:26:78:02:0a:e3:75:17:4a:fd: ed:9b:a4:9c:eb:d8:14:9b:3e:93:74:b4:ea:37:ae: 60:c1:3c:b2:85:6e:39:5d:3c:9a:6e:10:81:d5:63: a6:da:27:a5:89:2a:5f:de:7c:e2:91:06:d7:23:78: 56:a7:fc:df:86:dd:2c:05:9d:30:6f:85:42:aa:51: 19:8e:a0:27:f9:04:e0:8c:f9:de:fb:48:54:7d:2a: 4e:21:e5:c1:85:61:fa:f0:55:cd:67:fc:f1:5b:c6: 28:59:bf:83:d4:fe:f0:5a:e0:c5:a0:2b:ad:01:ec: 97:42:cd:8f:79:56:25:cd:0d:54:ef:94:52:13:d7: dc:9a:7b:cb:37:c5:64:83:5f:97:65:21:30:a1:a8: dd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:22:F1:9E:E7:82:F1:D7:19:52:43:69:7C:58:FE:F1:FA:2F:D4:AF X509v3 Authority Key Identifier: keyid:C7:87:E8:C7:96:2B:2E:2C:DD:5E:08:D0:7B:3B:74:FA:30:2B:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:58:5a:5c:5b:90:e2:e5:77:24:91:89:54:b5:22:01:07:81: 53:68:95:e6:86:ee:97:6c:d6:3a:15:e5:81:49:75:7b:18:90: fc:21:54:52:53:e9:d5:a5:25:40:3c:41:33:36:ca:4c:c9:ea: 07:fe:50:6a:e5:b6:ce:3b:3f:b6:74:be:45:ba:a7:72:54:a2: 6d:98:c7:33:ea:d4:b6:d3:fe:5a:2e:be:be:58:e9:e2:ac:3a: d6:63:0f:eb:03:a5:8f:63:66:ac:3b:df:05:14:bf:a6:03:70: 03:c4:95:97:de:07:a1:ec:dc:9b:78:a1:8f:f6:4b:0c:7c:96: 88:a8:b8:d6:20:93:45:01:c8:66:45:0b:72:ba:81:c2:2f:19: df:71:a7:2f:9f:ab:eb:3c:f3:fc:0c:71:59:8b:70:5b:4b:42: c8:a5:9d:9f:32:f9:67:89:6a:d5:b0:22:de:66:69:60:53:92: 4e:61:23:e5:d3:35:0b:74:82:ad:45:ed:d6:1a:61:d3:a3:59: 79:1f:cd:f6:b4:69:fb:f1:10:af:24:05:f6:68:9b:57:e4:e0: d8:fd:82:53:5b:7a:be:e5:fe:15:0a:71:3c:0a:1e:b7:7f:b8: 4d:f3:8b:3c:e3:fb:0f:d9:25:fa:d8:d4:ec:5e:4c:87:69:0e: 7c:fe:86:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNi5nUc3x5diONSnmqCQcrbtzS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4N0U4Qzc5NjJCMkUyQ0RENUUwOEQwN0IzQjc0RkEz MDJCQTMyRjAeFw0yNjA1MTIxODA4MTlaFw0yNjA1MTMxOTAyMTlaMDMxMTAvBgNV BAMTKDVDMjJGMTlFRTc4MkYxRDcxOTUyNDM2OTdDNThGRUYxRkEyRkQ0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rTKxtXC2fmPVV/glOjmFWOIl NXUWzlcEiNo12Mi51w8eNRkh1a8BmPByoWFOeNLdvIHEc9tAjDw3sDlsuLonKt/v AldL/NZ/qH2PFIkp4DlnZ2fPDSBuMEPCsCwCQ6UsUkxw+vbJbuEKjH2HYCZ4Agrj dRdK/e2bpJzr2BSbPpN0tOo3rmDBPLKFbjldPJpuEIHVY6baJ6WJKl/efOKRBtcj eFan/N+G3SwFnTBvhUKqURmOoCf5BOCM+d77SFR9Kk4h5cGFYfrwVc1n/PFbxihZ v4PU/vBa4MWgK60B7JdCzY95ViXNDVTvlFIT19yae8s3xWSDX5dlITChqN13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCLxnueC8dcZUkNpfFj+8fov1K8wHwYDVR0j BBgwFoAUx4fox5YrLizdXgjQezt0+jAroy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc3NDI1MTYtYjQ1OS00NTA2LWI0ZGUtZjY5ZTE5M2Q1Y2RlLzAvQzc4N0U4Qzc5 NjJCMkUyQ0RENUUwOEQwN0IzQjc0RkEzMDJCQTMyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzg3RThDNzk2MkIyRTJDREQ1RTA4RDA3QjNCNzRGQTMwMkJB MzJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc3NDI1MTYtYjQ1OS00NTA2LWI0 ZGUtZjY5ZTE5M2Q1Y2RlLzAvQzc4N0U4Qzc5NjJCMkUyQ0RENUUwOEQwN0IzQjc0 RkEzMDJCQTMyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJYWlxbkOLldySRiVS1IgEHgVNoleaG7pds 1joV5YFJdXsYkPwhVFJT6dWlJUA8QTM2ykzJ6gf+UGrlts47P7Z0vkW6p3JUom2Y xzPq1LbT/louvr5Y6eKsOtZjD+sDpY9jZqw73wUUv6YDcAPElZfeB6Hs3Jt4oY/2 Swx8loiouNYgk0UByGZFC3K6gcIvGd9xpy+fq+s88/wMcVmLcFtLQsilnZ8y+WeJ atWwIt5maWBTkk5hI+XTNQt0gq1F7dYaYdOjWXkfzfa0afvxEK8kBfZom1fk4Nj9 glNber7l/hUKcTwKHrd/uE3zizzj+w/ZJfrY1OxeTIdpDnz+huQ= -----END CERTIFICATE-----Generated at Wed May 13 04:19:59 2026 by rpki-client