$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft File: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft (raw, json) Hash identifier: x/2rpCNGLOWwz2d0d22WXVJlsjFPWMq77YuJtmEdeYI= Subject key identifier: A6:5B:28:95:38:42:52:04:57:C1:AB:57:55:C8:BD:8D:1A:D9:68:2C Authority key identifier: 78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA Certificate issuer: /CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Certificate serial: 3C82885494B498BC8AC678AF241214A0E1BC3A51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 01:32:42 +0000 Manifest this update: Thu 24 Sep 2026 01:27:42 +0000 Manifest next update: Fri 25 Sep 2026 02:37:42 +0000 Files and hashes: 1: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 2BQf1MoYT0XGiyUxqcqKQM552NzemZjiZh/eJ1HL/Ow=) 2: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: +WPVozpZcn/3/eLncGOKTtGwOiKAcol7sdk9fs/XBJg=) 3: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: ezj7o418kHVsUpxHI+JsvUw+jteTe5LJOavPTf4FP1A=) 4: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: wJR2nuwydbqFCTFbU0MKnXlorFv2QpV5ZLVXkfDfe78=) 5: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl (hash: yYIWk/g0WG6VyZpNwSqL8ShTyh3Tw2muycm1Q5OTMOc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:82:88:54:94:b4:98:bc:8a:c6:78:af:24:12:14:a0:e1:bc:3a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Validity Not Before: Sep 24 01:27:42 2026 GMT Not After : Sep 25 02:37:42 2026 GMT Subject: CN=A65B28953842520457C1AB5755C8BD8D1AD9682C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:8b:26:b4:0f:bf:e5:a3:67:29:d8:4b:0e: 01:f8:96:b5:58:81:de:f0:37:7d:bf:4d:6c:68:42: 83:84:ef:f9:74:40:bd:eb:84:05:e9:7d:0a:a9:ae: 24:4d:f8:0c:26:27:d8:fa:c2:98:2a:00:a7:43:c9: 6c:09:ee:bd:96:ba:6e:95:d6:f2:cf:88:60:30:8c: 49:a9:cf:a8:07:b1:dc:a1:c1:25:13:0e:88:50:c9: ee:4d:c1:52:88:9d:31:d6:de:fa:8d:b5:19:46:9a: 39:d7:2a:d9:a1:c8:d3:5f:00:67:9e:38:1e:81:3e: ed:17:47:9b:0b:34:17:cf:00:bd:d9:07:d5:7f:44: 2c:3e:d0:31:5d:72:19:c5:f7:7c:90:43:fa:39:2b: ba:b6:2a:24:be:b7:d9:8f:0f:0d:ef:91:ad:64:98: ff:86:73:6a:2e:20:42:13:89:d3:55:44:d1:6e:96: 28:73:82:ce:e5:87:57:30:f8:aa:41:c2:27:15:2a: c5:fc:a7:33:47:61:24:f8:ec:c8:af:24:3d:b8:31: a2:f1:68:21:38:e0:0d:6e:64:aa:08:96:3c:e2:1c: b9:74:8f:bd:bd:87:99:e8:15:da:82:e5:0a:a1:d1: d9:92:83:26:bc:be:81:ec:c1:be:d8:fb:b1:cf:b3: d5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5B:28:95:38:42:52:04:57:C1:AB:57:55:C8:BD:8D:1A:D9:68:2C X509v3 Authority Key Identifier: keyid:78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5f:4d:ae:f5:4d:ee:f1:7f:30:e4:d6:8a:c7:cd:b4:19:54: 01:e5:6a:5d:1a:4b:64:7f:f0:d7:d2:a1:a4:9a:a7:f0:03:8b: 8f:d5:31:a8:0a:1a:6f:2e:7c:17:58:70:54:0b:95:e7:7e:15: 88:96:2e:52:82:58:42:6c:a9:7b:4b:2b:13:e9:14:b5:d3:3e: 39:cc:18:77:ef:b7:fe:c7:18:bb:2a:8f:b0:a5:a5:e1:23:ab: 64:96:e6:9c:1c:5e:bb:c2:e5:d8:27:d7:04:e4:94:b4:de:2a: 8c:52:d8:f2:0a:25:14:c1:e3:f3:c3:eb:ec:af:c1:4f:6e:86: 7f:0b:4b:75:29:37:07:13:65:c3:8f:b3:26:59:7b:83:8d:5f: 08:c5:3b:ec:d5:e5:73:db:ef:5a:5a:39:00:85:22:f9:db:0c: e2:6b:a3:ee:6b:44:9d:21:9d:9c:6c:46:c4:c5:5e:46:5a:ce: e7:f0:06:d8:73:f8:05:af:99:e8:bc:66:3b:d0:8b:b5:73:4d: 72:df:de:a1:96:2a:ba:12:47:a0:3e:a3:13:65:1d:fb:8e:41: 2b:c2:6d:47:18:ad:a2:e0:70:6c:7f:d6:9e:a4:16:ea:be:f4: 4a:5e:f7:5c:99:41:8d:a5:9c:35:e6:1d:71:ea:ba:c1:8e:02: 5e:ba:6b:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIKIVJS0mLyKxnivJBIUoOG8OlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJB RkY3MkJGQTAeFw0yNjA5MjQwMTI3NDJaFw0yNjA5MjUwMjM3NDJaMDMxMTAvBgNV BAMTKEE2NUIyODk1Mzg0MjUyMDQ1N0MxQUI1NzU1QzhCRDhEMUFEOTY4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInYsmtA+/5aNnKdhLDgH4lrVY gd7wN32/TWxoQoOE7/l0QL3rhAXpfQqpriRN+AwmJ9j6wpgqAKdDyWwJ7r2Wum6V 1vLPiGAwjEmpz6gHsdyhwSUTDohQye5NwVKInTHW3vqNtRlGmjnXKtmhyNNfAGee OB6BPu0XR5sLNBfPAL3ZB9V/RCw+0DFdchnF93yQQ/o5K7q2KiS+t9mPDw3vka1k mP+Gc2ouIEITidNVRNFulihzgs7lh1cw+KpBwicVKsX8pzNHYST47MivJD24MaLx aCE44A1uZKoIljziHLl0j729h5noFdqC5Qqh0dmSgya8voHswb7Y+7HPs9VxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUplsolThCUgRXwatXVci9jRrZaCwwHwYDVR0j BBgwFoAUeIxgHq03PgwQkV6z1dmfUq/3K/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZkNzIwZDUtYjdkNC00Mzk1LWEwNmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVB RDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJBRkY3MkJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODhDNjAxRUFEMzczRTBDMTA5MTVFQjNENUQ5OUY1MkFGRjcy QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlG NTJBRkY3MkJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhfTa71Te7xfzDk1orHzbQZVAHlal0aS2R/ 8NfSoaSap/ADi4/VMagKGm8ufBdYcFQLled+FYiWLlKCWEJsqXtLKxPpFLXTPjnM GHfvt/7HGLsqj7ClpeEjq2SW5pwcXrvC5dgn1wTklLTeKoxS2PIKJRTB4/PD6+yv wU9uhn8LS3UpNwcTZcOPsyZZe4ONXwjFO+zV5XPb71paOQCFIvnbDOJro+5rRJ0h nZxsRsTFXkZazufwBthz+AWvmei8ZjvQi7VzTXLf3qGWKroSR6A+oxNlHfuOQSvC bUcYraLgcGx/1p6kFuq+9Epe91yZQY2lnDXmHXHqusGOAl66a0Q= -----END CERTIFICATE-----Generated at Thu Sep 24 07:03:14 2026 by rpki-client