$ rpki-client -vvf rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft File: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft (raw, json) Hash identifier: WzKpfrhqeLYrBOxexAcxGUWuk2w86KUStajNTi8gpEA= Subject key identifier: 58:DD:05:70:FA:1A:F6:66:BE:E2:F5:2E:09:9B:38:42:C0:AE:55:64 Authority key identifier: 78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA Certificate issuer: /CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Certificate serial: 43E1D2252AD9757506A57F993C32456D2FD9C979 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:08:51 +0000 Manifest this update: Tue 12 May 2026 04:03:51 +0000 Manifest next update: Wed 13 May 2026 07:29:51 +0000 Files and hashes: 1: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: +WPVozpZcn/3/eLncGOKTtGwOiKAcol7sdk9fs/XBJg=) 2: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: wJR2nuwydbqFCTFbU0MKnXlorFv2QpV5ZLVXkfDfe78=) 3: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 2BQf1MoYT0XGiyUxqcqKQM552NzemZjiZh/eJ1HL/Ow=) 4: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl (hash: 8tBzdej9xdVLDElIaOh1BQkq47mRreZOvajc85ntDF0=) 5: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: ezj7o418kHVsUpxHI+JsvUw+jteTe5LJOavPTf4FP1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e1:d2:25:2a:d9:75:75:06:a5:7f:99:3c:32:45:6d:2f:d9:c9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Validity Not Before: May 12 04:03:51 2026 GMT Not After : May 13 07:29:51 2026 GMT Subject: CN=58DD0570FA1AF666BEE2F52E099B3842C0AE5564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:72:4d:e0:ac:4b:74:4d:e9:2c:41:fa:ed:f1: 91:ed:26:a7:b4:b8:02:98:cc:1d:23:d2:3c:f9:48: 02:33:d6:21:34:48:b6:cf:a0:df:dc:0b:24:f2:a3: 21:02:d8:a1:d2:1e:45:79:50:42:d5:a7:b2:33:b4: 17:ad:8e:08:d5:e2:80:82:de:a6:9f:aa:e9:ec:98: 13:e2:cd:ae:79:cf:9c:56:3a:f8:40:03:97:cd:ea: 37:ce:4f:7d:c2:cd:39:f1:b1:79:90:cd:23:fe:ed: 60:da:72:49:a5:ee:7b:39:37:ae:b5:2d:ad:41:15: 21:3e:37:67:33:4b:85:a1:1d:13:08:f5:e2:86:63: 44:75:ee:b1:75:00:ac:e9:2c:be:18:14:42:f6:00: f1:7c:19:c7:c1:dc:73:f8:7a:48:d1:83:16:df:db: 9c:ba:ed:ac:94:44:5d:69:24:46:17:61:43:87:5a: 63:1d:44:2a:df:26:74:df:77:8d:c6:7a:d6:06:3d: 4d:9b:97:8c:0b:95:de:5b:8f:5f:92:56:5f:59:3e: 98:8c:27:17:64:13:3c:5f:a9:06:65:6c:f4:13:39: 18:ea:9b:87:db:95:d2:25:4b:1c:30:55:d1:12:4f: d1:23:20:e8:20:7f:a9:6d:ae:d1:23:16:61:6e:5f: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DD:05:70:FA:1A:F6:66:BE:E2:F5:2E:09:9B:38:42:C0:AE:55:64 X509v3 Authority Key Identifier: keyid:78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d5:e7:e1:e1:40:d0:c3:b7:e5:73:2d:f5:71:3b:f5:9a:6c: 7b:4c:35:65:19:64:48:96:08:f9:5d:27:2b:9c:0c:d0:f8:5d: 14:09:aa:2b:8b:fb:7d:a4:2b:13:3a:38:c7:0e:1c:6b:e9:ca: ce:10:dc:07:da:c5:22:46:ce:96:16:76:4b:74:ff:79:e3:90: d8:25:8b:61:f0:2d:6e:2b:0f:33:78:68:e8:6d:c5:99:e8:eb: b4:9d:3a:19:30:91:17:8e:c5:2b:ff:8d:56:8f:f4:41:41:87: fe:49:75:0f:83:9d:be:fa:f5:96:21:10:cb:91:1a:2c:d8:10: 52:23:fa:f6:dd:5a:4e:29:3f:75:a1:31:80:af:36:90:fe:8a: 64:aa:08:10:2f:6b:53:15:09:f1:e1:2a:23:00:41:a6:dd:f6: ce:a4:fe:63:08:58:50:16:62:4a:60:04:e1:ec:10:66:df:01: f8:3f:04:5e:7d:de:4e:2a:d1:7d:5f:b5:7b:d4:12:07:5f:5c: 76:7f:70:67:6d:2d:b5:f9:c0:6e:b2:8f:77:f1:94:5c:48:93: 27:02:f6:4a:e0:fa:c6:0e:57:9a:bc:ee:e7:73:e7:44:56:24: 66:81:b8:0e:18:42:a0:cf:b1:58:1f:6a:65:ab:c8:f1:58:36: 21:b9:0d:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+HSJSrZdXUGpX+ZPDJFbS/ZyXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJB RkY3MkJGQTAeFw0yNjA1MTIwNDAzNTFaFw0yNjA1MTMwNzI5NTFaMDMxMTAvBgNV BAMTKDU4REQwNTcwRkExQUY2NjZCRUUyRjUyRTA5OUIzODQyQzBBRTU1NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWck3grEt0TeksQfrt8ZHtJqe0 uAKYzB0j0jz5SAIz1iE0SLbPoN/cCyTyoyEC2KHSHkV5UELVp7IztBetjgjV4oCC 3qafqunsmBPiza55z5xWOvhAA5fN6jfOT33CzTnxsXmQzSP+7WDackml7ns5N661 La1BFSE+N2czS4WhHRMI9eKGY0R17rF1AKzpLL4YFEL2APF8GcfB3HP4ekjRgxbf 25y67ayURF1pJEYXYUOHWmMdRCrfJnTfd43GetYGPU2bl4wLld5bj1+SVl9ZPpiM JxdkEzxfqQZlbPQTORjqm4fbldIlSxwwVdEST9EjIOggf6ltrtEjFmFuXzS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWN0FcPoa9ma+4vUuCZs4QsCuVWQwHwYDVR0j BBgwFoAUeIxgHq03PgwQkV6z1dmfUq/3K/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZkNzIwZDUtYjdkNC00Mzk1LWEwNmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVB RDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJBRkY3MkJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODhDNjAxRUFEMzczRTBDMTA5MTVFQjNENUQ5OUY1MkFGRjcy QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlG NTJBRkY3MkJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADV5+HhQNDDt+VzLfVxO/WabHtMNWUZZEiW CPldJyucDND4XRQJqiuL+32kKxM6OMcOHGvpys4Q3AfaxSJGzpYWdkt0/3njkNgl i2HwLW4rDzN4aOhtxZno67SdOhkwkReOxSv/jVaP9EFBh/5JdQ+Dnb769ZYhEMuR GizYEFIj+vbdWk4pP3WhMYCvNpD+imSqCBAva1MVCfHhKiMAQabd9s6k/mMIWFAW YkpgBOHsEGbfAfg/BF593k4q0X1ftXvUEgdfXHZ/cGdtLbX5wG6yj3fxlFxIkycC 9krg+sYOV5q87udz50RWJGaBuA4YQqDPsVgfamWryPFYNiG5DcU= -----END CERTIFICATE-----Generated at Wed May 13 01:44:29 2026 by rpki-client