$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft File: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft (raw, json) Hash identifier: HdxMi9acpSfgWXcUTs0wDtLVGJFNHkfH0yYq8do4IfE= Subject key identifier: F9:9A:6E:AA:48:D7:F4:34:2B:D2:1D:36:8B:79:4A:48:1C:9A:16:AE Authority key identifier: 78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA Certificate issuer: /CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Certificate serial: 7DF2041180319D9FB7C828AD2554A62CA6AB8E67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 10:48:53 +0000 Manifest this update: Fri 25 Sep 2026 10:43:53 +0000 Manifest next update: Sat 26 Sep 2026 11:36:53 +0000 Files and hashes: 1: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 2BQf1MoYT0XGiyUxqcqKQM552NzemZjiZh/eJ1HL/Ow=) 2: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: ezj7o418kHVsUpxHI+JsvUw+jteTe5LJOavPTf4FP1A=) 3: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: wJR2nuwydbqFCTFbU0MKnXlorFv2QpV5ZLVXkfDfe78=) 4: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl (hash: k/XRzbpS8iG8bweISFljkYQPoFGpCPkIDkYQHgPqo2c=) 5: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: +WPVozpZcn/3/eLncGOKTtGwOiKAcol7sdk9fs/XBJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f2:04:11:80:31:9d:9f:b7:c8:28:ad:25:54:a6:2c:a6:ab:8e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Validity Not Before: Sep 25 10:43:53 2026 GMT Not After : Sep 26 11:36:53 2026 GMT Subject: CN=F99A6EAA48D7F4342BD21D368B794A481C9A16AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:f0:00:78:1f:58:58:2b:9f:e1:f9:67:57: 4c:82:be:9c:ad:93:5d:2a:ec:a8:10:9c:c6:f2:68: c0:34:d0:a8:a5:80:90:9f:06:5c:4f:00:f3:ce:eb: 57:c4:60:d9:64:34:12:47:5c:bf:c2:3b:26:12:dc: 47:94:21:1d:21:3d:7a:7c:35:a1:8b:46:8a:76:ef: 50:15:bd:49:e1:9a:20:44:d1:87:2f:cb:e4:e8:71: b6:e8:24:57:4c:85:26:ae:b6:ef:db:e1:db:50:85: ab:ca:2a:c0:9e:67:ff:15:20:0b:19:80:27:61:1e: a4:77:c1:e8:33:43:d0:ab:b6:64:78:df:55:cd:08: 91:b7:c1:9d:3b:1f:26:05:ae:6e:58:64:5e:30:c9: 3f:b1:42:4d:1a:e2:cf:1d:cb:95:6b:99:c9:7a:1e: 13:3c:c1:c0:5f:32:30:39:ac:e8:2b:bf:3c:fa:ce: 08:64:3e:db:9e:62:72:ed:b4:a8:8f:e7:c2:e6:c9: ef:24:41:8b:b0:88:9a:88:1e:de:ef:bf:ff:e4:a4: af:5b:66:d7:a8:e7:f1:1d:2c:12:33:e4:e1:27:b2: c0:33:8b:8d:94:9c:17:c8:8f:d3:aa:f4:a5:11:28: 58:c3:8c:b7:a5:ab:fb:04:c9:d6:4d:cd:c4:8b:8e: 52:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9A:6E:AA:48:D7:F4:34:2B:D2:1D:36:8B:79:4A:48:1C:9A:16:AE X509v3 Authority Key Identifier: keyid:78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ee:5b:0f:3f:e4:cd:35:db:5c:7b:e5:c0:4d:d3:f0:3a:cd: 9e:01:58:88:44:34:ea:a0:a4:6e:81:9c:d9:56:a3:22:17:54: 07:99:74:75:bb:24:9a:67:96:63:47:d4:36:d3:33:9b:57:65: 03:55:76:c1:06:67:86:e3:76:52:dd:5d:ed:45:80:18:95:c9: 05:77:99:58:c4:2b:4a:44:7d:56:78:4c:dc:56:8e:98:bc:f5: a4:18:e5:bf:89:44:0d:06:1f:e1:3a:fb:d2:d1:c4:25:80:0d: 4d:f1:88:ce:01:6e:a9:fe:45:75:bd:40:a8:b0:e1:19:ba:ae: 02:5a:7b:2d:ef:bd:94:0d:ce:96:0d:e0:8f:44:06:ce:ec:b2: d5:5a:46:33:73:42:07:63:45:11:5d:77:b8:10:38:91:c8:a6: b3:b5:46:95:00:6d:82:0c:58:31:8b:e5:e6:49:5c:df:e3:26: 2d:6c:26:27:6b:27:a8:66:63:7a:f3:ac:58:02:a4:63:b0:1f: 54:f9:aa:dc:75:ab:1c:f0:a6:66:5e:7e:d1:74:b0:23:83:ee: 34:a1:56:e4:e4:41:56:26:09:0b:86:bd:b4:1a:ab:cd:b8:4d: f7:8e:8b:55:1f:05:eb:8d:49:25:65:7a:a6:53:9b:0e:cf:d8: d9:6b:8b:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffIEEYAxnZ+3yCitJVSmLKarjmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJB RkY3MkJGQTAeFw0yNjA5MjUxMDQzNTNaFw0yNjA5MjYxMTM2NTNaMDMxMTAvBgNV BAMTKEY5OUE2RUFBNDhEN0Y0MzQyQkQyMUQzNjhCNzk0QTQ4MUM5QTE2QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7/AAeB9YWCuf4flnV0yCvpyt k10q7KgQnMbyaMA00KilgJCfBlxPAPPO61fEYNlkNBJHXL/COyYS3EeUIR0hPXp8 NaGLRop271AVvUnhmiBE0Ycvy+TocbboJFdMhSautu/b4dtQhavKKsCeZ/8VIAsZ gCdhHqR3wegzQ9CrtmR431XNCJG3wZ07HyYFrm5YZF4wyT+xQk0a4s8dy5Vrmcl6 HhM8wcBfMjA5rOgrvzz6zghkPtueYnLttKiP58Lmye8kQYuwiJqIHt7vv//kpK9b Zteo5/EdLBIz5OEnssAzi42UnBfIj9Oq9KURKFjDjLelq/sEydZNzcSLjlJnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ZpuqkjX9DQr0h02i3lKSByaFq4wHwYDVR0j BBgwFoAUeIxgHq03PgwQkV6z1dmfUq/3K/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZkNzIwZDUtYjdkNC00Mzk1LWEwNmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVB RDM3M0UwQzEwOTE1RUIzRDVEOTlGNTJBRkY3MkJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODhDNjAxRUFEMzczRTBDMTA5MTVFQjNENUQ5OUY1MkFGRjcy QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvNzg4QzYwMUVBRDM3M0UwQzEwOTE1RUIzRDVEOTlG NTJBRkY3MkJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvuWw8/5M0121x75cBN0/A6zZ4BWIhENOqg pG6BnNlWoyIXVAeZdHW7JJpnlmNH1DbTM5tXZQNVdsEGZ4bjdlLdXe1FgBiVyQV3 mVjEK0pEfVZ4TNxWjpi89aQY5b+JRA0GH+E6+9LRxCWADU3xiM4Bbqn+RXW9QKiw 4Rm6rgJaey3vvZQNzpYN4I9EBs7sstVaRjNzQgdjRRFdd7gQOJHIprO1RpUAbYIM WDGL5eZJXN/jJi1sJidrJ6hmY3rzrFgCpGOwH1T5qtx1qxzwpmZeftF0sCOD7jSh VuTkQVYmCQuGvbQaq824TfeOi1UfBeuNSSVleqZTmw7P2Nlri/w= -----END CERTIFICATE-----Generated at Fri Sep 25 23:49:44 2026 by rpki-client