$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft File: 785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft (raw, json) Hash identifier: DJzqros9T/Mz7NA3J4TI87r5lNvFyLzoO2Mz4UShvNs= Subject key identifier: C5:9C:08:EA:C1:6F:DB:23:71:D4:FD:17:5B:AB:D8:3D:5F:62:53:6E Authority key identifier: 78:50:24:DB:7A:6F:C2:EE:9E:4D:4A:40:97:68:D7:9A:95:22:73:FC Certificate issuer: /CN=785024DB7A6FC2EE9E4D4A409768D79A952273FC Certificate serial: 6A32D53AF889D179DD3341366F54CD66BA923AE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 07:04:51 +0000 Manifest this update: Wed 23 Sep 2026 06:59:51 +0000 Manifest next update: Thu 24 Sep 2026 07:36:51 +0000 Files and hashes: 1: 785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl (hash: ofAoW097dWGcRbgIG1nfpOvNdWrdBWHVMkhUWMAAvgg=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: yOnWZNbCc8o1mKC0JiqTlN6+Y33PQ/Kc+NLmWQanxsY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:32:d5:3a:f8:89:d1:79:dd:33:41:36:6f:54:cd:66:ba:92:3a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785024DB7A6FC2EE9E4D4A409768D79A952273FC Validity Not Before: Sep 23 06:59:51 2026 GMT Not After : Sep 24 07:36:51 2026 GMT Subject: CN=C59C08EAC16FDB2371D4FD175BABD83D5F62536E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fa:61:a1:cd:5d:9a:be:52:69:d9:46:b5:b0: 02:53:da:ba:c5:3d:68:d1:90:a5:ba:42:86:65:86: b3:19:2e:9a:65:2f:32:5c:f2:d0:4a:23:20:0d:1c: f4:e9:a6:74:de:36:a1:fa:a5:f6:10:cd:64:84:66: 28:8a:ef:75:cb:ff:5f:6a:9a:af:6e:0d:14:d2:11: 36:69:df:a7:71:f3:97:aa:00:35:26:fe:8f:1c:cb: b4:80:d0:94:57:d2:cb:a6:f2:c5:49:de:dd:6a:e8: c0:47:e8:a8:04:c1:b1:94:ad:ae:b2:05:e9:4d:28: fb:f7:55:c4:95:cc:39:98:6a:d7:53:f3:b0:41:e6: f8:40:f5:c1:8c:8c:8a:86:65:cc:2e:87:69:2c:48: b9:97:29:f5:01:0d:04:76:96:9c:51:a2:8a:a2:a9: 27:a7:31:da:98:8d:8b:50:0b:a4:16:66:17:88:1d: de:50:92:71:a5:b5:1e:51:42:52:1a:5d:58:52:f4: 7a:ac:06:3d:d4:c1:25:07:bc:82:3f:aa:9b:8a:62: ca:e4:2a:de:d2:b2:88:a6:08:69:2d:d7:7b:0d:e5: 61:2e:fd:13:af:e3:a4:9e:03:f5:2c:83:3a:ee:17: f6:58:ee:71:16:a7:19:73:07:b6:8d:ed:38:59:34: 08:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9C:08:EA:C1:6F:DB:23:71:D4:FD:17:5B:AB:D8:3D:5F:62:53:6E X509v3 Authority Key Identifier: keyid:78:50:24:DB:7A:6F:C2:EE:9E:4D:4A:40:97:68:D7:9A:95:22:73:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:75:15:c7:f6:c1:38:ff:7d:e6:cc:ed:75:63:8a:96:95:93: 60:13:ce:21:14:00:ad:a7:65:22:d0:9c:7f:01:44:18:62:d1: 3d:91:ec:8c:2c:00:a9:50:46:d7:1b:3d:6f:c7:02:93:e3:a5: 4c:54:f4:1a:d1:21:9a:60:a5:47:30:52:0a:ca:c5:e4:cc:da: 6b:e4:79:34:7f:05:25:66:6b:b7:28:d4:e9:25:d0:2d:bf:77: c2:f0:86:eb:22:58:f9:66:f0:d3:1f:ca:ec:4d:b5:20:3e:df: b3:b3:a8:d4:8d:78:e2:9d:5d:e0:32:ca:f5:09:b1:04:4d:69: 40:f8:4e:61:af:15:db:57:47:29:f8:21:bd:35:83:50:b5:0d: a8:33:84:c6:b2:3e:cf:bb:b1:70:71:69:d6:48:f4:ee:45:e2: db:be:cf:b6:75:3f:07:46:99:60:1a:38:e1:b6:9b:37:dc:df: 13:0f:98:75:e6:03:32:5a:d5:07:b7:5c:db:4c:8b:3f:5d:37: 7c:75:db:ec:96:2f:0f:77:5a:cd:87:72:98:25:0c:50:49:40: da:88:d7:51:41:ce:e4:7b:e4:52:df:fa:2d:2b:5e:c4:78:26: 56:13:d6:d8:dd:da:01:c1:9d:e9:83:4c:8d:cd:38:6c:48:e0: 0a:89:5d:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajLVOviJ0XndM0E2b1TNZrqSOuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg1MDI0REI3QTZGQzJFRTlFNEQ0QTQwOTc2OEQ3OUE5 NTIyNzNGQzAeFw0yNjA5MjMwNjU5NTFaFw0yNjA5MjQwNzM2NTFaMDMxMTAvBgNV BAMTKEM1OUMwOEVBQzE2RkRCMjM3MUQ0RkQxNzVCQUJEODNENUY2MjUzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM+mGhzV2avlJp2Ua1sAJT2rrF PWjRkKW6QoZlhrMZLpplLzJc8tBKIyANHPTppnTeNqH6pfYQzWSEZiiK73XL/19q mq9uDRTSETZp36dx85eqADUm/o8cy7SA0JRX0sum8sVJ3t1q6MBH6KgEwbGUra6y BelNKPv3VcSVzDmYatdT87BB5vhA9cGMjIqGZcwuh2ksSLmXKfUBDQR2lpxRooqi qSenMdqYjYtQC6QWZheIHd5QknGltR5RQlIaXVhS9HqsBj3UwSUHvII/qpuKYsrk Kt7SsoimCGkt13sN5WEu/ROv46SeA/UsgzruF/ZY7nEWpxlzB7aN7ThZNAhlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxZwI6sFv2yNx1P0XW6vYPV9iU24wHwYDVR0j BBgwFoAUeFAk23pvwu6eTUpAl2jXmpUic/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFhMjkyOWMtNjA4OC00Y2I1LTgzYzYtZjRhMzU2YjIwZjlkLzAvNzg1MDI0REI3 QTZGQzJFRTlFNEQ0QTQwOTc2OEQ3OUE5NTIyNzNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODUwMjREQjdBNkZDMkVFOUU0RDRBNDA5NzY4RDc5QTk1MjI3 M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvNzg1MDI0REI3QTZGQzJFRTlFNEQ0QTQwOTc2OEQ3 OUE5NTIyNzNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHd1Fcf2wTj/febM7XVjipaVk2ATziEUAK2n ZSLQnH8BRBhi0T2R7IwsAKlQRtcbPW/HApPjpUxU9BrRIZpgpUcwUgrKxeTM2mvk eTR/BSVma7co1Okl0C2/d8LwhusiWPlm8NMfyuxNtSA+37OzqNSNeOKdXeAyyvUJ sQRNaUD4TmGvFdtXRyn4Ib01g1C1DagzhMayPs+7sXBxadZI9O5F4tu+z7Z1PwdG mWAaOOG2mzfc3xMPmHXmAzJa1Qe3XNtMiz9dN3x12+yWLw93Ws2HcpglDFBJQNqI 11FBzuR75FLf+i0rXsR4JlYT1tjd2gHBnemDTI3NOGxI4AqJXaw= -----END CERTIFICATE-----Generated at Thu Sep 24 01:07:22 2026 by rpki-client