$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft File: 766F922EBE6693B4C229A00631F97A88C3ED7E42.mft (raw, json) Hash identifier: 1HGNIm4zr0KePlSevTlAq0bsny0FKAI6tYATJG+Qxko= Subject key identifier: 49:66:1A:22:41:38:43:78:3B:D3:FE:B4:23:EE:58:09:01:77:5B:0A Authority key identifier: 76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42 Certificate issuer: /CN=766F922EBE6693B4C229A00631F97A88C3ED7E42 Certificate serial: 0E08EAC6F779FA32BE6B9F9D0199C50C944747E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 09:38:29 +0000 Manifest this update: Tue 22 Sep 2026 09:33:29 +0000 Manifest next update: Wed 23 Sep 2026 12:24:29 +0000 Files and hashes: 1: 766F922EBE6693B4C229A00631F97A88C3ED7E42.crl (hash: 3CJexigjBM7YzFK09VWiHnqLk1VfMSnJ8DCSGAxq//E=) 2: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: jV9xZ4rWaJsfRT1YZup0w1zHla32pmpYrsEdtDLU9Uk=) 3: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: TPWfaDGF6n/Mep4wo2U4Mey+BVeKel6FmH9UjXBlRwE=) 4: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: CcTYmyX7VKsqrze+tnxJ2xXPrQIZB/9bxrpZpXXFkew=) 5: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: bC6bKRWDg0Wg0P6AUiYBKd/mAgFiPv8qaxAU9zI3St0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:08:ea:c6:f7:79:fa:32:be:6b:9f:9d:01:99:c5:0c:94:47:47:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=766F922EBE6693B4C229A00631F97A88C3ED7E42 Validity Not Before: Sep 22 09:33:29 2026 GMT Not After : Sep 23 12:24:29 2026 GMT Subject: CN=49661A22413843783BD3FEB423EE580901775B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3b:ef:5f:1d:af:7c:72:7a:ed:b0:d1:33:8b: 2e:d3:81:53:73:82:f8:f6:66:3b:ba:bc:ae:0e:2a: 4e:a1:fd:76:30:c5:28:c1:01:30:8d:a5:4e:27:0d: 11:71:1f:d1:5d:2f:75:f5:1e:25:68:7d:d2:75:57: 16:b8:33:83:a5:aa:5a:08:20:d1:f6:3c:40:7c:f9: d2:d9:49:40:55:08:80:87:8a:54:e8:85:78:cf:cc: a4:87:19:db:c0:0d:89:f8:ef:a1:92:c2:b4:32:b7: 8c:73:da:ae:26:dc:55:7f:35:c1:c6:8b:64:21:b1: d3:f3:ec:ab:05:19:0a:3c:31:40:42:7d:27:6c:c1: b9:10:2f:f9:37:39:df:fd:f6:7b:30:0c:96:fb:02: 63:71:7a:d2:29:b0:47:dc:99:3f:42:95:a5:94:ec: fb:19:98:f7:a1:37:0b:93:19:27:ea:cf:0f:6c:aa: 82:e0:e3:8c:60:8d:f5:5f:ad:45:4b:c7:06:98:39: e9:f3:16:90:92:e9:18:fa:9d:05:35:59:15:e8:50: f3:3b:64:dc:e5:cb:f5:23:22:d4:cd:2f:53:e9:6d: 86:ee:13:a1:c3:c2:15:40:d6:ac:55:a3:cc:e2:a6: dd:b7:16:e4:5a:82:8a:55:78:e9:9a:1f:fd:6f:27: e8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:66:1A:22:41:38:43:78:3B:D3:FE:B4:23:EE:58:09:01:77:5B:0A X509v3 Authority Key Identifier: keyid:76:6F:92:2E:BE:66:93:B4:C2:29:A0:06:31:F9:7A:88:C3:ED:7E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/766F922EBE6693B4C229A00631F97A88C3ED7E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/766F922EBE6693B4C229A00631F97A88C3ED7E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0a:d3:78:95:75:33:c6:38:87:62:d5:db:9d:50:6d:d0:e1: ea:2a:d3:08:3c:57:e4:6f:f6:5e:ae:38:9a:b2:d0:6b:2d:f6: 49:b4:6e:c9:55:d0:85:af:d2:79:73:29:e2:24:c8:3f:9b:0e: 27:3c:69:be:af:42:4a:52:ef:48:e9:0f:3d:e3:c2:f5:bb:8c: 6e:84:4b:31:1d:62:ee:b3:96:df:7e:53:47:a0:16:c7:33:10: 85:14:bd:3e:9d:08:4b:9b:2e:e3:61:01:52:d8:2f:a5:3e:7c: 7a:bc:e5:87:61:c8:8e:82:ee:96:93:94:b3:9a:de:1b:3e:ea: d6:13:33:77:ba:f8:5f:94:0a:c2:aa:95:d5:4c:68:8a:25:05: 11:4c:4e:5d:51:33:f3:6e:6c:5a:bb:99:19:2d:3d:17:cc:53: c5:6f:53:61:88:e2:8b:a1:9c:d1:55:4a:25:e7:6c:f8:e5:0d: 30:c2:48:9e:93:05:4a:7b:e4:18:2d:01:1c:71:60:12:2b:54: 46:5e:6b:98:fb:f3:ee:7d:15:55:46:ff:6e:04:72:83:80:26: b5:e5:e0:f4:ca:c1:7d:d5:01:02:de:16:50:be:92:8b:37:34: 23:5b:0f:29:e6:28:6e:dd:bd:f1:a9:5e:52:1c:5d:ef:d9:a3: 84:b4:c1:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDgjqxvd5+jK+a5+dAZnFDJRHR+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY2RjkyMkVCRTY2OTNCNEMyMjlBMDA2MzFGOTdBODhD M0VEN0U0MjAeFw0yNjA5MjIwOTMzMjlaFw0yNjA5MjMxMjI0MjlaMDMxMTAvBgNV BAMTKDQ5NjYxQTIyNDEzODQzNzgzQkQzRkVCNDIzRUU1ODA5MDE3NzVCMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVO+9fHa98cnrtsNEziy7TgVNz gvj2Zju6vK4OKk6h/XYwxSjBATCNpU4nDRFxH9FdL3X1HiVofdJ1Vxa4M4OlqloI INH2PEB8+dLZSUBVCICHilTohXjPzKSHGdvADYn476GSwrQyt4xz2q4m3FV/NcHG i2QhsdPz7KsFGQo8MUBCfSdswbkQL/k3Od/99nswDJb7AmNxetIpsEfcmT9ClaWU 7PsZmPehNwuTGSfqzw9sqoLg44xgjfVfrUVLxwaYOenzFpCS6Rj6nQU1WRXoUPM7 ZNzly/UjItTNL1PpbYbuE6HDwhVA1qxVo8zipt23FuRagopVeOmaH/1vJ+gxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSWYaIkE4Q3g70/60I+5YCQF3WwowHwYDVR0j BBgwFoAUdm+SLr5mk7TCKaAGMfl6iMPtfkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGE3ODhiNGEtZDQ1MS00OWZiLWI3Y2QtNzE5ODEwODcwZjFhLzAvNzY2RjkyMkVC RTY2OTNCNEMyMjlBMDA2MzFGOTdBODhDM0VEN0U0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NjZGOTIyRUJFNjY5M0I0QzIyOUEwMDYzMUY5N0E4OEMzRUQ3 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvNzY2RjkyMkVCRTY2OTNCNEMyMjlBMDA2MzFGOTdB ODhDM0VEN0U0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMK03iVdTPGOIdi1dudUG3Q4eoq0wg8V+Rv 9l6uOJqy0Gst9km0bslV0IWv0nlzKeIkyD+bDic8ab6vQkpS70jpDz3jwvW7jG6E SzEdYu6zlt9+U0egFsczEIUUvT6dCEubLuNhAVLYL6U+fHq85YdhyI6C7paTlLOa 3hs+6tYTM3e6+F+UCsKqldVMaIolBRFMTl1RM/NubFq7mRktPRfMU8VvU2GI4ouh nNFVSiXnbPjlDTDCSJ6TBUp75BgtARxxYBIrVEZea5j78+59FVVG/24EcoOAJrXl 4PTKwX3VAQLeFlC+kos3NCNbDynmKG7dvfGpXlIcXe/Zo4S0wRI= -----END CERTIFICATE-----Generated at Tue Sep 22 18:15:23 2026 by rpki-client