$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft File: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft (raw, json) Hash identifier: DGzbqiKvD/F+jihbr4Xqblj7j4j3TRqnhDrxWSIVSAs= Subject key identifier: 7D:35:07:62:F2:7B:10:76:EF:36:D7:83:C9:E5:21:23:93:B9:B5:30 Authority key identifier: 77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4 Certificate issuer: /CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4 Certificate serial: 44EA4212D947A1E0278D6E9442DBC517EE29FE06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft Manifest number: BF Signing time: Mon 21 Sep 2026 05:13:06 +0000 Manifest this update: Mon 21 Sep 2026 05:08:06 +0000 Manifest next update: Tue 22 Sep 2026 06:38:06 +0000 Files and hashes: 1: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl (hash: SoQgF9wa4ReFAdvrRT94YpDGaHDvqd0uu6g1zbkr1uw=) 2: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: YndAlxaqXYkWW68P17cuw0iGsOCiRy+p2CjBviV7Rok=) 3: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: ccnKpMhAZ50WINER3EYQ3VYvFkNVbacY8s+OufsENRg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ea:42:12:d9:47:a1:e0:27:8d:6e:94:42:db:c5:17:ee:29:fe:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4 Validity Not Before: Sep 21 05:08:06 2026 GMT Not After : Sep 22 06:38:06 2026 GMT Subject: CN=7D350762F27B1076EF36D783C9E5212393B9B530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:7d:67:33:70:f3:fc:93:14:f2:66:c7:c0: b7:14:07:f9:12:74:cc:2a:5c:7e:b5:b0:5f:53:43: e6:b7:30:2b:ba:fe:d0:f0:0e:f8:17:40:31:42:a5: e6:31:f0:18:7e:dc:2b:92:ee:56:b8:8e:7c:bc:25: 56:61:8e:9b:a3:b5:b5:0c:24:6e:73:44:8e:86:9c: a4:7d:fd:96:e6:03:fd:af:09:6c:ff:6f:9e:d9:62: b1:4e:18:a0:9f:9f:76:b4:1e:75:3b:99:f5:2f:b8: 99:7b:bf:0b:19:ba:72:e9:50:14:0b:11:38:16:a4: 26:a6:c4:22:86:f2:d0:4d:12:15:a0:d1:9e:1f:59: 28:70:9b:d7:06:d3:31:50:79:d5:c2:53:cc:e7:b6: d8:26:51:02:50:41:af:1a:49:dd:5d:b9:44:d7:91: 95:8c:7d:be:a1:97:1c:dc:ee:a8:3d:23:02:b6:66: 6e:96:f6:18:97:9a:b2:ed:de:5e:06:28:38:4f:d8: 3b:0b:ed:7a:16:3d:7b:8a:b7:bd:9e:80:9f:83:b8: 38:10:d5:ff:e9:8a:75:50:b6:8f:88:0d:42:00:5a: 9d:eb:10:cc:38:13:60:8f:e7:f9:91:1b:19:f1:30: 7f:c0:fc:7c:b6:05:00:f7:20:dd:e7:de:08:56:9c: 43:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:35:07:62:F2:7B:10:76:EF:36:D7:83:C9:E5:21:23:93:B9:B5:30 X509v3 Authority Key Identifier: keyid:77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:39:f8:ec:dd:1e:9c:a7:db:f0:fa:ee:e6:d9:aa:0f:38:85: 02:a4:6b:6c:01:f4:9b:fe:44:57:5b:1a:13:e8:2b:52:0c:c2: 24:81:09:70:96:28:8f:4d:5d:12:08:8c:11:ea:e3:9b:7e:bb: ca:da:2e:c1:41:96:78:eb:f2:03:0d:38:9e:e0:9a:ce:04:66: 0b:5a:e7:ec:3f:79:b0:de:70:d9:3b:bb:0c:89:ae:02:41:3e: d9:95:39:4f:96:5c:03:5d:3e:7e:7a:6d:a3:9d:6c:66:d6:c0: bb:91:be:31:29:50:e1:ac:b6:15:46:4a:db:20:ef:84:2c:a9: 9c:58:3a:33:fd:b4:44:22:31:05:ba:77:33:68:dd:5d:3a:22: 5e:f7:df:11:5b:49:8c:2b:7a:c9:84:4a:fd:36:23:70:b6:9f: 02:e7:7f:02:d1:75:4e:28:64:c9:e6:bb:96:2a:3b:ea:7d:de: 4f:7e:b4:2d:39:67:f2:fe:34:fd:84:ad:e8:65:6e:0c:1a:8e: 65:47:6c:07:ba:48:24:60:b1:d6:90:2c:46:57:a3:40:1e:21: 7b:fd:f3:95:0e:f3:93:1d:dc:1e:b8:92:4a:51:db:c5:61:51: f6:c4:13:18:fd:17:ba:eb:c6:ce:b8:0f:f6:e7:73:08:7d:bb: a4:37:49:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROpCEtlHoeAnjW6UQtvFF+4p/gYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0MDNE QkQxRTJDNDAeFw0yNjA5MjEwNTA4MDZaFw0yNjA5MjIwNjM4MDZaMDMxMTAvBgNV BAMTKDdEMzUwNzYyRjI3QjEwNzZFRjM2RDc4M0M5RTUyMTIzOTNCOUI1MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/X1nM3Dz/JMU8mbHwLcUB/kS dMwqXH61sF9TQ+a3MCu6/tDwDvgXQDFCpeYx8Bh+3CuS7la4jny8JVZhjpujtbUM JG5zRI6GnKR9/ZbmA/2vCWz/b57ZYrFOGKCfn3a0HnU7mfUvuJl7vwsZunLpUBQL ETgWpCamxCKG8tBNEhWg0Z4fWShwm9cG0zFQedXCU8znttgmUQJQQa8aSd1duUTX kZWMfb6hlxzc7qg9IwK2Zm6W9hiXmrLt3l4GKDhP2DsL7XoWPXuKt72egJ+DuDgQ 1f/pinVQto+IDUIAWp3rEMw4E2CP5/mRGxnxMH/A/Hy2BQD3IN3n3ghWnEM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfTUHYvJ7EHbvNteDyeUhI5O5tTAwHwYDVR0j BBgwFoAUd4pxuzyRNoxlbeuBjp20A9vR4sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhmNWJhNWUtMWY1Yy00Mjg0LTlhMTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIz QzkxMzY4QzY1NkRFQjgxOEU5REI0MDNEQkQxRTJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzhBNzFCQjNDOTEzNjhDNjU2REVCODE4RTlEQjQwM0RCRDFF MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0 MDNEQkQxRTJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI5+OzdHpyn2/D67ubZqg84hQKka2wB9Jv+ RFdbGhPoK1IMwiSBCXCWKI9NXRIIjBHq45t+u8raLsFBlnjr8gMNOJ7gms4EZgta 5+w/ebDecNk7uwyJrgJBPtmVOU+WXANdPn56baOdbGbWwLuRvjEpUOGsthVGStsg 74QsqZxYOjP9tEQiMQW6dzNo3V06Il733xFbSYwresmESv02I3C2nwLnfwLRdU4o ZMnmu5YqO+p93k9+tC05Z/L+NP2ErehlbgwajmVHbAe6SCRgsdaQLEZXo0AeIXv9 85UO85Md3B64kkpR28VhUfbEExj9F7rrxs64D/bncwh9u6Q3SXc= -----END CERTIFICATE-----Generated at Mon Sep 21 19:51:58 2026 by rpki-client