$ rpki-client -vvf rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft File: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft (raw, json) Hash identifier: 6Y54wgJtCyd6uXdaPaTnW855Fr/89UQdRr+k7mGlvBU= Subject key identifier: E7:F5:95:FD:00:3C:94:47:1D:3E:43:8F:D6:8B:44:8B:D1:18:39:9A Authority key identifier: 77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4 Certificate issuer: /CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4 Certificate serial: 18F4DB25E2E6F6EE9BE736DADB6BB806850B8C87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 07:16:42 +0000 Manifest this update: Wed 17 Jun 2026 07:11:42 +0000 Manifest next update: Thu 18 Jun 2026 07:19:42 +0000 Files and hashes: 1: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: ccnKpMhAZ50WINER3EYQ3VYvFkNVbacY8s+OufsENRg=) 2: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl (hash: /queEYhSL7lFwFrj2xI12hbe70YyMSaLunc8UMT98CY=) 3: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: YndAlxaqXYkWW68P17cuw0iGsOCiRy+p2CjBviV7Rok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f4:db:25:e2:e6:f6:ee:9b:e7:36:da:db:6b:b8:06:85:0b:8c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4 Validity Not Before: Jun 17 07:11:42 2026 GMT Not After : Jun 18 07:19:42 2026 GMT Subject: CN=E7F595FD003C94471D3E438FD68B448BD118399A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6b:23:09:8c:ff:dd:59:7c:e9:57:6d:55:d9: 93:b7:eb:8c:d3:a1:9a:cb:14:38:62:b5:73:26:77: 8c:9e:11:45:26:2b:f2:b3:90:76:f3:2d:33:b1:09: e6:7e:d2:b2:44:41:40:e7:cf:f5:01:f3:25:a7:ad: bd:bc:7b:c6:c8:7d:bc:ff:df:e1:fe:fa:46:38:ef: f0:2d:4a:6f:3d:ff:dd:39:18:a1:59:47:0f:a1:a9: 60:c0:ed:94:92:82:ba:7e:5c:23:3a:8e:11:55:78: a4:e1:c1:da:94:c2:cb:28:d0:c5:47:be:2f:fc:6c: 02:12:23:49:64:0e:6c:17:72:72:db:f0:d8:69:6e: d7:77:14:8c:93:4b:09:35:be:46:bc:9d:88:b5:18: 84:82:15:ab:c5:11:eb:ed:bd:31:a8:aa:c7:59:d4: c6:60:74:fc:33:35:63:c0:4e:ff:8b:c9:91:2a:f0: 35:61:ee:9c:f4:d7:f1:e1:ae:36:77:f3:32:96:c3: e9:b6:2b:3b:8b:bb:25:df:52:67:a2:67:55:7a:9f: 5d:1e:61:49:88:c8:79:54:14:55:da:01:bb:f3:0d: 5a:a2:4e:e8:fa:1a:38:fd:89:67:f1:18:7b:f3:5e: a1:5e:4d:b9:49:82:2e:b5:90:92:65:89:9e:87:33: 87:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F5:95:FD:00:3C:94:47:1D:3E:43:8F:D6:8B:44:8B:D1:18:39:9A X509v3 Authority Key Identifier: keyid:77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:de:bf:29:5f:de:ab:cc:32:a9:04:2c:b7:e0:14:3b:af:b8: 80:d6:30:d7:3b:59:cb:78:49:77:c5:f9:1e:fb:a8:a5:33:76: 7b:a7:1c:18:97:ab:fd:30:bf:1b:52:8c:ef:19:38:5c:52:13: 3e:2c:06:ad:f2:14:cd:10:a2:06:98:47:98:d1:a1:f4:e1:2e: 99:bf:38:c7:2b:7f:f3:4f:55:d9:1c:fc:53:af:74:f9:e9:15: 88:6e:13:53:31:07:c7:58:e2:c7:36:9c:6f:56:e9:2d:08:51: e2:23:c0:10:60:87:62:35:78:b8:e0:f4:2d:78:61:ca:1b:9a: 42:a0:15:f7:e1:ba:cf:46:7e:d3:3b:a8:69:3d:ed:b3:4a:fe: bc:60:0c:de:3d:ca:bb:d0:fa:ee:5a:22:23:2a:7b:a1:66:16: b9:1a:9e:54:4c:44:b5:c0:fe:25:a4:c3:f7:56:0c:95:05:67: 01:61:5b:df:2a:a9:04:68:71:22:3e:2e:5d:b7:60:20:d6:68: f2:d2:c1:37:f8:91:fc:4a:e7:ff:1a:2c:1b:bf:61:82:35:a6: 34:d4:88:5d:84:73:6f:0f:1d:35:24:1d:de:55:42:06:5b:d4: 3a:9a:cf:92:85:bb:16:0a:15:d5:fa:7d:8f:dc:4f:f7:c7:c8: f6:f8:e1:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGPTbJeLm9u6b5zba22u4BoULjIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0MDNE QkQxRTJDNDAeFw0yNjA2MTcwNzExNDJaFw0yNjA2MTgwNzE5NDJaMDMxMTAvBgNV BAMTKEU3RjU5NUZEMDAzQzk0NDcxRDNFNDM4RkQ2OEI0NDhCRDExODM5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaayMJjP/dWXzpV21V2ZO364zT oZrLFDhitXMmd4yeEUUmK/KzkHbzLTOxCeZ+0rJEQUDnz/UB8yWnrb28e8bIfbz/ 3+H++kY47/AtSm89/905GKFZRw+hqWDA7ZSSgrp+XCM6jhFVeKThwdqUwsso0MVH vi/8bAISI0lkDmwXcnLb8Nhpbtd3FIyTSwk1vka8nYi1GISCFavFEevtvTGoqsdZ 1MZgdPwzNWPATv+LyZEq8DVh7pz01/HhrjZ38zKWw+m2KzuLuyXfUmeiZ1V6n10e YUmIyHlUFFXaAbvzDVqiTuj6Gjj9iWfxGHvzXqFeTblJgi61kJJliZ6HM4ffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/WV/QA8lEcdPkOP1otEi9EYOZowHwYDVR0j BBgwFoAUd4pxuzyRNoxlbeuBjp20A9vR4sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhmNWJhNWUtMWY1Yy00Mjg0LTlhMTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIz QzkxMzY4QzY1NkRFQjgxOEU5REI0MDNEQkQxRTJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NzhBNzFCQjNDOTEzNjhDNjU2REVCODE4RTlEQjQwM0RCRDFF MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0 MDNEQkQxRTJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbevylf3qvMMqkELLfgFDuvuIDWMNc7Wct4 SXfF+R77qKUzdnunHBiXq/0wvxtSjO8ZOFxSEz4sBq3yFM0QogaYR5jRofThLpm/ OMcrf/NPVdkc/FOvdPnpFYhuE1MxB8dY4sc2nG9W6S0IUeIjwBBgh2I1eLjg9C14 YcobmkKgFffhus9GftM7qGk97bNK/rxgDN49yrvQ+u5aIiMqe6FmFrkanlRMRLXA /iWkw/dWDJUFZwFhW98qqQRocSI+Ll23YCDWaPLSwTf4kfxK5/8aLBu/YYI1pjTU iF2Ec28PHTUkHd5VQgZb1Dqaz5KFuxYKFdX6fY/cT/fHyPb44Sc= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:49 2026 by rpki-client