$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft File: 778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft (raw, json) Hash identifier: cegKSSfE3AGthdjRMfwe/DBcHudb0WoNa1H3CQe1JQ0= Subject key identifier: 9D:FF:C4:5F:F7:84:09:05:98:20:6B:F4:62:52:EB:0C:D8:57:EB:4D Authority key identifier: 77:8D:09:4F:59:A4:A4:DE:EF:A7:C8:AA:DB:CA:9B:EF:4F:A4:24:BA Certificate issuer: /CN=778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA Certificate serial: 1D680F42C074579DE14917C3A66D150292C16408 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:11:19 +0000 Manifest this update: Mon 21 Sep 2026 12:06:19 +0000 Manifest next update: Tue 22 Sep 2026 15:16:19 +0000 Files and hashes: 1: 778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl (hash: eI3xllBuB6B+kA/mFgkFvITwjeTPpa363Dn4WElovfQ=) 2: 3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa (hash: ymmdsCmMaq7HWg5BTKlN2Tj5x/5jdnU3tBcu+76+hJ4=) 3: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: YiGgOB+BsUIwFQzJbwEYZBUNvXOElouRLoHqR6mJHoc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:68:0f:42:c0:74:57:9d:e1:49:17:c3:a6:6d:15:02:92:c1:64:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA Validity Not Before: Sep 21 12:06:19 2026 GMT Not After : Sep 22 15:16:19 2026 GMT Subject: CN=9DFFC45FF784090598206BF46252EB0CD857EB4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:5c:95:79:d5:a7:15:eb:89:8c:9d:5b:14:ac: e0:5f:0b:82:20:c6:13:e1:d4:84:3d:ff:d6:3b:4d: 04:e2:7b:20:95:ec:1d:e1:d6:fe:8d:24:ac:bd:ba: d9:ff:aa:6a:22:2e:0d:52:16:21:d8:1c:76:c2:00: 83:37:15:2c:ae:58:ae:94:f4:73:72:8c:ca:4e:08: 47:7d:7c:55:f0:a9:28:16:f5:1b:b8:75:27:90:82: 89:c4:4d:e0:46:bc:bd:f9:6b:b2:cc:f9:06:61:d5: e8:a9:13:75:65:ea:2f:90:37:a0:30:bd:f2:87:9c: 28:a5:3d:64:42:2a:e5:a2:97:7f:32:b7:86:35:55: 7b:fb:53:32:3c:4c:98:96:1d:ae:04:f4:f8:22:9a: 4c:9f:17:59:d8:03:cd:b2:29:f2:3f:01:f0:bb:cc: 40:19:b8:8d:27:f9:b8:4c:9d:93:4b:d8:44:91:c7: 08:90:6a:de:56:44:aa:ac:7d:94:ad:ae:aa:59:32: 64:0f:78:a6:de:9a:88:12:08:dc:94:71:29:52:69: ff:c2:e6:bf:07:e6:bd:ed:36:dd:35:ea:d5:33:b7: 9b:9f:7e:dc:93:2f:a9:e4:ba:45:a5:46:20:d8:f9: f2:0c:89:b1:6b:f9:47:02:c1:c0:9e:08:fc:d5:2f: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FF:C4:5F:F7:84:09:05:98:20:6B:F4:62:52:EB:0C:D8:57:EB:4D X509v3 Authority Key Identifier: keyid:77:8D:09:4F:59:A4:A4:DE:EF:A7:C8:AA:DB:CA:9B:EF:4F:A4:24:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:29:b0:8f:04:34:fc:4a:70:7b:f0:9a:b3:55:e1:d6:dd:79: 46:60:54:ee:b9:44:a6:5a:5f:b0:98:34:b0:e3:94:3d:69:9e: 26:45:2f:d3:40:13:c5:c8:ab:2e:45:9f:71:9b:d7:5b:e3:78: 15:de:3e:ff:e9:9c:42:d1:4c:92:12:74:6b:b9:40:60:8a:6a: ac:93:19:a2:c9:91:74:9e:e4:5f:c5:11:f1:06:bc:be:06:67: 60:4d:23:a4:c0:d1:17:d2:9e:3a:6f:c8:db:1f:c1:2b:da:8b: f8:cd:f9:00:36:7c:d9:3f:70:70:a3:34:db:4e:b7:a4:e6:b1: 49:01:6f:f2:b1:4e:5f:d3:35:5a:dd:76:e3:1e:df:a1:35:ed: 46:80:7a:e7:1d:96:43:9a:a5:98:93:3b:9f:2a:7a:e6:39:3c: b9:96:34:7b:7e:8e:c4:48:50:ae:9c:af:fe:3c:00:a9:33:95: e0:5c:30:12:aa:57:65:08:bc:a0:31:d8:25:a5:9b:d2:da:7f: 84:08:5a:4d:68:7d:cd:c6:ea:2c:c8:87:35:06:09:db:58:83: 7a:6c:61:d3:4f:0a:59:05:29:c0:c3:41:49:5d:a9:2f:e5:1b: d5:49:86:f9:b0:20:09:9b:8c:24:4d:fc:31:09:4e:93:5e:af: 9d:be:05:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWgPQsB0V53hSRfDpm0VApLBZAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc4RDA5NEY1OUE0QTRERUVGQTdDOEFBREJDQTlCRUY0 RkE0MjRCQTAeFw0yNjA5MjExMjA2MTlaFw0yNjA5MjIxNTE2MTlaMDMxMTAvBgNV BAMTKDlERkZDNDVGRjc4NDA5MDU5ODIwNkJGNDYyNTJFQjBDRDg1N0VCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5XJV51acV64mMnVsUrOBfC4Ig xhPh1IQ9/9Y7TQTieyCV7B3h1v6NJKy9utn/qmoiLg1SFiHYHHbCAIM3FSyuWK6U 9HNyjMpOCEd9fFXwqSgW9Ru4dSeQgonETeBGvL35a7LM+QZh1eipE3Vl6i+QN6Aw vfKHnCilPWRCKuWil38yt4Y1VXv7UzI8TJiWHa4E9PgimkyfF1nYA82yKfI/AfC7 zEAZuI0n+bhMnZNL2ESRxwiQat5WRKqsfZStrqpZMmQPeKbemogSCNyUcSlSaf/C 5r8H5r3tNt016tUzt5ufftyTL6nkukWlRiDY+fIMibFr+UcCwcCeCPzVLwcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnf/EX/eECQWYIGv0YlLrDNhX600wHwYDVR0j BBgwFoAUd40JT1mkpN7vp8iq28qb70+kJLowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkYzAzNGYtMzgyMy00OGFmLTk1M2QtYWFhODczYjBmYjZhLzAvNzc4RDA5NEY1 OUE0QTRERUVGQTdDOEFBREJDQTlCRUY0RkE0MjRCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83NzhEMDk0RjU5QTRBNERFRUZBN0M4QUFEQkNBOUJFRjRGQTQy NEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvNzc4RDA5NEY1OUE0QTRERUVGQTdDOEFBREJDQTlC RUY0RkE0MjRCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8psI8ENPxKcHvwmrNV4dbdeUZgVO65RKZa X7CYNLDjlD1pniZFL9NAE8XIqy5Fn3Gb11vjeBXePv/pnELRTJISdGu5QGCKaqyT GaLJkXSe5F/FEfEGvL4GZ2BNI6TA0RfSnjpvyNsfwSvai/jN+QA2fNk/cHCjNNtO t6TmsUkBb/KxTl/TNVrdduMe36E17UaAeucdlkOapZiTO58qeuY5PLmWNHt+jsRI UK6cr/48AKkzleBcMBKqV2UIvKAx2CWlm9Laf4QIWk1ofc3G6izIhzUGCdtYg3ps YdNPClkFKcDDQUldqS/lG9VJhvmwIAmbjCRN/DEJTpNer52+BeQ= -----END CERTIFICATE-----Generated at Mon Sep 21 17:39:05 2026 by rpki-client