$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft File: 778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft (raw, json) Hash identifier: QImTHHJt+ACSu4bJ6nsOETgU826IXD84ljCvuwgVXQI= Subject key identifier: 50:21:9E:73:B9:35:40:E1:E9:6D:3B:72:8C:55:02:51:16:B6:A6:83 Authority key identifier: 77:8D:09:4F:59:A4:A4:DE:EF:A7:C8:AA:DB:CA:9B:EF:4F:A4:24:BA Certificate issuer: /CN=778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA Certificate serial: 37D64114800235F42B2CD9B3F24AA18F1180F9C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 21:16:04 +0000 Manifest this update: Fri 12 Jun 2026 21:11:04 +0000 Manifest next update: Sat 13 Jun 2026 21:26:04 +0000 Files and hashes: 1: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: YiGgOB+BsUIwFQzJbwEYZBUNvXOElouRLoHqR6mJHoc=) 2: 3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa (hash: ymmdsCmMaq7HWg5BTKlN2Tj5x/5jdnU3tBcu+76+hJ4=) 3: 778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl (hash: HDOp9RtvZSXDCPp093ZcAjtbmYPG0duo/g3NXIwRLvo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d6:41:14:80:02:35:f4:2b:2c:d9:b3:f2:4a:a1:8f:11:80:f9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA Validity Not Before: Jun 12 21:11:04 2026 GMT Not After : Jun 13 21:26:04 2026 GMT Subject: CN=50219E73B93540E1E96D3B728C55025116B6A683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:67:93:d3:e0:ff:f0:8e:44:8b:6a:3c:ad: e4:57:99:b1:0a:b8:f5:9b:34:e5:2c:d2:87:15:20: ee:77:d7:5c:d4:0a:72:af:c9:8b:78:a1:b6:b8:30: 3a:ce:c8:5c:ca:b2:19:d6:50:49:10:30:56:f1:ed: e9:f6:49:97:2e:01:8e:07:b1:fb:9a:19:c8:c6:f5: 15:99:34:b0:97:8c:65:7e:ee:e0:09:56:6e:bb:48: 36:3b:8f:f9:63:af:a0:9d:6e:61:55:8c:07:5b:5f: 19:0e:dc:22:02:06:d7:a8:0b:fe:74:bf:f4:69:88: e3:d1:c8:f1:06:88:f9:cd:ab:07:ec:d0:cc:4f:2d: 94:6b:ca:a6:91:87:44:8d:a9:4b:32:97:b2:4f:57: f6:b6:f7:1f:05:38:28:26:eb:40:89:f9:0c:54:19: 94:fe:32:7f:32:0e:69:a2:6f:ac:46:1c:d2:ab:11: b6:bd:ee:0c:ed:76:6d:5d:cf:71:2d:ee:81:51:b4: f3:39:9e:14:d2:c7:e6:55:b3:ac:c1:26:3a:a9:b6: ee:5d:53:0d:6d:e5:3f:36:96:9c:50:e7:9e:82:9b: b7:9d:ab:a9:11:28:0c:e6:90:87:f3:98:ae:2b:07: bc:11:07:ad:8d:df:12:ad:29:37:e0:e9:b9:de:f9: ba:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:21:9E:73:B9:35:40:E1:E9:6D:3B:72:8C:55:02:51:16:B6:A6:83 X509v3 Authority Key Identifier: keyid:77:8D:09:4F:59:A4:A4:DE:EF:A7:C8:AA:DB:CA:9B:EF:4F:A4:24:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2b:a9:48:3a:6c:fa:e8:d4:c4:b0:ec:07:6d:a8:1a:b3:a1: 4b:62:ca:58:b3:1b:3c:b2:64:80:6d:eb:58:95:ee:75:a3:b9: 98:92:bc:1b:a1:1c:eb:f1:8d:3d:53:7a:94:4d:a1:91:bb:47: 96:ab:80:98:13:df:dd:06:9a:9d:78:8f:10:72:8e:fb:6b:fb: 5f:48:4e:07:5c:85:c8:1a:1b:82:45:40:fe:93:ac:ba:43:83: 36:90:06:ff:d3:19:dc:02:04:4d:a9:14:1e:2a:de:66:70:d6: e6:e9:6a:de:6f:80:4e:c6:9e:a1:da:92:6d:4d:bc:71:13:17: 15:99:57:35:b8:2c:1c:36:e8:55:d9:f7:44:e0:a3:35:39:d3: ac:2d:61:f5:9e:eb:b1:c4:29:9f:d7:6b:99:26:93:6f:18:8e: 34:ae:33:e0:95:52:54:37:ed:ea:e3:1d:ba:e8:f6:2b:bf:30: a1:ba:14:fe:be:8f:8b:6c:87:cc:2e:7c:72:a4:96:db:26:a1: ae:78:96:86:d7:8f:05:63:e5:96:bd:3e:71:b9:f7:d3:1c:3a: 12:c1:00:83:65:5d:b7:34:36:7f:f8:48:83:0f:3e:44:d6:63: 24:c4:19:c5:e6:28:be:ba:5d:aa:d1:a6:0b:32:a7:26:dc:b6: 4e:0d:ea:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9ZBFIACNfQrLNmz8kqhjxGA+ckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc4RDA5NEY1OUE0QTRERUVGQTdDOEFBREJDQTlCRUY0 RkE0MjRCQTAeFw0yNjA2MTIyMTExMDRaFw0yNjA2MTMyMTI2MDRaMDMxMTAvBgNV BAMTKDUwMjE5RTczQjkzNTQwRTFFOTZEM0I3MjhDNTUwMjUxMTZCNkE2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXGeT0+D/8I5Ei2o8reRXmbEK uPWbNOUs0ocVIO5311zUCnKvyYt4oba4MDrOyFzKshnWUEkQMFbx7en2SZcuAY4H sfuaGcjG9RWZNLCXjGV+7uAJVm67SDY7j/ljr6CdbmFVjAdbXxkO3CICBteoC/50 v/RpiOPRyPEGiPnNqwfs0MxPLZRryqaRh0SNqUsyl7JPV/a29x8FOCgm60CJ+QxU GZT+Mn8yDmmib6xGHNKrEba97gztdm1dz3Et7oFRtPM5nhTSx+ZVs6zBJjqptu5d Uw1t5T82lpxQ556Cm7edq6kRKAzmkIfzmK4rB7wRB62N3xKtKTfg6bne+bqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUCGec7k1QOHpbTtyjFUCURa2poMwHwYDVR0j BBgwFoAUd40JT1mkpN7vp8iq28qb70+kJLowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkYzAzNGYtMzgyMy00OGFmLTk1M2QtYWFhODczYjBmYjZhLzAvNzc4RDA5NEY1 OUE0QTRERUVGQTdDOEFBREJDQTlCRUY0RkE0MjRCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83NzhEMDk0RjU5QTRBNERFRUZBN0M4QUFEQkNBOUJFRjRGQTQy NEJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvNzc4RDA5NEY1OUE0QTRERUVGQTdDOEFBREJDQTlC RUY0RkE0MjRCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUrqUg6bPro1MSw7AdtqBqzoUtiylizGzyy ZIBt61iV7nWjuZiSvBuhHOvxjT1TepRNoZG7R5argJgT390Gmp14jxByjvtr+19I TgdchcgaG4JFQP6TrLpDgzaQBv/TGdwCBE2pFB4q3mZw1ubpat5vgE7GnqHakm1N vHETFxWZVzW4LBw26FXZ90TgozU506wtYfWe67HEKZ/Xa5kmk28YjjSuM+CVUlQ3 7erjHbro9iu/MKG6FP6+j4tsh8wufHKkltsmoa54lobXjwVj5Za9PnG599McOhLB AINlXbc0Nn/4SIMPPkTWYyTEGcXmKL66XarRpgsypybctk4N6qo= -----END CERTIFICATE-----Generated at Sat Jun 13 15:16:29 2026 by rpki-client