$ rpki-client -vvvf rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft File: C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft (raw, json) Hash identifier: BetqBZsB02Md4NNx0ll7pk1SUp+ByvQB3zTWhDlvT4g= Subject key identifier: CD:FE:BB:DB:E5:78:88:1A:B2:5B:4A:09:67:6D:C7:68:35:04:15:B0 Authority key identifier: C7:87:E8:C7:96:2B:2E:2C:DD:5E:08:D0:7B:3B:74:FA:30:2B:A3:2F Certificate issuer: /CN=C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F Certificate serial: 4D8D253DE0A58E53956A23BFA131A1898DEEE48F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:43:32 +0000 Manifest this update: Mon 21 Sep 2026 09:38:32 +0000 Manifest next update: Tue 22 Sep 2026 10:18:32 +0000 Files and hashes: 1: C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.crl (hash: SC3OD1wTK/F15Yc2yZn5QnvYxEBw4DO7sQ0LY229R+8=) 2: 3130332e3235352e3136332e302f32342d3234203d3e20313532303137.roa (hash: N8k4+vbIytN8X+BgIqxZ13ZVEKymwSRIkwT06kQXGFM=) 3: 3130332e3235352e3136322e302f32332d3234203d3e20313532303137.roa (hash: ifnyMHFdQS3hNFL1UztiRIG0xxWbzt5hK/4aXfUamCA=) 4: 3130332e3235352e3136322e302f32342d3234203d3e20313532303137.roa (hash: rpGHy0jo68Uol/+mmOLB7REbf0gEZAKFJzwOTNprwy0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.crl rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8d:25:3d:e0:a5:8e:53:95:6a:23:bf:a1:31:a1:89:8d:ee:e4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F Validity Not Before: Sep 21 09:38:32 2026 GMT Not After : Sep 22 10:18:32 2026 GMT Subject: CN=CDFEBBDBE578881AB25B4A09676DC768350415B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:16:0d:ef:ec:dc:81:21:7a:ae:bb:33:b8:08: ad:16:8d:48:f6:c0:00:86:3a:fd:3e:d8:3b:a7:06: 5f:76:35:63:8f:aa:a7:e9:f7:22:e7:b1:1d:79:90: 5b:ba:03:52:fc:6f:96:44:75:a5:c0:ab:7d:80:23: 1f:d6:ee:3e:e9:ba:0a:40:48:ea:c0:58:65:07:1e: 0b:38:e3:9b:6b:c0:5b:b8:d5:9a:f6:bd:da:ac:42: 08:54:ac:1b:ec:d2:fe:1b:01:2b:b9:e4:56:bb:15: ec:3f:58:c4:90:68:de:18:94:e3:6f:d7:26:ad:65: f2:41:9c:4c:3a:0d:7a:dd:8e:10:f4:b5:af:96:46: 15:85:df:e2:94:a9:9a:fa:1a:2d:66:0b:9d:3f:b8: 8c:7c:71:4f:85:c4:63:fb:99:4a:11:5c:5f:41:a0: e8:0e:89:07:80:2f:9f:09:93:05:e9:6e:59:4b:d9: 73:68:71:f7:48:8a:ff:43:3b:50:7b:9a:8d:eb:d6: 1f:5d:bf:09:74:1b:35:3f:47:ec:ec:b6:f0:92:c9: 99:86:a2:dc:89:2c:8b:e2:4e:ac:75:8e:ed:6a:7f: 7a:b5:2d:42:27:60:17:ae:29:5c:bb:26:83:1c:bc: b7:2e:32:7f:9c:e1:51:9a:82:72:e3:42:16:bf:de: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FE:BB:DB:E5:78:88:1A:B2:5B:4A:09:67:6D:C7:68:35:04:15:B0 X509v3 Authority Key Identifier: keyid:C7:87:E8:C7:96:2B:2E:2C:DD:5E:08:D0:7B:3B:74:FA:30:2B:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ca:a9:48:0e:e1:1b:96:a1:a4:e3:26:43:61:51:da:dd:0e: df:9b:41:60:8a:22:3d:85:7c:ba:b2:f9:05:90:f7:dd:30:4e: 8d:e7:55:4b:09:1e:5f:10:8c:b3:ef:76:b6:0e:bd:c7:84:96: 4e:88:6b:65:1e:a5:d6:4a:c4:9c:c8:c1:de:28:75:f7:99:1a: fa:44:4c:e4:42:73:81:f3:24:ca:7c:de:e5:94:e3:09:e5:8e: ea:38:a8:22:43:12:2c:95:19:ca:79:fa:46:8f:8b:d3:eb:d6: 17:63:c3:ba:ef:43:99:76:e6:e4:32:ea:ed:47:e5:6b:23:89: be:39:b0:57:9c:38:3f:5a:54:3a:11:33:88:c6:39:82:8e:96: 27:5f:52:41:f9:d1:22:f6:cf:e4:a5:65:67:18:15:ba:af:e8: 52:a4:d1:9d:66:91:f2:1a:62:79:64:06:6d:7e:bd:c1:86:2a: cd:11:07:7d:af:a9:76:24:02:aa:1c:60:da:01:a7:09:41:26: ee:2a:3b:44:a6:bb:45:d2:e0:09:ed:d4:e3:c2:16:f9:f2:54: 02:08:f8:b8:8c:6f:e2:24:b0:cb:3a:ee:53:cc:85:13:df:a9: 4c:4e:80:aa:13:1c:4a:e8:be:e2:03:f8:3b:0d:37:5b:df:f6: 0f:0d:2b:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTY0lPeCljlOVaiO/oTGhiY3u5I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4N0U4Qzc5NjJCMkUyQ0RENUUwOEQwN0IzQjc0RkEz MDJCQTMyRjAeFw0yNjA5MjEwOTM4MzJaFw0yNjA5MjIxMDE4MzJaMDMxMTAvBgNV BAMTKENERkVCQkRCRTU3ODg4MUFCMjVCNEEwOTY3NkRDNzY4MzUwNDE1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Fg3v7NyBIXquuzO4CK0WjUj2 wACGOv0+2DunBl92NWOPqqfp9yLnsR15kFu6A1L8b5ZEdaXAq32AIx/W7j7pugpA SOrAWGUHHgs445trwFu41Zr2vdqsQghUrBvs0v4bASu55Fa7Few/WMSQaN4YlONv 1yatZfJBnEw6DXrdjhD0ta+WRhWF3+KUqZr6Gi1mC50/uIx8cU+FxGP7mUoRXF9B oOgOiQeAL58JkwXpbllL2XNocfdIiv9DO1B7mo3r1h9dvwl0GzU/R+zstvCSyZmG otyJLIviTqx1ju1qf3q1LUInYBeuKVy7JoMcvLcuMn+c4VGagnLjQha/3r89AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzf672+V4iBqyW0oJZ23HaDUEFbAwHwYDVR0j BBgwFoAUx4fox5YrLizdXgjQezt0+jAroy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc3NDI1MTYtYjQ1OS00NTA2LWI0ZGUtZjY5ZTE5M2Q1Y2RlLzAvQzc4N0U4Qzc5 NjJCMkUyQ0RENUUwOEQwN0IzQjc0RkEzMDJCQTMyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzg3RThDNzk2MkIyRTJDREQ1RTA4RDA3QjNCNzRGQTMwMkJB MzJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc3NDI1MTYtYjQ1OS00NTA2LWI0 ZGUtZjY5ZTE5M2Q1Y2RlLzAvQzc4N0U4Qzc5NjJCMkUyQ0RENUUwOEQwN0IzQjc0 RkEzMDJCQTMyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/KqUgO4RuWoaTjJkNhUdrdDt+bQWCKIj2F fLqy+QWQ990wTo3nVUsJHl8QjLPvdrYOvceElk6Ia2UepdZKxJzIwd4odfeZGvpE TORCc4HzJMp83uWU4wnljuo4qCJDEiyVGcp5+kaPi9Pr1hdjw7rvQ5l25uQy6u1H 5Wsjib45sFecOD9aVDoRM4jGOYKOlidfUkH50SL2z+SlZWcYFbqv6FKk0Z1mkfIa YnlkBm1+vcGGKs0RB32vqXYkAqocYNoBpwlBJu4qO0Smu0XS4Ant1OPCFvnyVAII +LiMb+IksMs67lPMhRPfqUxOgKoTHErovuID+DsNN1vf9g8NK8w= -----END CERTIFICATE-----Generated at Mon Sep 21 12:41:06 2026 by rpki-client