$ rpki-client -vvvf rpki-rsync.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.mft File: 785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.mft (raw, json) Hash identifier: gDIEowoeINzYwsWpptI6Pf9onEr1Oc1P0rgHrsEHdL4= Subject key identifier: 91:DC:A7:C1:39:B0:35:27:3C:E3:CF:AE:E8:84:9A:32:8C:76:8A:A5 Authority key identifier: 78:5F:7C:BF:4E:B0:64:06:C2:D1:4C:D2:C9:63:9B:54:0E:3A:72:C4 Certificate issuer: /CN=785F7CBF4EB06406C2D14CD2C9639B540E3A72C4 Certificate serial: 4F0D99F2D7D1E468F360B8F692576D8B288DACEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.mft Manifest number: BE Signing time: Sun 20 Sep 2026 23:56:27 +0000 Manifest this update: Sun 20 Sep 2026 23:51:27 +0000 Manifest next update: Tue 22 Sep 2026 01:41:27 +0000 Files and hashes: 1: 785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.crl (hash: kT32Zf7A0xUd12s7QYJSb2ucPUMpONfvLmN0lwhlOEI=) 2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: 00ZDaa7Z2C6m48TydaMQ4xEe3fZwxmMIcQ+y8CkGNMY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.crl rsync://rpki-rsync.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0d:99:f2:d7:d1:e4:68:f3:60:b8:f6:92:57:6d:8b:28:8d:ac:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785F7CBF4EB06406C2D14CD2C9639B540E3A72C4 Validity Not Before: Sep 20 23:51:27 2026 GMT Not After : Sep 22 01:41:27 2026 GMT Subject: CN=91DCA7C139B035273CE3CFAEE8849A328C768AA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:d1:3f:81:60:8c:5c:fb:90:e2:92:9e:8e: 94:c2:2b:1a:92:98:de:8d:57:b7:07:74:21:d7:58: 7d:13:76:c5:50:30:4c:e0:c5:c3:d1:58:ee:97:22: 78:46:1e:b5:a5:ec:3f:25:3d:0b:d6:46:a7:06:ec: 26:52:ce:7b:f5:ea:3a:c2:8e:fc:8a:cc:cf:26:11: 17:ad:3f:c0:1e:b7:43:ea:d3:f7:d5:9a:24:f5:4c: f0:db:15:5f:ea:6a:2b:29:95:00:5f:77:6c:19:b1: 0b:b6:c7:f3:d1:8e:cd:25:c8:0c:5d:3b:97:f6:8b: 6e:79:53:cf:44:12:4f:13:86:dd:14:61:f2:2a:2a: 12:3e:95:e8:84:b8:a4:41:15:ee:0e:2d:ed:ca:b9: db:e1:f0:2e:6e:83:24:9b:aa:c0:44:08:bd:a9:43: bc:86:56:1f:71:fd:cf:c7:81:2b:cc:67:fa:9f:d7: 37:ef:e0:79:b3:67:2a:f4:38:09:42:9c:83:fd:46: 35:61:3c:cf:da:6a:71:b8:7c:dc:38:0a:e1:90:23: 88:06:a2:c1:c9:6c:d4:03:de:1e:01:07:cf:ac:63: cc:c2:d1:99:21:8b:9a:8e:c2:e2:7b:c5:d4:e1:01: 77:75:c6:f9:b1:64:a8:dc:4b:b8:1f:02:62:ed:8f: b2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DC:A7:C1:39:B0:35:27:3C:E3:CF:AE:E8:84:9A:32:8C:76:8A:A5 X509v3 Authority Key Identifier: keyid:78:5F:7C:BF:4E:B0:64:06:C2:D1:4C:D2:C9:63:9B:54:0E:3A:72:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e2:54:96:99:88:15:59:d1:8d:84:69:40:52:4b:6e:87:23: e4:25:2c:40:c9:bb:41:60:82:c2:47:88:24:45:a7:b0:ea:7c: 64:8c:c2:bc:8a:24:59:08:43:76:1b:a7:76:89:29:e1:d9:5a: 47:91:cd:70:bc:b3:02:3d:f8:e5:fc:90:8f:7b:39:38:2d:08: 5d:ca:14:94:57:2c:b3:6b:31:dd:3c:31:ba:6e:05:db:31:49: a7:a3:51:46:97:ef:11:1e:b9:39:0e:50:5c:f7:80:de:63:a4: 9e:64:36:66:8e:12:e5:31:84:03:13:85:4f:dc:f7:35:4f:a6: 81:e5:b0:16:35:7e:c8:e6:25:62:4c:87:52:1c:73:20:c3:db: fb:b2:c0:38:78:9c:81:7f:fe:b4:27:fd:83:cd:28:b4:62:db: fc:a1:44:b3:47:30:d4:a2:a2:65:31:1a:c4:45:79:c8:e4:52: 5f:69:bb:b2:b5:12:92:b0:98:2a:57:bb:89:a9:8f:75:a4:31: 25:00:12:5d:d6:3e:23:da:12:79:89:52:69:32:96:25:0e:b2: 27:ce:5c:c9:90:f0:f1:4f:99:f0:db:b1:72:f5:6d:83:82:01: 83:80:9b:e1:37:e1:e3:d4:18:f3:57:32:be:f2:00:96:97:e2: 3f:84:98:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTw2Z8tfR5GjzYLj2kldtiyiNrOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg1RjdDQkY0RUIwNjQwNkMyRDE0Q0QyQzk2MzlCNTQw RTNBNzJDNDAeFw0yNjA5MjAyMzUxMjdaFw0yNjA5MjIwMTQxMjdaMDMxMTAvBgNV BAMTKDkxRENBN0MxMzlCMDM1MjczQ0UzQ0ZBRUU4ODQ5QTMyOEM3NjhBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYdE/gWCMXPuQ4pKejpTCKxqS mN6NV7cHdCHXWH0TdsVQMEzgxcPRWO6XInhGHrWl7D8lPQvWRqcG7CZSznv16jrC jvyKzM8mERetP8Aet0Pq0/fVmiT1TPDbFV/qaisplQBfd2wZsQu2x/PRjs0lyAxd O5f2i255U89EEk8Tht0UYfIqKhI+leiEuKRBFe4OLe3Kudvh8C5ugySbqsBECL2p Q7yGVh9x/c/HgSvMZ/qf1zfv4HmzZyr0OAlCnIP9RjVhPM/aanG4fNw4CuGQI4gG osHJbNQD3h4BB8+sY8zC0Zkhi5qOwuJ7xdThAXd1xvmxZKjcS7gfAmLtj7JDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdynwTmwNSc848+u6ISaMox2iqUwHwYDVR0j BBgwFoAUeF98v06wZAbC0UzSyWObVA46csQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODM3YTZkZDgtYTg0My00Njk4LWE1ZjMtM2VlYzQ2OGQxNGE0LzAvNzg1RjdDQkY0 RUIwNjQwNkMyRDE0Q0QyQzk2MzlCNTQwRTNBNzJDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODVGN0NCRjRFQjA2NDA2QzJEMTRDRDJDOTYzOUI1NDBFM0E3 MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvNzg1RjdDQkY0RUIwNjQwNkMyRDE0Q0QyQzk2MzlC NTQwRTNBNzJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDiVJaZiBVZ0Y2EaUBSS26HI+QlLEDJu0Fg gsJHiCRFp7DqfGSMwryKJFkIQ3Ybp3aJKeHZWkeRzXC8swI9+OX8kI97OTgtCF3K FJRXLLNrMd08MbpuBdsxSaejUUaX7xEeuTkOUFz3gN5jpJ5kNmaOEuUxhAMThU/c 9zVPpoHlsBY1fsjmJWJMh1IccyDD2/uywDh4nIF//rQn/YPNKLRi2/yhRLNHMNSi omUxGsRFecjkUl9pu7K1EpKwmCpXu4mpj3WkMSUAEl3WPiPaEnmJUmkyliUOsifO XMmQ8PFPmfDbsXL1bYOCAYOAm+E34ePUGPNXMr7yAJaX4j+EmLE= -----END CERTIFICATE-----Generated at Mon Sep 21 13:48:12 2026 by rpki-client