$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft File: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft (raw, json) Hash identifier: bOmjNn8g725rHr+M3338kdcRTNvUuv2mtd+xAO6RSLI= Subject key identifier: 9E:7A:D3:3D:DE:E0:31:8D:BF:7D:F1:C2:E2:9A:17:E0:AB:2E:C7:78 Authority key identifier: 78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA Certificate issuer: /CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Certificate serial: 61902A1C88A29ACECF008248ED3F3CD0C94D95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft Manifest number: BB Signing time: Sun 20 Sep 2026 06:30:14 +0000 Manifest this update: Sun 20 Sep 2026 06:25:14 +0000 Manifest next update: Mon 21 Sep 2026 08:14:14 +0000 Files and hashes: 1: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: wJR2nuwydbqFCTFbU0MKnXlorFv2QpV5ZLVXkfDfe78=) 2: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 2BQf1MoYT0XGiyUxqcqKQM552NzemZjiZh/eJ1HL/Ow=) 3: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: +WPVozpZcn/3/eLncGOKTtGwOiKAcol7sdk9fs/XBJg=) 4: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl (hash: anVKEygkVchWvjep9kuGmR2YsKZEWlznjdW83Q0V6Fw=) 5: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: ezj7o418kHVsUpxHI+JsvUw+jteTe5LJOavPTf4FP1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 08:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:90:2a:1c:88:a2:9a:ce:cf:00:82:48:ed:3f:3c:d0:c9:4d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA Validity Not Before: Sep 20 06:25:14 2026 GMT Not After : Sep 21 08:14:14 2026 GMT Subject: CN=9E7AD33DDEE0318DBF7DF1C2E29A17E0AB2EC778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c9:30:75:fd:6d:bc:16:60:74:a5:08:a8:52: 93:80:7a:33:ab:f0:eb:c7:96:e0:a3:9c:a8:61:d8: 47:a8:bb:42:2f:dc:4d:72:b6:3c:6d:c8:c4:14:3e: ca:8b:9a:59:53:09:42:cc:ab:7c:5c:60:82:07:fb: 7c:63:de:62:fa:ce:b7:9e:2e:3c:8f:87:05:31:c4: b9:72:fd:67:f4:05:09:b6:94:01:d8:46:af:ce:e6: fa:4c:57:23:a0:8c:a9:18:28:cf:cb:ff:8c:9c:a7: 42:c3:c4:c9:09:5f:61:f4:d9:98:4d:f1:bc:0f:27: 51:99:32:f3:fe:7a:51:3e:93:7b:8e:15:b0:3d:fa: 62:c6:ee:55:d7:34:47:32:92:45:84:f0:28:fd:f8: 71:e4:5b:c9:2b:83:b1:ab:c1:6d:90:04:63:4e:2b: 16:a9:52:89:e8:ea:c9:98:b7:ef:34:d8:09:cf:d5: 4a:b8:05:99:e5:7e:40:0c:27:8d:b0:ba:9f:32:f7: 6f:c4:2b:08:d1:e8:54:eb:e7:d7:27:4d:ec:ed:8c: f2:39:27:34:28:05:d8:cb:05:41:e2:44:29:05:1b: 22:f6:11:af:19:80:19:12:fa:21:17:af:69:de:31: 6c:b3:de:21:14:cb:a2:c8:a9:ad:18:e9:9a:68:e0: 35:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7A:D3:3D:DE:E0:31:8D:BF:7D:F1:C2:E2:9A:17:E0:AB:2E:C7:78 X509v3 Authority Key Identifier: keyid:78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d4:f9:1d:b4:2e:45:a0:f3:d1:88:48:33:2d:84:26:49:b2: d4:7a:0a:5e:9f:91:00:76:e7:d2:58:07:1a:25:ec:ca:5a:17: fc:29:73:f9:72:45:4e:49:2e:e5:e5:73:b6:c4:d7:20:80:e9: 39:59:1b:62:7b:11:43:2a:2b:ce:0c:91:74:22:e7:ba:f6:09: df:df:2e:56:40:f9:88:aa:76:fa:a3:92:d7:29:be:fc:d7:1d: 11:de:b5:74:2b:27:60:38:fd:42:6f:ae:c7:54:31:9a:d5:1d: 22:34:b7:30:e2:3b:ab:e3:b8:11:58:38:f9:1e:f4:ec:c9:9e: 20:dd:66:7e:5a:7b:23:0c:70:5f:06:0f:11:26:1d:a3:db:d5: 81:ca:1e:5a:61:4c:88:6f:cf:a9:50:88:07:e5:01:05:37:99: 79:d9:16:76:17:92:57:53:0f:f5:8f:db:d2:5a:7d:f1:fa:37: 4f:5f:22:18:4d:db:ab:de:96:89:11:a8:b8:a0:98:91:ba:fe: a4:ac:d7:70:7b:a4:2c:36:fa:0d:e3:24:3e:de:00:24:80:d6: 47:7d:0e:c3:4f:bf:a1:d8:49:81:4b:c5:c8:a7:01:db:8f:0c: 7d:d3:5b:43:45:f6:96:62:19:6f:bd:ff:37:f0:98:b8:c3:78: 00:b7:3a:31 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITYZAqHIiims7PAIJI7T880MlNlTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg3ODhDNjAxRUFEMzczRTBDMTA5MTVFQjNENUQ5OUY1MkFG RjcyQkZBMB4XDTI2MDkyMDA2MjUxNFoXDTI2MDkyMTA4MTQxNFowMzExMC8GA1UE AxMoOUU3QUQzM0RERUUwMzE4REJGN0RGMUMyRTI5QTE3RTBBQjJFQzc3ODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOTJMHX9bbwWYHSlCKhSk4B6M6vw 68eW4KOcqGHYR6i7Qi/cTXK2PG3IxBQ+youaWVMJQsyrfFxgggf7fGPeYvrOt54u PI+HBTHEuXL9Z/QFCbaUAdhGr87m+kxXI6CMqRgoz8v/jJynQsPEyQlfYfTZmE3x vA8nUZky8/56UT6Te44VsD36YsbuVdc0RzKSRYTwKP34ceRbySuDsavBbZAEY04r FqlSiejqyZi37zTYCc/VSrgFmeV+QAwnjbC6nzL3b8QrCNHoVOvn1ydN7O2M8jkn NCgF2MsFQeJEKQUbIvYRrxmAGRL6IRevad4xbLPeIRTLosiprRjpmmjgNUECAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSeetM93uAxjb998cLimhfgqy7HeDAfBgNVHSME GDAWgBR4jGAerTc+DBCRXrPV2Z9Sr/cr+jAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC83ODhDNjAxRUFE MzczRTBDMTA5MTVFQjNENUQ5OUY1MkFGRjcyQkZBLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzc4OEM2MDFFQUQzNzNFMEMxMDkxNUVCM0Q1RDk5RjUyQUZGNzJC RkEuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby84NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2 Yi0xOTkwNGE2M2Y5NDgvMC83ODhDNjAxRUFEMzczRTBDMTA5MTVFQjNENUQ5OUY1 MkFGRjcyQkZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAltT5HbQuRaDz0YhIMy2EJkmy1HoKXp+RAHbn 0lgHGiXsyloX/Clz+XJFTkku5eVztsTXIIDpOVkbYnsRQyorzgyRdCLnuvYJ398u VkD5iKp2+qOS1ym+/NcdEd61dCsnYDj9Qm+ux1QxmtUdIjS3MOI7q+O4EVg4+R70 7MmeIN1mflp7IwxwXwYPESYdo9vVgcoeWmFMiG/PqVCIB+UBBTeZedkWdheSV1MP 9Y/b0lp98fo3T18iGE3bq96WiRGouKCYkbr+pKzXcHukLDb6DeMkPt4AJIDWR30O w0+/odhJgUvFyKcB248MfdNbQ0X2lmIZb73/N/CYuMN4ALc6MQ== -----END CERTIFICATE-----Generated at Sun Sep 20 22:23:02 2026 by rpki-client