$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft File: 785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft (raw, json) Hash identifier: RRXBiIwFUMAyMc90GifmBHzkJgsUzjqumsifxoQ2tWM= Subject key identifier: C5:AD:EE:9C:CA:1E:0E:82:B1:A4:64:72:66:54:3D:FA:C2:88:CD:28 Authority key identifier: 78:50:24:DB:7A:6F:C2:EE:9E:4D:4A:40:97:68:D7:9A:95:22:73:FC Certificate issuer: /CN=785024DB7A6FC2EE9E4D4A409768D79A952273FC Certificate serial: 6CEBDAD971E66E85953E2CC233F8E7DE756C9BA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:16:53 +0000 Manifest this update: Mon 21 Sep 2026 00:11:53 +0000 Manifest next update: Tue 22 Sep 2026 02:02:53 +0000 Files and hashes: 1: 785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl (hash: Iig0yCHTZPA/Sr0CYF6VBkzGok7u2hxHOizVVfOQ0VE=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: yOnWZNbCc8o1mKC0JiqTlN6+Y33PQ/Kc+NLmWQanxsY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:eb:da:d9:71:e6:6e:85:95:3e:2c:c2:33:f8:e7:de:75:6c:9b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785024DB7A6FC2EE9E4D4A409768D79A952273FC Validity Not Before: Sep 21 00:11:53 2026 GMT Not After : Sep 22 02:02:53 2026 GMT Subject: CN=C5ADEE9CCA1E0E82B1A4647266543DFAC288CD28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:ad:2a:97:92:17:03:4a:38:53:4f:e3:27: d2:56:69:62:13:f4:19:5a:67:b3:d9:7d:ac:06:38: aa:1a:c0:7a:3a:41:c6:0c:a4:53:70:19:5b:9a:49: 7a:09:d3:2d:d1:fd:bd:9e:5a:b7:9c:b0:68:ac:80: ec:1a:f4:ec:75:8c:fd:ee:82:3e:93:5b:89:54:f9: cd:a7:8f:22:51:04:4f:df:fa:9c:db:85:dd:d4:13: 5f:5d:9b:f1:a7:bc:20:61:41:64:4f:88:22:63:14: ae:e8:44:11:9e:06:7c:0c:1c:1c:3a:18:6d:e8:46: dc:14:95:d5:66:eb:4b:00:b0:a2:dd:e7:e2:4e:f2: af:55:1c:88:68:52:df:f3:bf:fb:e1:7c:a6:75:7e: 83:5a:1a:e0:7f:c9:fb:82:bb:4b:5b:d1:cf:3c:06: da:a6:0a:b3:57:59:2b:94:f1:c0:5e:33:5a:66:5b: c0:d4:96:2d:63:0f:01:98:84:4d:25:73:b8:6d:db: 9f:af:86:42:06:f0:50:15:52:c4:26:aa:b2:cd:7c: b6:df:41:6b:44:e6:bb:e6:54:2e:c6:2b:fb:0f:15: d3:c0:20:87:c5:0b:db:d6:77:7f:14:da:9e:ed:07: e7:2b:21:a9:fe:bf:cf:af:f3:be:fb:73:1b:d5:fc: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AD:EE:9C:CA:1E:0E:82:B1:A4:64:72:66:54:3D:FA:C2:88:CD:28 X509v3 Authority Key Identifier: keyid:78:50:24:DB:7A:6F:C2:EE:9E:4D:4A:40:97:68:D7:9A:95:22:73:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785024DB7A6FC2EE9E4D4A409768D79A952273FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/785024DB7A6FC2EE9E4D4A409768D79A952273FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:81:8e:c2:ca:3d:3d:30:73:c0:53:ec:09:d7:56:86:1e:29: 63:ed:85:a0:1e:42:e7:17:7f:dc:be:7b:12:41:90:6f:17:ce: 47:50:17:a3:a1:e3:94:d9:a9:7e:41:2a:7b:f8:07:48:ff:ab: d7:ce:c7:d8:b6:06:51:14:cd:4f:61:2f:ef:24:58:2b:86:ea: 09:d5:2b:33:62:dc:26:72:15:01:92:52:2f:9b:6d:c1:87:1a: ab:85:7e:96:b9:ac:0b:3f:66:08:be:af:70:3e:d1:13:37:01: 21:87:c5:28:0d:9a:34:67:8e:7d:33:36:34:d1:90:00:84:c3: 57:03:60:2b:4e:c6:47:93:d8:4e:22:39:dc:7f:bf:19:4b:46: 6b:b8:11:73:a9:d5:a0:a4:f9:b3:f7:a0:32:f8:8f:26:3d:34: 52:ff:56:1e:05:c3:3f:27:15:8c:f0:c9:de:dc:57:31:27:f4: e7:a4:cb:99:51:18:74:62:8e:6f:eb:10:20:a6:2f:b4:b7:11: 92:da:c2:a8:a0:75:81:05:26:06:24:9b:66:49:ee:6e:59:5d: 71:58:aa:55:55:44:b8:aa:5e:7a:65:ed:1a:24:1e:64:15:19: fc:4b:f8:b1:4d:29:b9:50:9b:06:c7:c1:20:8e:59:88:7e:86: ae:87:e1:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOva2XHmboWVPizCM/jn3nVsm6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg1MDI0REI3QTZGQzJFRTlFNEQ0QTQwOTc2OEQ3OUE5 NTIyNzNGQzAeFw0yNjA5MjEwMDExNTNaFw0yNjA5MjIwMjAyNTNaMDMxMTAvBgNV BAMTKEM1QURFRTlDQ0ExRTBFODJCMUE0NjQ3MjY2NTQzREZBQzI4OENEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Pq0ql5IXA0o4U0/jJ9JWaWIT 9BlaZ7PZfawGOKoawHo6QcYMpFNwGVuaSXoJ0y3R/b2eWrecsGisgOwa9Ox1jP3u gj6TW4lU+c2njyJRBE/f+pzbhd3UE19dm/GnvCBhQWRPiCJjFK7oRBGeBnwMHBw6 GG3oRtwUldVm60sAsKLd5+JO8q9VHIhoUt/zv/vhfKZ1foNaGuB/yfuCu0tb0c88 BtqmCrNXWSuU8cBeM1pmW8DUli1jDwGYhE0lc7ht25+vhkIG8FAVUsQmqrLNfLbf QWtE5rvmVC7GK/sPFdPAIIfFC9vWd38U2p7tB+crIan+v8+v8777cxvV/JcnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxa3unMoeDoKxpGRyZlQ9+sKIzSgwHwYDVR0j BBgwFoAUeFAk23pvwu6eTUpAl2jXmpUic/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFhMjkyOWMtNjA4OC00Y2I1LTgzYzYtZjRhMzU2YjIwZjlkLzAvNzg1MDI0REI3 QTZGQzJFRTlFNEQ0QTQwOTc2OEQ3OUE5NTIyNzNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODUwMjREQjdBNkZDMkVFOUU0RDRBNDA5NzY4RDc5QTk1MjI3 M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvNzg1MDI0REI3QTZGQzJFRTlFNEQ0QTQwOTc2OEQ3 OUE5NTIyNzNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6BjsLKPT0wc8BT7AnXVoYeKWPthaAeQucX f9y+exJBkG8XzkdQF6Oh45TZqX5BKnv4B0j/q9fOx9i2BlEUzU9hL+8kWCuG6gnV KzNi3CZyFQGSUi+bbcGHGquFfpa5rAs/Zgi+r3A+0RM3ASGHxSgNmjRnjn0zNjTR kACEw1cDYCtOxkeT2E4iOdx/vxlLRmu4EXOp1aCk+bP3oDL4jyY9NFL/Vh4Fwz8n FYzwyd7cVzEn9Oeky5lRGHRijm/rECCmL7S3EZLawqigdYEFJgYkm2ZJ7m5ZXXFY qlVVRLiqXnpl7RokHmQVGfxL+LFNKblQmwbHwSCOWYh+hq6H4Tc= -----END CERTIFICATE-----Generated at Mon Sep 21 09:43:30 2026 by rpki-client