$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.mft File: 790B62849B574740604A7D3662FBB56A4DB8F510.mft (raw, json) Hash identifier: 7IZ1hwEXYj3k1TBauoY7Jp93aO7TfDiDX9PNiVLhtcs= Subject key identifier: 28:97:47:12:EC:5E:E6:7C:88:6F:5D:40:7D:93:1F:4E:EE:DB:08:71 Authority key identifier: 79:0B:62:84:9B:57:47:40:60:4A:7D:36:62:FB:B5:6A:4D:B8:F5:10 Certificate issuer: /CN=790B62849B574740604A7D3662FBB56A4DB8F510 Certificate serial: 1E61640157C10882AACCD98FFA593FB7A430CC45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:46:17 +0000 Manifest this update: Mon 21 Sep 2026 07:41:17 +0000 Manifest next update: Tue 22 Sep 2026 08:02:17 +0000 Files and hashes: 1: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: e02MKBQgYP+gWaNmouD7MtCYu0SRQ4Bho5dsgVkksxY=) 2: 3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa (hash: NJvu5a2G0jjnlwhF7q1VResc9Hvm9KMupvNKyxPdQCg=) 3: 790B62849B574740604A7D3662FBB56A4DB8F510.crl (hash: IJ6q7ohPklwRWo4ixVnoApJbU+vPJkEfeb0M1cMhvP0=) 4: 3130332e33382e3131302e302f32342d3234203d3e20313531353639.roa (hash: pGxhgrYKixK8KuIb09I/uNnM3vdhwY5/uB5atkATCJ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.crl rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:61:64:01:57:c1:08:82:aa:cc:d9:8f:fa:59:3f:b7:a4:30:cc:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=790B62849B574740604A7D3662FBB56A4DB8F510 Validity Not Before: Sep 21 07:41:17 2026 GMT Not After : Sep 22 08:02:17 2026 GMT Subject: CN=28974712EC5EE67C886F5D407D931F4EEEDB0871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:47:fe:8d:04:e9:b0:87:42:41:bd:ed:c6:c2: bd:55:96:28:ce:1a:38:21:1f:eb:c0:ad:5e:14:06: 75:bd:0b:ca:34:90:3f:eb:b1:2c:d5:06:36:f1:a1: f1:19:04:51:60:81:37:f0:11:12:3f:f9:eb:d2:f9: 5f:3e:44:fd:dc:58:a6:31:b1:79:71:27:85:79:2e: 2d:42:7d:6e:82:2b:c7:b2:9f:4d:c4:b8:6e:5e:e0: 94:eb:ab:65:77:bb:05:41:bc:4e:7e:05:2e:5b:37: 9f:66:3b:b5:1b:04:a5:eb:be:00:e3:ea:f1:4e:24: c1:75:c3:e4:84:0b:2a:31:70:af:71:71:4b:32:d9: e7:d7:62:a5:ae:b3:0d:25:bb:c2:11:9c:08:39:88: 1d:a8:84:e7:40:48:01:be:36:2a:6c:5b:3f:bc:aa: 8e:47:e7:78:c8:3d:93:0b:6a:de:cb:f0:28:7a:48: 45:ed:b7:5c:f4:90:81:b6:5a:dc:ab:40:90:83:cf: fe:cd:5d:44:bb:46:a1:10:e0:80:2e:ae:4a:7c:01: 2c:8c:b0:69:27:9b:cd:87:5f:d5:a8:42:22:24:05: ae:ed:1c:12:95:e0:5b:82:db:a4:fe:40:f7:27:98: b3:62:90:36:2c:e0:88:60:24:b9:63:1d:74:08:88: e4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:97:47:12:EC:5E:E6:7C:88:6F:5D:40:7D:93:1F:4E:EE:DB:08:71 X509v3 Authority Key Identifier: keyid:79:0B:62:84:9B:57:47:40:60:4A:7D:36:62:FB:B5:6A:4D:B8:F5:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/790B62849B574740604A7D3662FBB56A4DB8F510.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/790B62849B574740604A7D3662FBB56A4DB8F510.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:52:0c:92:8a:12:6f:50:13:9e:02:bd:fc:0b:18:96:ed:34: 4a:42:f9:a5:e3:7e:79:e3:c5:d1:74:67:50:3c:50:b6:0c:2f: 7e:6f:3b:b6:70:2e:17:af:6e:f2:fd:81:f9:09:a7:69:5b:90: f1:e3:17:92:70:e7:4b:04:66:84:26:9a:3f:dd:92:52:fd:fc: 0f:18:c5:55:79:e4:91:60:0b:40:19:97:b0:14:17:1c:90:aa: a3:d3:ce:59:8e:59:3c:0b:10:27:19:e8:50:9e:e6:ca:ca:e1: 08:b5:cf:18:f2:4e:98:03:5e:8c:c3:42:34:34:4b:77:f0:cc: c8:ca:38:84:39:0a:98:7c:c0:42:02:ba:79:94:5b:c9:70:6f: 50:da:ea:ea:93:e4:1e:c1:d3:b5:7d:59:95:9f:63:98:f5:e4: 5d:46:86:d7:0b:6c:a0:50:f4:76:09:83:0f:cc:d7:c7:61:43: c8:10:98:c6:94:95:03:bb:a3:2b:d9:c3:f5:02:3a:f5:55:c6: a6:96:b1:14:c2:d4:02:0c:55:e2:ac:36:a3:1f:c5:33:ff:fb: 43:28:40:71:a4:74:1f:58:e6:53:7e:bd:5b:d2:e6:a7:90:0f: 4e:ae:42:00:ce:08:0e:fb:95:63:5a:14:85:dd:b4:dc:d6:58: db:15:05:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHmFkAVfBCIKqzNmP+lk/t6QwzEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkwQjYyODQ5QjU3NDc0MDYwNEE3RDM2NjJGQkI1NkE0 REI4RjUxMDAeFw0yNjA5MjEwNzQxMTdaFw0yNjA5MjIwODAyMTdaMDMxMTAvBgNV BAMTKDI4OTc0NzEyRUM1RUU2N0M4ODZGNUQ0MDdEOTMxRjRFRUVEQjA4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeR/6NBOmwh0JBve3Gwr1VlijO GjghH+vArV4UBnW9C8o0kD/rsSzVBjbxofEZBFFggTfwERI/+evS+V8+RP3cWKYx sXlxJ4V5Li1CfW6CK8eyn03EuG5e4JTrq2V3uwVBvE5+BS5bN59mO7UbBKXrvgDj 6vFOJMF1w+SECyoxcK9xcUsy2efXYqWusw0lu8IRnAg5iB2ohOdASAG+NipsWz+8 qo5H53jIPZMLat7L8Ch6SEXtt1z0kIG2WtyrQJCDz/7NXUS7RqEQ4IAurkp8ASyM sGknm82HX9WoQiIkBa7tHBKV4FuC26T+QPcnmLNikDYs4IhgJLljHXQIiOQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKJdHEuxe5nyIb11AfZMfTu7bCHEwHwYDVR0j BBgwFoAUeQtihJtXR0BgSn02Yvu1ak249RAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FiZWViY2MtYTI0Ny00ZmRlLWFhODYtYzY2NjllYWJjZDgyLzAvNzkwQjYyODQ5 QjU3NDc0MDYwNEE3RDM2NjJGQkI1NkE0REI4RjUxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83OTBCNjI4NDlCNTc0NzQwNjA0QTdEMzY2MkZCQjU2QTREQjhG NTEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvNzkwQjYyODQ5QjU3NDc0MDYwNEE3RDM2NjJGQkI1 NkE0REI4RjUxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdSDJKKEm9QE54CvfwLGJbtNEpC+aXjfnnj xdF0Z1A8ULYML35vO7ZwLhevbvL9gfkJp2lbkPHjF5Jw50sEZoQmmj/dklL9/A8Y xVV55JFgC0AZl7AUFxyQqqPTzlmOWTwLECcZ6FCe5srK4Qi1zxjyTpgDXozDQjQ0 S3fwzMjKOIQ5Cph8wEICunmUW8lwb1Da6uqT5B7B07V9WZWfY5j15F1GhtcLbKBQ 9HYJgw/M18dhQ8gQmMaUlQO7oyvZw/UCOvVVxqaWsRTC1AIMVeKsNqMfxTP/+0Mo QHGkdB9Y5lN+vVvS5qeQD06uQgDOCA77lWNaFIXdtNzWWNsVBQs= -----END CERTIFICATE-----Generated at Mon Sep 21 14:31:43 2026 by rpki-client