$ rpki-client -vvvf rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft File: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft (raw, json) Hash identifier: aNWGQQgOQ/OOvg5f8UoqCexf7KtJxD8OOIpmaeM3vqE= Subject key identifier: 10:FD:C2:C3:DF:E2:53:C9:E7:26:FC:46:A5:64:73:47:F6:0C:6E:83 Authority key identifier: A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 Certificate issuer: /CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Certificate serial: 3391EAB20C17C7E4B428BF4A35D3268CD79DE84A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 00:00:47 +0000 Manifest this update: Wed 23 Sep 2026 23:55:47 +0000 Manifest next update: Fri 25 Sep 2026 00:07:47 +0000 Files and hashes: 1: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl (hash: stFe8nM3wn8dROO/ZqJZoVlYf5aBvdXKOZUTU77Q6tA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:91:ea:b2:0c:17:c7:e4:b4:28:bf:4a:35:d3:26:8c:d7:9d:e8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Validity Not Before: Sep 23 23:55:47 2026 GMT Not After : Sep 25 00:07:47 2026 GMT Subject: CN=10FDC2C3DFE253C9E726FC46A5647347F60C6E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f8:31:85:5e:ec:5d:e0:56:63:12:c9:55:c5: dd:28:e3:5d:fc:40:fb:07:4d:d7:3f:c0:12:52:a1: c6:05:f7:38:79:94:36:ae:6a:3b:31:e6:0b:e3:56: 44:8d:fc:09:9a:ff:e0:6f:ff:c6:c0:44:76:30:20: 3e:d1:9c:ba:2e:6c:45:a3:8c:82:ad:7b:91:f9:5f: 2c:24:28:d5:49:59:fe:13:c4:ef:51:e0:33:71:29: 69:08:10:80:7c:68:18:47:bb:14:af:7f:27:96:12: a8:b8:83:a0:4c:b0:b7:a8:3e:3a:74:f3:ad:c7:cd: 90:5c:c9:a3:b8:53:d6:16:35:42:cd:e6:7a:33:34: 75:b2:17:b3:72:54:36:cc:2a:22:c7:6a:69:24:23: 88:b9:28:ed:f2:8e:d6:88:e1:7b:a2:eb:1b:d5:f2: a3:49:e3:73:5a:b9:9a:68:11:99:86:25:b1:ee:75: b1:ae:a7:85:39:7a:38:5c:af:e6:95:56:13:58:c7: 02:4c:86:ff:24:13:f5:1b:d9:e1:28:a0:76:b5:d6: 1c:3b:d4:18:e6:5e:63:00:d4:21:a8:73:b1:6a:d4: be:02:d5:55:da:ee:46:af:a2:34:be:ac:3f:a2:19: 7b:3d:7a:8f:1b:4b:22:c4:fe:aa:07:8f:68:41:da: fa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FD:C2:C3:DF:E2:53:C9:E7:26:FC:46:A5:64:73:47:F6:0C:6E:83 X509v3 Authority Key Identifier: keyid:A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b6:db:44:2e:fb:10:26:ca:e6:dc:52:61:56:9f:f7:1c:d1: 9f:08:41:7e:d8:38:f1:bd:80:38:a4:c6:3c:22:44:2f:dd:a6: 35:3f:cf:4a:be:d2:50:99:eb:92:ad:80:19:15:7f:3b:fd:69: 18:4a:37:09:2a:01:1a:32:88:f4:1d:e9:ea:af:2d:14:4d:fd: 95:67:d5:ff:df:4b:84:1c:f7:09:51:fa:ef:d1:f5:4f:00:e9: ca:ed:16:dd:42:af:1f:23:e2:d8:bf:4f:8b:a4:65:ea:2e:c4: ec:d0:6c:11:f1:a2:1a:99:0d:64:74:02:3c:b7:6e:f2:51:a5: a2:f2:8b:99:e1:87:ea:9c:57:df:a3:4b:56:e8:5e:b2:59:ab: 8a:4f:0b:5f:dc:5d:f1:8d:ea:de:01:66:90:aa:84:f7:67:85: 53:31:ca:a9:dc:dc:20:9c:3e:fa:99:42:bc:3c:14:2b:68:ae: f4:76:0d:72:b5:61:bd:70:e1:b2:fb:e8:95:bc:78:10:30:cc: d1:98:b5:b9:76:db:de:96:b7:8b:13:c2:16:c4:0c:47:2a:f0: f9:40:26:b0:8d:1a:35:e3:a6:18:3e:05:72:eb:2e:e7:ee:f0: 5e:fa:fc:df:06:8d:18:80:2f:13:ea:03:e6:13:f6:57:f6:40: 48:19:15:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5HqsgwXx+S0KL9KNdMmjNed6EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThC QjY4QjFFMjAeFw0yNjA5MjMyMzU1NDdaFw0yNjA5MjUwMDA3NDdaMDMxMTAvBgNV BAMTKDEwRkRDMkMzREZFMjUzQzlFNzI2RkM0NkE1NjQ3MzQ3RjYwQzZFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2+DGFXuxd4FZjEslVxd0o4138 QPsHTdc/wBJSocYF9zh5lDauajsx5gvjVkSN/Ama/+Bv/8bARHYwID7RnLoubEWj jIKte5H5XywkKNVJWf4TxO9R4DNxKWkIEIB8aBhHuxSvfyeWEqi4g6BMsLeoPjp0 863HzZBcyaO4U9YWNULN5nozNHWyF7NyVDbMKiLHamkkI4i5KO3yjtaI4Xui6xvV 8qNJ43NauZpoEZmGJbHudbGup4U5ejhcr+aVVhNYxwJMhv8kE/Ub2eEooHa11hw7 1BjmXmMA1CGoc7Fq1L4C1VXa7kavojS+rD+iGXs9eo8bSyLE/qoHj2hB2vrPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEP3Cw9/iU8nnJvxGpWRzR/YMboMwHwYDVR0j BBgwFoAUorOD+Y0J08RDyi31VvZPmLtoseIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU1NjRlNzktYjY3OS00NmQ1LWIxZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4 RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThCQjY4QjFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMkIzODNGOThEMDlEM0M0NDNDQTJERjU1NkY2NEY5OEJCNjhC MUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU1NjRlNzktYjY3OS00NmQ1LWIx ZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRG OThCQjY4QjFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABa220Qu+xAmyubcUmFWn/cc0Z8IQX7YOPG9 gDikxjwiRC/dpjU/z0q+0lCZ65KtgBkVfzv9aRhKNwkqARoyiPQd6eqvLRRN/ZVn 1f/fS4Qc9wlR+u/R9U8A6crtFt1Crx8j4ti/T4ukZeouxOzQbBHxohqZDWR0Ajy3 bvJRpaLyi5nhh+qcV9+jS1boXrJZq4pPC1/cXfGN6t4BZpCqhPdnhVMxyqnc3CCc PvqZQrw8FCtorvR2DXK1Yb1w4bL76JW8eBAwzNGYtbl2296Wt4sTwhbEDEcq8PlA JrCNGjXjphg+BXLrLufu8F76/N8GjRiALxPqA+YT9lf2QEgZFcQ= -----END CERTIFICATE-----Generated at Thu Sep 24 14:43:42 2026 by rpki-client