$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.mft File: 375BB2985478673C260242A779568A4435FE5916.mft (raw, json) Hash identifier: Nq0tMfxM0y05Eb83Qa6/V8xMPAz6c/AjNckwXKZSYRE= Subject key identifier: 5E:FD:42:02:F0:FA:01:7C:08:89:B5:1A:9B:DB:27:8B:50:EC:E8:11 Authority key identifier: 37:5B:B2:98:54:78:67:3C:26:02:42:A7:79:56:8A:44:35:FE:59:16 Certificate issuer: /CN=375BB2985478673C260242A779568A4435FE5916 Certificate serial: 1B2E0F5A7090059254E3CF3E07FCE911CA4DBD27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 16:15:22 +0000 Manifest this update: Fri 25 Sep 2026 16:10:22 +0000 Manifest next update: Sat 26 Sep 2026 20:14:22 +0000 Files and hashes: 1: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (hash: +khD6fTKppHI5JvHnZDJ36jLAF7NQSFlP020rk3Q+Bw=) 2: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (hash: vkf0yRO25ABbOz67XbB5ZjYKpcZhyMtCimxrRdXql3I=) 3: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: 2tzcr5upqyH9fZykdfFPqjFFvR9omuDbfe3zk3q54uE=) 4: 375BB2985478673C260242A779568A4435FE5916.crl (hash: YvO9GmEhLcBX0gohwq3DVjHDM32OqQyoa7aR7O9CSao=) 5: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (hash: 2SNG+J8YVnJEhFWEWTHXlYtdGDOPjiHimQkIYXb7fTk=) 6: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (hash: r2opJlukM/WXY4Q2K0Bya1XcZKBiKs1jhLESJdrguEM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.crl rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:2e:0f:5a:70:90:05:92:54:e3:cf:3e:07:fc:e9:11:ca:4d:bd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375BB2985478673C260242A779568A4435FE5916 Validity Not Before: Sep 25 16:10:22 2026 GMT Not After : Sep 26 20:14:22 2026 GMT Subject: CN=5EFD4202F0FA017C0889B51A9BDB278B50ECE811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:de:c7:84:31:b2:32:24:e6:ce:8e:2d:3a: 9d:f1:db:51:97:c7:c4:74:5a:ca:0a:6b:f1:27:04: b5:a8:9c:c1:00:b8:c3:39:13:6a:ee:38:66:d4:aa: ae:7d:6e:b2:85:a4:e3:3a:cc:71:2e:6d:ff:37:76: 02:06:d5:ca:4d:91:20:25:4f:73:bb:3d:ff:7a:e8: 6a:7f:a2:4b:2c:7b:57:33:01:e8:f0:a2:46:11:75: 4e:b1:c4:d2:d6:04:dc:a9:61:b1:c1:99:4f:14:d8: 40:38:ab:17:7d:2b:db:15:70:d1:29:30:fa:54:e8: 57:d0:a0:ec:0e:ca:88:c7:91:d2:3e:cc:4d:fe:15: 49:81:2b:da:64:b5:91:01:05:48:fb:ea:65:58:02: 52:99:a8:06:a1:72:c5:b9:d8:de:b4:41:b5:75:80: b9:25:a3:67:a6:5a:a0:d0:c3:cc:5f:ea:51:8f:00: 12:2b:f4:33:64:04:d4:11:12:a2:4c:64:6b:73:1a: 0e:35:ee:05:42:f0:8e:87:8c:4f:7f:ae:1e:5e:50: 3f:7a:b6:b9:93:4d:83:5b:d9:a9:54:46:39:d1:77: ca:b1:a9:f1:7b:d8:6a:6c:a4:cf:d2:26:d1:dd:71: 25:9c:9a:28:48:20:75:e7:21:8c:e7:62:57:03:7c: 79:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FD:42:02:F0:FA:01:7C:08:89:B5:1A:9B:DB:27:8B:50:EC:E8:11 X509v3 Authority Key Identifier: keyid:37:5B:B2:98:54:78:67:3C:26:02:42:A7:79:56:8A:44:35:FE:59:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/375BB2985478673C260242A779568A4435FE5916.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/375BB2985478673C260242A779568A4435FE5916.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:69:06:72:ce:2b:80:ef:3b:33:b0:fd:47:7d:9d:17:19:f9: 42:a5:c5:74:7e:fe:4b:90:8b:d9:ac:ee:e0:2d:3e:69:61:df: 23:4b:e7:81:a8:ec:ab:31:3a:0f:d4:97:7f:ae:b7:48:62:7f: 6e:36:03:64:d6:bb:cb:ab:83:eb:b8:0b:70:50:a6:38:e2:c3: 1a:e5:21:09:e2:0d:4a:0e:ef:1a:72:5b:35:e7:d3:30:75:90: 5d:09:f8:4d:90:d5:59:89:0f:67:42:7d:25:2f:6d:6c:bc:4d: fb:20:c3:32:bf:4b:a7:4d:7a:16:6a:4f:a4:3a:b0:d6:02:f2: 39:74:ed:62:5e:25:37:d1:68:af:bd:dd:ef:9f:07:26:35:8b: 33:4a:0a:4f:61:00:a4:57:77:62:ee:f8:ab:ac:eb:58:40:da: 92:65:b7:a0:94:01:32:df:6a:bd:78:05:36:28:5b:25:8c:20: 19:69:5e:9f:86:4a:9b:0c:43:1a:d7:56:9f:44:e6:a6:3e:72: b7:f5:8e:fc:4b:98:c4:57:c2:7d:f4:be:77:9b:b4:4c:c5:df: ce:53:45:5e:b9:e0:4f:b6:5b:10:8f:a1:1a:27:13:e3:e4:c3: 9d:12:57:60:54:47:69:2b:01:76:8e:5e:aa:e9:8f:02:cc:b4: d3:d7:70:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGy4PWnCQBZJU488+B/zpEcpNvScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc1QkIyOTg1NDc4NjczQzI2MDI0MkE3Nzk1NjhBNDQz NUZFNTkxNjAeFw0yNjA5MjUxNjEwMjJaFw0yNjA5MjYyMDE0MjJaMDMxMTAvBgNV BAMTKDVFRkQ0MjAyRjBGQTAxN0MwODg5QjUxQTlCREIyNzhCNTBFQ0U4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Dd7HhDGyMiTmzo4tOp3x21GX x8R0WsoKa/EnBLWonMEAuMM5E2ruOGbUqq59brKFpOM6zHEubf83dgIG1cpNkSAl T3O7Pf966Gp/oksse1czAejwokYRdU6xxNLWBNypYbHBmU8U2EA4qxd9K9sVcNEp MPpU6FfQoOwOyojHkdI+zE3+FUmBK9pktZEBBUj76mVYAlKZqAahcsW52N60QbV1 gLklo2emWqDQw8xf6lGPABIr9DNkBNQREqJMZGtzGg417gVC8I6HjE9/rh5eUD96 trmTTYNb2alURjnRd8qxqfF72GpspM/SJtHdcSWcmihIIHXnIYznYlcDfHndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXv1CAvD6AXwIibUam9sni1Ds6BEwHwYDVR0j BBgwFoAUN1uymFR4ZzwmAkKneVaKRDX+WRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWMzZjIyODgtODhjZi00ZDJiLWJiYTYtYTAzZGQ1ZjgzNzYxLzAvMzc1QkIyOTg1 NDc4NjczQzI2MDI0MkE3Nzk1NjhBNDQzNUZFNTkxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNzVCQjI5ODU0Nzg2NzNDMjYwMjQyQTc3OTU2OEE0NDM1RkU1 OTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMzc1QkIyOTg1NDc4NjczQzI2MDI0MkE3Nzk1NjhB NDQzNUZFNTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVpBnLOK4DvOzOw/Ud9nRcZ+UKlxXR+/kuQ i9ms7uAtPmlh3yNL54Go7KsxOg/Ul3+ut0hif242A2TWu8urg+u4C3BQpjjiwxrl IQniDUoO7xpyWzXn0zB1kF0J+E2Q1VmJD2dCfSUvbWy8TfsgwzK/S6dNehZqT6Q6 sNYC8jl07WJeJTfRaK+93e+fByY1izNKCk9hAKRXd2Lu+Kus61hA2pJlt6CUATLf ar14BTYoWyWMIBlpXp+GSpsMQxrXVp9E5qY+crf1jvxLmMRXwn30vnebtEzF385T RV654E+2WxCPoRonE+Pkw50SV2BUR2krAXaOXqrpjwLMtNPXcKA= -----END CERTIFICATE-----Generated at Fri Sep 25 21:48:18 2026 by rpki-client