$ rpki-client -vvf rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft File: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft (raw, json) Hash identifier: 7nOdsskAMlsPobLSK8vtuUBwHZkm+VN+C6Gzhmqwscc= Subject key identifier: B8:6A:00:C3:71:CF:20:8C:4B:71:02:2D:A2:9D:80:AE:F4:F2:E3:4B Authority key identifier: A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 Certificate issuer: /CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Certificate serial: 34304B8987ECA5B6B0B8D880A43F733581667644 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:35:58 +0000 Manifest this update: Tue 12 May 2026 09:30:58 +0000 Manifest next update: Wed 13 May 2026 12:02:58 +0000 Files and hashes: 1: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl (hash: 6gk6HkncvLki1SRls0xTa1gUqtqd2D7lfYNIyP1Jqbw=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TlXm5FUEfPUbwvDslESvInZ7QzJfvEoxUutevfTlhzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:30:4b:89:87:ec:a5:b6:b0:b8:d8:80:a4:3f:73:35:81:66:76:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Validity Not Before: May 12 09:30:58 2026 GMT Not After : May 13 12:02:58 2026 GMT Subject: CN=B86A00C371CF208C4B71022DA29D80AEF4F2E34B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:26:78:75:85:bd:28:fd:ea:a4:70:b8:3b:04: be:11:c6:06:ec:1c:c8:25:3b:80:85:e5:47:33:14: 78:fe:97:b5:0c:22:f6:51:80:56:73:5b:5b:e5:e9: 2d:67:69:e0:41:e2:60:5d:69:b3:c5:5e:0b:45:cb: 3f:41:1f:f7:ee:97:80:6d:a9:8b:9d:5b:26:97:fe: e2:80:13:47:2d:f0:74:83:49:d7:46:4d:d7:39:4d: 06:cd:5f:08:ef:fc:73:ad:c8:ab:58:96:3c:fc:0a: c5:f0:63:b3:7b:1c:75:e9:d7:44:c3:c3:7c:09:a8: 31:7c:64:f0:46:a4:bb:62:20:05:c0:c7:b4:19:8b: f3:ce:75:1e:de:6b:82:2e:26:de:bc:25:23:fb:79: fc:71:75:35:00:17:99:38:08:bc:13:8a:e1:ab:c2: 3c:88:15:1e:f5:80:80:5b:a3:b2:58:ac:c6:2a:fc: 32:55:df:54:86:9c:e8:2f:a3:c8:e6:11:ba:7c:0e: 45:1a:84:6d:a8:fe:9e:1d:69:7f:eb:9b:53:76:26: e9:84:bc:10:75:b5:54:95:49:de:56:66:74:62:a8: 6c:67:4c:29:77:02:39:6e:1f:bf:50:ff:48:17:83: c2:89:8d:8a:0e:76:61:dd:7f:13:2a:aa:aa:85:b1: 96:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6A:00:C3:71:CF:20:8C:4B:71:02:2D:A2:9D:80:AE:F4:F2:E3:4B X509v3 Authority Key Identifier: keyid:A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:12:86:80:40:7e:46:2f:3a:cd:3a:46:b2:5e:47:c2:28:94: 93:c0:fe:8e:9d:3b:cc:76:de:58:22:4d:7e:b9:b5:cd:20:4a: 08:0c:af:86:8e:32:c9:cb:98:67:5e:29:f7:ce:60:d9:59:85: 73:dc:f5:33:c0:00:df:22:c4:76:54:fa:0f:9b:c3:20:77:87: ac:53:da:c5:f6:cd:e2:16:15:22:dd:84:39:4e:fa:f5:d8:83: 53:63:cc:cd:d0:90:83:9d:df:23:ec:bd:c5:5d:e5:fb:62:81: 90:35:b1:c2:8d:85:74:52:94:49:16:c0:23:67:76:8b:ab:a5: 4f:63:ad:c4:87:b9:6a:ec:e9:a2:ee:e2:46:38:9e:d0:3b:19: 35:57:13:f7:bc:c5:af:dc:ad:af:08:f5:0a:b5:1d:b5:fd:04: 4f:ca:f4:3b:8f:45:4b:5d:b0:d2:8f:a5:1a:d1:bd:b9:2d:e1: 37:ca:45:0f:54:31:cd:67:7f:d5:9b:2e:cf:24:60:72:03:5d: b1:87:b9:0b:91:b4:43:9f:74:b0:65:55:2b:80:9b:b7:54:91: d4:16:b9:8a:19:77:ff:73:09:99:47:47:48:b9:39:99:50:83: ee:a4:ba:39:2e:16:27:af:df:2e:55:4a:b8:43:63:74:c4:87: ce:3d:84:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNDBLiYfspbawuNiApD9zNYFmdkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JD NThERDk3NzAeFw0yNjA1MTIwOTMwNThaFw0yNjA1MTMxMjAyNThaMDMxMTAvBgNV BAMTKEI4NkEwMEMzNzFDRjIwOEM0QjcxMDIyREEyOUQ4MEFFRjRGMkUzNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGJnh1hb0o/eqkcLg7BL4Rxgbs HMglO4CF5UczFHj+l7UMIvZRgFZzW1vl6S1naeBB4mBdabPFXgtFyz9BH/ful4Bt qYudWyaX/uKAE0ct8HSDSddGTdc5TQbNXwjv/HOtyKtYljz8CsXwY7N7HHXp10TD w3wJqDF8ZPBGpLtiIAXAx7QZi/POdR7ea4IuJt68JSP7efxxdTUAF5k4CLwTiuGr wjyIFR71gIBbo7JYrMYq/DJV31SGnOgvo8jmEbp8DkUahG2o/p4daX/rm1N2JumE vBB1tVSVSd5WZnRiqGxnTCl3AjluH79Q/0gXg8KJjYoOdmHdfxMqqqqFsZZJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuGoAw3HPIIxLcQItop2ArvTy40swHwYDVR0j BBgwFoAUo3biOCxq6n/GJZUBpyvxy8WN2XcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJlZDZkYzQtZDM4Yi00NGJhLTlmMGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgy QzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JDNThERDk3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMzc2RTIzODJDNkFFQTdGQzYyNTk1MDFBNzJCRjFDQkM1OERE OTc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYx Q0JDNThERDk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMShoBAfkYvOs06RrJeR8IolJPA/o6dO8x2 3lgiTX65tc0gSggMr4aOMsnLmGdeKffOYNlZhXPc9TPAAN8ixHZU+g+bwyB3h6xT 2sX2zeIWFSLdhDlO+vXYg1NjzM3QkIOd3yPsvcVd5ftigZA1scKNhXRSlEkWwCNn dourpU9jrcSHuWrs6aLu4kY4ntA7GTVXE/e8xa/cra8I9Qq1HbX9BE/K9DuPRUtd sNKPpRrRvbkt4TfKRQ9UMc1nf9WbLs8kYHIDXbGHuQuRtEOfdLBlVSuAm7dUkdQW uYoZd/9zCZlHR0i5OZlQg+6kujkuFiev3y5VSrhDY3TEh849hMk= -----END CERTIFICATE-----Generated at Wed May 13 01:35:23 2026 by rpki-client