$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft File: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft (raw, json) Hash identifier: sdxyWyLOnxf3hq6mSSoeyTDWO0+gnUHghkTWhDlWuzw= Subject key identifier: E0:97:AC:69:26:32:42:7A:8D:98:68:4E:2F:F1:4D:F6:F1:02:3B:E7 Authority key identifier: A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 Certificate issuer: /CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Certificate serial: 705DACA5E7F010B12E0CF8BC5B0515EDE33DDFA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 15:35:26 +0000 Manifest this update: Wed 23 Sep 2026 15:30:26 +0000 Manifest next update: Thu 24 Sep 2026 18:03:26 +0000 Files and hashes: 1: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl (hash: sUtHFVdPc8CwV49SRfgH8UCdA+8JSODZzuZCLmVd0qY=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TlXm5FUEfPUbwvDslESvInZ7QzJfvEoxUutevfTlhzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:5d:ac:a5:e7:f0:10:b1:2e:0c:f8:bc:5b:05:15:ed:e3:3d:df:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Validity Not Before: Sep 23 15:30:26 2026 GMT Not After : Sep 24 18:03:26 2026 GMT Subject: CN=E097AC692632427A8D98684E2FF14DF6F1023BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:c8:89:1c:98:e2:3e:31:de:49:60:2c:27: 7d:88:2d:19:ed:77:81:95:0c:1f:bd:23:6f:1c:ce: 83:82:37:b1:89:ac:57:cd:4b:aa:db:66:48:db:99: 04:b2:4a:70:21:52:e7:5d:6f:d9:7b:03:27:b1:17: 80:44:47:3e:32:05:ae:70:a8:47:c4:5a:c0:68:aa: 13:05:c3:22:ac:21:1c:b3:77:4c:80:3f:ba:6d:7d: 21:99:ea:ba:a7:1a:22:f9:23:75:ab:34:63:b4:ae: ce:7b:91:d9:d8:08:54:ae:eb:33:88:cc:cf:83:5f: fb:d1:91:5e:f8:e1:ec:0f:83:75:8b:df:ee:be:a4: d1:28:69:35:c8:db:72:94:e5:49:cd:00:21:a3:88: b0:7b:19:07:87:c9:b0:5d:16:61:92:f4:7b:99:5b: d0:e8:3e:b4:87:d6:5b:f8:52:1f:c6:a1:e6:bf:e1: 98:b0:88:e0:46:98:c4:ae:b9:3c:c5:6b:5e:ed:ad: 5e:d0:75:82:60:eb:da:2b:16:58:e1:bd:ba:31:f4: bf:60:d9:32:5d:13:9a:3d:1c:5e:28:c6:52:62:fd: 14:8e:c2:3d:15:1a:ca:19:61:4f:98:29:b5:95:8f: 72:ae:37:62:d7:fc:f0:c9:49:c3:0f:6f:68:49:9c: 91:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:97:AC:69:26:32:42:7A:8D:98:68:4E:2F:F1:4D:F6:F1:02:3B:E7 X509v3 Authority Key Identifier: keyid:A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:39:7b:15:9e:91:44:85:a7:18:e1:32:ec:ae:66:5f:a8:06: 6c:6a:ae:de:d2:e8:ab:18:4f:32:cc:4c:24:06:35:11:5a:6c: 46:59:b2:c6:1b:ed:a9:5e:9f:a8:8b:fc:d8:c7:ec:a1:1e:a8: bb:ab:cf:16:62:31:60:c2:45:be:45:50:a9:08:f5:7e:0c:5a: da:e0:d8:45:c7:48:6d:8e:b9:52:08:af:db:32:8f:e4:98:40: a5:98:5d:68:a6:ac:6d:18:1b:95:74:66:35:40:9e:67:10:a7: 5d:67:30:15:ce:5c:67:d4:85:54:93:2c:1c:98:98:67:02:51: ec:25:54:c6:48:8d:12:a3:3a:36:2c:62:3e:5c:4d:49:1a:67: 38:7e:19:7e:4e:a3:12:58:8d:76:2d:b1:5a:c8:80:ff:82:9a: 9e:0e:13:26:be:12:b3:28:60:eb:d5:e0:d8:ef:3c:45:25:c1: 43:44:4f:d8:83:39:dc:5d:48:03:f8:7c:f3:b0:cb:6e:0f:20: ea:c6:25:f4:91:33:d9:8b:2f:74:ce:5c:6e:3a:18:7d:86:fc: 0f:98:7f:3a:fc:c3:43:e7:65:29:94:ad:29:f9:e4:d8:fa:d8: f6:0a:9b:e1:2e:20:91:f0:ec:b6:f4:a7:2c:23:7f:bb:6d:3a: 64:37:49:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcF2spefwELEuDPi8WwUV7eM936UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JD NThERDk3NzAeFw0yNjA5MjMxNTMwMjZaFw0yNjA5MjQxODAzMjZaMDMxMTAvBgNV BAMTKEUwOTdBQzY5MjYzMjQyN0E4RDk4Njg0RTJGRjE0REY2RjEwMjNCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xMiJHJjiPjHeSWAsJ32ILRnt d4GVDB+9I28czoOCN7GJrFfNS6rbZkjbmQSySnAhUuddb9l7AyexF4BERz4yBa5w qEfEWsBoqhMFwyKsIRyzd0yAP7ptfSGZ6rqnGiL5I3WrNGO0rs57kdnYCFSu6zOI zM+DX/vRkV744ewPg3WL3+6+pNEoaTXI23KU5UnNACGjiLB7GQeHybBdFmGS9HuZ W9DoPrSH1lv4Uh/Goea/4ZiwiOBGmMSuuTzFa17trV7QdYJg69orFljhvbox9L9g 2TJdE5o9HF4oxlJi/RSOwj0VGsoZYU+YKbWVj3KuN2LX/PDJScMPb2hJnJGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4JesaSYyQnqNmGhOL/FN9vECO+cwHwYDVR0j BBgwFoAUo3biOCxq6n/GJZUBpyvxy8WN2XcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJlZDZkYzQtZDM4Yi00NGJhLTlmMGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgy QzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JDNThERDk3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMzc2RTIzODJDNkFFQTdGQzYyNTk1MDFBNzJCRjFDQkM1OERE OTc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYx Q0JDNThERDk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEU5exWekUSFpxjhMuyuZl+oBmxqrt7S6KsY TzLMTCQGNRFabEZZssYb7alen6iL/NjH7KEeqLurzxZiMWDCRb5FUKkI9X4MWtrg 2EXHSG2OuVIIr9syj+SYQKWYXWimrG0YG5V0ZjVAnmcQp11nMBXOXGfUhVSTLByY mGcCUewlVMZIjRKjOjYsYj5cTUkaZzh+GX5OoxJYjXYtsVrIgP+Cmp4OEya+ErMo YOvV4NjvPEUlwUNET9iDOdxdSAP4fPOwy24PIOrGJfSRM9mLL3TOXG46GH2G/A+Y fzr8w0PnZSmUrSn55Nj62PYKm+EuIJHw7Lb0pywjf7ttOmQ3SdM= -----END CERTIFICATE-----Generated at Wed Sep 23 23:20:44 2026 by rpki-client