$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft File: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft (raw, json) Hash identifier: 6/gIr1gXAJE4eDbQHc/2F1125yBjuBl6Jworvxan48g= Subject key identifier: 1A:2A:E6:F8:08:D9:82:DE:FB:09:39:41:22:6E:59:B6:6B:2A:6E:2A Authority key identifier: A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 Certificate issuer: /CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Certificate serial: 7762AFAD144743F916B680786B212795F46E3809 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 05:05:29 +0000 Manifest this update: Sun 15 Nov 2026 05:00:29 +0000 Manifest next update: Mon 16 Nov 2026 07:12:29 +0000 Files and hashes: 1: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl (hash: 9ytrPJyttnZI4LkhCsf45rl1g8brtTverXjDlJwVMlw=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TlXm5FUEfPUbwvDslESvInZ7QzJfvEoxUutevfTlhzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:62:af:ad:14:47:43:f9:16:b6:80:78:6b:21:27:95:f4:6e:38:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Validity Not Before: Nov 15 05:00:29 2026 GMT Not After : Nov 16 07:12:29 2026 GMT Subject: CN=1A2AE6F808D982DEFB093941226E59B66B2A6E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:17:14:d1:5b:87:7d:04:0f:a7:46:d2:85: cd:32:0b:f3:74:ec:fb:a7:c8:35:f9:d6:3c:80:c7: 09:a8:f1:d7:a9:35:63:c4:10:0c:2a:ee:38:1e:8b: 0d:60:72:e0:e8:96:86:91:3f:2c:b5:79:34:c1:e6: e0:00:f6:05:af:19:43:07:65:6b:c8:a8:fb:bb:62: 8c:42:51:6f:76:83:84:12:41:41:6e:a0:f5:38:ba: 64:9d:a6:f8:42:9e:a3:5b:e9:54:dd:5b:4b:c2:17: b0:54:e3:fe:4d:ae:36:f4:c5:93:12:b2:df:8e:44: 44:22:2f:55:62:df:9f:b3:a6:03:10:e8:b8:f2:39: 5d:f0:62:b4:c9:a1:64:e2:f0:2e:2b:3f:ac:bb:47: 40:0d:02:99:e4:c9:13:87:46:86:2c:61:5e:f9:a2: b0:17:15:2e:db:f9:c5:98:e0:5b:5d:cf:c8:91:1a: 63:8b:ed:23:63:80:dd:fe:8a:73:c7:36:da:40:c9: 6d:56:cc:51:e9:0c:f2:73:90:d7:86:5f:df:72:1a: b9:9d:de:77:a4:c7:34:0d:1e:1e:e2:df:eb:dc:9d: 49:70:c2:14:82:b2:7c:d2:ac:66:19:b7:4e:95:b1: aa:d5:a0:4e:c8:ef:80:df:f5:96:8b:e5:b0:42:12: c3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2A:E6:F8:08:D9:82:DE:FB:09:39:41:22:6E:59:B6:6B:2A:6E:2A X509v3 Authority Key Identifier: keyid:A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8f:e9:f8:c4:ae:f8:6b:5d:58:5a:b8:ac:d6:c1:5a:49:f5: 19:e4:45:96:de:5b:28:c8:37:4f:00:ee:6e:3f:80:23:d7:0e: a1:8c:10:39:7a:9a:e7:ec:cf:23:89:3a:68:f1:d6:e6:f6:f5: 8a:7e:0c:e2:78:49:68:6a:35:c8:00:21:16:d5:1c:e6:5f:90: 2b:ff:e8:56:3d:57:3a:b3:ee:98:af:92:af:d8:07:60:cc:e9: 1a:01:10:58:72:7a:d9:85:6a:03:4f:e3:27:a6:cf:0f:3b:a9: ae:7e:38:f1:13:80:5f:3e:40:6e:20:85:99:c7:ba:ca:a9:ca: 7e:0a:d8:a3:6e:97:8f:ba:a7:64:1f:5c:89:d0:3a:23:88:a3: 54:ac:ae:bb:8c:df:68:c5:e7:57:52:30:70:ab:4b:b8:be:2b: e0:e9:12:2b:92:f1:e7:66:be:90:5b:31:47:9c:13:81:da:da: 1e:1d:18:8f:fa:ab:bb:9b:91:8d:ec:02:0f:42:4e:b4:69:e7: 3b:0b:67:bd:ac:7b:87:0b:29:ea:7b:af:00:f5:7e:da:69:9f: 5c:2c:d3:e3:1d:1d:f3:55:b8:76:0f:45:b0:6e:08:67:47:90: 7f:25:91:4c:e6:5e:8d:a6:8d:0c:4a:41:d7:5a:44:77:df:41: 71:8f:0d:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd2KvrRRHQ/kWtoB4ayEnlfRuOAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JD NThERDk3NzAeFw0yNjExMTUwNTAwMjlaFw0yNjExMTYwNzEyMjlaMDMxMTAvBgNV BAMTKDFBMkFFNkY4MDhEOTgyREVGQjA5Mzk0MTIyNkU1OUI2NkIyQTZFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0BcU0VuHfQQPp0bShc0yC/N0 7PunyDX51jyAxwmo8depNWPEEAwq7jgeiw1gcuDoloaRPyy1eTTB5uAA9gWvGUMH ZWvIqPu7YoxCUW92g4QSQUFuoPU4umSdpvhCnqNb6VTdW0vCF7BU4/5Nrjb0xZMS st+OREQiL1Vi35+zpgMQ6LjyOV3wYrTJoWTi8C4rP6y7R0ANApnkyROHRoYsYV75 orAXFS7b+cWY4Ftdz8iRGmOL7SNjgN3+inPHNtpAyW1WzFHpDPJzkNeGX99yGrmd 3nekxzQNHh7i3+vcnUlwwhSCsnzSrGYZt06VsarVoE7I74Df9ZaL5bBCEsMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGirm+AjZgt77CTlBIm5ZtmsqbiowHwYDVR0j BBgwFoAUo3biOCxq6n/GJZUBpyvxy8WN2XcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJlZDZkYzQtZDM4Yi00NGJhLTlmMGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgy QzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JDNThERDk3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMzc2RTIzODJDNkFFQTdGQzYyNTk1MDFBNzJCRjFDQkM1OERE OTc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYx Q0JDNThERDk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqP6fjErvhrXVhauKzWwVpJ9RnkRZbeWyjI N08A7m4/gCPXDqGMEDl6mufszyOJOmjx1ub29Yp+DOJ4SWhqNcgAIRbVHOZfkCv/ 6FY9Vzqz7pivkq/YB2DM6RoBEFhyetmFagNP4yemzw87qa5+OPETgF8+QG4ghZnH usqpyn4K2KNul4+6p2QfXInQOiOIo1SsrruM32jF51dSMHCrS7i+K+DpEiuS8edm vpBbMUecE4Ha2h4dGI/6q7ubkY3sAg9CTrRp5zsLZ72se4cLKep7rwD1ftppn1ws 0+MdHfNVuHYPRbBuCGdHkH8lkUzmXo2mjQxKQddaRHffQXGPDec= -----END CERTIFICATE-----Generated at Sun Nov 15 16:03:07 2026 by rpki-client