$ rpki-client -vvvf rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft File: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft (raw, json) Hash identifier: FaVRc4f0zzInn++RVqh9FERW8Ns2YkUZTPnrvWyQZYA= Subject key identifier: 75:A3:C0:12:B9:4D:61:CE:55:61:32:DA:DA:6A:2F:B3:E9:F9:55:35 Authority key identifier: A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 Certificate issuer: /CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Certificate serial: 207DC7CC7C3C9236B5D3207470A1C91D3E9716E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft Manifest number: BD Signing time: Mon 21 Sep 2026 17:58:48 +0000 Manifest this update: Mon 21 Sep 2026 17:53:48 +0000 Manifest next update: Tue 22 Sep 2026 19:17:48 +0000 Files and hashes: 1: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl (hash: s3aQyBaU1W5PwGJ8Cd7EMDUoeZr0YjN0VHss1V4ur1M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7d:c7:cc:7c:3c:92:36:b5:d3:20:74:70:a1:c9:1d:3e:97:16:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Validity Not Before: Sep 21 17:53:48 2026 GMT Not After : Sep 22 19:17:48 2026 GMT Subject: CN=75A3C012B94D61CE556132DADA6A2FB3E9F95535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:b0:e3:aa:8d:82:6e:f5:5e:db:33:73:e8: 64:80:17:cd:83:44:09:ef:fe:43:3a:c1:09:0b:55: 06:45:6f:97:37:64:95:e4:ad:f6:b9:fc:43:2e:ad: 08:8c:3f:16:ff:19:00:d9:ee:33:1f:dd:ea:76:58: 94:e1:c9:92:ae:de:84:ad:0d:95:8d:48:10:0b:43: 6b:d5:27:80:78:c0:b3:32:95:4d:57:e7:13:dc:4d: c2:52:4d:82:d2:6c:b2:3f:be:6c:df:0e:a6:76:67: cf:03:d9:ec:bd:f8:5a:5f:51:69:be:08:36:fc:c7: e9:ff:94:c6:33:00:b3:39:09:cf:0a:89:91:a0:69: 1a:c6:05:48:61:a2:8a:fc:d4:fb:df:a5:d9:3b:67: 2d:10:93:db:99:03:98:a0:cd:f8:fb:af:59:35:ad: 5f:c2:81:07:07:83:5c:bd:2d:26:ff:07:09:69:e0: de:0f:55:a2:4a:ce:3f:e6:f1:9e:37:c0:b7:32:8a: 9a:29:23:cb:ca:37:9f:50:77:86:7c:8c:60:fe:5c: 30:c0:2b:d5:54:bb:b1:0c:f1:9a:ed:5b:a0:dc:73: cb:cd:eb:0c:b3:39:3b:be:84:38:ee:45:ac:ce:71: 72:13:b1:4d:b3:ce:38:14:88:2e:59:2b:f9:86:97: e6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A3:C0:12:B9:4D:61:CE:55:61:32:DA:DA:6A:2F:B3:E9:F9:55:35 X509v3 Authority Key Identifier: keyid:A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:05:31:5a:ae:e2:6b:0c:bf:bb:19:b6:99:4f:a7:18:8b:a3: 7a:f0:bb:b0:01:22:57:0f:24:63:49:3d:3f:7a:d8:6d:83:a4: 30:a7:02:0d:61:ae:67:80:03:d9:33:c6:5c:0f:6c:88:cc:87: 56:8e:b9:9b:70:da:3a:b4:84:64:2a:53:f7:af:ae:bb:c0:e3: fb:fb:71:d4:ac:81:b9:9c:2e:0b:e9:42:ca:9e:53:78:88:e0: db:bf:d1:2d:cd:d0:bb:46:93:80:8f:d1:f1:37:8e:26:4a:91: 05:0c:e5:18:4c:50:2a:6c:b4:2e:eb:c5:04:f2:99:25:77:2e: 34:2f:6b:d8:4b:04:54:2a:32:48:08:ed:db:b5:eb:4b:da:e8: 34:89:af:11:57:a7:f5:ac:b9:90:fa:3a:68:dd:fb:fe:a7:e1: 33:b6:71:0a:24:8e:7c:cb:fd:40:2c:58:e1:5f:b3:bf:b5:a9: 46:d4:65:30:2b:96:32:7c:f7:50:0e:69:c3:be:08:5e:64:1e: eb:f3:e0:86:77:96:e0:66:f6:4b:da:98:97:6b:fe:06:d2:13: 9c:e7:a0:f4:6c:ba:e2:4f:91:db:0e:bc:7c:d6:61:69:d0:9e: f2:4c:7f:59:08:28:12:6c:62:7a:dd:02:a1:fb:52:81:f2:d0: 33:4b:05:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIH3HzHw8kja10yB0cKHJHT6XFuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThC QjY4QjFFMjAeFw0yNjA5MjExNzUzNDhaFw0yNjA5MjIxOTE3NDhaMDMxMTAvBgNV BAMTKDc1QTNDMDEyQjk0RDYxQ0U1NTYxMzJEQURBNkEyRkIzRTlGOTU1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZL7Djqo2CbvVe2zNz6GSAF82D RAnv/kM6wQkLVQZFb5c3ZJXkrfa5/EMurQiMPxb/GQDZ7jMf3ep2WJThyZKu3oSt DZWNSBALQ2vVJ4B4wLMylU1X5xPcTcJSTYLSbLI/vmzfDqZ2Z88D2ey9+FpfUWm+ CDb8x+n/lMYzALM5Cc8KiZGgaRrGBUhhoor81Pvfpdk7Zy0Qk9uZA5igzfj7r1k1 rV/CgQcHg1y9LSb/Bwlp4N4PVaJKzj/m8Z43wLcyipopI8vKN59Qd4Z8jGD+XDDA K9VUu7EM8ZrtW6Dcc8vN6wyzOTu+hDjuRazOcXITsU2zzjgUiC5ZK/mGl+arAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdaPAErlNYc5VYTLa2movs+n5VTUwHwYDVR0j BBgwFoAUorOD+Y0J08RDyi31VvZPmLtoseIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU1NjRlNzktYjY3OS00NmQ1LWIxZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4 RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThCQjY4QjFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMkIzODNGOThEMDlEM0M0NDNDQTJERjU1NkY2NEY5OEJCNjhC MUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU1NjRlNzktYjY3OS00NmQ1LWIx ZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRG OThCQjY4QjFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwFMVqu4msMv7sZtplPpxiLo3rwu7ABIlcP JGNJPT962G2DpDCnAg1hrmeAA9kzxlwPbIjMh1aOuZtw2jq0hGQqU/evrrvA4/v7 cdSsgbmcLgvpQsqeU3iI4Nu/0S3N0LtGk4CP0fE3jiZKkQUM5RhMUCpstC7rxQTy mSV3LjQva9hLBFQqMkgI7du160va6DSJrxFXp/WsuZD6Omjd+/6n4TO2cQokjnzL /UAsWOFfs7+1qUbUZTArljJ891AOacO+CF5kHuvz4IZ3luBm9kvamJdr/gbSE5zn oPRsuuJPkdsOvHzWYWnQnvJMf1kIKBJsYnrdAqH7UoHy0DNLBQw= -----END CERTIFICATE-----Generated at Tue Sep 22 14:23:22 2026 by rpki-client