$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft File: 76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft (raw, json) Hash identifier: +RyETJ4VFEjzupZ9bfTTJL5mPONI2mCds21LYRvWDAQ= Subject key identifier: 60:69:60:E6:A2:4D:B6:7A:C7:F1:43:8F:08:62:92:64:FB:67:7D:B8 Authority key identifier: 76:34:9E:BC:16:54:E6:90:3E:60:A4:73:DF:6E:8C:E5:B8:4C:25:92 Certificate issuer: /CN=76349EBC1654E6903E60A473DF6E8CE5B84C2592 Certificate serial: 240E65B1E6453A1C23B84DC6F589C8C9B0CC5B87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/76349EBC1654E6903E60A473DF6E8CE5B84C2592.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 21:21:58 +0000 Manifest this update: Thu 24 Sep 2026 21:16:58 +0000 Manifest next update: Fri 25 Sep 2026 23:56:58 +0000 Files and hashes: 1: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: kYskQI7kJiExNtqigB92qVuCM3FXsEKU5mkGUUiDOj0=) 2: 76349EBC1654E6903E60A473DF6E8CE5B84C2592.crl (hash: SROtPm84jWP+8xT9Lf4AkpN6D1M0MsKw3scHXV924g0=) 3: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: P/nt1L//IhgyeaORzkAIxhjNcIWMOJwXfCUtgtI0mH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.crl rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/76349EBC1654E6903E60A473DF6E8CE5B84C2592.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0e:65:b1:e6:45:3a:1c:23:b8:4d:c6:f5:89:c8:c9:b0:cc:5b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76349EBC1654E6903E60A473DF6E8CE5B84C2592 Validity Not Before: Sep 24 21:16:58 2026 GMT Not After : Sep 25 23:56:58 2026 GMT Subject: CN=606960E6A24DB67AC7F1438F08629264FB677DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:49:68:95:b5:10:c3:cd:b9:20:03:9a:60: c7:f9:62:d8:db:57:bf:6f:99:46:1d:b6:11:98:dc: 41:64:a7:ca:8e:39:a1:da:89:b2:e9:91:1e:cb:6a: 1b:4f:9b:32:69:d2:bf:f6:8a:d0:d6:81:49:c9:b2: f5:c5:fd:c4:fd:bb:d5:ea:a2:9c:44:f1:58:fb:93: 8c:04:6d:55:27:ca:0b:03:85:e9:2c:e2:e9:52:fd: 95:3e:a8:ed:6f:89:3d:f6:a9:ef:62:06:cd:73:3a: cf:02:fe:27:a9:95:07:46:bc:56:75:57:4a:85:0e: ca:b0:22:9b:83:ff:e0:c8:f4:ed:37:70:7f:64:b3: f3:77:af:01:0d:6d:27:e6:7e:32:75:77:ed:54:61: 32:b4:df:05:96:10:a6:ed:25:15:b6:bd:76:0f:38: 94:ee:13:29:62:d8:b9:5d:05:9f:67:61:f8:cd:7d: 75:5a:a7:5b:d9:29:ae:17:9a:ed:1f:85:9b:af:4c: 8a:18:08:7f:04:c6:97:9a:3e:bf:d0:24:2a:33:3c: 8d:5c:5b:b9:a9:be:1f:e4:fc:4c:d3:ce:d6:0d:8c: b2:6f:fd:b3:d5:a3:ca:28:81:68:66:4b:a2:77:e9: 07:10:c7:1a:33:0f:74:dc:b3:8b:4e:b8:74:79:4d: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:69:60:E6:A2:4D:B6:7A:C7:F1:43:8F:08:62:92:64:FB:67:7D:B8 X509v3 Authority Key Identifier: keyid:76:34:9E:BC:16:54:E6:90:3E:60:A4:73:DF:6E:8C:E5:B8:4C:25:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/76349EBC1654E6903E60A473DF6E8CE5B84C2592.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/76349EBC1654E6903E60A473DF6E8CE5B84C2592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a3:e3:3d:16:52:2d:ca:f0:fe:21:6d:89:b3:44:55:ba:98: 51:4c:14:c8:75:ca:89:85:fa:f4:c5:05:f9:74:b7:5e:cf:3e: b4:94:76:74:de:dc:f6:7b:aa:a6:1c:cd:b2:0f:67:d1:40:0f: 84:be:90:51:ab:d7:7a:55:c8:4d:00:76:ce:49:d7:67:bf:9b: d7:ff:52:25:48:5f:5d:11:3b:00:17:44:90:f7:88:a1:22:3b: 87:42:39:35:6d:d3:be:5d:59:ac:1c:92:09:8b:f7:90:28:19: cd:aa:b0:17:85:49:ba:97:c7:d4:b4:e1:e8:be:76:6a:7a:47: e4:71:f4:40:ce:d8:f3:cc:50:9c:48:7c:21:40:71:e6:02:fd: ec:31:a6:b4:53:a3:c9:cd:ea:1e:45:6e:b7:28:79:ef:e2:a8: 62:43:25:89:9d:33:a0:1d:8d:e8:a5:21:90:86:ca:bd:73:f4: bf:c3:3c:4c:8e:d5:36:44:1d:ad:f0:98:e0:e7:c6:16:40:ce: ec:65:c3:30:64:81:88:01:c0:68:74:50:ae:3c:c5:6d:09:5c: d3:79:73:f2:37:31:df:ff:1c:97:c3:91:c7:8f:4f:26:8e:b6: af:1f:da:b4:a9:11:d3:b7:d4:00:f4:a6:00:77:94:02:2d:92: de:7f:53:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJA5lseZFOhwjuE3G9YnIybDMW4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzYzNDlFQkMxNjU0RTY5MDNFNjBBNDczREY2RThDRTVC ODRDMjU5MjAeFw0yNjA5MjQyMTE2NThaFw0yNjA5MjUyMzU2NThaMDMxMTAvBgNV BAMTKDYwNjk2MEU2QTI0REI2N0FDN0YxNDM4RjA4NjI5MjY0RkI2NzdEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTA0lolbUQw825IAOaYMf5Ytjb V79vmUYdthGY3EFkp8qOOaHaibLpkR7LahtPmzJp0r/2itDWgUnJsvXF/cT9u9Xq opxE8Vj7k4wEbVUnygsDheks4ulS/ZU+qO1viT32qe9iBs1zOs8C/ieplQdGvFZ1 V0qFDsqwIpuD/+DI9O03cH9ks/N3rwENbSfmfjJ1d+1UYTK03wWWEKbtJRW2vXYP OJTuEyli2LldBZ9nYfjNfXVap1vZKa4Xmu0fhZuvTIoYCH8ExpeaPr/QJCozPI1c W7mpvh/k/EzTztYNjLJv/bPVo8oogWhmS6J36QcQxxozD3Tcs4tOuHR5TfxhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGlg5qJNtnrH8UOPCGKSZPtnfbgwHwYDVR0j BBgwFoAUdjSevBZU5pA+YKRz326M5bhMJZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U2YmZmOWQtZmIxMy00N2I5LTljYzAtZGQ2YTA3MzBhMWM2LzAvNzYzNDlFQkMx NjU0RTY5MDNFNjBBNDczREY2RThDRTVCODRDMjU5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NjM0OUVCQzE2NTRFNjkwM0U2MEE0NzNERjZFOENFNUI4NEMy NTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvNzYzNDlFQkMxNjU0RTY5MDNFNjBBNDczREY2RThD RTVCODRDMjU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIej4z0WUi3K8P4hbYmzRFW6mFFMFMh1yomF +vTFBfl0t17PPrSUdnTe3PZ7qqYczbIPZ9FAD4S+kFGr13pVyE0Ads5J12e/m9f/ UiVIX10ROwAXRJD3iKEiO4dCOTVt075dWawckgmL95AoGc2qsBeFSbqXx9S04ei+ dmp6R+Rx9EDO2PPMUJxIfCFAceYC/ewxprRTo8nN6h5Fbrcoee/iqGJDJYmdM6Ad jeilIZCGyr1z9L/DPEyO1TZEHa3wmODnxhZAzuxlwzBkgYgBwGh0UK48xW0JXNN5 c/I3Md//HJfDkcePTyaOtq8f2rSpEdO31AD0pgB3lAItkt5/U/c= -----END CERTIFICATE-----Generated at Thu Sep 24 23:58:49 2026 by rpki-client