$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft File: A337D214F1B15825AC6178574C28712521D64B38.mft (raw, json) Hash identifier: CaZqdYc4eEROL/uwkCcd+0gNF+D0RISPhDNv2Fr6Y/c= Subject key identifier: F3:99:3E:47:BE:CB:66:48:7C:8F:4D:3A:74:62:83:9F:7D:7D:83:23 Authority key identifier: A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 Certificate issuer: /CN=A337D214F1B15825AC6178574C28712521D64B38 Certificate serial: 065683BDBEF5FF5E24E2CC8ACC13B2A11A8B995C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 12:42:08 +0000 Manifest this update: Mon 21 Sep 2026 12:37:08 +0000 Manifest next update: Tue 22 Sep 2026 16:15:08 +0000 Files and hashes: 1: A337D214F1B15825AC6178574C28712521D64B38.crl (hash: 47yllmzzm80oBfR0AnN6u0npmR6URKkQfXFO37RfBQg=) 2: 3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa (hash: eSjZGWM1OyV1yhzjQEoayB2vN+fO3mEGbT4lUzAsfwU=) 3: 3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa (hash: 6ANd8eDpGDry4TmWd8klyvoxo3+q5EgqhgVj7CcAyKQ=) 4: 3130332e32302e3130392e302f32342d3234203d3e20313430343233.roa (hash: m7moeEEKoa7tBNsWW1/WiFxPUHqVNruJHZKBpwqbqkc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:56:83:bd:be:f5:ff:5e:24:e2:cc:8a:cc:13:b2:a1:1a:8b:99:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A337D214F1B15825AC6178574C28712521D64B38 Validity Not Before: Sep 21 12:37:08 2026 GMT Not After : Sep 22 16:15:08 2026 GMT Subject: CN=F3993E47BECB66487C8F4D3A7462839F7D7D8323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:24:5b:74:a3:7b:90:75:2f:63:b7:e1:ea:90: 13:7f:ce:a7:b3:5f:71:ad:db:69:e2:9e:62:bf:3d: e4:70:ef:fa:24:d8:76:51:f7:4a:9a:80:c9:7f:2c: eb:a4:3d:f5:5e:92:33:fd:aa:1a:0e:ad:60:2c:a0: ca:ff:98:f0:19:35:82:0b:42:33:22:a8:f3:df:63: ee:ab:56:48:db:b8:bd:c5:a7:b0:f0:d9:98:d3:1b: 0a:9a:b5:d7:35:4b:29:92:37:47:8f:c8:9c:b7:65: 3e:e4:7c:14:19:2a:3b:af:61:a7:fc:63:f7:6c:1e: 9e:16:52:69:48:c3:c7:be:f6:1d:1f:ee:76:e3:a1: 07:21:fc:dc:1d:d2:7a:35:c7:bb:7a:c8:29:c3:95: 2b:5d:da:80:17:0e:d1:f9:d4:fb:6f:47:0d:6b:32: 4d:16:51:9e:ef:aa:53:59:12:7a:0e:23:20:02:00: 87:ac:fc:a4:20:34:d6:be:42:f2:d9:61:35:c6:44: bf:8d:3d:cf:14:b9:d2:d3:ff:dc:dc:83:03:bb:26: 5e:55:8d:44:b4:a1:be:81:ed:c7:e4:ef:b2:f5:fa: 2e:3c:fe:ed:2f:bf:77:bd:b0:bf:cb:16:7e:55:a9: 1c:22:6b:53:5a:7b:76:1c:2b:63:ad:7b:02:b6:1b: bc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:99:3E:47:BE:CB:66:48:7C:8F:4D:3A:74:62:83:9F:7D:7D:83:23 X509v3 Authority Key Identifier: keyid:A3:37:D2:14:F1:B1:58:25:AC:61:78:57:4C:28:71:25:21:D6:4B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A337D214F1B15825AC6178574C28712521D64B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/A337D214F1B15825AC6178574C28712521D64B38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:1f:e9:1b:59:b9:da:1a:39:91:ad:4a:ba:ca:bc:66:d1:92: 5e:52:6a:bd:49:c4:df:56:65:41:94:1b:d3:0f:75:5b:27:d5: 58:b7:17:47:38:bc:ce:79:f2:59:3c:4f:11:2e:c3:c0:77:ec: 85:e6:49:92:73:ec:8a:c3:57:9f:0b:d8:6a:ed:ca:51:39:e2: c1:1b:2e:af:d2:10:c9:99:72:b6:bd:3c:e3:02:a2:6d:68:1e: 3f:79:14:3a:67:e5:b0:3a:2a:6a:b0:b6:98:2c:94:5f:f2:2a: 42:25:2d:ef:0e:0c:0c:c5:1a:91:c3:0b:b1:bd:e8:24:98:81: b1:c9:1e:10:e3:49:8a:95:eb:ac:b7:3e:bd:00:ab:ed:97:a5: 1e:dc:9f:33:5d:63:96:85:9b:42:f2:a3:97:0f:8a:7d:25:f0: 15:a6:0f:58:fa:85:b4:1b:0b:2e:4d:40:56:3d:17:ef:75:90: 78:6e:e7:f1:cc:5c:7f:9e:98:5e:5e:3e:34:38:ba:7a:cd:8a: 1c:14:14:40:4c:93:a9:24:73:b5:c7:d0:df:cc:a4:db:5d:7d: 3b:01:9a:28:73:dd:aa:14:20:e4:90:38:63:d4:ff:1d:d2:a4: ed:c7:5b:2f:c1:d3:24:17:c6:bb:9e:af:2f:44:c7:23:d8:61: ad:cd:d3:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBlaDvb71/14k4syKzBOyoRqLmVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcxMjUy MUQ2NEIzODAeFw0yNjA5MjExMjM3MDhaFw0yNjA5MjIxNjE1MDhaMDMxMTAvBgNV BAMTKEYzOTkzRTQ3QkVDQjY2NDg3QzhGNEQzQTc0NjI4MzlGN0Q3RDgzMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPJFt0o3uQdS9jt+HqkBN/zqez X3Gt22ninmK/PeRw7/ok2HZR90qagMl/LOukPfVekjP9qhoOrWAsoMr/mPAZNYIL QjMiqPPfY+6rVkjbuL3Fp7Dw2ZjTGwqatdc1SymSN0ePyJy3ZT7kfBQZKjuvYaf8 Y/dsHp4WUmlIw8e+9h0f7nbjoQch/Nwd0no1x7t6yCnDlStd2oAXDtH51PtvRw1r Mk0WUZ7vqlNZEnoOIyACAIes/KQgNNa+QvLZYTXGRL+NPc8UudLT/9zcgwO7Jl5V jUS0ob6B7cfk77L1+i48/u0vv3e9sL/LFn5VqRwia1Nae3YcK2OtewK2G7xDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU85k+R77LZkh8j006dGKDn319gyMwHwYDVR0j BBgwFoAUozfSFPGxWCWsYXhXTChxJSHWSzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWNjNmJkNzMtZjliZC00ZjVhLTljNTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRG MUIxNTgyNUFDNjE3ODU3NEMyODcxMjUyMUQ2NEIzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzM3RDIxNEYxQjE1ODI1QUM2MTc4NTc0QzI4NzEyNTIxRDY0 QjM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvQTMzN0QyMTRGMUIxNTgyNUFDNjE3ODU3NEMyODcx MjUyMUQ2NEIzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAf6RtZudoaOZGtSrrKvGbRkl5Sar1JxN9W ZUGUG9MPdVsn1Vi3F0c4vM558lk8TxEuw8B37IXmSZJz7IrDV58L2GrtylE54sEb Lq/SEMmZcra9POMCom1oHj95FDpn5bA6KmqwtpgslF/yKkIlLe8ODAzFGpHDC7G9 6CSYgbHJHhDjSYqV66y3Pr0Aq+2XpR7cnzNdY5aFm0Lyo5cPin0l8BWmD1j6hbQb Cy5NQFY9F+91kHhu5/HMXH+emF5ePjQ4unrNihwUFEBMk6kkc7XH0N/MpNtdfTsB mihz3aoUIOSQOGPU/x3SpO3HWy/B0yQXxruery9ExyPYYa3N0xc= -----END CERTIFICATE-----Generated at Mon Sep 21 17:55:53 2026 by rpki-client