$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft File: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft (raw, json) Hash identifier: y9B+CE4TMlK/nSigijBUXONYJYgFl2JSDc4IA4Eh3ec= Subject key identifier: FC:98:C0:7A:AE:DD:5A:CC:BD:3F:4E:E5:5E:B3:7D:F4:24:4E:5B:45 Authority key identifier: A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 Certificate issuer: /CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Certificate serial: 385824DB3B8F69D71039BF7419FB50BB98A3AAF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 04:00:16 +0000 Manifest this update: Fri 25 Sep 2026 03:55:16 +0000 Manifest next update: Sat 26 Sep 2026 04:19:16 +0000 Files and hashes: 1: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TlXm5FUEfPUbwvDslESvInZ7QzJfvEoxUutevfTlhzM=) 2: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl (hash: khzcjwf7LaHeNjxCMVPaur3+mSTKPsr9vBdXcZrCxes=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:58:24:db:3b:8f:69:d7:10:39:bf:74:19:fb:50:bb:98:a3:aa:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Validity Not Before: Sep 25 03:55:16 2026 GMT Not After : Sep 26 04:19:16 2026 GMT Subject: CN=FC98C07AAEDD5ACCBD3F4EE55EB37DF4244E5B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:9f:08:26:e1:dd:ee:40:fa:cc:54:73:ca: 3b:2e:a8:0d:85:c0:45:ae:b4:f2:d6:db:ca:38:d8: ab:15:76:cb:5d:3a:da:b9:bc:80:14:be:8e:76:7d: fe:e3:4a:26:c0:9b:43:4b:d5:e4:99:5a:a7:c5:88: f8:12:bd:34:eb:49:e2:68:eb:83:82:8b:d4:2d:ee: 75:55:73:52:8e:f5:f8:1d:c0:14:07:2e:e3:aa:64: 11:10:ec:3b:95:ec:da:d5:37:b8:b4:9e:d9:f6:c3: dd:9e:c7:24:e6:6a:66:3d:f2:cf:6b:45:25:96:30: 3f:3b:e3:8f:4f:3d:8f:78:07:8b:f2:dd:e1:06:02: b9:81:6a:72:e1:04:89:37:70:43:34:60:84:b8:72: 61:10:e5:ae:83:6b:1d:b1:cd:33:b7:1d:ee:5c:0b: 81:fd:46:cc:06:48:f5:93:a6:a1:0b:87:36:1e:dc: a3:7e:99:9e:85:10:7a:a2:89:99:8a:a9:70:d7:90: a8:1f:7f:e0:f6:6d:4b:c8:28:9c:03:a4:34:af:b1: 92:0f:49:cf:ad:d8:b4:1c:91:0b:47:90:fe:f6:b6: 70:d7:14:11:0e:d7:42:a0:a4:a8:ef:a6:4c:27:3f: 22:d6:89:ec:1d:ff:e7:3b:ab:86:3e:2c:37:a4:87: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:98:C0:7A:AE:DD:5A:CC:BD:3F:4E:E5:5E:B3:7D:F4:24:4E:5B:45 X509v3 Authority Key Identifier: keyid:A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0f:c1:f1:f3:59:2f:d8:07:d4:e0:d3:eb:61:99:1a:eb:12: 8b:2b:6e:63:9e:da:a5:48:c8:27:f1:19:18:65:13:1a:e9:c6: e7:2f:63:54:03:a8:2e:a9:c9:48:95:9e:95:c6:05:59:6d:5c: b4:9d:1d:be:02:0b:32:09:24:a2:00:e6:96:71:20:67:7a:54: 09:2f:ea:d8:da:bc:3a:e1:a9:33:2b:1c:5d:7e:97:16:a0:93: 69:c7:02:c5:fd:bb:da:39:88:42:bb:77:4f:26:87:a3:87:92: 4e:06:57:e9:34:82:a0:26:8b:2b:25:ba:e2:1e:b5:5c:9d:f0: 2c:8c:aa:8e:9c:99:97:c4:e1:50:bc:2d:0b:38:6a:86:83:e6: 11:a1:5b:f6:26:e8:3e:ef:db:ba:9e:2a:3a:fd:4a:d0:9f:4f: a5:3c:09:53:db:6a:14:21:eb:75:09:ab:3e:4e:13:a5:37:e1: 01:9d:f4:0d:ec:a3:4f:ad:f3:1c:11:6e:e1:b7:36:30:75:cc: 95:0f:e4:28:e0:39:5a:bb:bd:bd:2d:33:e8:2a:9a:c3:20:01: 3e:4c:1f:43:5c:a9:ed:a3:36:85:fb:4c:0d:3b:0d:3b:f2:53: 1d:82:d7:a6:52:ff:3e:ff:59:e7:7e:1c:f7:36:50:75:19:66: cf:55:03:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFgk2zuPadcQOb90GftQu5ijqvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JD NThERDk3NzAeFw0yNjA5MjUwMzU1MTZaFw0yNjA5MjYwNDE5MTZaMDMxMTAvBgNV BAMTKEZDOThDMDdBQUVERDVBQ0NCRDNGNEVFNTVFQjM3REY0MjQ0RTVCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMzJ8IJuHd7kD6zFRzyjsuqA2F wEWutPLW28o42KsVdstdOtq5vIAUvo52ff7jSibAm0NL1eSZWqfFiPgSvTTrSeJo 64OCi9Qt7nVVc1KO9fgdwBQHLuOqZBEQ7DuV7NrVN7i0ntn2w92exyTmamY98s9r RSWWMD87449PPY94B4vy3eEGArmBanLhBIk3cEM0YIS4cmEQ5a6Dax2xzTO3He5c C4H9RswGSPWTpqELhzYe3KN+mZ6FEHqiiZmKqXDXkKgff+D2bUvIKJwDpDSvsZIP Sc+t2LQckQtHkP72tnDXFBEO10KgpKjvpkwnPyLWiewd/+c7q4Y+LDekh4tpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/JjAeq7dWsy9P07lXrN99CROW0UwHwYDVR0j BBgwFoAUo3biOCxq6n/GJZUBpyvxy8WN2XcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJlZDZkYzQtZDM4Yi00NGJhLTlmMGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgy QzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JDNThERDk3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMzc2RTIzODJDNkFFQTdGQzYyNTk1MDFBNzJCRjFDQkM1OERE OTc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYx Q0JDNThERDk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsPwfHzWS/YB9Tg0+thmRrrEosrbmOe2qVI yCfxGRhlExrpxucvY1QDqC6pyUiVnpXGBVltXLSdHb4CCzIJJKIA5pZxIGd6VAkv 6tjavDrhqTMrHF1+lxagk2nHAsX9u9o5iEK7d08mh6OHkk4GV+k0gqAmiysluuIe tVyd8CyMqo6cmZfE4VC8LQs4aoaD5hGhW/Ym6D7v27qeKjr9StCfT6U8CVPbahQh 63UJqz5OE6U34QGd9A3so0+t8xwRbuG3NjB1zJUP5CjgOVq7vb0tM+gqmsMgAT5M H0Ncqe2jNoX7TA07DTvyUx2C16ZS/z7/Wed+HPc2UHUZZs9VA8w= -----END CERTIFICATE-----Generated at Fri Sep 25 15:20:28 2026 by rpki-client