$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft File: 976FB6C4EC175847196F26D9D507157A16E77592.mft (raw, json) Hash identifier: 6SeSHk1DeIqpb9ft8jdWrhYX7XwYY+cZr+UPZjDJG4w= Subject key identifier: 04:3D:CD:99:DF:5B:56:F1:B0:5D:AE:FA:37:68:C7:E8:81:36:04:0D Authority key identifier: 97:6F:B6:C4:EC:17:58:47:19:6F:26:D9:D5:07:15:7A:16:E7:75:92 Certificate issuer: /CN=976FB6C4EC175847196F26D9D507157A16E77592 Certificate serial: 1D47719A182FBF86C0FCD5D2CC4B44A18C47DC1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft Manifest number: BF Signing time: Wed 23 Sep 2026 16:21:14 +0000 Manifest this update: Wed 23 Sep 2026 16:16:14 +0000 Manifest next update: Thu 24 Sep 2026 19:00:14 +0000 Files and hashes: 1: 976FB6C4EC175847196F26D9D507157A16E77592.crl (hash: 0moTUFSykjXjlTiLR2ddO2bjpoM12BamZQOo44HRJLg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.crl rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:47:71:9a:18:2f:bf:86:c0:fc:d5:d2:cc:4b:44:a1:8c:47:dc:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=976FB6C4EC175847196F26D9D507157A16E77592 Validity Not Before: Sep 23 16:16:14 2026 GMT Not After : Sep 24 19:00:14 2026 GMT Subject: CN=043DCD99DF5B56F1B05DAEFA3768C7E88136040D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:cf:ac:22:68:2b:2c:ed:87:8e:ef:bd:71: 94:4d:53:34:ef:a6:49:8e:d7:fe:93:11:f0:c5:21: e1:d7:71:7f:33:a3:f8:5a:d4:3d:d4:69:3c:a3:43: f0:0a:01:5d:b6:65:15:5a:76:c2:70:f5:39:28:b8: 19:78:fd:7e:27:b6:60:6c:91:97:5c:39:5b:70:71: 4c:9e:be:46:b5:10:0e:00:fb:c5:78:2d:f6:65:b9: 41:ee:cc:a8:6e:d3:04:d4:d3:d4:5c:91:95:f0:0c: b4:4d:53:c0:af:84:a6:07:ff:cf:20:12:3e:22:c2: 2f:07:81:df:fd:96:a4:fc:81:0e:1a:65:3f:59:dc: 92:fb:ce:3d:e5:5e:ec:80:49:c4:a1:e2:71:73:76: ad:1b:0d:84:3a:a0:80:32:13:ac:c7:f8:8c:d0:34: 1c:53:bc:62:26:fd:c1:f1:c3:b8:b7:bc:6d:ff:be: c3:cc:d5:dd:88:7c:3a:a5:93:41:4e:c7:d7:73:49: 15:ba:8b:cc:1e:9d:b5:19:d5:f0:3e:81:09:01:f4: 74:b7:e9:20:f3:10:9e:11:95:63:ff:fe:72:9e:81: ea:21:06:b4:0d:fd:64:cd:9b:74:c9:fa:79:1b:9d: d3:5f:8e:87:8b:4a:8c:52:d3:59:87:9c:a2:db:af: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3D:CD:99:DF:5B:56:F1:B0:5D:AE:FA:37:68:C7:E8:81:36:04:0D X509v3 Authority Key Identifier: keyid:97:6F:B6:C4:EC:17:58:47:19:6F:26:D9:D5:07:15:7A:16:E7:75:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/976FB6C4EC175847196F26D9D507157A16E77592.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/976FB6C4EC175847196F26D9D507157A16E77592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:64:de:c9:e2:7f:87:f0:9e:0c:1e:54:42:2e:8d:9c:15:e7: 50:67:03:52:83:f2:34:1d:27:ac:7e:e0:fd:9d:b4:a4:0d:55: fe:59:ed:85:55:23:a6:64:99:66:0c:5b:15:d7:66:f6:ad:e7: 7d:70:97:ef:ff:c0:92:21:dd:53:06:c5:56:9a:7d:b0:76:16: 55:c0:d6:9b:f6:e5:6e:c1:88:17:59:7e:00:ef:53:c2:ab:a4: 14:a4:78:f3:3a:53:71:19:31:38:af:a3:71:bb:9d:69:c0:23: 69:8a:5a:a8:e5:98:27:a7:aa:29:c0:00:52:d3:48:77:b8:b0: 67:23:1b:f7:09:4a:6e:29:0c:94:64:85:60:d6:58:f4:45:c0: 0e:26:54:3b:2a:72:fc:f5:7a:63:b9:97:ec:3b:35:ec:42:0e: a8:43:71:73:f3:61:6f:4a:7e:17:73:62:24:e5:30:6a:ed:0b: 32:f4:ea:ab:10:59:bb:d5:75:77:4f:6a:bd:f8:67:e3:9c:60: a0:e8:ef:c5:64:4d:a2:26:88:de:b6:f7:7b:c5:68:a2:cf:29: c1:f1:f3:60:b0:50:d7:d8:37:a1:7c:39:23:e5:ad:a1:86:0f: 0f:10:f6:8b:aa:6f:bf:fa:71:44:01:40:97:b2:7a:9c:c3:05: d0:76:e2:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHUdxmhgvv4bA/NXSzEtEoYxH3B8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc2RkI2QzRFQzE3NTg0NzE5NkYyNkQ5RDUwNzE1N0Ex NkU3NzU5MjAeFw0yNjA5MjMxNjE2MTRaFw0yNjA5MjQxOTAwMTRaMDMxMTAvBgNV BAMTKDA0M0RDRDk5REY1QjU2RjFCMDVEQUVGQTM3NjhDN0U4ODEzNjA0MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWs+sImgrLO2Hju+9cZRNUzTv pkmO1/6TEfDFIeHXcX8zo/ha1D3UaTyjQ/AKAV22ZRVadsJw9TkouBl4/X4ntmBs kZdcOVtwcUyevka1EA4A+8V4LfZluUHuzKhu0wTU09RckZXwDLRNU8CvhKYH/88g Ej4iwi8Hgd/9lqT8gQ4aZT9Z3JL7zj3lXuyAScSh4nFzdq0bDYQ6oIAyE6zH+IzQ NBxTvGIm/cHxw7i3vG3/vsPM1d2IfDqlk0FOx9dzSRW6i8wenbUZ1fA+gQkB9HS3 6SDzEJ4RlWP//nKegeohBrQN/WTNm3TJ+nkbndNfjoeLSoxS01mHnKLbr0kDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBD3Nmd9bVvGwXa76N2jH6IE2BA0wHwYDVR0j BBgwFoAUl2+2xOwXWEcZbybZ1QcVehbndZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQzM2UzNDQtZTgxOS00NDM4LWI4Y2EtMWY1OGMzZDUyN2NiLzAvOTc2RkI2QzRF QzE3NTg0NzE5NkYyNkQ5RDUwNzE1N0ExNkU3NzU5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NzZGQjZDNEVDMTc1ODQ3MTk2RjI2RDlENTA3MTU3QTE2RTc3 NTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvOTc2RkI2QzRFQzE3NTg0NzE5NkYyNkQ5RDUwNzE1 N0ExNkU3NzU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdk3snif4fwngweVEIujZwV51BnA1KD8jQd J6x+4P2dtKQNVf5Z7YVVI6ZkmWYMWxXXZvat531wl+//wJIh3VMGxVaafbB2FlXA 1pv25W7BiBdZfgDvU8KrpBSkePM6U3EZMTivo3G7nWnAI2mKWqjlmCenqinAAFLT SHe4sGcjG/cJSm4pDJRkhWDWWPRFwA4mVDsqcvz1emO5l+w7NexCDqhDcXPzYW9K fhdzYiTlMGrtCzL06qsQWbvVdXdPar34Z+OcYKDo78VkTaImiN6293vFaKLPKcHx 82CwUNfYN6F8OSPlraGGDw8Q9ouqb7/6cUQBQJeyepzDBdB24vk= -----END CERTIFICATE-----Generated at Wed Sep 23 20:23:59 2026 by rpki-client