$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft File: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft (raw, json) Hash identifier: aHzz89qpj3+diVlGLR66IKoH3BaKrUznJ0xzN2KdZ4A= Subject key identifier: 3D:F9:8C:26:48:FD:0B:5B:2C:9C:B4:D8:C5:12:2C:33:01:20:B1:F1 Authority key identifier: A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 Certificate issuer: /CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Certificate serial: 50ED9531A000518D591025F7D20740536E675FDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 13:40:16 +0000 Manifest this update: Wed 04 Nov 2026 13:35:16 +0000 Manifest next update: Thu 05 Nov 2026 13:58:16 +0000 Files and hashes: 1: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl (hash: 11w3ScMFaW/vgG2fKQYVnwnS09Fx4NNNdozr6rzwJ5M=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TlXm5FUEfPUbwvDslESvInZ7QzJfvEoxUutevfTlhzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 12:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ed:95:31:a0:00:51:8d:59:10:25:f7:d2:07:40:53:6e:67:5f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Validity Not Before: Nov 4 13:35:16 2026 GMT Not After : Nov 5 13:58:16 2026 GMT Subject: CN=3DF98C2648FD0B5B2C9CB4D8C5122C330120B1F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:48:32:3e:15:39:40:03:9f:04:b3:63:22: 05:bc:2d:4d:0e:8f:cb:73:c1:75:11:07:f2:48:93: e7:03:9f:d4:26:2f:ba:7a:e3:55:5b:a2:0b:1f:4b: 0e:49:d6:12:31:e5:a7:e8:54:e0:39:ec:aa:e3:df: 50:d7:c3:e1:dc:0d:05:62:9e:72:85:ae:a0:4b:d6: cc:83:9e:dd:1a:90:6b:b6:c1:48:15:71:98:b6:17: 34:35:15:bc:27:79:fc:f4:7d:99:85:ab:b5:44:68: 07:97:c9:e6:cb:35:c2:a7:9f:2f:a2:3c:d9:69:d3: ae:d8:98:79:0f:9a:7e:ae:be:cb:d3:7f:df:1d:2f: 7f:95:b1:80:95:70:3c:12:ee:97:4b:2f:ce:7a:90: 5a:5e:d6:f0:e2:33:18:db:d3:9b:6d:99:6b:68:c1: de:b6:6e:94:20:c2:10:56:af:78:41:52:e7:ef:92: 46:81:86:b6:0e:94:37:ee:ab:c6:08:5b:f7:a5:ec: 12:45:a9:ef:4a:97:eb:55:16:72:ea:cd:94:f5:fd: 98:29:ba:e6:63:be:d1:a2:ec:77:d6:2e:3d:c6:4e: c8:09:46:56:9f:0a:d6:e8:81:cf:34:66:b8:2d:f6: 77:7a:0d:8e:b0:ca:fb:a1:da:64:0b:c8:c9:b1:4a: c3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F9:8C:26:48:FD:0B:5B:2C:9C:B4:D8:C5:12:2C:33:01:20:B1:F1 X509v3 Authority Key Identifier: keyid:A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8c:f0:80:d0:df:07:9d:5d:cc:dd:a1:4d:b2:ba:04:38:63: 4c:8e:82:d9:a7:df:71:a2:5a:f5:a5:09:32:19:4d:da:20:5c: 5b:c3:37:3d:4d:5f:63:71:3f:1a:24:87:b5:75:d7:b5:56:3c: 19:23:b7:bf:77:52:26:4a:5f:09:19:97:50:8c:05:fb:b6:70: 54:fc:98:cb:1c:71:5f:8a:96:d7:14:08:7b:cb:24:4a:1d:53: 26:4a:36:63:db:56:e8:57:0c:d6:ce:3d:3c:d0:bc:75:42:6c: 47:d2:a6:df:77:db:da:50:53:65:dc:c6:b9:ac:28:6f:53:6b: 73:17:a6:bb:a9:7f:7f:f7:9d:45:a6:83:d1:7c:5b:d0:46:6b: b9:40:52:1f:44:31:cb:76:be:aa:ae:34:2c:4b:e0:ac:94:91: 10:27:d4:b1:e0:76:d0:76:ed:08:0a:33:fd:19:ad:c2:50:4f: 5c:f4:e7:9d:2e:9d:01:90:6c:7e:8d:58:47:82:44:ba:b6:90: c2:75:cc:ac:24:2a:51:77:d2:b2:e5:23:06:db:46:14:14:ce: 44:27:4a:67:48:1c:72:1a:7d:c4:e5:95:00:cf:8c:af:6b:53: 2d:39:79:9b:fb:a3:95:1c:e1:03:6a:4b:e3:f5:e0:78:63:41: 5d:c6:cc:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUO2VMaAAUY1ZECX30gdAU25nX9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JD NThERDk3NzAeFw0yNjExMDQxMzM1MTZaFw0yNjExMDUxMzU4MTZaMDMxMTAvBgNV BAMTKDNERjk4QzI2NDhGRDBCNUIyQzlDQjREOEM1MTIyQzMzMDEyMEIxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEC0gyPhU5QAOfBLNjIgW8LU0O j8tzwXURB/JIk+cDn9QmL7p641VbogsfSw5J1hIx5afoVOA57Krj31DXw+HcDQVi nnKFrqBL1syDnt0akGu2wUgVcZi2FzQ1Fbwnefz0fZmFq7VEaAeXyebLNcKnny+i PNlp067YmHkPmn6uvsvTf98dL3+VsYCVcDwS7pdLL856kFpe1vDiMxjb05ttmWto wd62bpQgwhBWr3hBUufvkkaBhrYOlDfuq8YIW/el7BJFqe9Kl+tVFnLqzZT1/Zgp uuZjvtGi7HfWLj3GTsgJRlafCtbogc80Zrgt9nd6DY6wyvuh2mQLyMmxSsOjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPfmMJkj9C1ssnLTYxRIsMwEgsfEwHwYDVR0j BBgwFoAUo3biOCxq6n/GJZUBpyvxy8WN2XcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJlZDZkYzQtZDM4Yi00NGJhLTlmMGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgy QzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JDNThERDk3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMzc2RTIzODJDNkFFQTdGQzYyNTk1MDFBNzJCRjFDQkM1OERE OTc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYx Q0JDNThERDk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqM8IDQ3wedXczdoU2yugQ4Y0yOgtmn33Gi WvWlCTIZTdogXFvDNz1NX2NxPxokh7V117VWPBkjt793UiZKXwkZl1CMBfu2cFT8 mMsccV+KltcUCHvLJEodUyZKNmPbVuhXDNbOPTzQvHVCbEfSpt9329pQU2Xcxrms KG9Ta3MXprupf3/3nUWmg9F8W9BGa7lAUh9EMct2vqquNCxL4KyUkRAn1LHgdtB2 7QgKM/0ZrcJQT1z0550unQGQbH6NWEeCRLq2kMJ1zKwkKlF30rLlIwbbRhQUzkQn SmdIHHIafcTllQDPjK9rUy05eZv7o5Uc4QNqS+P14HhjQV3GzGA= -----END CERTIFICATE-----Generated at Wed Nov 4 20:17:42 2026 by rpki-client