$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft File: 378A3CDFC885FF682AB4268D41AC4081FB774095.mft (raw, json) Hash identifier: /77YUmDcN5l0X/wP3YeIYTwAoteWXjLPVVsAYBmOuqY= Subject key identifier: 15:A8:97:8D:4B:83:00:80:EC:2A:B5:BB:F8:1D:DB:1E:D5:DD:CD:FA Authority key identifier: 37:8A:3C:DF:C8:85:FF:68:2A:B4:26:8D:41:AC:40:81:FB:77:40:95 Certificate issuer: /CN=378A3CDFC885FF682AB4268D41AC4081FB774095 Certificate serial: 41031780F2D2F6F937DE2FC04613B7DBBBE04C64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 17:20:38 +0000 Manifest this update: Wed 16 Sep 2026 17:15:38 +0000 Manifest next update: Thu 17 Sep 2026 18:47:38 +0000 Files and hashes: 1: 378A3CDFC885FF682AB4268D41AC4081FB774095.crl (hash: vPQK275BQy9IZnjaEDAQlUkXPUFKHFjrgUtiukvL0zU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.crl rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:03:17:80:f2:d2:f6:f9:37:de:2f:c0:46:13:b7:db:bb:e0:4c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378A3CDFC885FF682AB4268D41AC4081FB774095 Validity Not Before: Sep 16 17:15:38 2026 GMT Not After : Sep 17 18:47:38 2026 GMT Subject: CN=15A8978D4B830080EC2AB5BBF81DDB1ED5DDCDFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:95:fd:30:ba:5a:c6:2c:2a:ee:ee:22:fb:7e: e0:b9:1b:50:9f:86:ae:5a:5c:6f:4a:45:6a:55:60: ea:05:d1:fd:ad:d0:f8:09:7a:1d:78:04:a4:8e:3a: 23:a8:21:72:fd:63:e6:61:dc:c8:ea:c1:46:99:c3: 11:d0:a6:94:25:02:24:5e:9e:f4:6d:3a:4d:0b:fe: 3a:41:cf:ff:00:bb:bd:43:c2:aa:22:8b:85:37:1d: 65:f8:ab:ab:1a:e5:c8:25:05:9d:47:d8:62:d1:d3: 8e:6a:a0:bb:7c:3f:d1:ee:d5:96:86:5e:8d:dd:01: b7:bc:b2:90:f3:80:01:a3:7f:b4:9d:bc:f2:c4:16: e4:30:c2:4f:95:82:31:7b:03:55:18:27:7d:06:c0: dc:17:63:40:af:9f:d3:fb:e2:67:0b:80:96:6f:48: 95:e5:02:87:35:6f:77:0d:62:22:57:ae:6e:8f:71: c6:1c:53:2e:59:8a:d6:71:9b:31:21:c1:e4:7a:9f: 1d:ff:d6:c0:b4:5c:54:2a:86:df:2d:6b:3f:62:3d: 48:44:f6:82:c9:3c:da:e2:7e:e3:a4:71:f5:16:eb: 48:ae:1b:c1:c1:62:42:f8:26:61:1c:10:f4:68:1c: b1:88:83:4b:df:9b:7c:40:d1:02:7f:d4:b7:f6:7d: 70:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A8:97:8D:4B:83:00:80:EC:2A:B5:BB:F8:1D:DB:1E:D5:DD:CD:FA X509v3 Authority Key Identifier: keyid:37:8A:3C:DF:C8:85:FF:68:2A:B4:26:8D:41:AC:40:81:FB:77:40:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:7e:bf:09:79:55:e2:22:c3:95:fc:4e:9f:9b:6e:8f:0a:6b: bd:93:cb:3a:26:d2:b9:ce:ce:1d:53:37:e9:46:ad:95:c9:11: ec:6c:2c:70:79:1c:42:19:c1:49:49:2f:d6:06:52:b6:2d:96: 89:37:31:72:2e:1e:49:0c:f7:6d:21:58:f6:18:9d:ba:79:3c: 1f:73:10:39:3c:50:39:76:8f:e6:9d:1c:71:bb:11:8c:01:d5: 16:0d:8a:d0:dd:53:a0:50:58:5b:f2:82:03:9c:7c:18:64:9e: df:d9:9d:fb:16:72:2d:19:c1:d1:15:2a:e1:50:1a:85:29:d6: 1f:40:9c:b7:3d:46:38:e0:10:71:b0:4e:01:19:54:7d:e4:21: 67:30:2b:b7:ac:12:20:1c:06:6e:41:85:6c:1c:24:f8:ad:6c: 2f:b2:39:74:54:17:be:0a:69:39:00:c6:2f:af:22:dc:93:ac: 4b:79:6b:89:03:83:02:00:5f:64:91:5b:70:06:6e:4f:4e:6b: 40:6f:3d:51:8c:a9:3c:df:a7:22:6b:1f:d6:cf:9a:89:f0:85: 40:b4:e0:06:1f:b9:52:c4:26:bf:98:7d:bb:70:5c:6c:b6:3e: 95:4b:27:06:e7:0d:b5:aa:f2:61:1c:c1:24:cf:d9:6c:83:dc: d3:92:91:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQMXgPLS9vk33i/ARhO327vgTGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4QTNDREZDODg1RkY2ODJBQjQyNjhENDFBQzQwODFG Qjc3NDA5NTAeFw0yNjA5MTYxNzE1MzhaFw0yNjA5MTcxODQ3MzhaMDMxMTAvBgNV BAMTKDE1QTg5NzhENEI4MzAwODBFQzJBQjVCQkY4MUREQjFFRDVERENERkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDilf0wulrGLCru7iL7fuC5G1Cf hq5aXG9KRWpVYOoF0f2t0PgJeh14BKSOOiOoIXL9Y+Zh3MjqwUaZwxHQppQlAiRe nvRtOk0L/jpBz/8Au71Dwqoii4U3HWX4q6sa5cglBZ1H2GLR045qoLt8P9Hu1ZaG Xo3dAbe8spDzgAGjf7SdvPLEFuQwwk+VgjF7A1UYJ30GwNwXY0Cvn9P74mcLgJZv SJXlAoc1b3cNYiJXrm6PccYcUy5ZitZxmzEhweR6nx3/1sC0XFQqht8taz9iPUhE 9oLJPNrifuOkcfUW60iuG8HBYkL4JmEcEPRoHLGIg0vfm3xA0QJ/1Lf2fXDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFaiXjUuDAIDsKrW7+B3bHtXdzfowHwYDVR0j BBgwFoAUN4o838iF/2gqtCaNQaxAgft3QJUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjZmYTk1ODQtNmY5Ny00MDQxLTljOGQtOGIzOTU5ZTRmOWIzLzEvMzc4QTNDREZD ODg1RkY2ODJBQjQyNjhENDFBQzQwODFGQjc3NDA5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNzhBM0NERkM4ODVGRjY4MkFCNDI2OEQ0MUFDNDA4MUZCNzc0 MDk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzEvMzc4QTNDREZDODg1RkY2ODJBQjQyNjhENDFBQzQw ODFGQjc3NDA5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd+vwl5VeIiw5X8Tp+bbo8Ka72Tyzom0rnO zh1TN+lGrZXJEexsLHB5HEIZwUlJL9YGUrYtlok3MXIuHkkM920hWPYYnbp5PB9z EDk8UDl2j+adHHG7EYwB1RYNitDdU6BQWFvyggOcfBhknt/ZnfsWci0ZwdEVKuFQ GoUp1h9AnLc9RjjgEHGwTgEZVH3kIWcwK7esEiAcBm5BhWwcJPitbC+yOXRUF74K aTkAxi+vItyTrEt5a4kDgwIAX2SRW3AGbk9Oa0BvPVGMqTzfpyJrH9bPmonwhUC0 4AYfuVLEJr+YfbtwXGy2PpVLJwbnDbWq8mEcwSTP2WyD3NOSkTg= -----END CERTIFICATE-----Generated at Thu Sep 17 09:22:40 2026 by rpki-client