$ rpki-client -vvvf rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft File: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft (raw, json) Hash identifier: VxUoSiv2VyuPBp5nmos7Q3O+YnhHzQDid/Vsi1SAH5A= Subject key identifier: 53:0A:81:47:11:CE:24:5D:3A:75:1C:12:57:B3:D5:15:EA:B6:02:AB Authority key identifier: A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 Certificate issuer: /CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Certificate serial: 46ABF537493CA617135C44896E25F234AC2A5C80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 14:57:38 +0000 Manifest this update: Wed 16 Sep 2026 14:52:38 +0000 Manifest next update: Thu 17 Sep 2026 18:42:38 +0000 Files and hashes: 1: A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl (hash: DFHrlOhsB6WU4R2K533pG6RSbCDkcxct4bxuF3Z13I4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ab:f5:37:49:3c:a6:17:13:5c:44:89:6e:25:f2:34:ac:2a:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2B383F98D09D3C443CA2DF556F64F98BB68B1E2 Validity Not Before: Sep 16 14:52:38 2026 GMT Not After : Sep 17 18:42:38 2026 GMT Subject: CN=530A814711CE245D3A751C1257B3D515EAB602AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f3:58:eb:55:cf:60:db:b3:3f:07:49:55:67: f8:3a:9b:d4:f1:7c:ee:11:cc:35:3a:b5:02:43:23: 88:39:ac:9f:25:0d:94:8c:17:fe:1f:40:b7:a0:4e: a7:9f:56:8f:51:41:8f:69:cc:9d:e8:60:d2:50:98: 35:8c:7c:69:d4:5c:c7:77:38:ee:bf:35:3c:b5:75: 7e:91:45:70:fc:e9:29:67:28:df:ee:e5:e9:92:ed: 56:38:08:03:0e:49:0b:68:34:9c:d0:df:f7:2c:f5: 75:22:bf:25:bb:2e:dc:34:07:7d:9f:de:b2:27:b8: 4a:a0:0f:cf:e5:55:ed:36:97:a6:b7:96:6a:3f:d9: 66:4f:86:f4:f1:e3:85:f4:75:f5:1a:9b:c0:6b:97: 89:93:c1:78:af:77:54:ae:71:da:1e:fa:a1:d8:9c: f4:1a:ee:f5:66:34:25:84:cb:29:e8:75:c5:d9:2b: 9e:39:fc:f8:80:68:97:dc:44:11:d4:4f:d5:de:81: 02:4f:93:8c:81:57:aa:7c:64:52:dc:6f:fb:ed:e8: 04:99:d5:c2:c3:54:e8:47:f8:99:45:03:7e:dc:1c: 0e:79:cc:d8:d3:2b:16:9a:2f:1b:82:02:6a:c8:8a: f1:da:78:b9:45:af:6a:a0:fe:bb:54:1b:3a:02:1b: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0A:81:47:11:CE:24:5D:3A:75:1C:12:57:B3:D5:15:EA:B6:02:AB X509v3 Authority Key Identifier: keyid:A2:B3:83:F9:8D:09:D3:C4:43:CA:2D:F5:56:F6:4F:98:BB:68:B1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/A2B383F98D09D3C443CA2DF556F64F98BB68B1E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:67:b2:e8:ad:a4:77:2a:a8:54:dd:de:03:10:d3:6b:ab:ab: de:da:e0:a0:ee:1e:0e:5c:98:a5:e3:7f:94:69:b5:dc:e6:07: f7:4c:2b:60:9f:cb:87:d2:59:99:e1:06:83:66:0b:bc:b4:2e: 90:1f:1b:a9:8b:e3:bc:5a:b7:ee:2b:9f:97:d6:c7:7f:92:8a: 35:5e:01:65:46:19:1c:cc:a9:6b:33:94:30:c9:4b:08:16:1c: 9d:ae:8e:9f:9e:dc:5b:c2:72:36:65:0c:69:bf:58:6e:cb:34: 65:a3:25:86:a5:0f:cb:21:2d:41:fa:6b:6e:29:6c:55:f1:10: d0:c0:7d:c9:b7:57:3d:d0:d6:48:9b:1b:8f:d8:97:13:c2:a7: 52:20:f0:ca:59:f9:7d:18:5f:b9:55:e2:61:70:4e:90:1c:ed: 64:ca:e9:28:67:b5:cc:68:e3:4d:d3:cb:b6:53:9a:8c:81:27: f4:e3:92:a3:10:22:16:61:d3:1d:1a:bc:41:f5:e6:17:ee:5a: 59:7f:c9:b2:de:97:f6:0e:d3:c2:70:3b:65:ea:5e:c1:cc:18: cb:d3:c1:e7:65:99:44:79:24:79:90:08:58:ee:5a:df:4c:5f: 22:9d:f4:e3:9c:c5:76:3d:d0:f9:dd:a4:b0:cf:a5:1d:97:d2: e2:a4:be:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURqv1N0k8phcTXESJbiXyNKwqXIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThC QjY4QjFFMjAeFw0yNjA5MTYxNDUyMzhaFw0yNjA5MTcxODQyMzhaMDMxMTAvBgNV BAMTKDUzMEE4MTQ3MTFDRTI0NUQzQTc1MUMxMjU3QjNENTE1RUFCNjAyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh81jrVc9g27M/B0lVZ/g6m9Tx fO4RzDU6tQJDI4g5rJ8lDZSMF/4fQLegTqefVo9RQY9pzJ3oYNJQmDWMfGnUXMd3 OO6/NTy1dX6RRXD86SlnKN/u5emS7VY4CAMOSQtoNJzQ3/cs9XUivyW7Ltw0B32f 3rInuEqgD8/lVe02l6a3lmo/2WZPhvTx44X0dfUam8Brl4mTwXivd1Sucdoe+qHY nPQa7vVmNCWEyynodcXZK545/PiAaJfcRBHUT9XegQJPk4yBV6p8ZFLcb/vt6ASZ 1cLDVOhH+JlFA37cHA55zNjTKxaaLxuCAmrIivHaeLlFr2qg/rtUGzoCG2szAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUwqBRxHOJF06dRwSV7PVFeq2AqswHwYDVR0j BBgwFoAUorOD+Y0J08RDyi31VvZPmLtoseIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU1NjRlNzktYjY3OS00NmQ1LWIxZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4 RDA5RDNDNDQzQ0EyREY1NTZGNjRGOThCQjY4QjFFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMkIzODNGOThEMDlEM0M0NDNDQTJERjU1NkY2NEY5OEJCNjhC MUUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU1NjRlNzktYjY3OS00NmQ1LWIx ZmQtMDI4ZDE3N2I2OGMwLzAvQTJCMzgzRjk4RDA5RDNDNDQzQ0EyREY1NTZGNjRG OThCQjY4QjFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRnsuitpHcqqFTd3gMQ02urq97a4KDuHg5c mKXjf5RptdzmB/dMK2Cfy4fSWZnhBoNmC7y0LpAfG6mL47xat+4rn5fWx3+SijVe AWVGGRzMqWszlDDJSwgWHJ2ujp+e3FvCcjZlDGm/WG7LNGWjJYalD8shLUH6a24p bFXxENDAfcm3Vz3Q1kibG4/YlxPCp1Ig8MpZ+X0YX7lV4mFwTpAc7WTK6Shntcxo 403Ty7ZTmoyBJ/TjkqMQIhZh0x0avEH15hfuWll/ybLel/YO08JwO2XqXsHMGMvT wedlmUR5JHmQCFjuWt9MXyKd9OOcxXY90PndpLDPpR2X0uKkvmI= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:23 2026 by rpki-client