$ rpki-client -vvf rpki-rsync.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/376E2B876CE3746057689762F04423554EBFEEB2.mft File: 376E2B876CE3746057689762F04423554EBFEEB2.mft (raw, json) Hash identifier: d8eW/mC2f7Gil8UnxsHiBHB0dbWtw/+9Lzat51MvJKo= Subject key identifier: 4B:88:D4:E3:4C:82:FB:FE:9B:5F:BE:44:F8:AD:2A:23:90:0B:41:EB Authority key identifier: 37:6E:2B:87:6C:E3:74:60:57:68:97:62:F0:44:23:55:4E:BF:EE:B2 Certificate issuer: /CN=376E2B876CE3746057689762F04423554EBFEEB2 Certificate serial: 5455570E94D32969ADE73F8EE8DF1F345CC862A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/376E2B876CE3746057689762F04423554EBFEEB2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/376E2B876CE3746057689762F04423554EBFEEB2.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 23:49:46 +0000 Manifest this update: Fri 19 Jun 2026 23:44:46 +0000 Manifest next update: Sun 21 Jun 2026 03:29:46 +0000 Files and hashes: 1: 376E2B876CE3746057689762F04423554EBFEEB2.crl (hash: VZZPZIQLCYN5/fpGwJJN5jceCoKcJi75T+EK2jssFn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/376E2B876CE3746057689762F04423554EBFEEB2.crl rsync://rpki-rsync.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/376E2B876CE3746057689762F04423554EBFEEB2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/376E2B876CE3746057689762F04423554EBFEEB2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:55:57:0e:94:d3:29:69:ad:e7:3f:8e:e8:df:1f:34:5c:c8:62:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=376E2B876CE3746057689762F04423554EBFEEB2 Validity Not Before: Jun 19 23:44:46 2026 GMT Not After : Jun 21 03:29:46 2026 GMT Subject: CN=4B88D4E34C82FBFE9B5FBE44F8AD2A23900B41EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a0:8a:ad:94:77:5b:fe:e9:bf:e5:aa:b8:e1: 29:f6:a3:96:ed:20:ec:d8:31:20:d3:24:95:2c:09: 77:56:1e:a9:f4:df:ad:d2:5a:36:b4:cc:42:d2:8e: d2:07:de:e9:05:03:e3:58:e5:11:d2:17:53:68:7a: 1c:c4:46:36:69:6b:d4:85:1b:60:59:d0:e1:9f:20: fc:aa:06:4b:14:bc:fe:5a:fe:52:0a:1a:ea:62:57: c2:24:be:74:b5:e3:02:e4:bc:3b:f3:12:f2:46:a3: c8:ef:65:9b:2d:15:a0:a8:db:18:04:a2:f3:8c:14: 01:77:3d:e2:d1:51:54:a0:3e:d6:71:32:97:98:cb: 03:a7:6e:5e:6c:1e:86:db:cd:05:69:d8:b8:ad:a0: d3:71:17:f3:ee:5f:7f:66:f6:3c:f3:f5:2f:09:6e: 09:f6:1e:24:f4:c3:67:4e:ee:7f:25:d8:59:ab:bf: ad:14:fe:ce:f5:f7:97:b4:77:d1:09:54:f7:1d:5f: 79:27:e1:14:0f:b0:c6:b6:a0:25:8e:00:1e:17:ac: 12:90:ac:e0:96:b0:e3:ca:a7:c1:12:00:0c:03:72: 79:fc:07:64:72:6d:84:a6:81:8c:7d:e0:8c:a6:e0: 14:7d:f9:28:08:e0:ce:43:fc:a2:a1:c3:49:bc:67: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:88:D4:E3:4C:82:FB:FE:9B:5F:BE:44:F8:AD:2A:23:90:0B:41:EB X509v3 Authority Key Identifier: keyid:37:6E:2B:87:6C:E3:74:60:57:68:97:62:F0:44:23:55:4E:BF:EE:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/376E2B876CE3746057689762F04423554EBFEEB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/376E2B876CE3746057689762F04423554EBFEEB2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/376E2B876CE3746057689762F04423554EBFEEB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:45:a9:a0:a6:1c:1c:0b:ff:ec:6d:eb:59:c9:15:b2:04:db: 7d:00:95:9e:c6:06:47:9a:fb:b2:9b:a7:db:0c:0c:33:ec:f4: 65:fd:c2:ae:7a:4a:ea:0d:22:66:1e:b1:82:fa:d7:bc:ea:37: 96:91:e6:17:38:1e:a4:83:fd:29:39:01:67:7f:07:3a:76:52: ca:81:d7:2d:c3:51:7b:c8:4a:11:c2:c9:d5:d9:f1:6b:e7:70: 10:c0:18:49:04:dd:c0:ed:4a:74:37:1d:00:20:d8:7a:bc:12: 73:54:18:83:ae:d6:09:f4:44:73:3e:3e:6e:01:75:0b:bf:f3: 2a:34:2b:86:8c:5e:3a:10:fb:e7:56:64:07:4a:d4:6c:67:ea: e4:29:00:cb:d9:72:0b:bb:a8:8f:d0:94:59:4c:42:cf:a9:86: ea:5e:00:2d:ab:7c:3f:32:a4:4b:60:de:79:46:cc:7e:22:ae: a5:1f:20:79:9c:87:77:6a:b6:43:93:ad:c7:c5:e1:a6:17:61: 8e:52:3e:da:89:2f:2f:d4:ad:f4:06:3d:56:96:15:ab:12:80: 44:eb:06:34:fa:17:26:59:b8:cd:56:70:c5:c2:94:fe:ee:b5: 41:af:4b:5f:df:c5:3b:75:d4:bb:b5:77:3b:01:d1:5e:21:a0: 59:60:e5:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFVXDpTTKWmt5z+O6N8fNFzIYqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc2RTJCODc2Q0UzNzQ2MDU3Njg5NzYyRjA0NDIzNTU0 RUJGRUVCMjAeFw0yNjA2MTkyMzQ0NDZaFw0yNjA2MjEwMzI5NDZaMDMxMTAvBgNV BAMTKDRCODhENEUzNEM4MkZCRkU5QjVGQkU0NEY4QUQyQTIzOTAwQjQxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqoIqtlHdb/um/5aq44Sn2o5bt IOzYMSDTJJUsCXdWHqn0363SWja0zELSjtIH3ukFA+NY5RHSF1NoehzERjZpa9SF G2BZ0OGfIPyqBksUvP5a/lIKGupiV8IkvnS14wLkvDvzEvJGo8jvZZstFaCo2xgE ovOMFAF3PeLRUVSgPtZxMpeYywOnbl5sHobbzQVp2LitoNNxF/PuX39m9jzz9S8J bgn2HiT0w2dO7n8l2Fmrv60U/s7195e0d9EJVPcdX3kn4RQPsMa2oCWOAB4XrBKQ rOCWsOPKp8ESAAwDcnn8B2RybYSmgYx94Iym4BR9+SgI4M5D/KKhw0m8ZyX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS4jU40yC+/6bX75E+K0qI5ALQeswHwYDVR0j BBgwFoAUN24rh2zjdGBXaJdi8EQjVU6/7rIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY1OTk0NzQtZjZiNi00MDg3LWE5N2UtNzg4YjU5NDlkNTdiLzAvMzc2RTJCODc2 Q0UzNzQ2MDU3Njg5NzYyRjA0NDIzNTU0RUJGRUVCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNzZFMkI4NzZDRTM3NDYwNTc2ODk3NjJGMDQ0MjM1NTRFQkZF RUIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY1OTk0NzQtZjZiNi00MDg3LWE5 N2UtNzg4YjU5NDlkNTdiLzAvMzc2RTJCODc2Q0UzNzQ2MDU3Njg5NzYyRjA0NDIz NTU0RUJGRUVCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRFqaCmHBwL/+xt61nJFbIE230AlZ7GBkea +7Kbp9sMDDPs9GX9wq56SuoNImYesYL617zqN5aR5hc4HqSD/Sk5AWd/Bzp2UsqB 1y3DUXvIShHCydXZ8WvncBDAGEkE3cDtSnQ3HQAg2Hq8EnNUGIOu1gn0RHM+Pm4B dQu/8yo0K4aMXjoQ++dWZAdK1Gxn6uQpAMvZcgu7qI/QlFlMQs+phupeAC2rfD8y pEtg3nlGzH4irqUfIHmch3dqtkOTrcfF4aYXYY5SPtqJLy/UrfQGPVaWFasSgETr BjT6FyZZuM1WcMXClP7utUGvS1/fxTt11Lu1dzsB0V4hoFlg5Rs= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:58 2026 by rpki-client