$ rpki-client -vvf rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft File: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft (raw, json) Hash identifier: IYfVdzMwpYmxCPk2UYAeoHu5s/2gpYWyngnEgr0fNfs= Subject key identifier: 86:24:9E:11:FE:8F:BD:7A:A2:EC:1C:B5:B7:53:F9:58:F3:D8:66:31 Authority key identifier: A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 Certificate issuer: /CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Certificate serial: 77D85B6C99F07669DF269846F50E1B71D4D369D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft Manifest number: 3E Signing time: Thu 18 Jun 2026 01:28:39 +0000 Manifest this update: Thu 18 Jun 2026 01:23:39 +0000 Manifest next update: Fri 19 Jun 2026 02:35:39 +0000 Files and hashes: 1: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TlXm5FUEfPUbwvDslESvInZ7QzJfvEoxUutevfTlhzM=) 2: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl (hash: KzsD3ECeNfzuyFq4u9lmOw53rS/dLIyAMX/Kzyr2UaQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 02:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d8:5b:6c:99:f0:76:69:df:26:98:46:f5:0e:1b:71:d4:d3:69:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Validity Not Before: Jun 18 01:23:39 2026 GMT Not After : Jun 19 02:35:39 2026 GMT Subject: CN=86249E11FE8FBD7AA2EC1CB5B753F958F3D86631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:9c:53:bb:9c:fe:42:2e:a0:2d:11:31:61: ed:c7:e0:b9:6d:9e:1a:b1:5e:29:f8:06:c5:f4:cf: f3:b2:3c:d0:33:9a:b7:03:68:2e:bc:b4:2b:52:35: 10:3a:d9:d4:fc:fa:3c:99:83:d5:cc:7a:25:fb:cc: 08:56:f6:10:7c:9b:a3:a5:fb:fd:02:5c:eb:b8:5a: c3:ae:76:7c:e5:f2:66:85:5d:1f:df:b7:2a:6a:0d: e4:6c:4c:3d:2e:5c:3d:12:a1:f8:5c:e7:f9:98:71: fa:c5:ba:ab:8c:cb:ce:7f:71:42:3b:bf:86:17:4b: 93:ea:6c:1b:15:7a:71:6e:14:67:ee:33:5a:9b:10: ac:c7:cb:38:56:31:04:8f:12:88:00:49:f7:c4:65: 4e:9d:58:86:cc:d2:cf:e9:ff:42:ba:b9:da:66:c8: d0:dd:06:ae:c9:44:24:ea:42:42:7a:09:eb:6f:b9: 45:ce:4b:5e:66:da:2d:ab:f5:bf:89:2c:83:f7:0d: da:80:04:66:94:81:9a:34:d7:4e:10:99:5b:e3:83: f0:dd:32:98:be:8e:f2:c6:e5:25:b9:76:b7:e6:ba: 9c:3e:6e:85:81:76:1e:79:e8:f0:24:f3:6f:89:a5: 25:2f:6d:e1:da:cb:76:dc:d0:3c:19:b8:a3:f0:5f: b8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:24:9E:11:FE:8F:BD:7A:A2:EC:1C:B5:B7:53:F9:58:F3:D8:66:31 X509v3 Authority Key Identifier: keyid:A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:95:63:92:d2:ee:89:9a:b3:1c:3b:fd:30:44:8f:6a:3d:6a: 6f:6a:e3:97:04:7c:5d:07:6b:91:5c:33:93:77:b5:90:08:e3: 6e:17:c3:e9:ec:7d:e4:e5:8a:d0:5c:7f:6d:3e:f9:e4:6d:45: fa:59:4e:06:80:db:76:21:f2:25:fa:a3:36:a3:21:80:7d:5f: 12:9e:32:19:18:ae:f2:86:2f:f1:ee:e7:e7:94:81:bb:68:fd: 69:b9:2e:a9:97:9a:c8:47:ae:10:03:34:79:f2:18:e2:46:2d: b9:12:c7:28:85:85:07:fe:56:ee:2e:62:37:81:ab:d0:84:ef: da:a9:ed:2c:d7:c5:f7:b3:0a:1f:81:86:32:83:9b:69:bb:03: d3:72:99:c9:21:3d:48:62:e0:d8:83:0b:08:ec:a0:13:2f:95: fd:5f:4d:94:6d:1e:0a:90:3e:b3:4c:0d:53:ec:0e:fd:1e:f5: 29:f9:b9:9f:6a:62:fc:45:0d:a4:f1:5c:6f:71:1b:36:ad:2d: 10:1c:27:e9:38:2b:4a:39:66:8a:ce:da:1b:92:45:e6:86:a6: 14:c1:57:de:33:51:41:ee:a3:57:ba:00:ca:f7:93:6f:36:27: fd:3d:a4:10:f6:63:97:8d:f3:f2:9c:12:66:02:cc:ca:f7:c1: 6b:65:0a:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9hbbJnwdmnfJphG9Q4bcdTTadQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JD NThERDk3NzAeFw0yNjA2MTgwMTIzMzlaFw0yNjA2MTkwMjM1MzlaMDMxMTAvBgNV BAMTKDg2MjQ5RTExRkU4RkJEN0FBMkVDMUNCNUI3NTNGOTU4RjNEODY2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmUpxTu5z+Qi6gLRExYe3H4Llt nhqxXin4BsX0z/OyPNAzmrcDaC68tCtSNRA62dT8+jyZg9XMeiX7zAhW9hB8m6Ol +/0CXOu4WsOudnzl8maFXR/ftypqDeRsTD0uXD0Sofhc5/mYcfrFuquMy85/cUI7 v4YXS5PqbBsVenFuFGfuM1qbEKzHyzhWMQSPEogASffEZU6dWIbM0s/p/0K6udpm yNDdBq7JRCTqQkJ6CetvuUXOS15m2i2r9b+JLIP3DdqABGaUgZo0104QmVvjg/Dd Mpi+jvLG5SW5drfmupw+boWBdh556PAk82+JpSUvbeHay3bc0DwZuKPwX7hzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhiSeEf6PvXqi7By1t1P5WPPYZjEwHwYDVR0j BBgwFoAUo3biOCxq6n/GJZUBpyvxy8WN2XcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJlZDZkYzQtZDM4Yi00NGJhLTlmMGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgy QzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JDNThERDk3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMzc2RTIzODJDNkFFQTdGQzYyNTk1MDFBNzJCRjFDQkM1OERE OTc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYx Q0JDNThERDk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACVY5LS7omasxw7/TBEj2o9am9q45cEfF0H a5FcM5N3tZAI424Xw+nsfeTlitBcf20++eRtRfpZTgaA23Yh8iX6ozajIYB9XxKe MhkYrvKGL/Hu5+eUgbto/Wm5LqmXmshHrhADNHnyGOJGLbkSxyiFhQf+Vu4uYjeB q9CE79qp7SzXxfezCh+BhjKDm2m7A9NymckhPUhi4NiDCwjsoBMvlf1fTZRtHgqQ PrNMDVPsDv0e9Sn5uZ9qYvxFDaTxXG9xGzatLRAcJ+k4K0o5ZorO2huSReaGphTB V94zUUHuo1e6AMr3k282J/09pBD2Y5eN8/KcEmYCzMr3wWtlCoY= -----END CERTIFICATE-----Generated at Thu Jun 18 17:14:06 2026 by rpki-client