$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft File: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft (raw, json) Hash identifier: Hszz8QutHOyFsdzb4Eh6tijfss2g2tXYDZ+FaSNObCM= Subject key identifier: D0:7A:81:F4:3F:7C:E2:86:94:F2:5D:09:30:8B:34:B1:0A:12:21:20 Authority key identifier: A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 Certificate issuer: /CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Certificate serial: 610A07FCFF864BC530F725C0F9F089EA26495AD0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 21:25:32 +0000 Manifest this update: Wed 16 Sep 2026 21:20:32 +0000 Manifest next update: Thu 17 Sep 2026 22:44:32 +0000 Files and hashes: 1: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TlXm5FUEfPUbwvDslESvInZ7QzJfvEoxUutevfTlhzM=) 2: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl (hash: wGb+fXTiKXDJ4ulhIli2C81HvXclA2xRpH+nId+6po4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0a:07:fc:ff:86:4b:c5:30:f7:25:c0:f9:f0:89:ea:26:49:5a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977 Validity Not Before: Sep 16 21:20:32 2026 GMT Not After : Sep 17 22:44:32 2026 GMT Subject: CN=D07A81F43F7CE28694F25D09308B34B10A122120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:1f:1d:05:69:f9:ef:6b:5e:94:af:fd:ad: 4d:e3:76:7f:d7:f5:c2:87:2b:0d:af:aa:03:a3:5a: b8:56:e1:a5:cb:77:f1:fc:fe:f3:31:07:ad:3d:0e: f4:8a:72:ce:d5:64:61:04:a6:68:02:cb:7b:22:ca: 68:cf:b7:d0:0b:19:a4:b6:b8:87:8d:a1:d3:21:42: 2a:54:eb:f9:8c:e3:c2:12:cd:62:ad:1e:3d:de:89: 93:44:76:8f:f7:02:7f:59:93:b2:4c:81:c0:8a:b4: 30:af:2e:22:b8:6c:59:9b:2e:4a:5a:6a:8b:8f:8e: 70:00:1b:2a:4b:49:5d:56:a6:12:08:82:d6:eb:c1: de:8a:e3:38:4d:3d:be:be:8d:8f:b3:30:64:ba:7b: 95:98:19:50:10:3f:cd:63:6d:a0:5b:cf:e6:7e:fa: 59:6d:27:8b:85:07:20:1a:40:1e:9c:c3:62:2e:ff: 63:e6:25:3a:4a:53:20:b5:ef:a7:62:c6:74:f0:33: a4:21:b3:e6:a2:9f:6c:9d:1f:32:00:a8:25:f9:0c: 4c:fd:56:0a:f6:69:ac:6b:68:ed:a1:ba:54:8b:38: 29:a6:e0:fb:62:de:0b:56:ee:18:8c:1a:a8:b1:1c: bc:16:90:a6:de:f5:23:51:05:55:f0:f4:2e:81:28: f3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7A:81:F4:3F:7C:E2:86:94:F2:5D:09:30:8B:34:B1:0A:12:21:20 X509v3 Authority Key Identifier: keyid:A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:01:ce:d2:c7:f6:28:2b:ae:bc:f4:dd:9b:6b:aa:a7:0c:05: 6a:b2:28:c9:f3:bb:1d:f5:b9:3d:38:7a:8c:f0:8e:62:87:e8: 31:76:8d:2c:77:6f:2f:f8:25:6e:cb:c7:3c:2a:a6:a7:99:b9: ea:6f:e8:57:43:eb:b5:05:37:d5:68:ee:e8:c7:20:24:4b:cf: b7:84:79:aa:7a:e1:06:ec:83:72:88:b4:d7:6f:f5:82:07:5a: 7f:8b:fc:41:af:84:16:22:2a:d8:89:2f:ad:b9:dd:c2:d4:d6: 1c:f7:8b:a9:4e:ca:62:75:21:83:e8:31:7b:e8:62:2a:35:90: 18:5f:d1:79:96:b2:24:77:64:3f:02:e0:e9:7c:ea:98:40:71: 2c:ed:80:33:52:40:4d:48:7a:aa:f1:1a:d9:28:f7:15:48:cf: 74:3b:b5:07:19:fb:35:8f:4b:01:73:6d:ea:90:1e:36:0d:18: 52:3e:59:45:03:45:54:51:ba:f9:da:9b:a3:f7:25:a5:d7:1f: be:47:8e:a4:e9:84:5c:10:dd:a5:b1:3c:00:52:03:1b:f2:fc: a9:68:8d:4c:8e:02:44:4e:f0:5c:ed:ba:fb:47:e1:a1:c9:1f: be:8f:c6:fe:63:9c:c8:26:aa:47:a6:52:a9:4f:bf:80:18:9a: 86:9a:91:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQoH/P+GS8Uw9yXA+fCJ6iZJWtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JD NThERDk3NzAeFw0yNjA5MTYyMTIwMzJaFw0yNjA5MTcyMjQ0MzJaMDMxMTAvBgNV BAMTKEQwN0E4MUY0M0Y3Q0UyODY5NEYyNUQwOTMwOEIzNEIxMEExMjIxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+R8dBWn572telK/9rU3jdn/X 9cKHKw2vqgOjWrhW4aXLd/H8/vMxB609DvSKcs7VZGEEpmgCy3siymjPt9ALGaS2 uIeNodMhQipU6/mM48ISzWKtHj3eiZNEdo/3An9Zk7JMgcCKtDCvLiK4bFmbLkpa aouPjnAAGypLSV1WphIIgtbrwd6K4zhNPb6+jY+zMGS6e5WYGVAQP81jbaBbz+Z+ +lltJ4uFByAaQB6cw2Iu/2PmJTpKUyC176dixnTwM6Qhs+ain2ydHzIAqCX5DEz9 Vgr2aaxraO2hulSLOCmm4Pti3gtW7hiMGqixHLwWkKbe9SNRBVXw9C6BKPPVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0HqB9D984oaU8l0JMIs0sQoSISAwHwYDVR0j BBgwFoAUo3biOCxq6n/GJZUBpyvxy8WN2XcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJlZDZkYzQtZDM4Yi00NGJhLTlmMGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgy QzZBRUE3RkM2MjU5NTAxQTcyQkYxQ0JDNThERDk3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMzc2RTIzODJDNkFFQTdGQzYyNTk1MDFBNzJCRjFDQkM1OERE OTc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvQTM3NkUyMzgyQzZBRUE3RkM2MjU5NTAxQTcyQkYx Q0JDNThERDk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEBztLH9igrrrz03ZtrqqcMBWqyKMnzux31 uT04eozwjmKH6DF2jSx3by/4JW7LxzwqpqeZuepv6FdD67UFN9Vo7ujHICRLz7eE eap64Qbsg3KItNdv9YIHWn+L/EGvhBYiKtiJL6253cLU1hz3i6lOymJ1IYPoMXvo Yio1kBhf0XmWsiR3ZD8C4Ol86phAcSztgDNSQE1IeqrxGtko9xVIz3Q7tQcZ+zWP SwFzbeqQHjYNGFI+WUUDRVRRuvnam6P3JaXXH75HjqTphFwQ3aWxPABSAxvy/Klo jUyOAkRO8FztuvtH4aHJH76Pxv5jnMgmqkemUqlPv4AYmoaakR0= -----END CERTIFICATE-----Generated at Thu Sep 17 10:50:20 2026 by rpki-client