$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft File: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft (raw, json) Hash identifier: rpA9PwagBr9jccpvA8xjWvUbThLfR5vKBzdZtfSMSFg= Subject key identifier: 53:CB:18:F2:D6:EC:0A:A4:15:42:CB:02:4A:64:8F:C7:02:EA:C6:E9 Authority key identifier: 38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 Certificate issuer: /CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Certificate serial: 3812BB1F26E91FF69F8A3C204E691C8A3A2646C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:12:50 +0000 Manifest this update: Mon 21 Sep 2026 13:07:50 +0000 Manifest next update: Tue 22 Sep 2026 16:05:50 +0000 Files and hashes: 1: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (hash: S6GOyjGvuJioIHLVuYqgKhP5jh9zLHefQ/VHuPP8g0o=) 2: 3130332e39392e3133362e302f32332d3233203d3e20313531353735.roa (hash: MxOD/5AuASqElHlVy5TYYuw3oWmINBBbMOjEzQsGf+o=) 3: 387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl (hash: gn41XkBvblcH9081wGd1J2oKSffsP/LYY4xz03zStE8=) 4: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (hash: eZupa4yD5dYmRchDIoQ9Vr1OSpDO1UCvdkhlGFp59RU=) 5: 3130332e39392e3133372e302f32342d3234203d3e20313531353735.roa (hash: WzpVY5ZsxXo9ncFEks5zrp0y9Wobyt/PfJcmMClmLsQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 16:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:12:bb:1f:26:e9:1f:f6:9f:8a:3c:20:4e:69:1c:8a:3a:26:46:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8 Validity Not Before: Sep 21 13:07:50 2026 GMT Not After : Sep 22 16:05:50 2026 GMT Subject: CN=53CB18F2D6EC0AA41542CB024A648FC702EAC6E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:eb:0d:83:7c:b9:06:43:b7:a5:1d:e2:f0: d0:46:49:bc:81:3a:60:f7:59:36:d6:39:49:7d:92: ca:66:82:df:ed:23:c8:70:5b:6e:05:8d:31:62:8c: a9:ec:80:7c:fc:14:7c:6e:cb:e3:5e:ec:a1:0c:fc: d0:2a:ad:82:49:66:9d:a9:73:4d:98:8b:cf:f0:2e: 78:9e:4f:d1:33:03:e5:59:1a:5e:a2:43:a0:12:b8: 61:30:30:de:2a:b5:7a:53:a0:7f:c4:04:37:3e:6a: 6f:10:eb:c6:d6:42:6b:fc:1d:37:71:0e:f6:0c:50: 01:78:dc:07:9e:ec:7e:25:9a:70:36:36:4d:5b:a6: 2b:10:ca:f4:c5:d0:85:af:26:4e:7c:ea:9a:27:36: ce:b7:c6:d0:bb:f8:b0:a8:fc:2c:2b:34:12:c3:ae: 4d:77:9b:2f:76:c6:18:52:46:62:56:67:d2:38:14: 07:13:3f:4a:9f:c5:14:34:10:5e:db:92:01:31:5c: a5:85:b8:fa:32:21:93:72:ef:d8:29:94:2e:37:17: b9:02:dc:a3:87:4a:ad:09:ab:0e:19:72:a3:38:4d: 0d:17:8b:ae:5d:bb:ab:a6:41:69:5e:f8:25:c1:3d: 62:da:5e:43:78:8a:b2:07:36:65:fe:5e:01:ff:b6: 1f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CB:18:F2:D6:EC:0A:A4:15:42:CB:02:4A:64:8F:C7:02:EA:C6:E9 X509v3 Authority Key Identifier: keyid:38:7D:A9:5F:F9:9D:3F:CB:2B:BB:D2:F3:B2:29:D9:F3:37:2D:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/387DA95FF99D3FCB2BBBD2F3B229D9F3372DD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:46:23:f3:f4:ff:f8:9b:03:07:3f:37:a8:51:11:e3:b9:48: 3c:6d:f7:15:57:ad:1d:6b:b3:57:31:bb:e3:31:cf:fc:68:be: 31:ff:4e:69:11:70:d0:1f:7d:ef:0e:ad:4f:21:d3:e2:7b:41: ea:f3:db:3b:44:59:20:ed:33:3a:f8:d5:18:93:41:eb:7f:72: 17:70:52:a2:55:b3:c5:4e:76:38:49:96:fc:78:6d:3a:e4:24: ad:c3:b9:2f:31:59:53:20:02:16:17:88:93:aa:9a:ad:92:26: 67:1b:70:46:62:e4:8f:19:ce:f5:dc:0d:96:84:e2:91:ea:7d: 07:88:3a:66:bc:dd:d2:12:bb:ea:f5:47:02:b1:44:aa:ad:24: 64:72:7b:3a:76:cf:4e:17:89:c3:be:72:5d:bd:1b:7b:ec:cf: f5:93:a2:0d:51:3d:fa:92:f2:39:43:21:c9:5e:46:df:88:73: 89:fc:3c:ed:b6:41:82:c5:d5:d2:a2:77:d0:4c:de:b0:5e:cd: df:92:83:2e:49:b5:93:70:30:19:fc:56:4b:13:28:c4:27:94: 9e:5e:e4:f6:6b:53:4c:c4:13:dc:be:9e:f6:2e:04:41:8e:04: 75:a2:40:ea:87:4a:31:b8:21:9a:d3:6b:15:63:ec:91:4a:7c: 1b:cb:a6:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBK7HybpH/afijwgTmkcijomRsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMz NzJERDNCODAeFw0yNjA5MjExMzA3NTBaFw0yNjA5MjIxNjA1NTBaMDMxMTAvBgNV BAMTKDUzQ0IxOEYyRDZFQzBBQTQxNTQyQ0IwMjRBNjQ4RkM3MDJFQUM2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrgesNg3y5BkO3pR3i8NBGSbyB OmD3WTbWOUl9kspmgt/tI8hwW24FjTFijKnsgHz8FHxuy+Ne7KEM/NAqrYJJZp2p c02Yi8/wLnieT9EzA+VZGl6iQ6ASuGEwMN4qtXpToH/EBDc+am8Q68bWQmv8HTdx DvYMUAF43Aee7H4lmnA2Nk1bpisQyvTF0IWvJk586ponNs63xtC7+LCo/CwrNBLD rk13my92xhhSRmJWZ9I4FAcTP0qfxRQ0EF7bkgExXKWFuPoyIZNy79gplC43F7kC 3KOHSq0Jqw4ZcqM4TQ0Xi65du6umQWle+CXBPWLaXkN4irIHNmX+XgH/th+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU8sY8tbsCqQVQssCSmSPxwLqxukwHwYDVR0j BBgwFoAUOH2pX/mdP8sru9LzsinZ8zct07gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMyODBhZjMtYWExZC00MjcxLThjMDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZG OTlEM0ZDQjJCQkJEMkYzQjIyOUQ5RjMzNzJERDNCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODdEQTk1RkY5OUQzRkNCMkJCQkQyRjNCMjI5RDlGMzM3MkRE M0I4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMyODBhZjMtYWExZC00MjcxLThj MDYtYTNmYTI4ODk4NDI2LzAvMzg3REE5NUZGOTlEM0ZDQjJCQkJEMkYzQjIyOUQ5 RjMzNzJERDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1GI/P0//ibAwc/N6hREeO5SDxt9xVXrR1r s1cxu+Mxz/xovjH/TmkRcNAffe8OrU8h0+J7Qerz2ztEWSDtMzr41RiTQet/chdw UqJVs8VOdjhJlvx4bTrkJK3DuS8xWVMgAhYXiJOqmq2SJmcbcEZi5I8ZzvXcDZaE 4pHqfQeIOma83dISu+r1RwKxRKqtJGRyezp2z04XicO+cl29G3vsz/WTog1RPfqS 8jlDIcleRt+Ic4n8PO22QYLF1dKid9BM3rBezd+Sgy5JtZNwMBn8VksTKMQnlJ5e 5PZrU0zEE9y+nvYuBEGOBHWiQOqHSjG4IZrTaxVj7JFKfBvLpts= -----END CERTIFICATE-----Generated at Tue Sep 22 01:06:10 2026 by rpki-client