$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft File: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft (raw, json) Hash identifier: E2tnPl24dHNM5Z7twLi8opeMcw+q9DmJl/gVzpgrSZs= Subject key identifier: 20:4D:F7:65:E1:CC:68:60:F9:B3:12:14:A6:99:9B:58:E2:C2:F2:94 Authority key identifier: 1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD Certificate issuer: /CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Certificate serial: 5488D0E1064072E5FDBCA8A2977DD04FD424C7B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:43:43 +0000 Manifest this update: Mon 21 Sep 2026 05:38:43 +0000 Manifest next update: Tue 22 Sep 2026 08:38:43 +0000 Files and hashes: 1: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: 3u+krw4MaugdVPNW0321aXdI9rwWYGxYt6HAFFT4OAw=) 2: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl (hash: MeFLoMpWw6Wh2ACbpME/Yq2Ifx5GX7TVEtI8G772ue8=) 3: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: pW3XBmKi6nT+DFL99ofR2D1BtLS4+aP/u1rjwoOPDjI=) 4: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: uLEgNCgaAjsQjxP4KxUR5P3CjpsSxN+zwR1ag08fAfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 08:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:88:d0:e1:06:40:72:e5:fd:bc:a8:a2:97:7d:d0:4f:d4:24:c7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Validity Not Before: Sep 21 05:38:43 2026 GMT Not After : Sep 22 08:38:43 2026 GMT Subject: CN=204DF765E1CC6860F9B31214A6999B58E2C2F294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:95:2b:77:b8:c5:b7:09:b2:7c:db:5d:da: e3:11:a4:b2:68:89:d7:73:c6:58:f2:16:d6:21:7d: e9:14:86:1f:a8:61:f2:ba:d8:66:93:08:42:90:16: d1:50:0f:61:16:98:d2:0b:26:1e:c8:84:f2:31:d2: 9b:96:a3:0b:fd:61:35:0f:84:13:9c:8b:00:46:a9: d0:6d:61:b3:d2:4f:1f:ba:b9:71:45:20:e0:10:68: a1:ee:e7:2b:24:78:8e:7a:f4:35:28:fd:ac:8c:94: 21:70:9c:e4:e2:57:c6:c3:be:08:b4:9d:ae:8a:24: 77:21:e3:be:15:a2:50:03:c2:29:a5:0e:e5:56:0d: 90:23:3f:62:a3:2e:5d:0c:45:a6:6c:51:d4:be:21: e4:f6:73:ff:6b:ec:f8:b1:af:f9:30:49:5e:ce:f0: eb:9c:62:f2:7d:31:ed:b1:25:e6:ff:b8:83:42:2d: 5a:8f:3e:28:b7:32:3b:9f:4e:e1:5d:d4:a1:da:62: 6e:fc:ac:b1:4d:64:97:28:34:d2:14:11:82:c9:ad: f3:fb:05:c8:16:7c:a0:ac:8c:30:60:8e:84:60:f4: 72:b2:24:11:ca:76:ea:ad:9e:81:45:37:c1:99:e6: 5f:e2:b0:b2:47:6d:ac:cd:6d:ca:ec:ae:61:92:60: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4D:F7:65:E1:CC:68:60:F9:B3:12:14:A6:99:9B:58:E2:C2:F2:94 X509v3 Authority Key Identifier: keyid:1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:23:45:de:66:7f:60:58:c6:49:ab:fa:51:4e:b0:9d:8c:5c: 6c:29:fb:4f:b7:d2:c0:f2:7d:23:91:98:87:40:17:62:44:1d: f0:a4:31:99:73:89:14:91:a3:f0:97:e3:50:84:b2:65:ac:3f: d2:33:e4:8b:d2:11:14:d7:12:14:5c:af:7c:e9:1f:eb:22:60: 38:06:57:01:53:2a:ce:2d:7d:d8:ec:1e:74:53:39:a0:e1:55: a1:c5:b6:85:58:c1:7b:2b:45:8d:91:cf:43:1f:f3:0d:92:3b: 9e:7d:41:98:55:ab:cd:b5:ce:1d:b4:7f:59:e5:48:be:09:37: 65:77:3f:fc:17:43:19:1d:68:b9:93:a1:a9:49:ed:34:6d:6b: 44:cf:11:ee:cd:61:7c:ee:ec:b9:50:9e:b9:4d:4a:a5:0b:87: c4:fe:76:1d:db:33:b1:ff:44:ff:ec:13:e1:83:67:9c:8e:d3: 76:06:07:d9:94:08:9c:7a:95:2e:8b:9e:8b:06:f3:4a:89:1b: 6f:49:9c:d9:4a:73:e5:22:10:77:18:27:3c:f4:ff:ae:cb:30: 5d:d4:c1:23:04:1a:ab:7a:6a:29:c3:89:4e:4f:c5:a9:1e:55: c8:f9:43:ad:58:45:55:13:5e:98:14:e7:e7:99:a8:c2:97:9f: f1:1d:4c:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVIjQ4QZAcuX9vKiil33QT9Qkx7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERC Rjc5ODNBRDAeFw0yNjA5MjEwNTM4NDNaFw0yNjA5MjIwODM4NDNaMDMxMTAvBgNV BAMTKDIwNERGNzY1RTFDQzY4NjBGOUIzMTIxNEE2OTk5QjU4RTJDMkYyOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRpUrd7jFtwmyfNtd2uMRpLJo iddzxljyFtYhfekUhh+oYfK62GaTCEKQFtFQD2EWmNILJh7IhPIx0puWowv9YTUP hBOciwBGqdBtYbPSTx+6uXFFIOAQaKHu5yskeI569DUo/ayMlCFwnOTiV8bDvgi0 na6KJHch474VolADwimlDuVWDZAjP2KjLl0MRaZsUdS+IeT2c/9r7Pixr/kwSV7O 8OucYvJ9Me2xJeb/uINCLVqPPii3MjufTuFd1KHaYm78rLFNZJcoNNIUEYLJrfP7 BcgWfKCsjDBgjoRg9HKyJBHKduqtnoFFN8GZ5l/isLJHbazNbcrsrmGSYG/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIE33ZeHMaGD5sxIUppmbWOLC8pQwHwYDVR0j BBgwFoAUHTmw2RdICoXLs7DZ0J4iDb95g60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJiZmFiMDktYzFlOS00NGQ4LTgxOWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkx NzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERCRjc5ODNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDM5QjBEOTE3NDgwQTg1Q0JCM0IwRDlEMDlFMjIwREJGNzk4 M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIy MERCRjc5ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsjRd5mf2BYxkmr+lFOsJ2MXGwp+0+30sDy fSORmIdAF2JEHfCkMZlziRSRo/CX41CEsmWsP9Iz5IvSERTXEhRcr3zpH+siYDgG VwFTKs4tfdjsHnRTOaDhVaHFtoVYwXsrRY2Rz0Mf8w2SO559QZhVq821zh20f1nl SL4JN2V3P/wXQxkdaLmToalJ7TRta0TPEe7NYXzu7LlQnrlNSqULh8T+dh3bM7H/ RP/sE+GDZ5yO03YGB9mUCJx6lS6LnosG80qJG29JnNlKc+UiEHcYJzz0/67LMF3U wSMEGqt6ainDiU5PxakeVcj5Q61YRVUTXpgU5+eZqMKXn/EdTEc= -----END CERTIFICATE-----Generated at Tue Sep 22 01:07:11 2026 by rpki-client