$ rpki-client -vvvf rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft File: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft (raw, json) Hash identifier: GkxfTsk+ozrE4pBza1LLRoMxH3rsId7PMovd9yJy7iU= Subject key identifier: A8:52:65:CC:10:57:2F:1D:21:BD:29:A5:E8:11:DE:FC:E8:BA:C4:54 Authority key identifier: A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC Certificate issuer: /CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Certificate serial: 0888668DAF7106E90CA0C594CC6069A01BD78B16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft Manifest number: BF Signing time: Mon 21 Sep 2026 21:43:27 +0000 Manifest this update: Mon 21 Sep 2026 21:38:27 +0000 Manifest next update: Wed 23 Sep 2026 01:00:27 +0000 Files and hashes: 1: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: b8kZYL8oI1P/7ClfsU26nDRuP+nZXNyKDNgSZ4R1ACk=) 2: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl (hash: NfdeTKnOT5N0iObkQmdCo/UjoWs+VcMdRFjHGy4xGRM=) 3: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: 1g2WZIx9KqbiuQj/CWy92fVr9rJvVDZ62oh+oM6NT5Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:88:66:8d:af:71:06:e9:0c:a0:c5:94:cc:60:69:a0:1b:d7:8b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Validity Not Before: Sep 21 21:38:27 2026 GMT Not After : Sep 23 01:00:27 2026 GMT Subject: CN=A85265CC10572F1D21BD29A5E811DEFCE8BAC454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:8e:12:55:97:81:4e:8d:ef:48:c2:9f:ee: cb:44:6e:ef:28:02:79:ec:ea:bc:92:a0:74:1f:e0: 79:e5:9a:58:46:c8:b3:27:38:9a:8c:7b:ce:52:40: 2e:3a:71:89:0d:2a:39:9c:71:15:69:f5:64:b1:45: 91:0e:86:86:d1:92:8a:2f:f3:06:b6:bc:2a:b2:9a: c3:af:45:53:d4:b4:91:aa:0e:da:d6:0a:a2:33:8f: a7:01:31:e2:5a:a5:dd:09:1b:56:b1:e0:8c:71:61: dd:2e:bd:ef:24:da:e7:18:98:a1:92:ab:99:5e:14: 99:b9:42:5b:73:c0:42:89:a7:ce:15:cb:b0:0e:9a: 9f:eb:51:21:e7:07:16:2c:46:a7:f4:eb:8b:da:91: b8:57:fa:de:45:19:85:29:f2:55:2b:58:fa:b7:bd: 5e:40:94:81:99:3d:96:4b:eb:78:9f:ac:b3:25:c1: 9b:c2:1c:04:30:76:be:c0:ea:3d:7c:95:ff:3b:92: 2d:75:de:b0:bc:db:18:df:3e:f4:37:3d:79:70:e0: d5:cd:f4:60:d8:15:0e:d1:1f:66:27:f2:59:83:0b: b9:09:98:a7:34:7e:9e:bb:e5:98:82:b4:7a:d1:1b: 05:19:23:94:cd:9a:a2:11:26:45:e7:6f:df:a6:96: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:52:65:CC:10:57:2F:1D:21:BD:29:A5:E8:11:DE:FC:E8:BA:C4:54 X509v3 Authority Key Identifier: keyid:A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e3:fb:e8:06:48:0b:ec:16:29:6e:66:60:04:75:76:22:20: ad:9a:f6:e9:8e:70:a2:af:bb:a4:ea:68:92:34:84:a9:20:9a: f4:80:e7:0a:51:ed:93:8d:71:65:ed:e6:d2:47:3d:90:55:68: ce:4a:37:06:78:49:11:55:16:99:44:57:b5:e7:69:a5:e7:23: 4c:32:d1:7d:8c:c0:2e:36:80:0b:17:4e:f7:b1:49:6f:6a:7d: 68:9b:34:5f:1f:82:6e:ad:94:d1:d6:92:8c:58:e7:42:9f:63: 8c:66:f5:79:66:08:5f:fc:56:53:cb:18:13:4a:f8:25:92:cf: 4c:73:d7:88:a4:5f:d8:fd:fe:e8:78:45:a5:82:12:eb:dc:a7: 84:97:24:2e:c7:80:06:3c:5d:10:9c:3a:6c:cf:e6:4e:46:b2: c4:ac:47:92:b3:96:59:e6:aa:84:f2:3d:d4:af:91:ef:19:e5: e0:ac:40:f0:6a:a6:da:02:52:4e:bd:60:62:40:10:f3:d1:a2: f9:cd:0f:df:63:b9:ad:5c:17:f8:f3:4f:1b:a3:89:77:3c:cc: ce:2a:87:d2:ef:4a:d5:c6:f1:37:05:c9:1f:43:9d:d4:e0:33: 41:b4:bf:3c:ac:28:05:9b:95:82:5d:80:c7:e4:9f:f2:bc:da: 16:60:79:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCIhmja9xBukMoMWUzGBpoBvXixYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5QzcyNjRE QTFFMjNCQzAeFw0yNjA5MjEyMTM4MjdaFw0yNjA5MjMwMTAwMjdaMDMxMTAvBgNV BAMTKEE4NTI2NUNDMTA1NzJGMUQyMUJEMjlBNUU4MTFERUZDRThCQUM0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QI4SVZeBTo3vSMKf7stEbu8o Anns6rySoHQf4HnlmlhGyLMnOJqMe85SQC46cYkNKjmccRVp9WSxRZEOhobRkoov 8wa2vCqymsOvRVPUtJGqDtrWCqIzj6cBMeJapd0JG1ax4IxxYd0uve8k2ucYmKGS q5leFJm5QltzwEKJp84Vy7AOmp/rUSHnBxYsRqf064vakbhX+t5FGYUp8lUrWPq3 vV5AlIGZPZZL63ifrLMlwZvCHAQwdr7A6j18lf87ki113rC82xjfPvQ3PXlw4NXN 9GDYFQ7RH2Yn8lmDC7kJmKc0fp675ZiCtHrRGwUZI5TNmqIRJkXnb9+mlhb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqFJlzBBXLx0hvSml6BHe/Oi6xFQwHwYDVR0j BBgwFoAUo5AH8+Kii458C3qpJZxyZNoeI7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNlNDE3N2QtODA5My00NDdjLTg3YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNF MkEyOEI4RTdDMEI3QUE5MjU5QzcyNjREQTFFMjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzkwMDdGM0UyQTI4QjhFN0MwQjdBQTkyNTlDNzI2NERBMUUy M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5Qzcy NjREQTFFMjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPj++gGSAvsFiluZmAEdXYiIK2a9umOcKKv u6TqaJI0hKkgmvSA5wpR7ZONcWXt5tJHPZBVaM5KNwZ4SRFVFplEV7XnaaXnI0wy 0X2MwC42gAsXTvexSW9qfWibNF8fgm6tlNHWkoxY50KfY4xm9XlmCF/8VlPLGBNK +CWSz0xz14ikX9j9/uh4RaWCEuvcp4SXJC7HgAY8XRCcOmzP5k5GssSsR5Kzllnm qoTyPdSvke8Z5eCsQPBqptoCUk69YGJAEPPRovnND99jua1cF/jzTxujiXc8zM4q h9LvStXG8TcFyR9DndTgM0G0vzysKAWblYJdgMfkn/K82hZgeSk= -----END CERTIFICATE-----Generated at Tue Sep 22 11:47:37 2026 by rpki-client