$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft File: B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft (raw, json) Hash identifier: sDND0b8rOeiYRyZOu0PU/MLaDieiSNgOoRAl1KGz7Wg= Subject key identifier: 91:6F:E4:A6:2B:DC:7E:0C:E6:FC:E5:78:EA:B4:A6:21:1D:A0:73:B6 Authority key identifier: B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA Certificate issuer: /CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Certificate serial: 5CFDDBDA6EA345569A36A4E53A56F3ACDBA314A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 16:01:08 +0000 Manifest this update: Tue 22 Sep 2026 15:56:08 +0000 Manifest next update: Wed 23 Sep 2026 19:11:08 +0000 Files and hashes: 1: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ZyMegzYLPmuWd/ikDAjq3H75TE6NMvhpUlSw0zwrA5M=) 2: B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl (hash: 5F1aK6N/r2xEC8xSwUmBtf0SfiWuW+UhurFEKRNgBRc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:fd:db:da:6e:a3:45:56:9a:36:a4:e5:3a:56:f3:ac:db:a3:14:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Validity Not Before: Sep 22 15:56:08 2026 GMT Not After : Sep 23 19:11:08 2026 GMT Subject: CN=916FE4A62BDC7E0CE6FCE578EAB4A6211DA073B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e7:62:5a:28:29:91:2d:b1:96:d0:b5:d3:05: 00:d8:ef:df:de:5c:9f:25:f4:47:63:a8:70:3e:ca: 6b:4a:ff:fd:63:d0:1a:5a:14:b6:6d:ad:da:ff:10: 88:5d:fa:97:77:76:0b:04:38:05:59:90:0c:cc:7e: 65:50:e5:5d:e7:2f:2f:8e:9e:38:2a:3d:68:af:3a: 7b:9f:7e:2c:be:96:a8:5c:d1:33:57:e8:20:7b:68: 23:79:57:fb:33:17:27:bd:42:ac:44:21:66:30:f4: 46:56:27:8b:95:90:19:77:e2:5d:ed:96:f3:be:07: 1e:3c:38:31:b1:50:8a:a7:b0:29:35:e8:68:4d:5d: 00:f3:ad:f0:53:a6:82:10:82:af:8e:ff:df:ec:aa: ab:73:3a:15:01:0a:b6:cc:78:30:6d:69:e3:fe:6b: 85:a4:2f:5c:fd:3c:3a:e6:d4:62:7f:3d:60:48:d9: ed:b5:a4:10:c2:6f:07:a9:8d:94:32:ea:bd:ec:5b: 05:8d:4d:45:0e:77:85:30:23:33:08:e8:f6:4e:c8: d8:c1:ba:10:f2:3a:c0:18:3d:a1:aa:8f:c1:85:01: 8d:be:e4:7a:7f:11:61:8f:74:01:89:94:4d:f6:2e: bc:d7:dd:65:38:67:54:dc:d6:5f:6b:83:ec:5a:49: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6F:E4:A6:2B:DC:7E:0C:E6:FC:E5:78:EA:B4:A6:21:1D:A0:73:B6 X509v3 Authority Key Identifier: keyid:B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a2:d5:da:ee:88:30:f0:17:d9:da:08:be:c0:19:e0:c0:75: 31:5e:60:e3:1f:f7:29:15:b6:8f:70:13:91:d5:c8:6a:a7:81: e7:f2:d6:3f:14:e5:51:d4:27:04:e5:a5:bd:50:7f:57:7e:98: 0d:32:eb:da:c9:1e:51:f0:84:f6:23:7f:c0:2a:2d:39:a0:ea: 69:07:be:34:79:fa:4c:5b:9f:6d:aa:e3:8b:94:78:5b:6c:40: 70:50:86:8e:10:78:75:5e:e9:34:6c:be:22:d5:db:16:19:ee: 79:e5:55:55:0a:f2:f5:2f:3e:e4:11:4f:6e:79:ce:10:d1:cd: 08:9a:8b:f1:17:8a:85:f5:5c:1b:46:b6:95:31:a2:23:c5:81: 6f:ab:67:30:cd:51:aa:9c:ac:b3:50:5f:1f:60:b0:1a:42:9f: 92:c6:88:d7:60:73:e0:b8:ef:8a:a9:6f:24:e6:58:f8:ce:79: 85:30:73:c9:39:90:67:17:5a:49:b7:e0:e0:1b:5f:20:9f:c8: fc:fa:61:bb:5f:4f:47:9e:e8:d5:50:65:78:18:1c:43:b2:3f: a6:0d:cf:e1:51:ba:e1:84:da:7c:03:16:69:ab:61:cb:19:e6: e4:d6:7d:25:ff:a6:c3:fb:c6:b4:71:ef:38:57:6b:df:1a:89: 0b:bf:ac:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXP3b2m6jRVaaNqTlOlbzrNujFKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIw MDQ5NUJGQTAeFw0yNjA5MjIxNTU2MDhaFw0yNjA5MjMxOTExMDhaMDMxMTAvBgNV BAMTKDkxNkZFNEE2MkJEQzdFMENFNkZDRTU3OEVBQjRBNjIxMURBMDczQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR52JaKCmRLbGW0LXTBQDY79/e XJ8l9EdjqHA+ymtK//1j0BpaFLZtrdr/EIhd+pd3dgsEOAVZkAzMfmVQ5V3nLy+O njgqPWivOnuffiy+lqhc0TNX6CB7aCN5V/szFye9QqxEIWYw9EZWJ4uVkBl34l3t lvO+Bx48ODGxUIqnsCk16GhNXQDzrfBTpoIQgq+O/9/sqqtzOhUBCrbMeDBtaeP+ a4WkL1z9PDrm1GJ/PWBI2e21pBDCbwepjZQy6r3sWwWNTUUOd4UwIzMI6PZOyNjB uhDyOsAYPaGqj8GFAY2+5Hp/EWGPdAGJlE32LrzX3WU4Z1Tc1l9rg+xaSWkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkW/kpivcfgzm/OV46rSmIR2gc7YwHwYDVR0j BBgwFoAUs4mo0u4YHXU+l6jPXXQoSwBJW/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc5NGZmZDItNDU3Mi00NTUzLTlhMzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJF RTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIwMDQ5NUJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzg5QThEMkVFMTgxRDc1M0U5N0E4Q0Y1RDc0Mjg0QjAwNDk1 QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4 NEIwMDQ5NUJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGui1druiDDwF9naCL7AGeDAdTFeYOMf9ykV to9wE5HVyGqngefy1j8U5VHUJwTlpb1Qf1d+mA0y69rJHlHwhPYjf8AqLTmg6mkH vjR5+kxbn22q44uUeFtsQHBQho4QeHVe6TRsviLV2xYZ7nnlVVUK8vUvPuQRT255 zhDRzQiai/EXioX1XBtGtpUxoiPFgW+rZzDNUaqcrLNQXx9gsBpCn5LGiNdgc+C4 74qpbyTmWPjOeYUwc8k5kGcXWkm34OAbXyCfyPz6YbtfT0ee6NVQZXgYHEOyP6YN z+FRuuGE2nwDFmmrYcsZ5uTWfSX/psP7xrRx7zhXa98aiQu/rGQ= -----END CERTIFICATE-----Generated at Tue Sep 22 23:16:01 2026 by rpki-client