$ rpki-client -vvvf rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft File: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft (raw, json) Hash identifier: e2cZZruG4LR64y73jbFieDlBJU8wFYbCpRW56aWSGPc= Subject key identifier: BD:38:22:D0:E5:8C:82:31:35:B1:CE:D8:3C:A9:76:51:32:2C:71:81 Authority key identifier: A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE Certificate issuer: /CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Certificate serial: 683E810DF88D1AAF02E40620EF50D7CE45C183B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft Manifest number: BF Signing time: Mon 21 Sep 2026 03:10:23 +0000 Manifest this update: Mon 21 Sep 2026 03:05:23 +0000 Manifest next update: Tue 22 Sep 2026 06:31:23 +0000 Files and hashes: 1: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: aovpUXhtG7nLDYyGx/GHHZuHleB68UHdZ+Sr7i30ntQ=) 2: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: K3OLubUlACzscrRuEaqGQ8Mg86bkVIp+TswVbW3m0Us=) 3: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl (hash: oatKtt1QnUVKQ4R+L60xOLYyl+lD1EJrUIP355ys7ng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3e:81:0d:f8:8d:1a:af:02:e4:06:20:ef:50:d7:ce:45:c1:83:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Validity Not Before: Sep 21 03:05:23 2026 GMT Not After : Sep 22 06:31:23 2026 GMT Subject: CN=BD3822D0E58C823135B1CED83CA97651322C7181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:ea:c2:d0:c2:af:42:8c:df:c5:c7:6e:81: 2e:9b:3d:f6:4f:3e:3f:d5:79:58:4d:72:83:07:c0: 1f:ae:2e:f4:59:e8:aa:c2:4d:8c:e4:7e:a3:c5:87: 33:00:34:8d:b4:89:08:a4:fa:65:06:41:a6:53:36: 5e:28:b2:74:8a:79:85:82:af:9c:b2:cc:70:4a:88: d2:7c:fe:7b:d7:f5:d7:a5:eb:9c:7a:4e:e1:42:4e: a5:b0:bd:78:1a:ae:76:fe:32:c3:40:96:2a:49:28: b4:43:a7:e4:f3:fe:d4:74:12:ce:7f:0a:2c:39:8e: 0b:b1:df:5e:6c:14:54:98:1f:8e:2d:19:5e:a9:84: e6:6f:14:57:3a:04:11:a3:93:26:bd:47:f9:5a:9e: f3:87:67:a2:a9:a9:50:3c:ab:c0:68:53:31:8f:5d: 27:33:c2:77:a6:d1:e0:eb:84:8d:25:57:0b:60:21: 06:02:e0:07:ff:6e:10:01:d7:4d:6e:39:87:87:8b: 95:30:e9:54:d7:ae:42:c5:6f:11:b3:02:98:e9:bd: 01:f6:e7:6d:14:41:93:95:b7:30:ac:91:25:ee:d3: bc:68:09:66:cb:45:68:16:66:b1:97:2f:a5:59:1b: 8c:df:93:f0:d5:1b:20:33:51:76:d7:3e:05:52:e8: 3d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:38:22:D0:E5:8C:82:31:35:B1:CE:D8:3C:A9:76:51:32:2C:71:81 X509v3 Authority Key Identifier: keyid:A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:87:37:9a:e7:c2:13:0d:12:f5:32:b0:e6:4b:43:b0:5a:7c: 2f:e5:d3:19:ae:05:41:fe:ff:27:26:2c:eb:cd:13:5d:a7:17: 3a:5a:2b:e2:98:7c:fb:c6:6a:5c:92:6e:b0:73:0e:ba:8f:69: cc:c7:b0:c6:f1:ef:81:08:4c:51:67:ce:b9:08:b8:2a:54:ca: 37:81:75:13:41:3c:e3:6d:6c:16:42:3c:e8:36:82:0f:1f:3f: db:f4:d6:44:d2:5b:df:d2:63:9f:94:1c:b4:46:06:11:41:dc: f1:44:7c:b2:03:e8:69:7f:15:b3:90:77:ed:db:60:71:71:82: 13:07:7d:02:45:e2:38:c8:2c:c8:6b:1e:b7:86:d3:01:29:5f: 07:d3:76:5d:f2:f9:1a:4e:99:0f:65:9a:a7:20:c4:87:71:f7: 08:45:82:6c:93:57:81:7f:65:81:1d:40:98:86:f3:6c:99:40: 3b:f2:00:cb:b5:6f:e3:76:5d:0f:9c:dc:6a:7a:b0:32:77:90: e4:8f:c8:1b:6f:f9:83:4f:d0:38:38:2d:51:54:bb:bd:1e:5a: af:e3:60:56:2e:dc:b3:23:78:f0:a0:57:88:47:98:c4:57:8c: d2:0b:f2:e3:9d:6d:10:fa:62:85:f0:3d:28:fe:97:cd:b2:a4: 89:81:70:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaD6BDfiNGq8C5AYg71DXzkXBg7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4 QzNDNzlDRTAeFw0yNjA5MjEwMzA1MjNaFw0yNjA5MjIwNjMxMjNaMDMxMTAvBgNV BAMTKEJEMzgyMkQwRTU4QzgyMzEzNUIxQ0VEODNDQTk3NjUxMzIyQzcxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjerC0MKvQozfxcdugS6bPfZP Pj/VeVhNcoMHwB+uLvRZ6KrCTYzkfqPFhzMANI20iQik+mUGQaZTNl4osnSKeYWC r5yyzHBKiNJ8/nvX9del65x6TuFCTqWwvXgarnb+MsNAlipJKLRDp+Tz/tR0Es5/ Ciw5jgux315sFFSYH44tGV6phOZvFFc6BBGjkya9R/lanvOHZ6KpqVA8q8BoUzGP XSczwnem0eDrhI0lVwtgIQYC4Af/bhAB101uOYeHi5Uw6VTXrkLFbxGzApjpvQH2 520UQZOVtzCskSXu07xoCWbLRWgWZrGXL6VZG4zfk/DVGyAzUXbXPgVS6D2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvTgi0OWMgjE1sc7YPKl2UTIscYEwHwYDVR0j BBgwFoAUo4/fYd/UXo+hySVtvTWmeow8ec4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDdkZjJhZDAtNmU5OS00NGE3LWEwNjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFE RkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4QzNDNzlDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzhGREY2MURGRDQ1RThGQTFDOTI1NkRCRDM1QTY3QThDM0M3 OUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2 N0E4QzNDNzlDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuHN5rnwhMNEvUysOZLQ7BafC/l0xmuBUH+ /ycmLOvNE12nFzpaK+KYfPvGalySbrBzDrqPaczHsMbx74EITFFnzrkIuCpUyjeB dRNBPONtbBZCPOg2gg8fP9v01kTSW9/SY5+UHLRGBhFB3PFEfLID6Gl/FbOQd+3b YHFxghMHfQJF4jjILMhrHreG0wEpXwfTdl3y+RpOmQ9lmqcgxIdx9whFgmyTV4F/ ZYEdQJiG82yZQDvyAMu1b+N2XQ+c3Gp6sDJ3kOSPyBtv+YNP0Dg4LVFUu70eWq/j YFYu3LMjePCgV4hHmMRXjNIL8uOdbRD6YoXwPSj+l82ypImBcPY= -----END CERTIFICATE-----Generated at Mon Sep 21 18:25:38 2026 by rpki-client