$ rpki-client -vvvf rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft File: 3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft (raw, json) Hash identifier: imMLTxcO8gBXNLmaqFe0eO7+RJtHcX2DmsYYLQdQxFk= Subject key identifier: 15:A0:A2:0B:DC:CF:5B:7D:23:04:C3:F3:5A:5B:2A:5C:42:2B:4D:0E Authority key identifier: 38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 Certificate issuer: /CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Certificate serial: 4C066E87980D187950F5496A3C00F8EF054DC992 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:32:12 +0000 Manifest this update: Mon 21 Sep 2026 00:27:12 +0000 Manifest next update: Tue 22 Sep 2026 02:11:12 +0000 Files and hashes: 1: 3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (hash: v0zolYiVBPX0V+L+LtqJkU2q6rbdcBpLF4u+nGbvKcY=) 2: 34332e3233302e3132392e302f32342d3234203d3e203233363739.roa (hash: UGlFvxlrSD3eWOHFR+RqkvAQb3F8Wtbfd776kf/FNfc=) 3: 3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (hash: VUDQpItd+3mQ5FEfCwJZEx6NgUwPRML1HHBOxBoEKaQ=) 4: 323430363a626534303a666163653a3a2f34382d3438203d3e203233363739.roa (hash: PbuDJSAQXqe+YbQYZ8YEK8+HHcBku/MMl/4ow2T+fZM=) 5: 3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa (hash: s1aR5khIH0XJ6oiD7CdhPXEq4FMhwYeqfSj1qAtdtp8=) 6: 3130332e3233382e3230312e302f32342d3234203d3e203233363739.roa (hash: S1uWt6Gd7lDlIkiaquvYF6It5VJtoeKCsNPdN2cYPYo=) 7: 3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl (hash: bEgl70xrNhyrLB0wuV/o4B01NC2XckMT0c0MlGVeO9E=) 8: 3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (hash: ZmGgo3jaHXdx58TAmRSTnCCto4KpyY5aAzsNgTuNtrg=) 9: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (hash: LghNes9jQ+3fERFGIYDHSXbbc4nSMYy8cw//lu9REdQ=) 10: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (hash: doOzsTzSE36mgoSIEk74sHNoCKgIA+A/ijb08tABwGQ=) 11: 323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa (hash: Tjj+OKDjiFtagqUQK1BdjUoLQb0lOV71psKcaxKiSjc=) 12: 323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (hash: BTtVqrQ3GrSqxbnSLNvAGyR9geHV66mQRLtc+yOJ48k=) 13: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (hash: qy2wfZHRdLfbkgw90ebnyPI4997KQ+iwXU8qrVLm8HY=) 14: 3130332e3130332e3133372e302f32342d3234203d3e20313338383138.roa (hash: 4glWDbg2cthHWl40jAdpTpvdVV83NH6qF/yYaREdwKA=) 15: 3130332e3130332e3133392e302f32342d3234203d3e203233363739.roa (hash: xOmSeDJ7iA+Tnkm5H4X22K/meaXh6wCiDIBdj1esOYs=) 16: 34332e3233302e3133312e302f32342d3234203d3e203233363739.roa (hash: KTTzfIOZDP+sCVCw8zzqOhb2CjIcT0YOn1P5NcQm3jI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:06:6e:87:98:0d:18:79:50:f5:49:6a:3c:00:f8:ef:05:4d:c9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5 Validity Not Before: Sep 21 00:27:12 2026 GMT Not After : Sep 22 02:11:12 2026 GMT Subject: CN=15A0A20BDCCF5B7D2304C3F35A5B2A5C422B4D0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:89:62:46:2f:30:ca:c5:b4:2e:22:77:2c: ef:90:a3:cf:38:b0:c9:7e:af:2c:40:a3:04:23:c2: 94:3f:83:bc:b3:c5:91:cc:03:06:4b:ff:94:38:58: b1:b6:1c:ed:72:69:de:67:61:1a:42:6c:0f:ab:92: 10:7a:cf:24:a7:33:b8:0a:73:b2:6a:87:a6:c5:e8: a8:bc:d4:4e:30:68:48:4b:18:e0:68:c5:c1:e1:31: d1:73:a5:e7:1a:ed:e8:23:e8:be:63:8e:9e:7c:b7: 34:13:02:16:d7:10:38:3f:1c:d9:14:dd:b5:cd:68: f7:fd:de:e6:50:cd:88:f3:af:47:2e:0a:03:94:fa: 1b:1b:a5:01:a0:7c:15:be:d2:6c:a1:d3:a6:9d:0c: 74:8a:62:c0:2b:d7:6e:07:57:90:98:a6:51:ed:6f: 11:5d:e3:24:5d:ea:c8:35:cf:8d:56:d6:e1:a8:62: eb:cc:be:06:44:fa:a3:21:a3:b1:3e:e6:8a:f9:2a: 6f:14:6b:2b:15:af:e2:21:a1:8e:e8:38:8b:18:2d: d0:f5:ae:79:be:6c:39:d8:64:b0:75:eb:64:cb:53: b1:0a:3c:c7:cd:20:54:98:70:d2:e4:c2:eb:99:13: 4f:e3:ee:d8:0f:67:4c:86:91:cf:c6:d6:20:e1:63: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A0:A2:0B:DC:CF:5B:7D:23:04:C3:F3:5A:5B:2A:5C:42:2B:4D:0E X509v3 Authority Key Identifier: keyid:38:03:AF:DA:7B:CC:D7:DB:E5:CE:9E:90:1A:2B:17:8E:F3:51:51:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3803AFDA7BCCD7DBE5CE9E901A2B178EF35151E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:cd:c4:6d:b2:c0:32:9b:f3:b4:18:a7:19:3b:70:e9:f5:cf: d7:c6:0d:8e:a1:3b:8f:c6:cd:b6:3d:d7:a2:91:5c:94:46:1b: cf:27:cc:51:2f:ea:57:1e:38:c6:58:34:5e:89:7f:b2:46:03: b4:59:7a:9d:dd:92:c9:f1:b5:4b:5e:26:12:70:a0:d8:53:50: f1:67:e4:4a:a3:14:c5:e8:3b:c8:19:2d:5e:57:bc:4e:d2:42: 68:be:48:00:b3:bb:9f:2a:a4:db:e3:d4:b0:6f:6d:78:be:68: 35:4f:84:d9:59:8e:fd:c2:77:c0:c6:9e:23:db:ff:88:d9:42: 81:6c:3e:9d:87:95:c4:67:b2:9f:d9:47:c0:99:9a:4c:fe:12: 6d:fe:fb:cc:21:c5:89:d8:b4:4f:60:83:03:b1:5b:87:27:c3: 97:e6:7c:9f:b0:fc:b5:bb:17:06:83:5f:46:34:01:f7:32:cc: 85:c1:f3:75:2e:cd:52:6b:8a:e8:3b:3f:b2:bf:ce:27:a9:63: 21:e1:13:c5:9d:fd:d5:19:c4:8e:f6:41:12:2e:fd:7b:6d:6f: 5c:3d:56:44:5f:a8:d6:6c:61:fd:df:ca:5f:c7:81:37:4d:64: bb:87:0f:aa:2d:74:3b:66:78:66:7d:da:bc:e0:40:bf:0c:cf: cf:80:04:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTAZuh5gNGHlQ9UlqPAD47wVNyZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVG MzUxNTFFNTAeFw0yNjA5MjEwMDI3MTJaFw0yNjA5MjIwMjExMTJaMDMxMTAvBgNV BAMTKDE1QTBBMjBCRENDRjVCN0QyMzA0QzNGMzVBNUIyQTVDNDIyQjREMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv44liRi8wysW0LiJ3LO+Qo884 sMl+ryxAowQjwpQ/g7yzxZHMAwZL/5Q4WLG2HO1yad5nYRpCbA+rkhB6zySnM7gK c7Jqh6bF6Ki81E4waEhLGOBoxcHhMdFzpeca7egj6L5jjp58tzQTAhbXEDg/HNkU 3bXNaPf93uZQzYjzr0cuCgOU+hsbpQGgfBW+0myh06adDHSKYsAr124HV5CYplHt bxFd4yRd6sg1z41W1uGoYuvMvgZE+qMho7E+5or5Km8UaysVr+IhoY7oOIsYLdD1 rnm+bDnYZLB162TLU7EKPMfNIFSYcNLkwuuZE0/j7tgPZ0yGkc/G1iDhY5snAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFaCiC9zPW30jBMPzWlsqXEIrTQ4wHwYDVR0j BBgwFoAUOAOv2nvM19vlzp6QGisXjvNRUeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExNDE3YzAtMzdiYi00NDZkLTg3ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3 QkNDRDdEQkU1Q0U5RTkwMUEyQjE3OEVGMzUxNTFFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODAzQUZEQTdCQ0NEN0RCRTVDRTlFOTAxQTJCMTc4RUYzNTE1 MUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTExNDE3YzAtMzdiYi00NDZkLTg3 ZjItZDgxODQxNzhjMTQ5LzAvMzgwM0FGREE3QkNDRDdEQkU1Q0U5RTkwMUEyQjE3 OEVGMzUxNTFFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXNxG2ywDKb87QYpxk7cOn1z9fGDY6hO4/G zbY916KRXJRGG88nzFEv6lceOMZYNF6Jf7JGA7RZep3dksnxtUteJhJwoNhTUPFn 5EqjFMXoO8gZLV5XvE7SQmi+SACzu58qpNvj1LBvbXi+aDVPhNlZjv3Cd8DGniPb /4jZQoFsPp2HlcRnsp/ZR8CZmkz+Em3++8whxYnYtE9ggwOxW4cnw5fmfJ+w/LW7 FwaDX0Y0AfcyzIXB83UuzVJriug7P7K/ziepYyHhE8Wd/dUZxI72QRIu/Xttb1w9 VkRfqNZsYf3fyl/HgTdNZLuHD6otdDtmeGZ92rzgQL8Mz8+ABBI= -----END CERTIFICATE-----Generated at Mon Sep 21 04:01:27 2026 by rpki-client