$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft File: 4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft (raw, json) Hash identifier: cuPSrFuLppDxrAbscIetE0B95GuLv76FxnKGTfVam54= Subject key identifier: 39:F0:87:51:40:FA:45:5E:0A:AE:CC:57:79:B4:D8:6F:48:BB:38:32 Authority key identifier: 42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE Certificate issuer: /CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE Certificate serial: 73E35FDA62CE7342F33EE46339AFA510ABB8DB5A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft Manifest number: C3 Signing time: Sat 26 Sep 2026 08:50:47 +0000 Manifest this update: Sat 26 Sep 2026 08:45:47 +0000 Manifest next update: Sun 27 Sep 2026 10:17:47 +0000 Files and hashes: 1: 4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl (hash: fXBuCQeGnVqQNO1tI/RCOGVWBpOT6VsnloHvdjSP8fw=) 2: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: psydRP9iI2xqdgTYldVyaNuPRMq6F5KFPK4XNBT7jw0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 10:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e3:5f:da:62:ce:73:42:f3:3e:e4:63:39:af:a5:10:ab:b8:db:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE Validity Not Before: Sep 26 08:45:47 2026 GMT Not After : Sep 27 10:17:47 2026 GMT Subject: CN=39F0875140FA455E0AAECC5779B4D86F48BB3832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:d9:c1:e4:cb:35:87:da:60:9f:39:f0:47: 7e:71:6d:0e:80:3a:53:35:25:fb:bc:17:41:45:f3: 31:b2:b8:ca:d7:45:91:ef:2b:c0:ef:e0:8f:47:58: db:5b:06:9e:99:c5:23:fa:33:fd:ee:d9:c6:03:3d: ca:09:58:bf:43:9a:d1:19:87:6d:02:15:6d:fd:08: d4:f8:65:65:45:64:49:5f:3f:36:99:e2:90:17:8a: bb:95:52:1b:63:fb:0f:38:d3:c3:89:b5:de:e4:68: a0:79:e5:fa:07:b8:c5:a9:24:6b:82:53:39:c8:66: 4b:32:58:eb:eb:de:87:a2:96:b5:d1:1c:6d:de:2e: 1c:d1:70:f9:41:cc:1d:6c:65:7b:24:f4:68:49:63: 74:02:de:6a:b8:16:4c:4d:c7:13:b0:36:14:cf:cb: 34:12:15:65:de:05:e9:ac:f4:af:5b:68:12:ef:fb: 3a:24:93:70:8e:01:1e:95:9f:b3:95:03:77:d5:cd: f4:b0:d5:67:9a:1b:18:b8:75:4b:b9:45:28:e3:92: 9c:07:34:ad:30:5a:cd:98:11:aa:80:12:c3:a6:6d: 86:11:c9:8e:ee:33:9b:48:2d:a3:a7:4e:1b:1c:b2: 9b:b2:32:ca:c7:88:89:e9:de:06:c6:f5:49:bf:9d: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F0:87:51:40:FA:45:5E:0A:AE:CC:57:79:B4:D8:6F:48:BB:38:32 X509v3 Authority Key Identifier: keyid:42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c3:52:11:8a:43:f1:a4:f5:41:bb:47:af:33:1e:7b:80:0f: 86:5b:c4:42:45:87:98:dc:a5:c3:18:5e:d8:42:8b:5b:48:c0: 62:d4:a3:f4:ed:25:00:da:46:7b:3a:49:86:8d:4d:3f:38:6c: 3f:c5:da:de:f1:9f:3f:38:41:7c:d9:8f:c4:0e:9b:c2:07:a1: 88:5f:3e:6c:5b:33:32:58:14:f2:7c:36:3d:03:a1:a7:0b:d3: b7:22:e8:3c:a6:32:9f:3f:3d:bf:3d:3e:6b:9c:a4:97:c3:f1: 77:12:8e:52:c5:be:cf:f4:53:39:8c:b9:4f:e5:31:ff:e1:c8: 7f:20:4a:8b:34:0b:0e:84:fd:e0:28:e5:e1:c0:35:aa:a7:18: f5:f9:e7:df:5e:f1:a4:58:50:58:71:f1:ea:ba:be:ae:ba:41: eb:9b:4e:64:11:46:09:aa:a7:5f:85:67:e5:8f:c5:d5:f9:58: 1c:5e:00:b8:9d:d1:96:b8:61:22:cc:df:2b:eb:a4:d3:1f:f0: e7:cc:eb:78:55:59:2c:31:31:4e:1b:f2:db:d3:14:b9:9e:12: 66:78:e5:cb:66:53:70:a5:e1:9f:54:e3:3f:de:2e:b0:65:36: d8:f7:1a:74:ba:82:4b:99:2a:d7:cb:99:9a:d5:eb:b4:95:21: 23:23:1f:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+Nf2mLOc0LzPuRjOa+lEKu421owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI3MkQzNDlFMDRCM0E1RDAyNTYxRUUxOTI5NUUwRkQy NkIzN0NCRTAeFw0yNjA5MjYwODQ1NDdaFw0yNjA5MjcxMDE3NDdaMDMxMTAvBgNV BAMTKDM5RjA4NzUxNDBGQTQ1NUUwQUFFQ0M1Nzc5QjREODZGNDhCQjM4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJdnB5Ms1h9pgnznwR35xbQ6A OlM1Jfu8F0FF8zGyuMrXRZHvK8Dv4I9HWNtbBp6ZxSP6M/3u2cYDPcoJWL9DmtEZ h20CFW39CNT4ZWVFZElfPzaZ4pAXiruVUhtj+w8408OJtd7kaKB55foHuMWpJGuC UznIZksyWOvr3oeilrXRHG3eLhzRcPlBzB1sZXsk9GhJY3QC3mq4FkxNxxOwNhTP yzQSFWXeBems9K9baBLv+zokk3COAR6Vn7OVA3fVzfSw1WeaGxi4dUu5RSjjkpwH NK0wWs2YEaqAEsOmbYYRyY7uM5tILaOnThscspuyMsrHiInp3gbG9Um/naQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOfCHUUD6RV4KrsxXebTYb0i7ODIwHwYDVR0j BBgwFoAUQnLTSeBLOl0CVh7hkpXg/SazfL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTY3NTBiZjktOWY1OC00MjhhLTg5NTItOGI1NTU1ZWY3Y2E3LzAvNDI3MkQzNDlF MDRCM0E1RDAyNTYxRUUxOTI5NUUwRkQyNkIzN0NCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MjcyRDM0OUUwNEIzQTVEMDI1NjFFRTE5Mjk1RTBGRDI2QjM3 Q0JFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTY3NTBiZjktOWY1OC00MjhhLTg5 NTItOGI1NTU1ZWY3Y2E3LzAvNDI3MkQzNDlFMDRCM0E1RDAyNTYxRUUxOTI5NUUw RkQyNkIzN0NCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArDUhGKQ/Gk9UG7R68zHnuAD4ZbxEJFh5jc pcMYXthCi1tIwGLUo/TtJQDaRns6SYaNTT84bD/F2t7xnz84QXzZj8QOm8IHoYhf PmxbMzJYFPJ8Nj0DoacL07ci6DymMp8/Pb89PmucpJfD8XcSjlLFvs/0UzmMuU/l Mf/hyH8gSos0Cw6E/eAo5eHANaqnGPX5599e8aRYUFhx8eq6vq66QeubTmQRRgmq p1+FZ+WPxdX5WBxeALid0Za4YSLM3yvrpNMf8OfM63hVWSwxMU4b8tvTFLmeEmZ4 5ctmU3Cl4Z9U4z/eLrBlNtj3GnS6gkuZKtfLmZrV67SVISMjH9g= -----END CERTIFICATE-----Generated at Sat Sep 26 17:36:49 2026 by rpki-client