$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft File: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft (raw, json) Hash identifier: QnB54RK02mc+vkJ/VSTQEah2rOl0PG46Lvdk2GTqjjQ= Subject key identifier: 93:83:B7:2C:75:A5:5D:C0:D8:AB:F4:38:0A:A6:51:45:79:5F:24:52 Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 Certificate issuer: /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Certificate serial: 46116D64905772BBADAA13F20FA02B933D699363 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft Manifest number: C1 Signing time: Sun 20 Sep 2026 23:51:18 +0000 Manifest this update: Sun 20 Sep 2026 23:46:18 +0000 Manifest next update: Tue 22 Sep 2026 02:02:18 +0000 Files and hashes: 1: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: 35sB3F+pYRWs2vzmYiPiuHmOw2zefVJi3xxGSLrd8Oc=) 2: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl (hash: Q4CFzOVpVx8xTqWQq47/O4cBk+6bGwJQHTTsxTcZZC4=) 3: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: lzLPq+5ACK3Fp2G9Qq15Ai5VNsw2ESnTuC604MZBsC4=) 4: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: X+ZlO7h/pL9t4N4Gq7NgEd0rssKL3EkGKfZrYxmlYG4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:11:6d:64:90:57:72:bb:ad:aa:13:f2:0f:a0:2b:93:3d:69:93:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Validity Not Before: Sep 20 23:46:18 2026 GMT Not After : Sep 22 02:02:18 2026 GMT Subject: CN=9383B72C75A55DC0D8ABF4380AA65145795F2452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:26:e2:82:db:4f:d9:fd:1f:3a:61:86:47:b6: 9a:cf:98:73:09:0f:25:bb:cb:0d:23:83:08:2a:10: 5c:18:aa:a4:60:1c:52:88:e5:72:fa:cb:9b:d5:c4: 10:cf:b1:3c:b1:70:91:4f:c6:d8:a7:66:84:15:71: c1:ce:c9:ea:7e:8f:dc:3e:f0:dc:a3:5c:8f:b0:51: 98:0f:b5:21:cf:76:8a:63:f9:88:98:e2:99:6a:d9: fe:ab:0f:a3:24:d4:fe:f1:a0:8f:58:9d:ae:35:32: 09:98:45:d0:47:e9:91:f2:19:d1:5a:e6:9e:00:21: 55:f7:b8:db:82:27:36:d9:25:b3:aa:0e:0a:77:81: 78:04:43:24:e5:db:12:f9:a6:2b:de:71:5b:6a:3f: d1:1f:33:51:bf:fc:23:b6:d5:c1:02:c7:bc:5a:41: e8:f1:85:9c:c6:75:e3:63:84:80:85:a5:d6:78:92: f7:17:35:79:c1:f2:c9:02:f3:c5:94:00:d8:29:60: 04:f0:66:62:0b:7f:f0:e3:3a:0f:7c:ed:94:38:32: 0b:7a:18:87:a2:62:47:5a:aa:c5:73:51:35:1d:ac: e7:9d:fb:0e:34:18:57:b8:fb:ac:36:1b:b1:b0:60: ea:7e:90:83:d3:4f:83:79:5e:8d:11:aa:57:08:77: 2a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:83:B7:2C:75:A5:5D:C0:D8:AB:F4:38:0A:A6:51:45:79:5F:24:52 X509v3 Authority Key Identifier: keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:eb:93:2b:45:7b:f7:ee:6a:a2:26:08:37:40:c3:30:c5:c0: 18:6e:4b:5a:81:f2:c3:36:77:bf:c2:82:79:b3:2e:e5:a1:fc: 9c:0f:9b:44:af:ff:b4:82:50:28:0b:2c:d3:dd:cc:7a:58:73: 8c:29:23:67:23:73:84:eb:01:c2:f3:43:ac:07:7d:55:38:32: a4:c0:28:10:7f:59:41:c7:e9:cf:8a:a3:ba:10:d7:62:cf:0d: 20:70:16:a0:93:87:e0:08:92:e7:24:ee:b5:cd:99:e4:b6:5b: c0:08:ef:9b:5c:07:fa:91:ba:b8:1b:ce:49:b8:c2:f2:41:5f: e8:96:bf:b5:63:44:71:91:c7:01:86:47:4b:53:f9:97:7f:0a: 60:f9:91:29:6c:a1:15:29:ff:40:16:8f:22:24:af:4c:64:4f: 07:46:b2:4d:96:c2:b4:cd:2c:16:68:f4:c4:fd:60:93:b8:9a: 01:d1:c1:ef:cf:b9:64:ab:00:1b:fe:13:10:9c:a2:27:47:e0: 16:11:8c:20:26:86:78:31:84:ed:67:f9:cf:d9:22:77:54:3b: 64:da:bc:10:5d:1a:40:36:28:be:86:36:00:ea:56:e5:53:65: 25:e5:e3:6a:6f:48:44:53:f1:26:01:17:3d:66:55:ef:2b:b8: bb:03:4b:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURhFtZJBXcrutqhPyD6Arkz1pk2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFC NEE1QUZEMjAeFw0yNjA5MjAyMzQ2MThaFw0yNjA5MjIwMjAyMThaMDMxMTAvBgNV BAMTKDkzODNCNzJDNzVBNTVEQzBEOEFCRjQzODBBQTY1MTQ1Nzk1RjI0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJuKC20/Z/R86YYZHtprPmHMJ DyW7yw0jgwgqEFwYqqRgHFKI5XL6y5vVxBDPsTyxcJFPxtinZoQVccHOyep+j9w+ 8NyjXI+wUZgPtSHPdopj+YiY4plq2f6rD6Mk1P7xoI9Yna41MgmYRdBH6ZHyGdFa 5p4AIVX3uNuCJzbZJbOqDgp3gXgEQyTl2xL5pivecVtqP9EfM1G//CO21cECx7xa QejxhZzGdeNjhICFpdZ4kvcXNXnB8skC88WUANgpYATwZmILf/DjOg987ZQ4Mgt6 GIeiYkdaqsVzUTUdrOed+w40GFe4+6w2G7GwYOp+kIPTT4N5Xo0RqlcIdyq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk4O3LHWlXcDYq/Q4CqZRRXlfJFIwHwYDVR0j BBgwFoAUOJnJLdDUL5PX2oVANP2IurSlr9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkwNGY2NzAtN2RhYy00Y2Y0LTk5MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkRE MEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFCNEE1QUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODk5QzkyREQwRDQyRjkzRDdEQTg1NDAzNEZEODhCQUI0QTVB RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4 QkFCNEE1QUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjrkytFe/fuaqImCDdAwzDFwBhuS1qB8sM2 d7/CgnmzLuWh/JwPm0Sv/7SCUCgLLNPdzHpYc4wpI2cjc4TrAcLzQ6wHfVU4MqTA KBB/WUHH6c+Ko7oQ12LPDSBwFqCTh+AIkuck7rXNmeS2W8AI75tcB/qRurgbzkm4 wvJBX+iWv7VjRHGRxwGGR0tT+Zd/CmD5kSlsoRUp/0AWjyIkr0xkTwdGsk2WwrTN LBZo9MT9YJO4mgHRwe/PuWSrABv+ExCcoidH4BYRjCAmhngxhO1n+c/ZIndUO2Ta vBBdGkA2KL6GNgDqVuVTZSXl42pvSERT8SYBFz1mVe8ruLsDS34= -----END CERTIFICATE-----Generated at Mon Sep 21 20:54:09 2026 by rpki-client