$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft File: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft (raw, json) Hash identifier: iatL1yPg2uaejesni/LOO0KPKWTJZs2rJ0asXAAznTg= Subject key identifier: 6E:26:CE:C9:DA:71:98:EE:26:4B:CF:D0:64:38:2F:07:C1:76:A9:67 Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 Certificate issuer: /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Certificate serial: 1D86BC36E512B6DE5157EAECB7E5FC9A00787133 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft Manifest number: C2 Signing time: Mon 21 Sep 2026 18:03:52 +0000 Manifest this update: Mon 21 Sep 2026 17:58:52 +0000 Manifest next update: Tue 22 Sep 2026 20:30:52 +0000 Files and hashes: 1: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: X+ZlO7h/pL9t4N4Gq7NgEd0rssKL3EkGKfZrYxmlYG4=) 2: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: 35sB3F+pYRWs2vzmYiPiuHmOw2zefVJi3xxGSLrd8Oc=) 3: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: lzLPq+5ACK3Fp2G9Qq15Ai5VNsw2ESnTuC604MZBsC4=) 4: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl (hash: kGNCnKRVlhVqLSG0SnWov1bzRmXrO5OHOCKQpJ0YwrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:86:bc:36:e5:12:b6:de:51:57:ea:ec:b7:e5:fc:9a:00:78:71:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Validity Not Before: Sep 21 17:58:52 2026 GMT Not After : Sep 22 20:30:52 2026 GMT Subject: CN=6E26CEC9DA7198EE264BCFD064382F07C176A967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:50:5f:1e:6f:25:92:d0:2b:45:b0:6c:75: 2d:f9:9d:6a:a6:8e:a8:15:f0:df:5a:02:30:6c:10: 97:6b:52:fc:9c:df:6d:77:a9:94:17:33:3e:1f:5d: e5:1d:36:19:5a:9c:3e:72:5d:d8:5a:83:07:f4:24: f6:56:87:de:e6:10:02:74:69:28:78:1b:b4:3d:4f: a7:52:14:05:c6:bd:47:19:50:43:18:ee:21:0f:be: be:7f:8c:d5:48:65:ca:fe:33:50:e7:bc:52:fa:1a: 47:5a:20:c7:6c:54:fd:21:e6:a2:5d:8d:02:be:8e: c8:ca:93:d3:8a:72:9d:2c:e5:17:47:4f:02:c0:9a: 46:aa:f1:c9:ca:b0:6a:79:be:1c:4a:22:91:9a:55: eb:b3:d6:9c:09:90:13:0a:c2:4a:cd:4b:3d:74:b0: 1e:e5:9b:a2:e8:fb:75:4b:e2:ff:7b:26:f5:09:c9: bc:c3:a7:9e:a1:d3:63:07:a1:2e:d5:7b:b0:e9:be: cd:65:cc:19:35:d2:e4:39:32:cc:03:f3:2a:f7:69: 36:1f:19:2b:d4:bb:91:b7:51:23:fa:68:51:c5:84: 10:06:cb:4d:e6:80:81:48:80:84:40:61:cf:03:27: ae:6c:6a:66:be:08:9e:ba:7d:8e:b3:ce:22:45:ea: ad:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:26:CE:C9:DA:71:98:EE:26:4B:CF:D0:64:38:2F:07:C1:76:A9:67 X509v3 Authority Key Identifier: keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f6:14:58:1c:b3:5e:11:5d:b4:74:36:f4:09:d3:e1:33:60: e4:5e:2d:ab:b9:69:e7:dd:71:a8:94:08:aa:54:56:04:88:6b: 32:7d:a1:ee:b6:f6:0e:4b:f4:c9:8c:48:c1:3b:56:a7:db:10: a4:71:b1:75:35:8f:95:b7:9b:21:6f:d5:1d:b5:40:9b:7a:15: 84:8b:c8:0c:0d:5e:ac:08:8c:e6:38:2d:c8:7e:4f:bd:4f:cc: 5c:18:3c:7a:61:40:58:f4:44:a2:56:89:76:6d:c0:cd:0f:18: b1:8c:41:3b:7c:84:3d:cc:7f:c9:75:a3:43:f6:99:0a:c2:0c: 23:e2:0a:f0:9b:c2:43:96:05:2e:76:2e:a0:4f:61:b5:0a:c8: c3:ea:3b:ec:c7:1f:7d:7d:c6:b8:18:8c:eb:fa:e5:fb:dc:b0: aa:33:d0:70:e6:55:c2:a3:c6:d8:f6:81:cd:21:ae:a2:62:5e: 78:9c:bd:9d:40:5d:a0:b9:02:d5:bb:32:83:31:2a:a2:ff:61: c3:49:8a:27:9b:0a:58:a0:d7:27:7e:e7:aa:8b:31:ee:8f:cc: 75:12:bb:2d:0c:64:b6:fd:53:65:1c:0a:58:aa:6c:78:65:3a: 8a:7f:c1:81:54:6e:3a:42:12:7e:fc:78:f3:2d:10:6e:41:97: a6:2a:25:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHYa8NuUStt5RV+rst+X8mgB4cTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFC NEE1QUZEMjAeFw0yNjA5MjExNzU4NTJaFw0yNjA5MjIyMDMwNTJaMDMxMTAvBgNV BAMTKDZFMjZDRUM5REE3MTk4RUUyNjRCQ0ZEMDY0MzgyRjA3QzE3NkE5NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzY1BfHm8lktArRbBsdS35nWqm jqgV8N9aAjBsEJdrUvyc3213qZQXMz4fXeUdNhlanD5yXdhagwf0JPZWh97mEAJ0 aSh4G7Q9T6dSFAXGvUcZUEMY7iEPvr5/jNVIZcr+M1DnvFL6GkdaIMdsVP0h5qJd jQK+jsjKk9OKcp0s5RdHTwLAmkaq8cnKsGp5vhxKIpGaVeuz1pwJkBMKwkrNSz10 sB7lm6Lo+3VL4v97JvUJybzDp56h02MHoS7Ve7Dpvs1lzBk10uQ5MswD8yr3aTYf GSvUu5G3USP6aFHFhBAGy03mgIFIgIRAYc8DJ65sama+CJ66fY6zziJF6q0fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbibOydpxmO4mS8/QZDgvB8F2qWcwHwYDVR0j BBgwFoAUOJnJLdDUL5PX2oVANP2IurSlr9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkwNGY2NzAtN2RhYy00Y2Y0LTk5MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkRE MEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFCNEE1QUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODk5QzkyREQwRDQyRjkzRDdEQTg1NDAzNEZEODhCQUI0QTVB RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4 QkFCNEE1QUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEn2FFgcs14RXbR0NvQJ0+EzYOReLau5aefd caiUCKpUVgSIazJ9oe629g5L9MmMSME7VqfbEKRxsXU1j5W3myFv1R21QJt6FYSL yAwNXqwIjOY4Lch+T71PzFwYPHphQFj0RKJWiXZtwM0PGLGMQTt8hD3Mf8l1o0P2 mQrCDCPiCvCbwkOWBS52LqBPYbUKyMPqO+zHH319xrgYjOv65fvcsKoz0HDmVcKj xtj2gc0hrqJiXnicvZ1AXaC5AtW7MoMxKqL/YcNJiiebClig1yd+56qLMe6PzHUS uy0MZLb9U2UcCliqbHhlOop/wYFUbjpCEn78ePMtEG5Bl6YqJUc= -----END CERTIFICATE-----Generated at Tue Sep 22 02:47:40 2026 by rpki-client