$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft File: 309D66BED7C5AAB839669782F24FE6D817B8209A.mft (raw, json) Hash identifier: 6ouuXVLQzkHsJd/eJZe+XsC9bCNyVtlA2aLKrbt4FHA= Subject key identifier: 63:13:9F:A9:5A:B5:C2:E8:CD:F7:CA:93:D1:55:02:55:20:A1:23:29 Authority key identifier: 30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A Certificate issuer: /CN=309D66BED7C5AAB839669782F24FE6D817B8209A Certificate serial: 446DC4783FCFC8864948DC38368C0C4623E001B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 07:10:26 +0000 Manifest this update: Tue 22 Sep 2026 07:05:26 +0000 Manifest next update: Wed 23 Sep 2026 10:03:26 +0000 Files and hashes: 1: 3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa (hash: +xmmKCCGNPjDepHqzXzJnlfxWWK0PUzYuwz3sX367Vg=) 2: 309D66BED7C5AAB839669782F24FE6D817B8209A.crl (hash: gpPvgIYUgQl1NEzSxGRxAR95mvrrLSBuq/cDPYnENDg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 10:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:6d:c4:78:3f:cf:c8:86:49:48:dc:38:36:8c:0c:46:23:e0:01:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309D66BED7C5AAB839669782F24FE6D817B8209A Validity Not Before: Sep 22 07:05:26 2026 GMT Not After : Sep 23 10:03:26 2026 GMT Subject: CN=63139FA95AB5C2E8CDF7CA93D155025520A12329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:0b:a3:d5:f6:5d:95:b3:45:94:83:b1:6d: 3d:28:f0:d1:ea:d0:9a:2c:9c:18:74:1b:eb:c5:55: 22:ad:27:ad:74:c2:78:6c:3d:c9:89:cc:68:dc:e9: 87:eb:41:6d:6c:90:50:c8:47:eb:87:21:b8:8b:32: 43:69:7e:c2:02:31:ef:b7:0c:81:7a:fa:4a:54:f4: 30:46:48:4e:b1:a7:88:c7:f8:1d:96:be:b9:83:ee: 47:05:a3:1d:f4:31:d3:da:96:49:34:05:eb:8d:77: 31:a9:a4:c4:1b:79:cd:6d:5a:20:31:82:c5:b5:95: 66:79:cb:b2:db:b8:b1:bf:2b:37:d4:cc:db:b2:c1: df:59:0f:64:c5:63:78:7f:4e:08:da:f5:02:bc:6b: 37:8b:d8:be:a6:50:8c:ff:07:38:93:c3:fb:88:01: 33:0b:7a:2d:15:73:e9:45:79:77:65:82:f4:3b:cf: ce:c3:10:e9:ee:4c:f6:4f:4e:d8:29:d9:b5:91:9c: 8c:70:40:0f:26:ea:54:d1:6d:4d:18:c5:71:bf:cd: 9d:87:fe:e2:e0:af:7c:a9:c3:9e:18:83:d7:33:6b: d0:4c:72:3e:0a:3d:35:f6:2e:be:5a:42:53:50:1e: d7:c5:30:ca:e3:bc:2d:e7:32:52:63:cc:4d:6e:90: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:13:9F:A9:5A:B5:C2:E8:CD:F7:CA:93:D1:55:02:55:20:A1:23:29 X509v3 Authority Key Identifier: keyid:30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:67:05:aa:f9:4a:de:cc:e2:c3:1e:04:69:2b:2c:f1:e2:23: 4f:92:9f:49:5e:7b:82:22:a8:7c:c0:99:4f:dd:65:22:7c:b8: cf:a3:5b:8d:fa:25:33:5f:9c:1f:1f:4a:6a:17:49:44:cd:1f: 42:29:a4:62:8f:d2:6c:cb:a2:6a:06:c5:5e:08:2c:b6:73:ed: ca:ac:bc:30:2e:78:c0:18:e5:e2:be:80:27:b5:3e:04:f2:e7: ca:34:cf:eb:77:b7:06:86:33:e9:8f:3b:b9:46:10:e5:57:8d: af:0c:d7:b9:96:46:34:05:5c:68:49:14:f9:fb:5d:92:57:59: ee:33:a1:43:33:73:dc:73:57:e1:0f:f4:13:32:69:0b:8e:38: dc:89:c4:37:59:90:32:55:44:6e:ed:8c:17:83:c1:f3:79:d1: 3c:f6:04:d0:fa:35:9a:59:e9:b3:ff:57:ef:1c:58:a2:d8:20: dc:98:0a:54:0d:a1:b7:bc:ef:ad:9c:1f:32:ab:c7:9a:1a:9c: 7f:17:c3:73:62:a3:13:89:78:61:c0:ed:e3:5c:a3:96:1f:70: bc:05:36:7d:84:9d:6e:5c:7c:12:49:fb:00:6c:b7:a2:3d:a7: fc:02:75:da:b9:77:5b:50:68:a4:d0:b3:21:16:75:79:22:8a: bc:8c:61:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURG3EeD/PyIZJSNw4NowMRiPgAbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2RDgx N0I4MjA5QTAeFw0yNjA5MjIwNzA1MjZaFw0yNjA5MjMxMDAzMjZaMDMxMTAvBgNV BAMTKDYzMTM5RkE5NUFCNUMyRThDREY3Q0E5M0QxNTUwMjU1MjBBMTIzMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUQuj1fZdlbNFlIOxbT0o8NHq 0JosnBh0G+vFVSKtJ610wnhsPcmJzGjc6YfrQW1skFDIR+uHIbiLMkNpfsICMe+3 DIF6+kpU9DBGSE6xp4jH+B2WvrmD7kcFox30MdPalkk0BeuNdzGppMQbec1tWiAx gsW1lWZ5y7LbuLG/KzfUzNuywd9ZD2TFY3h/Tgja9QK8azeL2L6mUIz/BziTw/uI ATMLei0Vc+lFeXdlgvQ7z87DEOnuTPZPTtgp2bWRnIxwQA8m6lTRbU0YxXG/zZ2H /uLgr3ypw54Yg9cza9BMcj4KPTX2Lr5aQlNQHtfFMMrjvC3nMlJjzE1ukKQfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYxOfqVq1wujN98qT0VUCVSChIykwHwYDVR0j BBgwFoAUMJ1mvtfFqrg5ZpeC8k/m2Be4IJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwZmNjYjItY2UxYy00ODYyLThlZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVE N0M1QUFCODM5NjY5NzgyRjI0RkU2RDgxN0I4MjA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMDlENjZCRUQ3QzVBQUI4Mzk2Njk3ODJGMjRGRTZEODE3Qjgy MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwZmNjYjItY2UxYy00ODYyLThl ZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2 RDgxN0I4MjA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5nBar5St7M4sMeBGkrLPHiI0+Sn0lee4Ii qHzAmU/dZSJ8uM+jW436JTNfnB8fSmoXSUTNH0IppGKP0mzLomoGxV4ILLZz7cqs vDAueMAY5eK+gCe1PgTy58o0z+t3twaGM+mPO7lGEOVXja8M17mWRjQFXGhJFPn7 XZJXWe4zoUMzc9xzV+EP9BMyaQuOONyJxDdZkDJVRG7tjBeDwfN50Tz2BND6NZpZ 6bP/V+8cWKLYINyYClQNobe8762cHzKrx5oanH8Xw3NioxOJeGHA7eNco5YfcLwF Nn2EnW5cfBJJ+wBst6I9p/wCddq5d1tQaKTQsyEWdXkiiryMYY4= -----END CERTIFICATE-----Generated at Wed Sep 23 01:35:20 2026 by rpki-client