$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft File: 399FBE55CFD957C1E3849C75FE378403E394BB45.mft (raw, json) Hash identifier: AULWC0kHAVjSb3sKWJXjQDlwVTFej/8RkEWVLiUjepM= Subject key identifier: D1:FC:4C:0A:DF:45:04:76:EC:97:BF:8E:FF:76:39:79:29:9D:70:38 Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Certificate serial: 3DDD9095A9179899F031B10DA5303F9B606424F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft Manifest number: BF Signing time: Wed 23 Sep 2026 02:03:44 +0000 Manifest this update: Wed 23 Sep 2026 01:58:44 +0000 Manifest next update: Thu 24 Sep 2026 05:27:44 +0000 Files and hashes: 1: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: zSazRb0IpJJ4cBgKA2+8jgm7s2YnWXUiU+1QnaQiN1g=) 2: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: NrcqksrmsSbHeL16ugEy8PBgZElc8n2NevcNzHFW6Sc=) 3: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: qood+9S8zNU9X/jpjUZIu26OXyUnDxyv/AsytcFufXA=) 4: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: gmPxQm5NcqK3BCfFQb7w+dLmFYWZ/DthSfb9I0IYOOQ=) 5: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: /vRQ0F5lBxm5YccSzuUARECi1VFqg7FRoH3qOHTCFHs=) 6: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: rqJDuuQFB9Ir08Xt+9/dUd2pRxC5DTIO9a28+O4McDo=) 7: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: Nda6FqqHwv307lkTxH+b0mWevIjFxVsW+c3rWmYY64U=) 8: 399FBE55CFD957C1E3849C75FE378403E394BB45.crl (hash: TvayuXHHfeVD3LKYm5HIO8bthf0xDbFfsdbf1z22qNg=) 9: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: uojxwHiaMR8PO5h26JWS2B444u+QQh72ookAa5uFqSs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:dd:90:95:a9:17:98:99:f0:31:b1:0d:a5:30:3f:9b:60:64:24:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Validity Not Before: Sep 23 01:58:44 2026 GMT Not After : Sep 24 05:27:44 2026 GMT Subject: CN=D1FC4C0ADF450476EC97BF8EFF763979299D7038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:88:7b:5a:14:5d:17:83:22:ca:40:b3:3c: 49:16:e1:11:b5:e8:03:17:47:d4:2b:df:ae:fc:04: e7:09:e7:2f:fc:76:1f:1a:b5:63:bb:26:9c:02:3c: fb:4b:3c:be:21:f7:ab:21:9b:50:cf:63:8e:7b:39: 88:3e:b5:6b:af:5a:86:68:3d:25:b2:e6:11:78:e2: c7:cd:4e:f6:3b:2b:5a:c3:29:78:fb:9d:f9:df:59: 26:74:27:dd:8a:ea:be:98:9a:70:53:28:fe:29:ba: 43:38:8a:01:e8:40:c2:fd:0a:ed:31:3f:9e:ac:57: b7:dd:84:ff:8a:35:be:db:45:ff:92:9c:32:53:da: 91:64:e5:58:2d:22:30:cf:05:52:32:47:78:60:58: 26:20:9c:c7:0e:f2:60:8e:9c:ed:b4:6a:64:c4:63: 93:27:c2:96:00:9f:71:81:b1:b9:7e:b4:a0:c4:c1: e1:c0:99:35:b6:0b:5d:9e:99:44:95:dc:e9:76:ed: 94:26:f5:7e:58:76:cd:bb:f8:33:de:3d:26:20:7e: 0b:7e:1b:4a:bf:70:9b:47:87:3e:41:68:d1:45:fa: 7b:69:60:bc:2a:92:6c:d2:4f:a9:15:2c:39:0b:25: 65:38:3a:56:9f:b3:a4:73:db:6e:52:54:d2:6b:38: c1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FC:4C:0A:DF:45:04:76:EC:97:BF:8E:FF:76:39:79:29:9D:70:38 X509v3 Authority Key Identifier: keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fe:6c:4d:94:91:e5:1c:cb:cd:96:2b:cf:96:95:63:64:75: 6f:60:8c:f0:44:49:33:62:9d:d9:b0:d8:0f:6a:ba:1c:e6:0a: 89:a3:d2:14:92:75:21:76:b3:92:c7:36:63:c0:4c:46:fc:a4: 79:7d:8d:9e:c2:c7:59:d4:95:ee:2a:a8:67:13:27:aa:72:49: 2f:ea:5e:6d:7a:33:91:e7:67:b8:56:30:92:d6:80:c1:c3:09: 9c:e7:00:f2:78:c4:15:e9:81:b9:a9:e3:08:0d:51:a5:6c:79: 81:4c:d7:c0:ed:92:1b:56:7e:db:40:7d:4f:7e:3b:ed:0a:f7: 77:ba:25:c0:3a:80:b5:a7:1d:70:f8:92:74:b7:f9:3d:44:cf: ab:99:0d:0a:bc:d1:2e:1f:96:7b:15:03:2b:27:65:ed:9d:0b: 1d:44:e7:3a:7c:50:3e:2a:7c:20:6c:62:62:bc:bc:8d:41:c6: bc:a1:e4:61:d6:b6:f8:06:00:03:fe:20:db:e8:e4:eb:ba:dd: 8a:80:1c:41:70:ad:ff:c5:70:42:05:c1:12:2b:6f:4f:c7:28: 71:2c:d0:ff:a8:68:15:3a:d4:0e:81:1d:38:4e:44:35:95:ec: bb:e6:47:64:1b:f9:5a:cf:7e:e0:7b:11:0d:f2:98:35:ac:91: d4:07:d4:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPd2QlakXmJnwMbENpTA/m2BkJPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNF Mzk0QkI0NTAeFw0yNjA5MjMwMTU4NDRaFw0yNjA5MjQwNTI3NDRaMDMxMTAvBgNV BAMTKEQxRkM0QzBBREY0NTA0NzZFQzk3QkY4RUZGNzYzOTc5Mjk5RDcwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tIh7WhRdF4MiykCzPEkW4RG1 6AMXR9Qr3678BOcJ5y/8dh8atWO7JpwCPPtLPL4h96shm1DPY457OYg+tWuvWoZo PSWy5hF44sfNTvY7K1rDKXj7nfnfWSZ0J92K6r6YmnBTKP4pukM4igHoQML9Cu0x P56sV7fdhP+KNb7bRf+SnDJT2pFk5VgtIjDPBVIyR3hgWCYgnMcO8mCOnO20amTE Y5MnwpYAn3GBsbl+tKDEweHAmTW2C12emUSV3Ol27ZQm9X5Yds27+DPePSYgfgt+ G0q/cJtHhz5BaNFF+ntpYLwqkmzST6kVLDkLJWU4Olafs6Rz225SVNJrOME7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0fxMCt9FBHbsl7+O/3Y5eSmdcDgwHwYDVR0j BBgwFoAUOZ++Vc/ZV8HjhJx1/jeEA+OUu0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwZGZiNWEtODQ1ZS00ZGRmLWFjYTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVD RkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNFMzk0QkI0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOTlGQkU1NUNGRDk1N0MxRTM4NDlDNzVGRTM3ODQwM0UzOTRC QjQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwZGZiNWEtODQ1ZS00ZGRmLWFj YTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0 MDNFMzk0QkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJb+bE2UkeUcy82WK8+WlWNkdW9gjPBESTNi ndmw2A9quhzmComj0hSSdSF2s5LHNmPATEb8pHl9jZ7Cx1nUle4qqGcTJ6pySS/q Xm16M5HnZ7hWMJLWgMHDCZznAPJ4xBXpgbmp4wgNUaVseYFM18DtkhtWfttAfU9+ O+0K93e6JcA6gLWnHXD4knS3+T1Ez6uZDQq80S4flnsVAysnZe2dCx1E5zp8UD4q fCBsYmK8vI1Bxryh5GHWtvgGAAP+INvo5Ou63YqAHEFwrf/FcEIFwRIrb0/HKHEs 0P+oaBU61A6BHThORDWV7LvmR2Qb+VrPfuB7EQ3ymDWskdQH1H4= -----END CERTIFICATE-----Generated at Wed Sep 23 10:19:47 2026 by rpki-client