$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft File: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft (raw, json) Hash identifier: xsMIjgAK2HV5WrTUw7DqLAYe6AQHsNA9RB1yKsq/6ak= Subject key identifier: 28:D2:38:54:63:1E:71:35:E4:45:48:EF:E7:E9:74:F8:CE:57:9C:2A Authority key identifier: 8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C Certificate issuer: /CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Certificate serial: 48F3488437BF6849F800AAA40EE463A265FDCB3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft Manifest number: BD Signing time: Sun 20 Sep 2026 09:23:50 +0000 Manifest this update: Sun 20 Sep 2026 09:18:50 +0000 Manifest next update: Mon 21 Sep 2026 12:40:50 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: wesRzy414+ZceFD9/gwocQJzbKqVZ+NX+KTjHeWFakA=) 2: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl (hash: urOkVeEDnsUlMselmYpyw+lwE3QpFJ0pjPn37xxT4jg=) 3: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: HIdPJqjIrOEvu8Fg+POUaS/pAuaPSBpatCRmSscMNd8=) 4: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: Bi2PlajLpuJF5Q77N7WIyjkq2NapiUAEv+5ltKF4LBc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f3:48:84:37:bf:68:49:f8:00:aa:a4:0e:e4:63:a2:65:fd:cb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Validity Not Before: Sep 20 09:18:50 2026 GMT Not After : Sep 21 12:40:50 2026 GMT Subject: CN=28D23854631E7135E44548EFE7E974F8CE579C2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:91:71:8f:be:87:3f:d4:aa:9e:cd:65:55: d8:6a:9e:5c:2c:ad:f3:69:17:d9:75:11:74:29:4b: 55:47:a9:dc:be:64:57:64:ec:ea:49:3e:39:e8:f5: e1:eb:0f:5b:e4:75:2c:b9:cc:76:9f:1e:04:7b:67: 63:ba:69:ea:fb:c4:79:2a:42:f1:a6:e1:0e:b6:c0: c7:b4:a8:ce:6f:0e:55:ff:c6:63:00:5a:85:d0:d3: e8:23:8e:b8:74:dc:eb:80:06:1d:76:7c:9f:91:89: 03:bb:04:4e:35:51:34:2e:b4:73:ba:eb:61:14:2e: b9:d4:84:22:52:ef:62:d5:ea:1a:5a:94:72:fe:5d: 64:73:f6:c9:a9:7d:c6:1f:b5:f0:5e:b2:01:28:4a: 1e:1b:b5:3d:d5:f0:ad:90:c9:f3:ce:8a:6a:c4:a5: 86:e4:cb:31:b8:d3:fe:5a:f3:49:1b:06:a2:8f:62: ff:f6:3d:05:32:8b:82:8c:f8:d1:01:92:d1:32:98: ef:28:d7:6f:bd:71:c4:d9:5b:4d:97:af:12:77:81: 2f:b1:21:49:96:35:d9:1c:a5:87:b1:83:e3:c2:d2: 55:9b:a0:f6:8f:7f:90:0a:98:4e:ab:82:30:f4:77: b6:1b:e3:40:f7:bb:8a:42:49:af:da:23:b3:15:80: 5d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D2:38:54:63:1E:71:35:E4:45:48:EF:E7:E9:74:F8:CE:57:9C:2A X509v3 Authority Key Identifier: keyid:8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b4:73:1d:61:39:67:ca:3a:d5:61:f2:81:9f:fc:f8:b8:08: 2d:ab:25:64:7f:aa:9f:71:8f:74:d3:28:7e:ac:42:0f:02:53: d4:80:da:b9:47:98:93:09:26:32:9e:c6:4f:80:70:4b:92:33: 24:cd:9d:b3:87:e8:32:ba:a5:06:f2:08:12:03:27:8b:ff:f7: 27:40:6f:28:6d:23:5f:a3:cb:84:b4:23:3f:2a:38:8b:d4:6a: e7:d0:97:39:aa:03:45:cb:3b:e2:00:7a:9f:32:4e:dd:ca:9c: d3:b9:64:08:a4:df:47:a8:e6:1e:fd:66:e8:aa:55:24:72:5d: 28:03:f6:c8:93:09:94:6a:3a:ff:c3:d3:45:91:de:e2:01:b8: b9:1e:bf:e0:5b:09:de:5b:57:b1:6a:a8:7f:a2:0b:83:71:b5: bf:90:34:f5:98:ec:7d:90:c2:28:74:ea:09:29:43:c3:ee:7b: 68:f6:7c:13:88:0f:59:fa:41:fa:77:99:70:2d:06:75:e7:bd: fa:39:14:16:a5:46:f5:cc:e2:d1:39:9a:c1:b8:4b:c8:db:eb: d9:50:ae:6c:e9:eb:02:7b:0e:56:80:cf:45:08:3f:1c:7b:77: 20:87:42:ed:43:bf:1c:f8:af:f2:ce:f4:ad:e6:b2:12:e5:ee: 86:3b:4a:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPNIhDe/aEn4AKqkDuRjomX9yz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0 RUYxRTYyQzAeFw0yNjA5MjAwOTE4NTBaFw0yNjA5MjExMjQwNTBaMDMxMTAvBgNV BAMTKDI4RDIzODU0NjMxRTcxMzVFNDQ1NDhFRkU3RTk3NEY4Q0U1NzlDMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vZFxj76HP9Sqns1lVdhqnlws rfNpF9l1EXQpS1VHqdy+ZFdk7OpJPjno9eHrD1vkdSy5zHafHgR7Z2O6aer7xHkq QvGm4Q62wMe0qM5vDlX/xmMAWoXQ0+gjjrh03OuABh12fJ+RiQO7BE41UTQutHO6 62EULrnUhCJS72LV6hpalHL+XWRz9smpfcYftfBesgEoSh4btT3V8K2QyfPOimrE pYbkyzG40/5a80kbBqKPYv/2PQUyi4KM+NEBktEymO8o12+9ccTZW02XrxJ3gS+x IUmWNdkcpYexg+PC0lWboPaPf5AKmE6rgjD0d7Yb40D3u4pCSa/aI7MVgF0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKNI4VGMecTXkRUjv5+l0+M5XnCowHwYDVR0j BBgwFoAUjTnSB6SeKlwdn9insn00SE7x5iwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFiNGUxNGQtMDIxZC00MGRjLTkyM2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdB NDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0RUYxRTYyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84RDM5RDIwN0E0OUUyQTVDMUQ5RkQ4QTdCMjdEMzQ0ODRFRjFF NjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0 NDg0RUYxRTYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACq0cx1hOWfKOtVh8oGf/Pi4CC2rJWR/qp9x j3TTKH6sQg8CU9SA2rlHmJMJJjKexk+AcEuSMyTNnbOH6DK6pQbyCBIDJ4v/9ydA byhtI1+jy4S0Iz8qOIvUaufQlzmqA0XLO+IAep8yTt3KnNO5ZAik30eo5h79Zuiq VSRyXSgD9siTCZRqOv/D00WR3uIBuLkev+BbCd5bV7FqqH+iC4Nxtb+QNPWY7H2Q wih06gkpQ8Pue2j2fBOID1n6Qfp3mXAtBnXnvfo5FBalRvXM4tE5msG4S8jb69lQ rmzp6wJ7DlaAz0UIPxx7dyCHQu1Dvxz4r/LO9K3mshLl7oY7SiY= -----END CERTIFICATE-----Generated at Mon Sep 21 05:38:48 2026 by rpki-client