$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft File: B9281144646657214FE1ADE5A3228E100E340E53.mft (raw, json) Hash identifier: 0ZSYxIq4Rl4FB/1f/tVGfDeqpufojpnpaDqdYeasVaM= Subject key identifier: F9:12:F2:82:0D:00:C1:FE:88:69:B9:79:A4:74:71:66:00:91:12:BA Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53 Certificate serial: 399F3EAFDBF26CC8EC072F7B995A85A6B293D81D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 09:42:40 +0000 Manifest this update: Thu 24 Sep 2026 09:37:40 +0000 Manifest next update: Fri 25 Sep 2026 12:24:40 +0000 Files and hashes: 1: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: Tgez0mY6SPOTnuCIKB3HlrvFNAAadTv4QI32lWtN/DI=) 2: B9281144646657214FE1ADE5A3228E100E340E53.crl (hash: VJz0IyITnCaE3pVYA6IlyXWn7jUUN5Oo2yfXAzGPLl8=) 3: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: GkX4NBYIJf8jri1lDVBbCRWCXCtYyohsWxcf1tLEKh4=) 4: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: Ve4ocQOUOq8AQ9gpm5lYh6lO9aEe09tZrNXe/azearo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9f:3e:af:db:f2:6c:c8:ec:07:2f:7b:99:5a:85:a6:b2:93:d8:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53 Validity Not Before: Sep 24 09:37:40 2026 GMT Not After : Sep 25 12:24:40 2026 GMT Subject: CN=F912F2820D00C1FE8869B979A4747166009112BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b2:9a:5a:20:b6:88:80:7c:35:f0:71:57:ec: ba:81:29:e1:a8:45:09:ff:87:fa:6e:cc:78:3f:b9: 3b:27:62:5b:8a:9a:ea:fa:31:0d:8b:8e:0b:38:27: f9:f1:ce:39:62:49:39:9b:6b:09:e1:ff:36:4a:28: 9d:f5:31:47:4c:84:cd:42:9b:95:4c:e7:92:b4:fa: d1:f1:72:a6:bc:16:a0:88:e7:e2:fa:3a:3e:7c:e6: 72:6b:f4:07:4b:0a:cd:4b:e8:d8:1f:ac:7e:32:0b: e1:d9:d8:7d:cf:53:14:27:1f:17:49:5b:a0:ec:26: 48:b5:ce:7a:08:c8:ac:ce:05:0c:f6:94:86:db:52: 25:54:5a:f6:d3:a0:86:4e:a7:6b:8c:78:25:8a:fd: 72:41:9b:ea:88:64:54:cf:1c:be:e9:4b:8a:b5:d4: a0:dc:7c:1b:05:e9:b7:92:21:f1:c3:02:4b:90:39: b0:62:b0:2b:b9:bc:14:24:16:05:0e:a1:22:3e:43: d9:4a:33:40:8e:9f:50:01:ac:6a:79:61:30:74:ed: 3f:0b:bb:93:c6:f1:c0:9d:c4:70:a2:f4:eb:8b:9c: 13:95:d6:1d:ea:ad:b0:d6:45:b3:d3:ec:6b:84:39: 50:95:4e:81:96:d2:29:15:e3:5b:b3:0e:60:5c:4e: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:12:F2:82:0D:00:C1:FE:88:69:B9:79:A4:74:71:66:00:91:12:BA X509v3 Authority Key Identifier: keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:76:59:1a:d1:39:9a:2b:a6:9f:3f:cd:71:38:6a:79:52:cd: fc:37:bb:be:61:9e:3c:56:3c:bd:23:c2:6d:16:f2:1f:a8:c0: b3:0a:e4:2a:4d:da:60:5f:33:6b:a4:61:42:07:3d:0c:76:76: 40:e1:f2:29:b5:1a:5b:44:bd:e8:ae:47:de:e6:48:21:aa:43: 1a:51:c5:0a:49:9c:b8:e9:fe:19:16:55:c0:78:4e:84:b0:e8: 9e:17:33:66:71:2b:8c:5e:a4:cb:a8:56:f0:a5:ec:61:16:51: bd:a6:dc:13:00:6c:10:dc:3e:48:96:87:41:2f:ee:10:61:da: fb:44:13:8d:32:a6:73:61:57:bf:c6:1f:a4:e8:d5:b9:47:13: c8:d6:56:56:17:e1:31:44:c7:65:d8:bd:f2:15:5d:30:0c:f5: 18:07:07:ec:ad:a7:b1:5c:e8:bc:e8:64:ff:c4:20:de:91:5d: 24:af:4d:78:c9:2f:f2:3b:17:cb:80:80:fe:a2:9c:f2:05:bd: 96:ee:31:72:dd:40:b6:87:69:e3:05:e7:4b:bb:28:1b:80:a4: 90:b7:ac:ec:c5:62:a3:7f:ed:3a:ab:49:b8:9c:35:8f:a7:b9: 32:64:b0:17:9f:b0:e7:f5:38:a1:56:42:d3:d7:15:ff:cf:20: be:a4:0c:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZ8+r9vybMjsBy97mVqFprKT2B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAw RTM0MEU1MzAeFw0yNjA5MjQwOTM3NDBaFw0yNjA5MjUxMjI0NDBaMDMxMTAvBgNV BAMTKEY5MTJGMjgyMEQwMEMxRkU4ODY5Qjk3OUE0NzQ3MTY2MDA5MTEyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbsppaILaIgHw18HFX7LqBKeGo RQn/h/puzHg/uTsnYluKmur6MQ2Ljgs4J/nxzjliSTmbawnh/zZKKJ31MUdMhM1C m5VM55K0+tHxcqa8FqCI5+L6Oj585nJr9AdLCs1L6NgfrH4yC+HZ2H3PUxQnHxdJ W6DsJki1znoIyKzOBQz2lIbbUiVUWvbToIZOp2uMeCWK/XJBm+qIZFTPHL7pS4q1 1KDcfBsF6beSIfHDAkuQObBisCu5vBQkFgUOoSI+Q9lKM0COn1ABrGp5YTB07T8L u5PG8cCdxHCi9OuLnBOV1h3qrbDWRbPT7GuEOVCVToGW0ikV41uzDmBcTtM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+RLygg0Awf6Iabl5pHRxZgCRErowHwYDVR0j BBgwFoAUuSgRRGRmVyFP4a3loyKOEA40DlMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E4YTlhODEtMGE1Mi00YTUwLWI3ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2 NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAwRTM0MEU1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9COTI4MTE0NDY0NjY1NzIxNEZFMUFERTVBMzIyOEUxMDBFMzQw RTUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhF MTAwRTM0MEU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd2WRrROZorpp8/zXE4anlSzfw3u75hnjxW PL0jwm0W8h+owLMK5CpN2mBfM2ukYUIHPQx2dkDh8im1GltEveiuR97mSCGqQxpR xQpJnLjp/hkWVcB4ToSw6J4XM2ZxK4xepMuoVvCl7GEWUb2m3BMAbBDcPkiWh0Ev 7hBh2vtEE40ypnNhV7/GH6To1blHE8jWVlYX4TFEx2XYvfIVXTAM9RgHB+ytp7Fc 6LzoZP/EIN6RXSSvTXjJL/I7F8uAgP6inPIFvZbuMXLdQLaHaeMF50u7KBuApJC3 rOzFYqN/7TqrSbicNY+nuTJksBefsOf1OKFWQtPXFf/PIL6kDDc= -----END CERTIFICATE-----Generated at Fri Sep 25 02:37:30 2026 by rpki-client