$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft File: D713503939D2573A44FA29703CDDCC704F03A75E.mft (raw, json) Hash identifier: lYEnJ/3uPUEAKxVY7+NrtEu4Uph9YRaUKYDGpIBJZjA= Subject key identifier: 5A:22:2C:79:72:DC:95:CE:C0:5A:D3:83:24:E2:B5:08:0A:6B:80:F2 Authority key identifier: D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E Certificate issuer: /CN=D713503939D2573A44FA29703CDDCC704F03A75E Certificate serial: 6D76EE6C7A260F2334B1F77B532E69404BB2D298 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 07:30:00 +0000 Manifest this update: Thu 24 Sep 2026 07:25:00 +0000 Manifest next update: Fri 25 Sep 2026 07:35:00 +0000 Files and hashes: 1: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: cciT2cLODhuCXSq6f7ZeF3BxK19X9kDtH1Tm4E9hM34=) 2: D713503939D2573A44FA29703CDDCC704F03A75E.crl (hash: O2lCjCkr2jEnEHXQbDu2OWoidLvhwRsY97qje3sfoWM=) 3: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: GTWGWiGFFFL7qU1osUGFkofRdRSFUHbSkHuzGVb3rSI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:76:ee:6c:7a:26:0f:23:34:b1:f7:7b:53:2e:69:40:4b:b2:d2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D713503939D2573A44FA29703CDDCC704F03A75E Validity Not Before: Sep 24 07:25:00 2026 GMT Not After : Sep 25 07:35:00 2026 GMT Subject: CN=5A222C7972DC95CEC05AD38324E2B5080A6B80F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:23:37:f8:d8:8a:64:09:9f:69:df:91:e9:43: a0:81:27:b5:c1:5e:5a:5c:dc:95:33:cd:76:8d:5b: da:0e:41:77:2b:03:f2:65:2a:94:34:12:12:2d:69: 87:75:dc:85:4f:47:fb:ac:ec:d9:86:6b:af:94:63: ce:98:99:c6:41:d6:ee:48:06:b2:b0:de:2f:61:3d: 9f:5b:2d:27:f6:50:3f:9e:78:4f:82:0a:8f:08:5a: 35:1d:ed:e3:5a:9b:4e:da:52:63:f0:5d:de:78:92: 2e:89:c6:7e:3b:ea:a2:94:08:12:98:05:3a:6f:5f: d4:e5:23:ea:36:5f:89:1b:67:db:f3:7b:91:f5:91: b1:dc:60:8c:a4:53:2b:f2:e3:58:b3:ef:42:6a:3b: ce:d6:c4:2a:ac:57:7e:45:57:47:68:6f:a5:92:33: 9e:0e:f8:a7:d8:df:a9:4c:13:bf:62:41:d9:3a:a7: ee:ec:76:ad:c5:c7:9f:64:6d:4b:82:22:77:25:9d: 0d:91:5d:97:a8:14:f6:4e:3a:e3:40:8a:c0:6e:1d: f3:2b:fb:56:e7:12:43:e9:1a:43:99:c6:09:ac:23: 35:2a:70:39:0b:4d:40:78:c3:1c:60:78:94:df:40: 44:b0:80:de:60:5c:9a:49:a7:10:48:32:bf:ac:d3: 99:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:22:2C:79:72:DC:95:CE:C0:5A:D3:83:24:E2:B5:08:0A:6B:80:F2 X509v3 Authority Key Identifier: keyid:D7:13:50:39:39:D2:57:3A:44:FA:29:70:3C:DD:CC:70:4F:03:A7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D713503939D2573A44FA29703CDDCC704F03A75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/D713503939D2573A44FA29703CDDCC704F03A75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:60:5e:e3:c7:6d:67:fa:f3:8e:e2:1e:92:30:33:07:be:3f: f2:f0:9e:04:41:12:09:b2:21:c9:a0:60:80:32:98:78:1f:ac: 22:6d:81:79:cf:41:2f:07:2b:39:62:3c:03:d0:73:16:31:0e: 5b:74:19:9a:e2:59:15:bf:2e:90:2f:13:96:44:6b:39:fa:9b: d2:9f:fa:a1:ad:d9:97:3a:90:5a:ab:3a:a0:44:f7:e4:c3:0b: 13:b5:dc:74:33:e9:b8:9f:2f:81:35:ea:c4:db:ad:0a:dc:40: 63:e8:e4:6b:67:9a:00:f9:71:a1:58:73:2e:e5:18:f9:a8:eb: 71:ae:4b:8c:98:54:06:10:a5:a9:95:54:9e:01:58:d8:9d:eb: d2:09:4f:13:66:14:31:ee:bb:a6:04:e6:9b:3f:0b:5b:5c:8c: 7a:ac:ab:05:d4:0c:be:19:3e:e0:c7:3e:66:63:4a:e9:4a:b3: 96:4b:6c:e7:f9:4e:fe:6f:95:28:b4:8b:83:3a:bd:ed:70:bc: 1d:25:34:95:91:39:11:bc:30:fa:0b:fa:e9:a8:f8:b6:f0:ee: d6:e8:25:0f:15:7b:5d:d4:c9:73:55:1b:3b:9c:5f:06:19:85: 35:43:5f:fb:27:90:9b:fb:e7:b6:43:ef:07:14:39:76:ad:f5: c6:9a:d6:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXbubHomDyM0sfd7Uy5pQEuy0pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NERENDNzA0 RjAzQTc1RTAeFw0yNjA5MjQwNzI1MDBaFw0yNjA5MjUwNzM1MDBaMDMxMTAvBgNV BAMTKDVBMjIyQzc5NzJEQzk1Q0VDMDVBRDM4MzI0RTJCNTA4MEE2QjgwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXIzf42IpkCZ9p35HpQ6CBJ7XB Xlpc3JUzzXaNW9oOQXcrA/JlKpQ0EhItaYd13IVPR/us7NmGa6+UY86YmcZB1u5I BrKw3i9hPZ9bLSf2UD+eeE+CCo8IWjUd7eNam07aUmPwXd54ki6Jxn476qKUCBKY BTpvX9TlI+o2X4kbZ9vze5H1kbHcYIykUyvy41iz70JqO87WxCqsV35FV0dob6WS M54O+KfY36lME79iQdk6p+7sdq3Fx59kbUuCInclnQ2RXZeoFPZOOuNAisBuHfMr +1bnEkPpGkOZxgmsIzUqcDkLTUB4wxxgeJTfQESwgN5gXJpJpxBIMr+s05lbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWiIseXLclc7AWtODJOK1CAprgPIwHwYDVR0j BBgwFoAU1xNQOTnSVzpE+ilwPN3McE8Dp14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I5MDU3NjYtNDQwZS00YmNiLWFlNzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkz OUQyNTczQTQ0RkEyOTcwM0NERENDNzA0RjAzQTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzEzNTAzOTM5RDI1NzNBNDRGQTI5NzAzQ0REQ0M3MDRGMDNB NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvRDcxMzUwMzkzOUQyNTczQTQ0RkEyOTcwM0NEREND NzA0RjAzQTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRgXuPHbWf6847iHpIwMwe+P/LwngRBEgmy IcmgYIAymHgfrCJtgXnPQS8HKzliPAPQcxYxDlt0GZriWRW/LpAvE5ZEazn6m9Kf +qGt2Zc6kFqrOqBE9+TDCxO13HQz6bifL4E16sTbrQrcQGPo5GtnmgD5caFYcy7l GPmo63GuS4yYVAYQpamVVJ4BWNid69IJTxNmFDHuu6YE5ps/C1tcjHqsqwXUDL4Z PuDHPmZjSulKs5ZLbOf5Tv5vlSi0i4M6ve1wvB0lNJWRORG8MPoL+umo+Lbw7tbo JQ8Ve13UyXNVGzucXwYZhTVDX/snkJv757ZD7wcUOXat9caa1mQ= -----END CERTIFICATE-----Generated at Thu Sep 24 15:38:47 2026 by rpki-client