$ rpki-client -vvvf rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft File: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft (raw, json) Hash identifier: rFEVDNb0+S807MLIvhG8pUiKkJbsmmeXih+aMF/AlrQ= Subject key identifier: 5C:20:31:2A:96:23:D4:C7:66:BC:38:F5:16:1C:A5:87:AB:33:4A:17 Authority key identifier: A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC Certificate issuer: /CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Certificate serial: 2AD32B6D30058F2769F7E40D81CA0432F5CCF30F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 01:21:43 +0000 Manifest this update: Fri 25 Sep 2026 01:16:43 +0000 Manifest next update: Sat 26 Sep 2026 04:25:43 +0000 Files and hashes: 1: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl (hash: 5jfuPBQK3K5b9WS9OGgd13+ODM9DukGK+PrElCJPR5k=) 2: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: 1g2WZIx9KqbiuQj/CWy92fVr9rJvVDZ62oh+oM6NT5Y=) 3: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: b8kZYL8oI1P/7ClfsU26nDRuP+nZXNyKDNgSZ4R1ACk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d3:2b:6d:30:05:8f:27:69:f7:e4:0d:81:ca:04:32:f5:cc:f3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Validity Not Before: Sep 25 01:16:43 2026 GMT Not After : Sep 26 04:25:43 2026 GMT Subject: CN=5C20312A9623D4C766BC38F5161CA587AB334A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:bd:48:fd:35:47:2c:3a:7b:a2:46:72:c0: eb:02:9a:a5:d6:c6:a5:a3:c0:ad:58:1b:87:b4:90: ab:85:8d:70:10:9e:92:d0:7c:fb:50:15:a3:93:17: e5:a4:a9:18:a8:3f:e4:0c:df:5f:01:a8:b0:3d:ef: 99:46:f8:5e:74:41:6a:81:8c:e5:79:f3:2b:ea:c5: 33:5f:3b:58:f6:33:3a:5f:8e:e5:27:c8:ab:9c:9f: 87:18:b0:82:a2:4e:80:c9:9b:a9:ef:02:d4:28:d9: c6:be:35:38:9c:cf:76:eb:33:2c:da:94:75:e6:07: c0:f9:c6:69:78:d3:73:ec:e7:d2:01:18:5c:77:64: 61:c8:29:a9:10:4b:c3:2c:5f:b6:8d:94:9a:be:75: 90:4e:1f:ce:07:64:77:76:b1:7b:13:75:0e:1f:6d: 93:f3:7b:88:16:5d:db:c3:ce:71:0f:17:85:d7:d8: ae:e3:41:66:71:18:fe:4c:1e:7b:11:40:07:04:50: d2:c0:fa:39:34:b0:0d:55:40:dc:05:76:37:5c:03: 9b:cf:54:32:6a:26:03:5d:d1:3f:e4:60:e4:9c:b6: 7c:6b:29:10:ab:13:33:7b:b9:84:b5:ef:ca:3d:79: ac:b5:59:dd:f8:c8:bf:08:b4:28:bd:eb:71:92:9f: 5e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:20:31:2A:96:23:D4:C7:66:BC:38:F5:16:1C:A5:87:AB:33:4A:17 X509v3 Authority Key Identifier: keyid:A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:39:ef:bd:85:a3:7b:dc:0f:16:24:43:c9:58:02:8d:44:7b: cc:67:32:51:0d:e4:eb:ab:08:32:ed:b6:2c:16:53:13:df:5d: 21:a2:a3:2b:ce:53:30:f3:1c:ff:73:09:53:0a:9d:92:11:e1: fd:f5:20:0b:3c:3d:7f:9a:30:54:3b:ca:64:4d:38:a8:0e:3d: bc:a6:2b:bb:b3:f2:4e:f0:16:1d:00:a0:d6:cd:9f:41:ce:4d: c9:60:69:40:7b:01:23:8f:62:79:50:bf:43:07:c2:26:4f:7f: 5b:96:24:9b:3f:d0:28:a1:19:55:73:4b:00:84:ff:eb:5c:22: 1d:2b:c7:bb:b5:47:1c:c8:08:5c:68:b3:05:01:3e:82:97:d2: 04:dc:24:a7:0a:6d:80:61:68:14:34:26:b8:ec:b7:13:b8:1e: 5b:4b:9d:13:a3:af:ef:36:09:0c:15:12:b2:64:11:ca:31:8f: 6f:a9:83:d1:52:2e:0f:9b:56:12:d9:55:c2:c4:4c:68:b4:eb: 88:08:70:b9:c8:4e:60:be:29:af:55:f5:f9:41:0a:d5:d9:12: aa:5c:b5:23:75:89:c1:c9:d9:7f:82:1f:b9:31:44:cf:43:7d: 3c:b7:de:2f:fc:62:03:56:99:c1:34:a0:50:7e:b4:6a:6a:c3: ee:c3:85:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtMrbTAFjydp9+QNgcoEMvXM8w8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5QzcyNjRE QTFFMjNCQzAeFw0yNjA5MjUwMTE2NDNaFw0yNjA5MjYwNDI1NDNaMDMxMTAvBgNV BAMTKDVDMjAzMTJBOTYyM0Q0Qzc2NkJDMzhGNTE2MUNBNTg3QUIzMzRBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGB71I/TVHLDp7okZywOsCmqXW xqWjwK1YG4e0kKuFjXAQnpLQfPtQFaOTF+WkqRioP+QM318BqLA975lG+F50QWqB jOV58yvqxTNfO1j2MzpfjuUnyKucn4cYsIKiToDJm6nvAtQo2ca+NTicz3brMyza lHXmB8D5xml403Ps59IBGFx3ZGHIKakQS8MsX7aNlJq+dZBOH84HZHd2sXsTdQ4f bZPze4gWXdvDznEPF4XX2K7jQWZxGP5MHnsRQAcEUNLA+jk0sA1VQNwFdjdcA5vP VDJqJgNd0T/kYOSctnxrKRCrEzN7uYS178o9eay1Wd34yL8ItCi963GSn14pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCAxKpYj1MdmvDj1Fhylh6szShcwHwYDVR0j BBgwFoAUo5AH8+Kii458C3qpJZxyZNoeI7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNlNDE3N2QtODA5My00NDdjLTg3YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNF MkEyOEI4RTdDMEI3QUE5MjU5QzcyNjREQTFFMjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzkwMDdGM0UyQTI4QjhFN0MwQjdBQTkyNTlDNzI2NERBMUUy M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5Qzcy NjREQTFFMjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF85772Fo3vcDxYkQ8lYAo1Ee8xnMlEN5Our CDLttiwWUxPfXSGioyvOUzDzHP9zCVMKnZIR4f31IAs8PX+aMFQ7ymRNOKgOPbym K7uz8k7wFh0AoNbNn0HOTclgaUB7ASOPYnlQv0MHwiZPf1uWJJs/0CihGVVzSwCE /+tcIh0rx7u1RxzICFxoswUBPoKX0gTcJKcKbYBhaBQ0JrjstxO4HltLnROjr+82 CQwVErJkEcoxj2+pg9FSLg+bVhLZVcLETGi064gIcLnITmC+Ka9V9flBCtXZEqpc tSN1icHJ2X+CH7kxRM9DfTy33i/8YgNWmcE0oFB+tGpqw+7DhfY= -----END CERTIFICATE-----Generated at Fri Sep 25 13:00:59 2026 by rpki-client