$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft File: B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft (raw, json) Hash identifier: JBdsj2Pws/w52jpLfz+618xjIpE6dN6UuhNAvLGsLSk= Subject key identifier: 99:8E:C4:81:6A:E3:85:E9:6C:12:8D:64:CA:40:C1:81:22:72:EA:20 Authority key identifier: B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA Certificate issuer: /CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Certificate serial: 0D4A3DC63B3333D53BDB38DEC2496EB0A327EE3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 14:18:00 +0000 Manifest this update: Fri 25 Sep 2026 14:13:00 +0000 Manifest next update: Sat 26 Sep 2026 15:06:00 +0000 Files and hashes: 1: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ZyMegzYLPmuWd/ikDAjq3H75TE6NMvhpUlSw0zwrA5M=) 2: B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl (hash: jdFbGmaCKkHcHzZDvq8OM5D+DK+Sq4pA4ipTXZSPN5A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4a:3d:c6:3b:33:33:d5:3b:db:38:de:c2:49:6e:b0:a3:27:ee:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B389A8D2EE181D753E97A8CF5D74284B00495BFA Validity Not Before: Sep 25 14:13:00 2026 GMT Not After : Sep 26 15:06:00 2026 GMT Subject: CN=998EC4816AE385E96C128D64CA40C1812272EA20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4f:2a:a8:e7:00:29:06:bb:c2:50:fc:2d:9f: 23:b0:0c:3a:2b:6c:59:15:e4:69:f7:f1:c0:6c:2b: b0:42:b3:04:68:72:cc:e1:77:48:96:a8:f2:be:ee: f0:2c:7b:96:d1:3b:ac:4e:47:eb:72:d3:48:1f:83: 14:3c:16:7f:2a:67:fe:64:cc:8f:d3:70:a0:fe:84: a3:3a:f7:eb:07:16:a3:9a:53:8a:30:4e:43:6e:c4: 16:c3:c9:97:f7:fd:9a:66:d9:c0:43:f6:a8:2e:40: 31:90:59:da:f5:d8:00:06:6d:49:a3:dc:c5:c4:d8: fd:cb:a1:a0:4b:6e:24:e3:80:03:25:98:48:57:de: 94:ab:f4:fc:7f:52:d0:d5:64:99:5e:af:e0:b5:7d: e7:77:13:52:c7:e6:cc:d5:40:76:21:61:13:ee:ad: b2:32:f0:1f:d3:90:5c:5a:e6:63:e6:3a:08:74:eb: 22:0c:7b:00:df:a0:e8:bc:ac:ca:ce:f5:b3:4c:c0: 97:8d:6f:16:4a:55:d2:46:53:69:59:18:02:d3:22: fb:5a:d3:a4:ba:73:32:00:03:4b:08:5b:99:55:f7: ce:bc:90:4b:ae:1a:db:39:ca:69:3e:bf:a9:c8:97: ce:9d:3e:05:17:3d:0d:11:0d:ec:2a:43:f4:48:93: 96:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8E:C4:81:6A:E3:85:E9:6C:12:8D:64:CA:40:C1:81:22:72:EA:20 X509v3 Authority Key Identifier: keyid:B3:89:A8:D2:EE:18:1D:75:3E:97:A8:CF:5D:74:28:4B:00:49:5B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B389A8D2EE181D753E97A8CF5D74284B00495BFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/B389A8D2EE181D753E97A8CF5D74284B00495BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a9:a3:26:65:ce:15:5c:3b:ff:d8:49:37:21:5c:e6:b2:8d: 2e:d2:ec:3b:06:3e:1e:cd:77:29:00:1b:de:2b:14:e0:b0:88: 52:ac:9e:b0:18:c9:30:12:52:7c:ed:42:3b:9e:49:58:7e:03: 67:d0:22:1f:30:6f:1d:87:5d:ff:7e:ac:45:5d:8e:a1:a1:7e: bf:9b:66:9f:60:62:5a:4b:03:8e:3a:c4:04:da:46:48:9a:04: 87:05:48:2f:be:75:89:9d:93:a9:f5:b4:31:1c:53:de:38:1d: 6f:77:67:cb:7f:63:e8:76:6f:49:87:77:6f:3b:29:0f:39:ae: 3b:2d:af:00:ab:5b:d6:3c:cd:02:01:96:2c:40:cd:2f:11:0b: c9:09:79:4e:f8:a5:4d:d2:71:16:23:6d:44:09:77:72:a5:6e: 0d:a5:ca:bb:36:4b:a0:30:4d:18:0a:9c:86:a6:35:e3:20:c3: 33:a8:f3:52:fe:64:5e:f2:75:00:45:d2:66:4d:17:e5:90:c3: bc:34:ac:94:4a:1e:a1:fc:88:a3:3f:e4:87:5c:9b:f9:b8:63: 68:6e:3c:2b:8a:42:95:5f:77:53:22:f4:84:3a:cd:0c:ce:9c: f8:f5:bf:20:c2:1c:32:8d:2e:46:89:c0:b9:51:b3:8d:e6:c1: 36:1b:9c:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUo9xjszM9U72zjewklusKMn7jswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIw MDQ5NUJGQTAeFw0yNjA5MjUxNDEzMDBaFw0yNjA5MjYxNTA2MDBaMDMxMTAvBgNV BAMTKDk5OEVDNDgxNkFFMzg1RTk2QzEyOEQ2NENBNDBDMTgxMjI3MkVBMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTTyqo5wApBrvCUPwtnyOwDDor bFkV5Gn38cBsK7BCswRocszhd0iWqPK+7vAse5bRO6xOR+ty00gfgxQ8Fn8qZ/5k zI/TcKD+hKM69+sHFqOaU4owTkNuxBbDyZf3/Zpm2cBD9qguQDGQWdr12AAGbUmj 3MXE2P3LoaBLbiTjgAMlmEhX3pSr9Px/UtDVZJler+C1fed3E1LH5szVQHYhYRPu rbIy8B/TkFxa5mPmOgh06yIMewDfoOi8rMrO9bNMwJeNbxZKVdJGU2lZGALTIvta 06S6czIAA0sIW5lV9868kEuuGts5ymk+v6nIl86dPgUXPQ0RDewqQ/RIk5bDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmY7EgWrjhelsEo1kykDBgSJy6iAwHwYDVR0j BBgwFoAUs4mo0u4YHXU+l6jPXXQoSwBJW/owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc5NGZmZDItNDU3Mi00NTUzLTlhMzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJF RTE4MUQ3NTNFOTdBOENGNUQ3NDI4NEIwMDQ5NUJGQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMzg5QThEMkVFMTgxRDc1M0U5N0E4Q0Y1RDc0Mjg0QjAwNDk1 QkZBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvQjM4OUE4RDJFRTE4MUQ3NTNFOTdBOENGNUQ3NDI4 NEIwMDQ5NUJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKpoyZlzhVcO//YSTchXOayjS7S7DsGPh7N dykAG94rFOCwiFKsnrAYyTASUnztQjueSVh+A2fQIh8wbx2HXf9+rEVdjqGhfr+b Zp9gYlpLA446xATaRkiaBIcFSC++dYmdk6n1tDEcU944HW93Z8t/Y+h2b0mHd287 KQ85rjstrwCrW9Y8zQIBlixAzS8RC8kJeU74pU3ScRYjbUQJd3Klbg2lyrs2S6Aw TRgKnIamNeMgwzOo81L+ZF7ydQBF0mZNF+WQw7w0rJRKHqH8iKM/5Idcm/m4Y2hu PCuKQpVfd1Mi9IQ6zQzOnPj1vyDCHDKNLkaJwLlRs43mwTYbnBs= -----END CERTIFICATE-----Generated at Fri Sep 25 17:17:30 2026 by rpki-client