$ rpki-client -vvvf rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft File: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft (raw, json) Hash identifier: zA8i7W5ZKlgtZJZ9+yHupWo07JbccNsBX8GZqcLbpzo= Subject key identifier: 1F:37:CA:0F:A9:4B:6B:89:C9:3D:A5:46:0F:5D:3C:03:59:41:0F:7B Authority key identifier: A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE Certificate issuer: /CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Certificate serial: 29D60B65337255E601BF139FC10E1D3BD894765D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 12:31:36 +0000 Manifest this update: Wed 23 Sep 2026 12:26:36 +0000 Manifest next update: Thu 24 Sep 2026 15:01:36 +0000 Files and hashes: 1: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: K3OLubUlACzscrRuEaqGQ8Mg86bkVIp+TswVbW3m0Us=) 2: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: aovpUXhtG7nLDYyGx/GHHZuHleB68UHdZ+Sr7i30ntQ=) 3: A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl (hash: HANbxn9+KnWyZRJN0B6A1MX8v5YXOjrOj6Emp+X5wEs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d6:0b:65:33:72:55:e6:01:bf:13:9f:c1:0e:1d:3b:d8:94:76:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE Validity Not Before: Sep 23 12:26:36 2026 GMT Not After : Sep 24 15:01:36 2026 GMT Subject: CN=1F37CA0FA94B6B89C93DA5460F5D3C0359410F7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:45:d6:a5:e0:2c:92:48:45:17:a9:68:22: 9b:ca:cd:5c:e4:8b:be:19:6a:6e:af:c5:70:b9:34: 57:f8:b2:84:09:97:c2:17:ff:82:f8:59:57:09:9e: cb:d1:c5:07:b2:d9:e9:b8:1f:aa:b9:e8:7b:3b:d8: 90:09:5c:12:d4:1c:41:b5:e4:52:92:b4:5c:0b:f1: bd:da:0d:43:8f:0d:cc:3a:3b:66:17:98:6c:61:b9: 4e:4a:5b:d3:1f:62:20:4e:a2:d0:70:d0:91:9f:86: fa:7c:8c:52:ef:fb:13:05:5a:eb:47:6d:95:b0:e2: e3:07:e4:09:97:0f:1b:63:1b:40:9c:fa:a1:b7:a2: 9f:ef:79:d5:97:d6:21:40:1f:cc:a3:bb:12:7c:0a: 90:48:d9:d8:ee:d2:91:63:4d:f4:9a:c3:38:5c:30: 48:67:d4:d6:c2:ca:b1:2d:65:b1:61:9a:0a:49:53: a4:f7:d6:bf:c4:bc:e5:4a:9d:89:70:21:24:57:d9: ab:f7:74:60:c2:f1:72:d3:c7:8a:1d:9b:99:f3:3e: 65:2b:79:96:df:cf:b1:ab:17:d6:da:63:51:78:ae: c7:7b:28:f0:f3:a4:de:21:1b:dc:92:89:68:1a:c9: fc:01:19:d7:b4:fa:62:d6:38:54:bf:f6:e8:51:90: f7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:37:CA:0F:A9:4B:6B:89:C9:3D:A5:46:0F:5D:3C:03:59:41:0F:7B X509v3 Authority Key Identifier: keyid:A3:8F:DF:61:DF:D4:5E:8F:A1:C9:25:6D:BD:35:A6:7A:8C:3C:79:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/A38FDF61DFD45E8FA1C9256DBD35A67A8C3C79CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:83:5b:32:2b:f5:49:d0:bc:e5:06:bd:e5:fb:d7:56:f6:c6: 34:8a:5c:8e:84:f3:19:be:e1:4e:9d:73:cd:70:37:76:1a:ee: 02:42:82:25:7b:51:75:eb:a0:c4:e4:22:26:f4:bb:2a:14:0e: 61:22:93:9b:c5:fe:73:76:5d:57:c1:22:33:a7:4a:34:b2:cd: a4:f2:33:e2:1b:08:75:f2:15:d3:bb:ea:9a:b3:cc:d0:17:1d: ab:74:10:63:19:1b:1e:1c:df:24:0f:a7:c6:51:45:6b:8f:69: b1:89:09:66:6d:15:0f:30:93:ec:3f:1b:0a:40:4c:9b:2a:70: 89:3f:2d:7d:4d:fd:53:bd:f4:3a:2a:80:9e:50:ed:45:da:a5: 75:61:4b:b2:c7:16:b6:0f:6a:5a:f3:5b:28:f1:c6:0e:6b:7b: c7:72:cf:1d:60:4e:ea:ec:cd:8b:aa:2d:b7:82:10:18:52:40: ad:06:39:f7:98:a7:9d:48:b7:30:89:39:23:f1:08:2c:a2:e8: 30:f1:7f:5c:f8:a7:4a:a0:5f:e2:79:de:d0:e8:e6:7c:f2:32: af:31:1f:a3:6d:e6:b5:26:27:e0:4a:ae:56:17:9c:c4:9c:bf: be:66:8a:67:37:a8:b7:eb:52:ae:ed:8a:6b:f7:03:fb:f5:c1: e4:10:53:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKdYLZTNyVeYBvxOfwQ4dO9iUdl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4 QzNDNzlDRTAeFw0yNjA5MjMxMjI2MzZaFw0yNjA5MjQxNTAxMzZaMDMxMTAvBgNV BAMTKDFGMzdDQTBGQTk0QjZCODlDOTNEQTU0NjBGNUQzQzAzNTk0MTBGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPEXWpeAskkhFF6loIpvKzVzk i74Zam6vxXC5NFf4soQJl8IX/4L4WVcJnsvRxQey2em4H6q56Hs72JAJXBLUHEG1 5FKStFwL8b3aDUOPDcw6O2YXmGxhuU5KW9MfYiBOotBw0JGfhvp8jFLv+xMFWutH bZWw4uMH5AmXDxtjG0Cc+qG3op/vedWX1iFAH8yjuxJ8CpBI2dju0pFjTfSawzhc MEhn1NbCyrEtZbFhmgpJU6T31r/EvOVKnYlwISRX2av3dGDC8XLTx4odm5nzPmUr eZbfz7GrF9baY1F4rsd7KPDzpN4hG9ySiWgayfwBGde0+mLWOFS/9uhRkPfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHzfKD6lLa4nJPaVGD108A1lBD3swHwYDVR0j BBgwFoAUo4/fYd/UXo+hySVtvTWmeow8ec4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDdkZjJhZDAtNmU5OS00NGE3LWEwNjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFE RkQ0NUU4RkExQzkyNTZEQkQzNUE2N0E4QzNDNzlDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzhGREY2MURGRDQ1RThGQTFDOTI1NkRCRDM1QTY3QThDM0M3 OUNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvQTM4RkRGNjFERkQ0NUU4RkExQzkyNTZEQkQzNUE2 N0E4QzNDNzlDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2DWzIr9UnQvOUGveX711b2xjSKXI6E8xm+ 4U6dc81wN3Ya7gJCgiV7UXXroMTkIib0uyoUDmEik5vF/nN2XVfBIjOnSjSyzaTy M+IbCHXyFdO76pqzzNAXHat0EGMZGx4c3yQPp8ZRRWuPabGJCWZtFQ8wk+w/GwpA TJsqcIk/LX1N/VO99DoqgJ5Q7UXapXVhS7LHFrYPalrzWyjxxg5re8dyzx1gTurs zYuqLbeCEBhSQK0GOfeYp51ItzCJOSPxCCyi6DDxf1z4p0qgX+J53tDo5nzyMq8x H6Nt5rUmJ+BKrlYXnMScv75mimc3qLfrUq7timv3A/v1weQQU34= -----END CERTIFICATE-----Generated at Wed Sep 23 23:55:23 2026 by rpki-client