$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft File: 872439399C3ADEB5FD342E7B6286CED219899CA2.mft (raw, json) Hash identifier: 6O6TktKWv9V4JQ3B92TQZxw2fQKvx827HKxSQj1elPE= Subject key identifier: 33:4F:58:ED:41:0A:1D:48:8A:43:3A:2B:74:0A:1F:39:24:2D:78:34 Authority key identifier: 87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 Certificate issuer: /CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Certificate serial: 5BAA6A922E2A3721B64E384A40C47E5C7C76A556 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 20:51:52 +0000 Manifest this update: Wed 23 Sep 2026 20:46:52 +0000 Manifest next update: Fri 25 Sep 2026 00:40:52 +0000 Files and hashes: 1: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: yjf0/JJFQABhzT0gnDsCQ/oag0HSQ3URmpUm4ciNYx4=) 2: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: adl429vFkP0oWDwTvPnmag7OFx0zxihqimWJrrJGrRE=) 3: 872439399C3ADEB5FD342E7B6286CED219899CA2.crl (hash: igY2pDdt2gvXqbHo1JeIFeAFKWhvi7CTs8MqCfWIZ6c=) 4: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NKC5Np3Ag/+a1x7nhQql2VpKY7CAeiWtD4pS8O2fPAg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:aa:6a:92:2e:2a:37:21:b6:4e:38:4a:40:c4:7e:5c:7c:76:a5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872439399C3ADEB5FD342E7B6286CED219899CA2 Validity Not Before: Sep 23 20:46:52 2026 GMT Not After : Sep 25 00:40:52 2026 GMT Subject: CN=334F58ED410A1D488A433A2B740A1F39242D7834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:ba:80:5c:8d:5d:f0:c6:a0:db:a2:27:17: 2a:91:03:55:4a:45:20:38:f6:f4:c1:5f:58:6d:02: b3:2f:c0:1d:e8:92:ce:c5:31:f2:3a:90:70:a1:c3: 25:e6:97:19:06:3d:8f:61:04:02:bb:6e:f8:ec:ae: 79:43:4b:08:6c:0a:6b:32:1c:cf:db:d9:05:d1:ce: 7b:00:48:3a:75:8b:75:46:23:98:3d:e3:cc:44:55: a1:6d:37:01:92:ea:66:69:86:6d:4f:a4:e0:5c:9b: 99:3f:2a:da:85:07:af:04:93:c4:09:06:de:df:38: ae:46:c8:81:b3:6a:b8:89:eb:90:25:e2:57:cc:18: 9a:ca:bd:73:0a:78:cb:c1:87:e7:ba:f9:af:8e:92: 2a:54:d9:8a:80:cd:5f:a5:4e:76:40:1c:68:48:2d: 49:d8:b6:58:2e:a1:9e:17:ff:b2:91:e8:66:03:28: 79:3b:52:bb:6c:9d:61:36:9f:48:88:a1:43:4b:f9: ab:15:98:94:11:c2:44:cb:61:a4:51:f9:bb:41:a7: e7:93:5e:d6:3f:a0:46:bc:50:89:82:06:6e:e3:3c: 6d:8b:af:79:7c:a3:5a:bd:54:7f:3f:5c:e6:57:7c: fd:ab:ff:c5:ab:21:09:a4:af:89:97:20:ea:23:f1: 20:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4F:58:ED:41:0A:1D:48:8A:43:3A:2B:74:0A:1F:39:24:2D:78:34 X509v3 Authority Key Identifier: keyid:87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:81:36:6c:af:6b:8f:fe:1e:a4:c6:07:a7:18:81:1d:97:31: 4a:f5:36:15:39:d9:11:f3:c5:e5:02:35:19:e1:08:41:66:cd: ed:80:b7:8e:72:ec:34:21:93:4d:43:42:b6:90:a9:dd:63:05: 93:8c:fa:ed:ff:96:7c:f2:35:e3:fa:80:c4:62:55:a9:24:84: 59:32:44:17:a2:91:c0:a5:6b:9b:ee:c2:fd:16:e4:c9:65:1d: 69:d7:c8:2c:c7:96:ab:89:dd:43:35:c0:18:49:9c:d9:ab:9b: 7e:5e:4d:0d:19:c1:5d:25:36:21:ef:75:33:9f:03:16:22:47: 58:fb:0f:e1:ce:13:da:ee:93:7a:f9:61:79:01:7e:8e:3f:fe: 5c:df:4b:40:dd:71:15:c6:06:5b:45:4f:e3:43:dd:4c:72:09: 56:d3:56:a5:1c:d9:c9:cf:ea:c6:0f:d8:8e:e3:d7:61:0d:a3: b9:21:38:88:66:e2:db:b7:38:92:74:cd:cd:b0:7f:38:16:a9: 5a:17:38:c4:b7:b2:ef:0f:e2:36:66:a9:b1:f1:25:41:6c:5a: 8e:52:8d:0c:eb:c1:1b:6f:f8:29:8e:cc:1f:8d:60:cd:f7:82: 37:5d:8d:68:16:6f:0c:ee:d3:5d:20:a9:f1:90:01:f9:98:dd: 91:ea:79:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW6pqki4qNyG2TjhKQMR+XHx2pVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIx OTg5OUNBMjAeFw0yNjA5MjMyMDQ2NTJaFw0yNjA5MjUwMDQwNTJaMDMxMTAvBgNV BAMTKDMzNEY1OEVENDEwQTFENDg4QTQzM0EyQjc0MEExRjM5MjQyRDc4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgRLqAXI1d8Mag26InFyqRA1VK RSA49vTBX1htArMvwB3oks7FMfI6kHChwyXmlxkGPY9hBAK7bvjsrnlDSwhsCmsy HM/b2QXRznsASDp1i3VGI5g948xEVaFtNwGS6mZphm1PpOBcm5k/KtqFB68Ek8QJ Bt7fOK5GyIGzariJ65Al4lfMGJrKvXMKeMvBh+e6+a+OkipU2YqAzV+lTnZAHGhI LUnYtlguoZ4X/7KR6GYDKHk7UrtsnWE2n0iIoUNL+asVmJQRwkTLYaRR+btBp+eT XtY/oEa8UImCBm7jPG2Lr3l8o1q9VH8/XOZXfP2r/8WrIQmkr4mXIOoj8SCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM09Y7UEKHUiKQzordAofOSQteDQwHwYDVR0j BBgwFoAUhyQ5OZw63rX9NC57YobO0hmJnKIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM3ZDNjYmYtMjRkNi00YjFjLTg2Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5 QzNBREVCNUZEMzQyRTdCNjI4NkNFRDIxOTg5OUNBMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzI0MzkzOTlDM0FERUI1RkQzNDJFN0I2Mjg2Q0VEMjE5ODk5 Q0EyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvODcyNDM5Mzk5QzNBREVCNUZEMzQyRTdCNjI4NkNF RDIxOTg5OUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6BNmyva4/+HqTGB6cYgR2XMUr1NhU52RHz xeUCNRnhCEFmze2At45y7DQhk01DQraQqd1jBZOM+u3/lnzyNeP6gMRiVakkhFky RBeikcCla5vuwv0W5MllHWnXyCzHlquJ3UM1wBhJnNmrm35eTQ0ZwV0lNiHvdTOf AxYiR1j7D+HOE9ruk3r5YXkBfo4//lzfS0DdcRXGBltFT+ND3UxyCVbTVqUc2cnP 6sYP2I7j12ENo7khOIhm4tu3OJJ0zc2wfzgWqVoXOMS3su8P4jZmqbHxJUFsWo5S jQzrwRtv+CmOzB+NYM33gjddjWgWbwzu010gqfGQAfmY3ZHqeZE= -----END CERTIFICATE-----Generated at Thu Sep 24 01:58:35 2026 by rpki-client