$ rpki-client -vvvf rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft File: B39B19C9084084F7FCB3FAFF376368D876F66372.mft (raw, json) Hash identifier: JJJLmf6TOZHAYp+70/q3lg0dl+I8VOoVDio9Uou4Lmo= Subject key identifier: 22:E2:CC:D1:C2:22:33:64:A6:11:DC:2B:3B:85:89:E1:32:E8:0E:1E Authority key identifier: B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 Certificate issuer: /CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Certificate serial: 723A1A16B5F595F44DA761633B8ED3AB427DD597 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 22:59:26 +0000 Manifest this update: Wed 23 Sep 2026 22:54:26 +0000 Manifest next update: Fri 25 Sep 2026 00:03:26 +0000 Files and hashes: 1: B39B19C9084084F7FCB3FAFF376368D876F66372.crl (hash: JolPmfDXXDlTth7sSB4q05e4OaoHqfBnGetmf0PWB/8=) 2: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: CTdtRt0QWOxvthXzk1fDi0/fuxno5z52+6EZfo7nHWY=) 3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: NLnNrRvgdk9PwIX+K62kuAcQASU2Wm+4Xg+4O2CIdkc=) 4: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: 5twMEBpUGZCFXRPaiYDXrww+UAg0G4R4iDCrbaZ4+Ho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:3a:1a:16:b5:f5:95:f4:4d:a7:61:63:3b:8e:d3:ab:42:7d:d5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Validity Not Before: Sep 23 22:54:26 2026 GMT Not After : Sep 25 00:03:26 2026 GMT Subject: CN=22E2CCD1C2223364A611DC2B3B8589E132E80E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:0b:f1:d3:db:71:11:5e:64:ca:3f:e3:0e: a1:58:a3:94:9c:20:b5:8d:b0:61:83:97:7c:fe:32: 44:bb:db:b6:24:20:54:86:4b:71:d2:a1:f5:ce:ac: 11:b7:95:a0:55:f6:f4:b8:58:a0:8e:74:0c:79:5c: e9:af:e5:7f:17:2f:30:0d:52:ec:4e:0b:9d:81:8b: cb:3c:b8:b6:7c:44:0b:cc:df:04:f1:dd:2b:bb:c8: 6a:10:ab:bf:ca:dd:2a:da:87:df:35:55:08:fa:8b: a4:61:a8:dd:dd:72:c6:c8:b7:e7:cc:9f:a3:f0:03: 06:be:11:7c:5e:e5:0e:bc:fd:69:89:61:21:de:5e: a1:f5:d7:2d:dc:fe:de:38:6d:19:06:d8:b3:02:0b: e7:4b:bf:b7:8d:58:6f:d9:ce:5c:05:8c:d2:d4:c6: 4f:32:b6:31:31:2c:54:02:da:6e:18:fd:d9:96:7c: 0c:28:aa:7b:a0:94:3e:2f:e9:e7:8c:a1:b0:46:88: af:fe:bf:14:83:a6:ec:c7:20:28:86:6a:86:b0:e3: fa:38:f5:27:89:1d:bb:d9:62:87:f1:fe:da:40:e6: ad:84:71:5c:c8:4c:04:37:e1:7e:82:e3:6b:b0:1d: 54:37:29:60:89:0a:b0:1d:29:d1:cd:c3:c0:c7:b0: 40:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E2:CC:D1:C2:22:33:64:A6:11:DC:2B:3B:85:89:E1:32:E8:0E:1E X509v3 Authority Key Identifier: keyid:B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:90:40:cc:63:e1:b6:d0:90:46:c8:16:a3:5e:da:bc:e0:c8: 1a:e7:d9:0e:51:22:f8:88:69:cc:58:05:6a:3c:f1:ff:87:0e: 73:b7:48:f8:19:c0:44:41:d6:b9:1c:53:b5:62:9a:22:81:47: ee:36:43:be:2d:9a:a4:d5:8e:50:eb:99:92:ff:5c:2a:f2:25: 8f:ec:4b:52:06:38:77:13:65:3d:17:1a:77:df:9a:b1:57:35: ac:c9:26:44:57:f6:44:ac:53:00:f9:c2:18:3a:1f:87:cb:7e: f4:ce:97:b3:6b:f2:95:32:dc:c1:d8:48:fa:a6:45:e0:4b:60: 51:df:8e:71:af:42:00:7f:1b:ae:ec:1c:f7:bf:d1:cf:28:ba: 66:15:15:cf:78:3d:5c:96:8b:54:e0:22:bf:65:76:b0:6a:b5: 45:aa:86:78:a8:d1:1b:4f:6d:74:9f:35:4a:93:2d:b1:3d:80: 75:23:50:55:0f:6f:9d:a9:9f:67:a6:64:fb:fc:17:de:cf:2a: 5a:c0:a5:31:e4:ee:46:48:41:8e:77:1c:ac:8d:13:62:05:1d: 75:3c:92:6c:1b:ec:89:ef:fa:e2:7f:b9:61:d5:50:5c:37:37: dd:60:c1:d3:e8:96:7b:54:e5:63:ec:8e:87:26:34:61:4f:a3: c7:46:49:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjoaFrX1lfRNp2FjO47Tq0J91ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3 NkY2NjM3MjAeFw0yNjA5MjMyMjU0MjZaFw0yNjA5MjUwMDAzMjZaMDMxMTAvBgNV BAMTKDIyRTJDQ0QxQzIyMjMzNjRBNjExREMyQjNCODU4OUUxMzJFODBFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEigvx09txEV5kyj/jDqFYo5Sc ILWNsGGDl3z+MkS727YkIFSGS3HSofXOrBG3laBV9vS4WKCOdAx5XOmv5X8XLzAN UuxOC52Bi8s8uLZ8RAvM3wTx3Su7yGoQq7/K3Srah981VQj6i6RhqN3dcsbIt+fM n6PwAwa+EXxe5Q68/WmJYSHeXqH11y3c/t44bRkG2LMCC+dLv7eNWG/ZzlwFjNLU xk8ytjExLFQC2m4Y/dmWfAwoqnuglD4v6eeMobBGiK/+vxSDpuzHICiGaoaw4/o4 9SeJHbvZYofx/tpA5q2EcVzITAQ34X6C42uwHVQ3KWCJCrAdKdHNw8DHsED/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIuLM0cIiM2SmEdwrO4WJ4TLoDh4wHwYDVR0j BBgwFoAUs5sZyQhAhPf8s/r/N2No2Hb2Y3IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMyZTRmODYtNDhlNy00OGM3LWJhOTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5Qzkw ODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3NkY2NjM3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMzlCMTlDOTA4NDA4NEY3RkNCM0ZBRkYzNzYzNjhEODc2RjY2 MzcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4 RDg3NkY2NjM3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCQQMxj4bbQkEbIFqNe2rzgyBrn2Q5RIviI acxYBWo88f+HDnO3SPgZwERB1rkcU7VimiKBR+42Q74tmqTVjlDrmZL/XCryJY/s S1IGOHcTZT0XGnffmrFXNazJJkRX9kSsUwD5whg6H4fLfvTOl7Nr8pUy3MHYSPqm ReBLYFHfjnGvQgB/G67sHPe/0c8oumYVFc94PVyWi1TgIr9ldrBqtUWqhnio0RtP bXSfNUqTLbE9gHUjUFUPb52pn2emZPv8F97PKlrApTHk7kZIQY53HKyNE2IFHXU8 kmwb7Inv+uJ/uWHVUFw3N91gwdPolntU5WPsjocmNGFPo8dGSUM= -----END CERTIFICATE-----Generated at Thu Sep 24 08:38:52 2026 by rpki-client