$ rpki-client -vvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft File: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft (raw, json) Hash identifier: YOaYrKslyODxdT2FiE0OxDOfq0EVxesvRdlIzl0ovTk= Subject key identifier: DB:94:AC:2D:45:52:2F:FF:08:DC:5C:47:5D:0A:CF:AD:01:BB:1B:5E Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 Certificate issuer: /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Certificate serial: 4310B2DBDF44355428F99B13FABBEE69F545097B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:25:22 +0000 Manifest this update: Tue 12 May 2026 19:20:22 +0000 Manifest next update: Wed 13 May 2026 22:49:22 +0000 Files and hashes: 1: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: 35sB3F+pYRWs2vzmYiPiuHmOw2zefVJi3xxGSLrd8Oc=) 2: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: bXRUilxrcrzJiP9PjPQFqMqVk2Gw/CWvQhfR/EgAeXU=) 3: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: lzLPq+5ACK3Fp2G9Qq15Ai5VNsw2ESnTuC604MZBsC4=) 4: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl (hash: Pb+RsEHiD4eJlCGJUWUqi5Y29/T8GR1+SBiUbBqouXM=) 5: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: oaMZvvPhg7sQ6sU35Q1iSLRP325On6qyrsdfo7OOPY8=) 6: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: X+ZlO7h/pL9t4N4Gq7NgEd0rssKL3EkGKfZrYxmlYG4=) 7: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: B5ukxagssxCFfNmL/M+i5ue/1MCU5d6NS/ddZ7eTpIY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:10:b2:db:df:44:35:54:28:f9:9b:13:fa:bb:ee:69:f5:45:09:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Validity Not Before: May 12 19:20:22 2026 GMT Not After : May 13 22:49:22 2026 GMT Subject: CN=DB94AC2D45522FFF08DC5C475D0ACFAD01BB1B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:38:aa:54:ee:cb:40:73:46:fd:fa:c6:1b: 15:58:a5:31:aa:8e:c1:cd:55:99:4e:4e:8f:9b:c4: da:35:fa:22:5a:ce:19:53:97:9d:f2:1f:aa:15:b1: ee:94:dc:16:ae:db:4a:d8:d7:e3:6f:1d:b1:67:71: 6f:cb:c5:5b:e9:41:fd:6d:e2:69:cf:ea:c2:fa:d1: 98:fd:ec:c6:ca:92:a6:c4:82:22:f8:29:b4:33:22: e8:3c:cf:65:14:0f:cd:b1:3a:6e:ff:b8:cd:39:84: 88:62:0d:78:8c:49:d5:c9:8b:67:2c:f1:8d:02:b8: 77:83:d0:09:b4:b7:4b:6d:a9:3a:6a:13:ee:40:88: 4d:a9:5f:cf:80:8d:ac:40:2f:01:00:c9:e8:79:59: 64:ea:0d:be:3d:64:2c:96:0a:d3:61:46:a2:48:16: 8a:fe:51:b7:b9:1e:03:78:7a:96:c2:84:80:7f:82: 98:9b:db:1c:14:1c:8f:5d:95:62:57:6f:ce:60:00: d7:4a:4e:53:44:51:42:62:44:db:ef:d6:51:e1:a8: d1:18:02:fa:f6:36:34:fa:91:fc:c0:1c:53:9f:6d: 1f:85:3c:5a:8a:c0:22:33:e3:17:80:1b:3c:e6:d8: 3c:90:9f:08:35:5e:85:3d:5e:cf:8a:62:0b:e3:cc: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:94:AC:2D:45:52:2F:FF:08:DC:5C:47:5D:0A:CF:AD:01:BB:1B:5E X509v3 Authority Key Identifier: keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ef:a5:d6:af:82:7a:73:aa:78:b2:86:ca:39:9f:f4:6d:99: 3a:d7:95:55:b6:bd:09:06:f4:c7:ca:dd:f4:ca:2b:b4:f7:d7: 92:1d:a1:5e:4c:d0:d8:95:c0:5f:35:10:4e:50:e3:e4:64:6d: 02:5a:f8:f7:69:20:11:26:e4:39:46:9c:d3:49:cc:56:ee:07: 68:0c:ce:ef:3f:d8:6b:87:5a:7e:e4:3a:e5:08:5d:a5:e2:89: b4:ac:e3:41:68:31:fa:e0:63:4c:6e:95:63:19:48:1e:e8:8c: 92:7d:44:00:4f:c6:1d:e7:2e:4c:17:0e:be:a1:fd:ff:27:19: 3f:9b:e9:5a:a3:0c:62:96:cb:d6:00:72:2d:d1:db:4b:67:20: f1:3d:2d:31:48:92:c0:13:cc:d6:3f:a7:65:f3:d3:83:ac:49: 75:fe:96:ee:a5:4f:4d:84:e5:52:59:f0:cd:42:18:2f:fb:b0: 82:54:26:9e:54:44:dd:e8:ea:8a:6e:60:73:99:08:99:f0:08: 50:94:a8:ad:0c:0d:77:cb:af:2b:74:c2:57:8f:74:09:71:31: 71:59:27:5c:3d:58:e5:09:cd:93:98:25:1f:40:4b:6a:ad:3b: 33:96:7c:84:f4:8e:46:f3:04:bd:bb:3b:c7:e3:0c:87:5a:81: a7:57:b3:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQxCy299ENVQo+ZsT+rvuafVFCXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFC NEE1QUZEMjAeFw0yNjA1MTIxOTIwMjJaFw0yNjA1MTMyMjQ5MjJaMDMxMTAvBgNV BAMTKERCOTRBQzJENDU1MjJGRkYwOERDNUM0NzVEMEFDRkFEMDFCQjFCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JDiqVO7LQHNG/frGGxVYpTGq jsHNVZlOTo+bxNo1+iJazhlTl53yH6oVse6U3Bau20rY1+NvHbFncW/LxVvpQf1t 4mnP6sL60Zj97MbKkqbEgiL4KbQzIug8z2UUD82xOm7/uM05hIhiDXiMSdXJi2cs 8Y0CuHeD0Am0t0ttqTpqE+5AiE2pX8+AjaxALwEAyeh5WWTqDb49ZCyWCtNhRqJI For+Ube5HgN4epbChIB/gpib2xwUHI9dlWJXb85gANdKTlNEUUJiRNvv1lHhqNEY Avr2NjT6kfzAHFOfbR+FPFqKwCIz4xeAGzzm2DyQnwg1XoU9Xs+KYgvjzO8vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU25SsLUVSL/8I3FxHXQrPrQG7G14wHwYDVR0j BBgwFoAUOJnJLdDUL5PX2oVANP2IurSlr9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkwNGY2NzAtN2RhYy00Y2Y0LTk5MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkRE MEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFCNEE1QUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODk5QzkyREQwRDQyRjkzRDdEQTg1NDAzNEZEODhCQUI0QTVB RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4 QkFCNEE1QUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvvpdavgnpzqniyhso5n/RtmTrXlVW2vQkG 9MfK3fTKK7T315IdoV5M0NiVwF81EE5Q4+RkbQJa+PdpIBEm5DlGnNNJzFbuB2gM zu8/2GuHWn7kOuUIXaXiibSs40FoMfrgY0xulWMZSB7ojJJ9RABPxh3nLkwXDr6h /f8nGT+b6VqjDGKWy9YAci3R20tnIPE9LTFIksATzNY/p2Xz04OsSXX+lu6lT02E 5VJZ8M1CGC/7sIJUJp5URN3o6opuYHOZCJnwCFCUqK0MDXfLryt0wlePdAlxMXFZ J1w9WOUJzZOYJR9AS2qtOzOWfIT0jkbzBL27O8fjDIdagadXswY= -----END CERTIFICATE-----Generated at Tue May 12 23:20:56 2026 by rpki-client