$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft File: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft (raw, json) Hash identifier: Qkb3SGPISaOT+SElviqhqGfKoXMkG0SYTg9l+KSk+FI= Subject key identifier: 95:51:8B:F7:0F:04:72:18:A6:73:A8:5E:4B:4A:6B:17:A2:65:D8:B8 Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 Certificate issuer: /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Certificate serial: 0270CEC36FD80B7D1C02219877A36B8607E88E4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft Manifest number: C4 Signing time: Wed 23 Sep 2026 06:54:34 +0000 Manifest this update: Wed 23 Sep 2026 06:49:34 +0000 Manifest next update: Thu 24 Sep 2026 08:43:34 +0000 Files and hashes: 1: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: 35sB3F+pYRWs2vzmYiPiuHmOw2zefVJi3xxGSLrd8Oc=) 2: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl (hash: blEX/CYut9zrXVMBqARdpZ36R7+MvVKRHD59fVkEEl4=) 3: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: lzLPq+5ACK3Fp2G9Qq15Ai5VNsw2ESnTuC604MZBsC4=) 4: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: X+ZlO7h/pL9t4N4Gq7NgEd0rssKL3EkGKfZrYxmlYG4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:70:ce:c3:6f:d8:0b:7d:1c:02:21:98:77:a3:6b:86:07:e8:8e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Validity Not Before: Sep 23 06:49:34 2026 GMT Not After : Sep 24 08:43:34 2026 GMT Subject: CN=95518BF70F047218A673A85E4B4A6B17A265D8B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:b9:56:2d:72:28:91:82:78:6e:7b:a8:c4: a1:50:cc:5a:6f:76:98:c1:87:71:38:4e:b1:24:09: d6:82:90:47:c2:22:39:cd:c9:fa:42:d9:55:90:6f: 16:de:17:fa:82:df:6a:96:a3:46:e5:7a:74:3f:fd: 8a:76:42:49:3f:3c:f7:ac:81:dc:85:16:ac:b1:5a: ff:f4:a6:4c:b1:00:45:c8:e6:d0:8b:92:32:9f:36: 2d:ed:85:2d:83:5d:a0:67:c9:26:1d:43:af:09:76: e8:6c:94:2d:a7:ff:c4:35:63:fb:78:83:70:2e:68: fe:81:fe:dd:a9:fb:9e:cc:56:e9:45:d7:22:3a:db: 71:f6:60:ff:fa:df:9a:99:f0:c4:8e:7a:03:89:e4: c5:95:9b:c8:d5:65:43:c5:08:b3:28:53:5a:7f:26: ff:30:d4:a7:3f:db:15:b0:c3:ef:8d:b7:4a:d6:52: 55:3f:1b:55:fc:7d:c7:f8:c2:de:c4:83:4a:a4:21: 4e:58:05:e1:fc:78:80:0e:ab:e9:83:37:55:cb:02: 04:78:0b:9b:93:55:b0:3e:1b:77:da:9d:31:9b:c5: fd:55:69:8c:63:a6:0f:71:44:ed:06:71:d6:d3:be: 12:7f:6d:2f:f0:1e:fd:d7:df:b0:8c:14:fa:be:28: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:51:8B:F7:0F:04:72:18:A6:73:A8:5E:4B:4A:6B:17:A2:65:D8:B8 X509v3 Authority Key Identifier: keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:09:05:e7:43:12:9c:f5:9d:a3:db:1b:d4:54:a9:f2:fc:65: 55:d7:48:a4:38:89:68:30:56:a5:49:34:9c:cd:ba:38:af:61: 4b:6f:43:ce:c9:1f:a0:f8:6d:04:96:65:72:78:e4:cd:e8:64: 6f:c4:18:e8:e5:d1:d2:c9:00:85:b9:61:f5:42:c6:30:6e:2f: c7:72:da:a3:0e:97:db:fc:a9:27:2d:cf:2b:4e:31:8b:8b:4b: d1:9a:31:3e:7c:d9:f6:8a:09:29:3f:f7:3f:d5:2f:1c:6c:2a: 6b:3f:78:08:f4:84:1c:40:a3:2f:3e:29:3f:30:6e:a3:7d:25: 31:59:e4:c6:e9:63:95:ee:b6:66:dd:1e:01:a5:5a:44:a2:45: 17:f2:0e:98:36:00:87:58:b4:22:d9:64:e7:56:2a:74:97:12: 66:c3:9e:24:f4:71:9b:ba:27:26:c3:66:e9:e3:c8:d9:0b:27: 2c:1e:38:46:83:e0:c7:1f:c1:b3:82:c8:a9:7c:ea:16:05:c2: fb:26:99:19:f4:99:e5:75:39:f0:72:47:f0:79:1a:7c:88:5b: d5:de:fb:44:44:e6:2e:c6:bc:5c:04:6d:7b:cb:58:56:29:18: af:60:ef:67:7e:cc:a3:7f:b1:ab:c0:0d:bd:22:ca:01:09:db: ea:27:bb:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnDOw2/YC30cAiGYd6Nrhgfojk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFC NEE1QUZEMjAeFw0yNjA5MjMwNjQ5MzRaFw0yNjA5MjQwODQzMzRaMDMxMTAvBgNV BAMTKDk1NTE4QkY3MEYwNDcyMThBNjczQTg1RTRCNEE2QjE3QTI2NUQ4QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnLlWLXIokYJ4bnuoxKFQzFpv dpjBh3E4TrEkCdaCkEfCIjnNyfpC2VWQbxbeF/qC32qWo0blenQ//Yp2Qkk/PPes gdyFFqyxWv/0pkyxAEXI5tCLkjKfNi3thS2DXaBnySYdQ68JduhslC2n/8Q1Y/t4 g3AuaP6B/t2p+57MVulF1yI623H2YP/635qZ8MSOegOJ5MWVm8jVZUPFCLMoU1p/ Jv8w1Kc/2xWww++Nt0rWUlU/G1X8fcf4wt7Eg0qkIU5YBeH8eIAOq+mDN1XLAgR4 C5uTVbA+G3fanTGbxf1VaYxjpg9xRO0GcdbTvhJ/bS/wHv3X37CMFPq+KBgLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlVGL9w8Echimc6heS0prF6Jl2LgwHwYDVR0j BBgwFoAUOJnJLdDUL5PX2oVANP2IurSlr9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkwNGY2NzAtN2RhYy00Y2Y0LTk5MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkRE MEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFCNEE1QUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODk5QzkyREQwRDQyRjkzRDdEQTg1NDAzNEZEODhCQUI0QTVB RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4 QkFCNEE1QUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYJBedDEpz1naPbG9RUqfL8ZVXXSKQ4iWgw VqVJNJzNujivYUtvQ87JH6D4bQSWZXJ45M3oZG/EGOjl0dLJAIW5YfVCxjBuL8dy 2qMOl9v8qSctzytOMYuLS9GaMT582faKCSk/9z/VLxxsKms/eAj0hBxAoy8+KT8w bqN9JTFZ5MbpY5XutmbdHgGlWkSiRRfyDpg2AIdYtCLZZOdWKnSXEmbDniT0cZu6 JybDZunjyNkLJyweOEaD4McfwbOCyKl86hYFwvsmmRn0meV1OfByR/B5GnyIW9Xe +0RE5i7GvFwEbXvLWFYpGK9g72d+zKN/savADb0iygEJ2+onu9s= -----END CERTIFICATE-----Generated at Thu Sep 24 02:36:48 2026 by rpki-client