$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft File: 309D66BED7C5AAB839669782F24FE6D817B8209A.mft (raw, json) Hash identifier: cYrPfjC2H4eLusn/3LTgIMm48zoqP6fVzImFvJAKRuA= Subject key identifier: 3B:04:8E:C0:2A:4A:4D:8D:EE:C3:89:6B:94:EB:3B:4E:61:68:79:57 Authority key identifier: 30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A Certificate issuer: /CN=309D66BED7C5AAB839669782F24FE6D817B8209A Certificate serial: 6DBB767D9027805A11043117FA89B1356966CAEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 08:21:09 +0000 Manifest this update: Fri 25 Sep 2026 08:16:09 +0000 Manifest next update: Sat 26 Sep 2026 10:33:09 +0000 Files and hashes: 1: 309D66BED7C5AAB839669782F24FE6D817B8209A.crl (hash: Ff/mW2diZK4dTMB/n7hpmu9gb3PGI3Z31z/FNPTZvBg=) 2: 3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa (hash: +xmmKCCGNPjDepHqzXzJnlfxWWK0PUzYuwz3sX367Vg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 10:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:bb:76:7d:90:27:80:5a:11:04:31:17:fa:89:b1:35:69:66:ca:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309D66BED7C5AAB839669782F24FE6D817B8209A Validity Not Before: Sep 25 08:16:09 2026 GMT Not After : Sep 26 10:33:09 2026 GMT Subject: CN=3B048EC02A4A4D8DEEC3896B94EB3B4E61687957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:60:aa:ac:5a:13:fb:a9:52:9f:0c:1d:66: e4:ef:78:fa:5d:e8:df:2a:11:ce:69:89:88:88:f3: 8e:53:44:36:17:dd:20:aa:41:82:ea:b0:b8:85:c9: d1:3f:22:c3:de:3a:14:a0:44:21:3d:ce:b8:f5:d5: ae:d5:f0:30:df:6a:21:42:77:c6:d4:0d:05:f1:74: 32:15:5e:33:78:0f:e7:8f:bc:62:27:36:6e:f7:b4: ef:ba:08:5e:36:be:7e:a8:7a:1a:85:fe:cd:ab:49: 88:70:5d:84:1b:d6:86:4e:e4:d3:60:d4:8f:a3:fd: c0:24:ab:ea:26:a5:7d:a9:8f:bc:25:b9:28:64:86: 72:dc:fe:e3:c7:3e:42:cb:8b:d1:d9:8b:08:50:94: a2:75:32:02:9b:b5:69:11:f8:96:3e:75:ff:36:a4: 51:86:27:a9:34:67:c1:ff:4c:81:0a:ab:3d:67:ff: 1a:f8:2d:a3:79:8f:54:54:aa:d1:da:3f:75:62:a0: e8:44:56:4a:21:ee:38:e2:f7:e3:41:82:00:60:21: e5:76:51:67:d8:7e:4a:98:0e:af:c5:55:b4:4a:5d: 7d:59:38:43:0e:34:e5:9e:6f:c9:53:f8:b5:b7:2a: 5e:e1:d3:4a:39:2c:a0:5c:e0:2f:5b:77:b9:9b:09: 6e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:04:8E:C0:2A:4A:4D:8D:EE:C3:89:6B:94:EB:3B:4E:61:68:79:57 X509v3 Authority Key Identifier: keyid:30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:46:16:fc:b0:b0:ff:b6:64:a0:ef:19:24:b3:96:30:83:67: 64:82:63:df:55:50:4b:cc:29:35:fa:12:ca:95:f3:75:a8:8b: 5e:60:a1:4d:0e:af:f4:f3:28:05:0b:e5:05:38:b3:01:49:37: 71:cd:36:8d:9c:84:eb:70:d8:8c:e9:9e:32:90:6d:d2:c7:91: 40:e9:6a:28:e1:46:7f:43:c3:66:b4:33:86:11:c5:ec:a9:d5: b4:d6:56:dd:96:54:e1:41:f6:c7:10:ea:c5:22:51:1f:a0:5a: c8:10:0b:59:e5:25:5d:96:ed:16:bd:35:dc:f4:6a:dc:ba:2a: 67:76:7c:9b:b2:b1:89:e6:35:02:fb:da:50:7a:f7:a0:ab:6a: 6b:a3:7e:46:87:b0:20:40:60:c6:09:12:4f:85:72:30:b3:af: f4:84:cd:5c:04:90:cc:a5:2f:f8:aa:78:73:a9:53:50:8a:e8: 4a:c5:19:06:20:8b:98:2b:01:13:71:30:92:5f:fb:5c:85:04: 6e:49:5e:5d:8b:b4:7b:87:1f:b8:49:f0:b3:3c:3a:53:82:5d: 06:0c:e1:60:64:6a:36:fc:d4:27:98:3f:49:2d:18:4f:dd:d5: a2:44:ea:01:b1:ad:0e:6e:3b:41:25:55:05:9b:80:0c:8d:93: 44:ba:f6:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbbt2fZAngFoRBDEX+omxNWlmyuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2RDgx N0I4MjA5QTAeFw0yNjA5MjUwODE2MDlaFw0yNjA5MjYxMDMzMDlaMDMxMTAvBgNV BAMTKDNCMDQ4RUMwMkE0QTREOERFRUMzODk2Qjk0RUIzQjRFNjE2ODc5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWWCqrFoT+6lSnwwdZuTvePpd 6N8qEc5piYiI845TRDYX3SCqQYLqsLiFydE/IsPeOhSgRCE9zrj11a7V8DDfaiFC d8bUDQXxdDIVXjN4D+ePvGInNm73tO+6CF42vn6oehqF/s2rSYhwXYQb1oZO5NNg 1I+j/cAkq+ompX2pj7wluShkhnLc/uPHPkLLi9HZiwhQlKJ1MgKbtWkR+JY+df82 pFGGJ6k0Z8H/TIEKqz1n/xr4LaN5j1RUqtHaP3VioOhEVkoh7jji9+NBggBgIeV2 UWfYfkqYDq/FVbRKXX1ZOEMONOWeb8lT+LW3Kl7h00o5LKBc4C9bd7mbCW7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwSOwCpKTY3uw4lrlOs7TmFoeVcwHwYDVR0j BBgwFoAUMJ1mvtfFqrg5ZpeC8k/m2Be4IJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwZmNjYjItY2UxYy00ODYyLThlZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVE N0M1QUFCODM5NjY5NzgyRjI0RkU2RDgxN0I4MjA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMDlENjZCRUQ3QzVBQUI4Mzk2Njk3ODJGMjRGRTZEODE3Qjgy MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwZmNjYjItY2UxYy00ODYyLThl ZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2 RDgxN0I4MjA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9GFvywsP+2ZKDvGSSzljCDZ2SCY99VUEvM KTX6EsqV83Woi15goU0Or/TzKAUL5QU4swFJN3HNNo2chOtw2IzpnjKQbdLHkUDp aijhRn9Dw2a0M4YRxeyp1bTWVt2WVOFB9scQ6sUiUR+gWsgQC1nlJV2W7Ra9Ndz0 aty6Kmd2fJuysYnmNQL72lB696CramujfkaHsCBAYMYJEk+FcjCzr/SEzVwEkMyl L/iqeHOpU1CK6ErFGQYgi5grARNxMJJf+1yFBG5JXl2LtHuHH7hJ8LM8OlOCXQYM 4WBkajb81CeYP0ktGE/d1aJE6gGxrQ5uO0ElVQWbgAyNk0S69vw= -----END CERTIFICATE-----Generated at Sat Sep 26 04:38:56 2026 by rpki-client