$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft File: 399FBE55CFD957C1E3849C75FE378403E394BB45.mft (raw, json) Hash identifier: ircTlo2hakkNOQfaeYDAnMaV/juDqRl4YR1shBilXDc= Subject key identifier: 36:86:FE:E1:FF:57:4C:6F:73:FA:99:04:EF:D4:01:D9:E1:82:4B:64 Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Certificate serial: 05C4743164484BBF4FC612B69B86B2C8828FC182 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 16:31:15 +0000 Manifest this update: Thu 24 Sep 2026 16:26:15 +0000 Manifest next update: Fri 25 Sep 2026 18:54:15 +0000 Files and hashes: 1: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: Nda6FqqHwv307lkTxH+b0mWevIjFxVsW+c3rWmYY64U=) 2: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: /vRQ0F5lBxm5YccSzuUARECi1VFqg7FRoH3qOHTCFHs=) 3: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: rqJDuuQFB9Ir08Xt+9/dUd2pRxC5DTIO9a28+O4McDo=) 4: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: qood+9S8zNU9X/jpjUZIu26OXyUnDxyv/AsytcFufXA=) 5: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: uojxwHiaMR8PO5h26JWS2B444u+QQh72ookAa5uFqSs=) 6: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: zSazRb0IpJJ4cBgKA2+8jgm7s2YnWXUiU+1QnaQiN1g=) 7: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: NrcqksrmsSbHeL16ugEy8PBgZElc8n2NevcNzHFW6Sc=) 8: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: gmPxQm5NcqK3BCfFQb7w+dLmFYWZ/DthSfb9I0IYOOQ=) 9: 399FBE55CFD957C1E3849C75FE378403E394BB45.crl (hash: mUxufk+dCDWpDjKKY8sKnBSzsVMH6uBLM91FRuPBshw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c4:74:31:64:48:4b:bf:4f:c6:12:b6:9b:86:b2:c8:82:8f:c1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Validity Not Before: Sep 24 16:26:15 2026 GMT Not After : Sep 25 18:54:15 2026 GMT Subject: CN=3686FEE1FF574C6F73FA9904EFD401D9E1824B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:01:fd:56:f3:31:60:bd:25:41:b3:d3:41:1a: b5:e1:fa:80:a9:e8:10:27:eb:f6:ec:3a:30:d8:5f: d1:1e:6b:14:9a:98:25:bc:fd:08:1a:43:dc:ec:a0: d2:e0:b9:ba:f5:dd:cc:05:c3:6c:c7:53:ae:11:ca: db:da:61:c3:f2:13:e4:51:11:60:26:06:91:59:bd: 74:6b:f5:f0:13:e8:73:10:9b:cf:38:5e:f9:d9:e5: 91:7c:32:2d:80:cc:f5:fc:dc:46:b3:05:a0:9c:db: 4f:ba:0e:23:a5:97:f7:89:b1:1d:e9:de:14:5d:a9: 2d:12:a4:26:58:c7:e2:a1:8b:b2:b3:35:3a:ba:7a: 73:4c:cf:f5:8e:51:b4:74:c5:5c:04:6b:94:ce:52: ca:01:2b:97:13:14:18:d7:de:4a:3c:e7:2a:85:1d: cf:97:b5:19:3c:13:28:81:d3:fc:91:56:2f:a6:60: 83:6c:80:35:71:52:11:75:94:93:7a:d1:e5:9d:25: 09:d7:d4:8e:4b:c1:51:8a:74:b8:ce:51:22:e1:15: bd:54:ae:2d:9d:60:5b:3e:8f:21:f4:06:17:e3:86: ab:27:2c:8a:20:97:bb:76:3c:36:6f:93:e0:18:71: c4:d2:83:05:b5:f9:65:1d:b8:3e:67:6d:f6:06:b4: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:86:FE:E1:FF:57:4C:6F:73:FA:99:04:EF:D4:01:D9:E1:82:4B:64 X509v3 Authority Key Identifier: keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f4:99:bb:39:16:0d:13:86:a7:07:58:57:e4:c4:4c:d0:15: 06:c2:d5:4c:90:26:67:3e:4e:ab:97:4f:eb:7b:d2:a1:87:4c: 48:ac:7f:b7:4b:9d:40:e6:53:b7:88:81:67:27:93:64:f7:41: 99:33:22:db:f1:cc:38:b7:1e:74:fc:fb:84:a9:54:72:16:ae: c0:af:fb:1d:93:87:56:fc:65:ca:66:4e:fa:e8:bb:e8:46:b6: 44:20:0b:d8:06:2d:2c:cf:81:68:c9:8f:e7:3d:04:3a:f6:b1: 53:ee:65:d0:ee:b1:bd:11:f3:89:76:a7:4d:f6:3a:b7:ed:2e: ba:0d:72:fc:30:21:fa:30:db:fa:1a:ab:f8:62:e0:31:13:f2: a9:68:c6:d6:0f:51:62:c7:13:d6:ac:6f:06:10:42:37:86:08: e9:fb:62:e5:cb:7b:f4:80:e5:c3:6c:df:c5:49:d3:9f:bc:6e: 13:80:62:fa:35:b3:8f:0a:f2:ea:6f:8f:ec:5b:bd:3d:b6:f6: cd:25:2a:aa:47:2e:88:ab:f4:00:38:40:5b:35:b1:1f:a6:b1: 39:b6:bf:07:98:53:e5:6d:c9:49:5a:95:e7:16:20:8a:77:78: ce:8c:bf:76:13:ac:da:ff:2d:bb:12:13:9e:a3:11:97:57:bb: c6:36:8e:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcR0MWRIS79PxhK2m4ayyIKPwYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNF Mzk0QkI0NTAeFw0yNjA5MjQxNjI2MTVaFw0yNjA5MjUxODU0MTVaMDMxMTAvBgNV BAMTKDM2ODZGRUUxRkY1NzRDNkY3M0ZBOTkwNEVGRDQwMUQ5RTE4MjRCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjAf1W8zFgvSVBs9NBGrXh+oCp 6BAn6/bsOjDYX9EeaxSamCW8/QgaQ9zsoNLgubr13cwFw2zHU64RytvaYcPyE+RR EWAmBpFZvXRr9fAT6HMQm884XvnZ5ZF8Mi2AzPX83EazBaCc20+6DiOll/eJsR3p 3hRdqS0SpCZYx+Khi7KzNTq6enNMz/WOUbR0xVwEa5TOUsoBK5cTFBjX3ko85yqF Hc+XtRk8EyiB0/yRVi+mYINsgDVxUhF1lJN60eWdJQnX1I5LwVGKdLjOUSLhFb1U ri2dYFs+jyH0BhfjhqsnLIogl7t2PDZvk+AYccTSgwW1+WUduD5nbfYGtGKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNob+4f9XTG9z+pkE79QB2eGCS2QwHwYDVR0j BBgwFoAUOZ++Vc/ZV8HjhJx1/jeEA+OUu0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwZGZiNWEtODQ1ZS00ZGRmLWFjYTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVD RkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNFMzk0QkI0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOTlGQkU1NUNGRDk1N0MxRTM4NDlDNzVGRTM3ODQwM0UzOTRC QjQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwZGZiNWEtODQ1ZS00ZGRmLWFj YTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0 MDNFMzk0QkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACD0mbs5Fg0ThqcHWFfkxEzQFQbC1UyQJmc+ TquXT+t70qGHTEisf7dLnUDmU7eIgWcnk2T3QZkzItvxzDi3HnT8+4SpVHIWrsCv +x2Th1b8ZcpmTvrou+hGtkQgC9gGLSzPgWjJj+c9BDr2sVPuZdDusb0R84l2p032 OrftLroNcvwwIfow2/oaq/hi4DET8qloxtYPUWLHE9asbwYQQjeGCOn7YuXLe/SA 5cNs38VJ05+8bhOAYvo1s48K8upvj+xbvT229s0lKqpHLoir9AA4QFs1sR+msTm2 vweYU+VtyUlalecWIIp3eM6Mv3YTrNr/LbsSE56jEZdXu8Y2jh0= -----END CERTIFICATE-----Generated at Thu Sep 24 20:39:40 2026 by rpki-client