$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft File: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft (raw, json) Hash identifier: geE7vkGdmYlbR5jc3nePxY9paQ9zoftDqnPTMvkNqTM= Subject key identifier: D7:C5:0F:13:08:B6:9D:D5:9B:5A:00:38:ED:CE:56:6E:EF:F3:91:38 Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 Certificate issuer: /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Certificate serial: 0BB81E1583E639B249DAAD40A4F49B84BDAE959D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft Manifest number: E5 Signing time: Sun 18 Oct 2026 07:13:11 +0000 Manifest this update: Sun 18 Oct 2026 07:08:11 +0000 Manifest next update: Mon 19 Oct 2026 07:40:11 +0000 Files and hashes: 1: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: lzLPq+5ACK3Fp2G9Qq15Ai5VNsw2ESnTuC604MZBsC4=) 2: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl (hash: df29lNp12TECglbI6zdpjyR3puCBwpVsj4G+MgxuFDA=) 3: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: 35sB3F+pYRWs2vzmYiPiuHmOw2zefVJi3xxGSLrd8Oc=) 4: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: X+ZlO7h/pL9t4N4Gq7NgEd0rssKL3EkGKfZrYxmlYG4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 02:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b8:1e:15:83:e6:39:b2:49:da:ad:40:a4:f4:9b:84:bd:ae:95:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Validity Not Before: Oct 18 07:08:11 2026 GMT Not After : Oct 19 07:40:11 2026 GMT Subject: CN=D7C50F1308B69DD59B5A0038EDCE566EEFF39138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:ae:5e:64:01:71:d4:21:29:b7:3f:2b:c4: 00:44:ed:7d:02:81:f5:5f:e5:f3:5a:2d:74:81:dd: 30:60:1d:a0:6f:24:93:fb:84:59:fc:d2:93:64:25: 4e:8d:5c:d3:f6:83:13:ab:c9:58:39:0c:6a:90:c8: bb:2c:c8:bf:cd:66:fb:40:0b:82:ac:7a:b4:ac:0c: 6c:31:ba:99:54:65:5c:02:4a:37:31:8e:15:a9:10: af:c1:17:4c:7e:a4:63:98:3f:33:ff:7a:ea:c8:0b: 6a:59:94:cf:fa:64:92:01:70:ab:8f:09:2c:5b:a1: 36:56:81:e8:58:12:ee:59:6e:17:ae:a6:f2:94:a6: 51:71:ec:e1:fa:dc:40:0c:06:0e:96:f1:c0:6d:3c: 4b:56:11:3d:93:f0:ff:36:26:8d:a3:79:e5:78:7f: 47:04:96:07:bd:f6:9a:fc:ec:bc:f4:ff:23:a8:68: aa:13:8a:1c:57:ae:45:09:d7:e7:40:bd:10:82:82: 06:d3:1e:f5:34:3e:9b:86:1d:1b:20:b7:25:41:2c: 18:3a:08:d2:4d:51:7e:ae:80:bb:84:bf:aa:60:4f: 46:3b:16:27:1d:f3:49:12:25:d6:08:f9:06:d5:97: 9f:b6:9d:e1:a4:f2:56:6e:40:54:9c:63:e5:b9:c6: 90:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C5:0F:13:08:B6:9D:D5:9B:5A:00:38:ED:CE:56:6E:EF:F3:91:38 X509v3 Authority Key Identifier: keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ed:53:09:32:47:f6:c4:ae:f8:e9:93:71:62:e7:e6:dc:d8: 35:02:12:0e:e1:4b:6c:5d:be:66:e6:ad:65:66:a3:e8:4a:6e: 23:25:0f:f6:2a:ee:a0:c2:15:fb:76:6a:7a:63:80:b1:82:e5: e9:0b:6a:ff:48:79:93:4c:ac:8c:b7:d6:80:79:74:75:51:a8: 55:ca:4c:c0:12:1b:56:93:9b:6b:1b:3a:75:93:b1:fa:eb:0b: 45:f2:72:e3:ca:b9:f8:86:b3:1d:07:ac:f1:4c:49:c3:84:af: 14:ae:48:6b:de:5b:4d:70:41:83:0b:99:d8:69:18:f3:68:4e: 1e:2c:47:c3:47:21:07:0d:98:14:01:39:26:71:79:5e:70:9e: 22:58:64:21:bb:f1:4a:ed:c4:53:e9:c2:1e:29:36:f5:20:95: e2:7f:3f:91:45:ee:b1:8b:df:9f:7c:31:25:54:32:d6:59:1c: 6b:d7:68:2d:27:bc:27:c7:20:6c:ff:c4:45:20:75:12:94:b9: 88:39:9e:0f:8c:4b:11:63:1f:10:a6:fd:95:1d:3d:fc:df:84: 94:1a:b8:5f:d1:b6:e0:79:5e:24:a7:67:8b:79:47:6b:a1:88: 4a:e4:e0:e4:9d:0d:f9:33:3a:53:72:3d:dc:7f:49:d5:e1:8d: 05:3c:3c:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC7geFYPmObJJ2q1ApPSbhL2ulZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFC NEE1QUZEMjAeFw0yNjEwMTgwNzA4MTFaFw0yNjEwMTkwNzQwMTFaMDMxMTAvBgNV BAMTKEQ3QzUwRjEzMDhCNjlERDU5QjVBMDAzOEVEQ0U1NjZFRUZGMzkxMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkK5eZAFx1CEptz8rxABE7X0C gfVf5fNaLXSB3TBgHaBvJJP7hFn80pNkJU6NXNP2gxOryVg5DGqQyLssyL/NZvtA C4KserSsDGwxuplUZVwCSjcxjhWpEK/BF0x+pGOYPzP/eurIC2pZlM/6ZJIBcKuP CSxboTZWgehYEu5ZbheupvKUplFx7OH63EAMBg6W8cBtPEtWET2T8P82Jo2jeeV4 f0cElge99pr87Lz0/yOoaKoTihxXrkUJ1+dAvRCCggbTHvU0PpuGHRsgtyVBLBg6 CNJNUX6ugLuEv6pgT0Y7Ficd80kSJdYI+QbVl5+2neGk8lZuQFScY+W5xpDdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU18UPEwi2ndWbWgA47c5Wbu/zkTgwHwYDVR0j BBgwFoAUOJnJLdDUL5PX2oVANP2IurSlr9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkwNGY2NzAtN2RhYy00Y2Y0LTk5MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkRE MEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFCNEE1QUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODk5QzkyREQwRDQyRjkzRDdEQTg1NDAzNEZEODhCQUI0QTVB RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4 QkFCNEE1QUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrtUwkyR/bErvjpk3Fi5+bc2DUCEg7hS2xd vmbmrWVmo+hKbiMlD/Yq7qDCFft2anpjgLGC5ekLav9IeZNMrIy31oB5dHVRqFXK TMASG1aTm2sbOnWTsfrrC0XycuPKufiGsx0HrPFMScOErxSuSGveW01wQYMLmdhp GPNoTh4sR8NHIQcNmBQBOSZxeV5wniJYZCG78UrtxFPpwh4pNvUgleJ/P5FF7rGL 3598MSVUMtZZHGvXaC0nvCfHIGz/xEUgdRKUuYg5ng+MSxFjHxCm/ZUdPfzfhJQa uF/RtuB5XiSnZ4t5R2uhiErk4OSdDfkzOlNyPdx/SdXhjQU8PAU= -----END CERTIFICATE-----Generated at Sun Oct 18 15:31:27 2026 by rpki-client