$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft File: 399FBE55CFD957C1E3849C75FE378403E394BB45.mft (raw, json) Hash identifier: +PoRaSTXE9Ub4fKSLbAykFRLaIyDADl8YPkfn49QT00= Subject key identifier: F1:3C:5B:51:2C:91:A9:18:FB:A9:4F:37:7E:A3:06:23:CE:B9:32:76 Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Certificate serial: 4ECA5754D4F9CFC125A261A283E333F1452949F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 18:46:16 +0000 Manifest this update: Mon 02 Nov 2026 18:41:16 +0000 Manifest next update: Tue 03 Nov 2026 22:22:16 +0000 Files and hashes: 1: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: zSazRb0IpJJ4cBgKA2+8jgm7s2YnWXUiU+1QnaQiN1g=) 2: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: gmPxQm5NcqK3BCfFQb7w+dLmFYWZ/DthSfb9I0IYOOQ=) 3: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: qood+9S8zNU9X/jpjUZIu26OXyUnDxyv/AsytcFufXA=) 4: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: NrcqksrmsSbHeL16ugEy8PBgZElc8n2NevcNzHFW6Sc=) 5: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: Nda6FqqHwv307lkTxH+b0mWevIjFxVsW+c3rWmYY64U=) 6: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: /vRQ0F5lBxm5YccSzuUARECi1VFqg7FRoH3qOHTCFHs=) 7: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: rqJDuuQFB9Ir08Xt+9/dUd2pRxC5DTIO9a28+O4McDo=) 8: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: uojxwHiaMR8PO5h26JWS2B444u+QQh72ookAa5uFqSs=) 9: 399FBE55CFD957C1E3849C75FE378403E394BB45.crl (hash: KOce2zwql4N8pw2+BmCybdWMlvw+7AgmugXlfB5dCP4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ca:57:54:d4:f9:cf:c1:25:a2:61:a2:83:e3:33:f1:45:29:49:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Validity Not Before: Nov 2 18:41:16 2026 GMT Not After : Nov 3 22:22:16 2026 GMT Subject: CN=F13C5B512C91A918FBA94F377EA30623CEB93276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:9c:48:91:3a:c6:83:de:e0:54:89:73:da: ef:60:fb:b7:08:88:f4:ec:cd:45:39:cd:81:65:1f: b9:a4:c3:f4:5a:3d:5f:88:91:94:f2:ef:7f:f4:45: 1e:57:be:ae:6f:85:62:97:b4:f4:e1:81:64:f4:65: 1d:f6:d8:4a:d2:bf:e3:ff:26:71:f0:47:1c:eb:a0: 7d:4f:9c:25:03:b0:f2:68:35:0d:b1:b6:bd:01:89: 7f:e3:c2:6c:4d:f6:83:ea:90:e9:47:de:f7:6a:0b: c4:89:4f:af:e5:3b:0b:c0:38:8f:69:9c:e9:61:9b: f7:5c:b5:74:c3:29:ef:4f:3d:df:5c:9d:1c:99:91: ac:4e:28:54:61:0f:a6:4a:f0:d7:94:2c:d3:d5:cc: 34:01:42:a5:31:59:b9:8a:23:88:13:93:6b:06:06: 3d:89:1e:42:6f:58:c0:e4:e9:3a:22:83:bc:e5:fb: f7:c1:f8:e8:09:e2:c1:fc:ae:f7:99:c7:2a:1c:eb: 44:84:07:f8:be:3a:6e:f6:3b:3c:f8:87:94:33:02: 16:c8:9c:90:d2:93:9a:ec:b3:5f:f7:cc:fb:87:00: 64:50:21:aa:a2:fb:5f:17:a5:b0:06:41:6d:aa:20: 36:b6:cf:cd:06:3a:1f:0d:e0:57:66:fc:c7:e1:18: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3C:5B:51:2C:91:A9:18:FB:A9:4F:37:7E:A3:06:23:CE:B9:32:76 X509v3 Authority Key Identifier: keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:cb:a1:c5:9b:99:ce:0c:38:0c:4b:b7:7c:05:bb:7b:df:5b: 96:e7:25:ae:3e:56:6f:46:75:b1:dc:63:2c:4e:cc:97:ad:98: e9:8f:23:a2:f5:e6:5b:96:1a:1b:a7:b6:c7:7e:bd:2c:0e:10: 8f:bc:85:35:04:93:d5:6c:d7:39:39:be:3e:73:21:18:ef:ad: 2c:81:35:d3:1a:ec:73:76:78:71:3c:9d:66:0f:3c:19:37:66: ba:b2:33:f8:af:2c:59:78:c1:15:43:e3:51:84:25:78:50:0e: 61:18:22:21:f7:2c:bc:fd:25:66:7a:5f:34:81:f3:ae:fe:ee: 1b:6e:95:45:17:58:af:3c:c8:4f:eb:50:0f:e8:4a:ed:a4:77: 1f:1f:1f:5c:f1:e4:08:ff:df:93:21:c9:32:c5:b4:d2:5f:3a: 5e:67:72:d6:76:3f:f9:fe:5c:16:5d:1b:c7:e0:91:46:6d:91: 61:9d:40:cb:cd:8a:2f:ac:91:44:aa:ae:77:3c:61:43:cb:a3: fe:00:0f:53:20:60:c3:0c:74:4d:06:6a:5a:5e:3d:b3:38:ed: f4:fb:77:f7:7a:6b:28:9c:d2:72:e9:7f:34:89:57:33:3a:27: 38:37:dc:78:83:97:c6:ec:bd:5c:ea:1c:e9:f0:89:f1:11:a6: 38:1d:60:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTspXVNT5z8ElomGig+Mz8UUpSfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNF Mzk0QkI0NTAeFw0yNjExMDIxODQxMTZaFw0yNjExMDMyMjIyMTZaMDMxMTAvBgNV BAMTKEYxM0M1QjUxMkM5MUE5MThGQkE5NEYzNzdFQTMwNjIzQ0VCOTMyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEY5xIkTrGg97gVIlz2u9g+7cI iPTszUU5zYFlH7mkw/RaPV+IkZTy73/0RR5Xvq5vhWKXtPThgWT0ZR322ErSv+P/ JnHwRxzroH1PnCUDsPJoNQ2xtr0BiX/jwmxN9oPqkOlH3vdqC8SJT6/lOwvAOI9p nOlhm/dctXTDKe9PPd9cnRyZkaxOKFRhD6ZK8NeULNPVzDQBQqUxWbmKI4gTk2sG Bj2JHkJvWMDk6Toig7zl+/fB+OgJ4sH8rveZxyoc60SEB/i+Om72Ozz4h5QzAhbI nJDSk5rss1/3zPuHAGRQIaqi+18XpbAGQW2qIDa2z80GOh8N4Fdm/MfhGDYxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8TxbUSyRqRj7qU83fqMGI865MnYwHwYDVR0j BBgwFoAUOZ++Vc/ZV8HjhJx1/jeEA+OUu0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwZGZiNWEtODQ1ZS00ZGRmLWFjYTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVD RkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNFMzk0QkI0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOTlGQkU1NUNGRDk1N0MxRTM4NDlDNzVGRTM3ODQwM0UzOTRC QjQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwZGZiNWEtODQ1ZS00ZGRmLWFj YTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0 MDNFMzk0QkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTLocWbmc4MOAxLt3wFu3vfW5bnJa4+Vm9G dbHcYyxOzJetmOmPI6L15luWGhuntsd+vSwOEI+8hTUEk9Vs1zk5vj5zIRjvrSyB NdMa7HN2eHE8nWYPPBk3ZrqyM/ivLFl4wRVD41GEJXhQDmEYIiH3LLz9JWZ6XzSB 867+7htulUUXWK88yE/rUA/oSu2kdx8fH1zx5Aj/35MhyTLFtNJfOl5nctZ2P/n+ XBZdG8fgkUZtkWGdQMvNii+skUSqrnc8YUPLo/4AD1MgYMMMdE0GalpePbM47fT7 d/d6ayic0nLpfzSJVzM6Jzg33HiDl8bsvVzqHOnwifERpjgdYCU= -----END CERTIFICATE-----Generated at Tue Nov 3 01:33:21 2026 by rpki-client