$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft File: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft (raw, json) Hash identifier: uLkAArIaZW1PgGVIfLELp40ms+2LhG4hcPsXFVaUp0U= Subject key identifier: 34:1C:64:F8:D2:15:11:C5:DD:B6:DD:B8:E0:C2:95:EF:09:8B:F6:E5 Authority key identifier: 1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD Certificate issuer: /CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Certificate serial: 427F9A17D7D5475B51C149D7CA6BED8C7F5535D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:35:41 +0000 Manifest this update: Wed 16 Sep 2026 21:30:41 +0000 Manifest next update: Thu 17 Sep 2026 22:51:41 +0000 Files and hashes: 1: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl (hash: R8aZ8SWaxJEyr26jqjfYNpqt8HcoFy02+wxtwDW5SRs=) 2: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: 3u+krw4MaugdVPNW0321aXdI9rwWYGxYt6HAFFT4OAw=) 3: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: pW3XBmKi6nT+DFL99ofR2D1BtLS4+aP/u1rjwoOPDjI=) 4: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: uLEgNCgaAjsQjxP4KxUR5P3CjpsSxN+zwR1ag08fAfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7f:9a:17:d7:d5:47:5b:51:c1:49:d7:ca:6b:ed:8c:7f:55:35:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Validity Not Before: Sep 16 21:30:41 2026 GMT Not After : Sep 17 22:51:41 2026 GMT Subject: CN=341C64F8D21511C5DDB6DDB8E0C295EF098BF6E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:3b:a8:a0:c5:ec:06:33:4e:75:5a:31:f2: a1:54:4b:1d:8c:07:4d:16:5f:b0:42:cd:d8:29:2c: ff:51:2b:e7:55:13:21:e8:d4:7f:41:70:e0:d7:d9: bf:ee:89:1f:29:24:73:08:4f:8b:42:d5:2d:85:e1: 49:c7:58:3d:84:95:6d:20:31:b2:67:fa:55:2e:32: f0:cb:79:60:1b:39:f7:b5:d2:f8:69:a3:25:6c:1d: 68:7f:a9:33:f3:47:29:09:82:da:b8:2e:94:60:23: f2:aa:ab:b1:1b:81:5f:18:de:d2:cb:8f:9b:37:48: 84:84:6e:e3:da:38:2a:c5:3d:a6:f6:dc:a6:58:61: f0:97:f6:42:d9:5e:d5:4f:3e:c4:24:63:81:cd:ca: 81:fd:9b:03:1b:34:90:3e:ab:60:6a:d7:11:98:03: 03:5d:ed:9f:e9:e4:1a:94:67:08:8c:1e:3f:2f:86: e5:88:71:8e:2e:e1:2e:c5:bd:29:2d:a1:c5:cb:57: 1a:fb:3c:fc:a4:f7:be:4e:70:24:38:b6:0a:0a:93: f4:49:0e:7c:36:d6:94:83:48:5e:31:4e:0d:48:60: a9:46:93:10:2a:e7:63:0a:f5:b5:d4:70:01:5a:41: 0a:16:00:aa:0b:fb:5f:5a:df:da:ee:0b:72:29:b5: df:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1C:64:F8:D2:15:11:C5:DD:B6:DD:B8:E0:C2:95:EF:09:8B:F6:E5 X509v3 Authority Key Identifier: keyid:1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:84:5a:a3:c5:19:52:1f:91:f3:cf:e0:7f:b5:fd:e6:11:53: 88:00:f3:0b:6d:8f:8a:e8:c9:4e:ce:a6:21:f4:c8:7c:0a:7d: 9f:8c:8b:83:e0:fa:fb:c4:c1:42:07:fe:4b:d5:39:08:29:3b: 76:67:88:d3:bb:08:e1:94:76:60:c0:8e:86:06:8d:f7:4a:7a: 56:31:86:66:3b:d7:bc:ae:8f:41:93:c2:78:6f:6f:f1:33:71: df:06:c6:71:ec:b3:95:fb:e1:51:5a:29:c2:49:31:9b:5e:a4: 31:75:61:20:87:3a:ee:82:6f:b5:0e:b7:cd:05:30:24:70:83: a1:9d:49:00:d2:7d:ff:d8:d4:5a:22:e9:eb:81:94:e1:cc:87: b3:ef:18:5a:07:87:11:3b:4a:d8:6b:d1:61:2b:5d:72:61:fb: b8:e2:fa:9c:55:e6:f0:98:6a:96:d3:23:17:0b:ec:5f:6b:65: 2d:f2:49:09:17:10:8c:96:6f:31:81:3d:ed:e2:ef:42:f2:a3: 27:2a:45:de:e5:f3:76:f7:f0:8c:dd:74:33:62:16:42:2a:d6: 57:fb:9d:5d:4a:6a:5c:bc:e3:5c:ad:77:10:f8:26:a5:5e:4c: eb:68:0f:57:58:b4:b2:82:47:3b:53:6f:ea:7c:8a:88:56:90: ac:19:45:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQn+aF9fVR1tRwUnXymvtjH9VNdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERC Rjc5ODNBRDAeFw0yNjA5MTYyMTMwNDFaFw0yNjA5MTcyMjUxNDFaMDMxMTAvBgNV BAMTKDM0MUM2NEY4RDIxNTExQzVEREI2RERCOEUwQzI5NUVGMDk4QkY2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQzuooMXsBjNOdVox8qFUSx2M B00WX7BCzdgpLP9RK+dVEyHo1H9BcODX2b/uiR8pJHMIT4tC1S2F4UnHWD2ElW0g MbJn+lUuMvDLeWAbOfe10vhpoyVsHWh/qTPzRykJgtq4LpRgI/Kqq7EbgV8Y3tLL j5s3SISEbuPaOCrFPab23KZYYfCX9kLZXtVPPsQkY4HNyoH9mwMbNJA+q2Bq1xGY AwNd7Z/p5BqUZwiMHj8vhuWIcY4u4S7FvSktocXLVxr7PPyk975OcCQ4tgoKk/RJ Dnw21pSDSF4xTg1IYKlGkxAq52MK9bXUcAFaQQoWAKoL+19a39ruC3Iptd/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNBxk+NIVEcXdtt244MKV7wmL9uUwHwYDVR0j BBgwFoAUHTmw2RdICoXLs7DZ0J4iDb95g60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJiZmFiMDktYzFlOS00NGQ4LTgxOWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkx NzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERCRjc5ODNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDM5QjBEOTE3NDgwQTg1Q0JCM0IwRDlEMDlFMjIwREJGNzk4 M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIy MERCRjc5ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKEWqPFGVIfkfPP4H+1/eYRU4gA8wttj4ro yU7OpiH0yHwKfZ+Mi4Pg+vvEwUIH/kvVOQgpO3ZniNO7COGUdmDAjoYGjfdKelYx hmY717yuj0GTwnhvb/Ezcd8GxnHss5X74VFaKcJJMZtepDF1YSCHOu6Cb7UOt80F MCRwg6GdSQDSff/Y1Foi6euBlOHMh7PvGFoHhxE7Sthr0WErXXJh+7ji+pxV5vCY apbTIxcL7F9rZS3ySQkXEIyWbzGBPe3i70LyoycqRd7l83b38IzddDNiFkIq1lf7 nV1Kaly841ytdxD4JqVeTOtoD1dYtLKCRztTb+p8iohWkKwZRTU= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:37 2026 by rpki-client