$ rpki-client -vvvf rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft File: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft (raw, json) Hash identifier: n8KDcE7tT0BrdwPPjaVu/cH8uUjQbj8SMv1JUIyvdCw= Subject key identifier: FF:CC:6B:1E:6A:98:F9:4D:12:4B:DF:6A:05:4F:5C:F5:F1:A1:62:6E Authority key identifier: A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC Certificate issuer: /CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Certificate serial: 7C359E43FD38249E01F80B2CECAF935A2C3C7C09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:12:21 +0000 Manifest this update: Thu 17 Sep 2026 07:07:21 +0000 Manifest next update: Fri 18 Sep 2026 07:58:21 +0000 Files and hashes: 1: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: 1g2WZIx9KqbiuQj/CWy92fVr9rJvVDZ62oh+oM6NT5Y=) 2: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: b8kZYL8oI1P/7ClfsU26nDRuP+nZXNyKDNgSZ4R1ACk=) 3: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl (hash: JbWhH/lv9lm+L4KesDdf/zi1ugasawujxVJ2VijxJQ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:35:9e:43:fd:38:24:9e:01:f8:0b:2c:ec:af:93:5a:2c:3c:7c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Validity Not Before: Sep 17 07:07:21 2026 GMT Not After : Sep 18 07:58:21 2026 GMT Subject: CN=FFCC6B1E6A98F94D124BDF6A054F5CF5F1A1626E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:75:e7:8e:70:e0:9d:61:7d:2b:e0:1b:6f:49: 78:b7:33:94:84:e4:5a:2a:3a:b6:b8:2e:65:7c:11: 25:63:a6:8b:d8:ac:8b:f0:98:79:18:d0:50:62:c1: 10:14:8d:ff:59:ec:85:bc:21:2b:bc:da:ac:05:54: c7:63:07:fc:79:91:01:b5:70:ad:57:e3:b5:63:27: 0b:85:31:d8:29:28:d2:84:78:65:19:9e:ec:44:1b: 60:6b:1b:91:87:f3:2b:36:ba:eb:a7:4c:55:be:eb: 06:82:fd:23:d7:cb:6c:fb:82:4c:98:07:b3:dc:a6: eb:88:63:38:8d:64:ee:e8:6e:1e:eb:aa:9a:d0:ba: 3f:63:6a:6d:75:9b:1f:01:fb:93:7c:df:18:c9:4e: 0f:98:0e:77:f4:63:d7:2e:77:6d:d4:79:0f:42:cc: a4:7f:c9:3f:d8:54:4b:11:44:66:7a:9d:79:75:ff: 62:d3:01:8a:09:16:a6:0a:e8:32:56:1a:97:c3:16: 51:28:9d:65:bf:02:c1:37:a4:95:d9:d6:1f:9c:36: 27:3c:d0:41:29:f5:42:ea:1c:80:86:e6:87:34:8a: 10:a1:cd:64:88:49:a4:fd:b0:00:07:40:ab:71:c6: 30:37:d7:59:88:13:48:84:8d:17:17:96:97:3a:2d: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CC:6B:1E:6A:98:F9:4D:12:4B:DF:6A:05:4F:5C:F5:F1:A1:62:6E X509v3 Authority Key Identifier: keyid:A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:9e:8f:f2:4b:d6:b1:06:f4:6a:31:72:ea:a9:47:59:56:c3: 6c:ed:2b:fe:db:9f:b3:27:65:4b:e4:f5:5b:71:e2:f7:51:d9: aa:48:25:c8:5e:f1:06:20:57:3c:27:ee:27:ac:bf:ef:c0:cb: 6d:9b:e5:15:e1:20:ef:b6:8e:af:10:3f:bc:79:e1:57:5c:c0: 71:39:5f:18:c3:01:55:ab:e0:4f:d0:72:8f:7a:5d:ec:90:32: 23:8d:d4:73:f2:8e:16:b2:0d:3c:e3:1e:ae:2d:b7:40:80:bb: d7:61:cf:0f:5f:5b:3a:46:2e:6a:97:f0:97:6f:fd:67:f1:38: f0:86:f3:6b:f5:36:09:03:57:69:47:d6:f3:3a:4f:6e:56:e9: 45:32:08:0d:cb:f4:dd:e7:3e:02:7c:9c:b8:0c:5d:2e:7f:45: 27:d3:0b:dc:25:d1:15:d2:e9:51:a4:15:97:d4:81:c0:eb:0b: 0c:a0:cc:be:5a:44:c5:88:32:2a:b0:d5:3b:0f:b4:11:c3:ff: 8f:41:4b:16:5c:6d:b2:7c:27:87:40:7e:1a:01:26:d8:68:6a: de:1c:3d:e6:fd:94:71:53:38:ce:8c:b4:61:77:a7:bc:89:17: a3:fb:3b:14:7b:64:4d:d6:64:c6:b4:00:db:32:e3:30:6e:9f: 4d:60:87:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDWeQ/04JJ4B+Ass7K+TWiw8fAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5QzcyNjRE QTFFMjNCQzAeFw0yNjA5MTcwNzA3MjFaFw0yNjA5MTgwNzU4MjFaMDMxMTAvBgNV BAMTKEZGQ0M2QjFFNkE5OEY5NEQxMjRCREY2QTA1NEY1Q0Y1RjFBMTYyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqdeeOcOCdYX0r4BtvSXi3M5SE 5FoqOra4LmV8ESVjpovYrIvwmHkY0FBiwRAUjf9Z7IW8ISu82qwFVMdjB/x5kQG1 cK1X47VjJwuFMdgpKNKEeGUZnuxEG2BrG5GH8ys2uuunTFW+6waC/SPXy2z7gkyY B7PcpuuIYziNZO7obh7rqprQuj9jam11mx8B+5N83xjJTg+YDnf0Y9cud23UeQ9C zKR/yT/YVEsRRGZ6nXl1/2LTAYoJFqYK6DJWGpfDFlEonWW/AsE3pJXZ1h+cNic8 0EEp9ULqHICG5oc0ihChzWSISaT9sAAHQKtxxjA311mIE0iEjRcXlpc6LXCxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/8xrHmqY+U0SS99qBU9c9fGhYm4wHwYDVR0j BBgwFoAUo5AH8+Kii458C3qpJZxyZNoeI7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNlNDE3N2QtODA5My00NDdjLTg3YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNF MkEyOEI4RTdDMEI3QUE5MjU5QzcyNjREQTFFMjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzkwMDdGM0UyQTI4QjhFN0MwQjdBQTkyNTlDNzI2NERBMUUy M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5Qzcy NjREQTFFMjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqej/JL1rEG9GoxcuqpR1lWw2ztK/7bn7Mn ZUvk9Vtx4vdR2apIJche8QYgVzwn7iesv+/Ay22b5RXhIO+2jq8QP7x54VdcwHE5 XxjDAVWr4E/Qco96XeyQMiON1HPyjhayDTzjHq4tt0CAu9dhzw9fWzpGLmqX8Jdv /WfxOPCG82v1NgkDV2lH1vM6T25W6UUyCA3L9N3nPgJ8nLgMXS5/RSfTC9wl0RXS 6VGkFZfUgcDrCwygzL5aRMWIMiqw1TsPtBHD/49BSxZcbbJ8J4dAfhoBJthoat4c Peb9lHFTOM6MtGF3p7yJF6P7OxR7ZE3WZMa0ANsy4zBun01gh5c= -----END CERTIFICATE-----Generated at Thu Sep 17 15:10:37 2026 by rpki-client