$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft File: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft (raw, json) Hash identifier: ZjzCkCZjl/wIaiJSrGmrNivWqed+uradP3FOxoXLtbQ= Subject key identifier: 58:82:6E:C2:FD:19:EA:41:1E:6B:4F:A1:D8:21:EE:D3:F9:FD:7F:8E Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 Certificate issuer: /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Certificate serial: 2840B0AABFEFF9CF531E6B46D1C2729CC01EC54C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft Manifest number: E6 Signing time: Sun 18 Oct 2026 23:44:00 +0000 Manifest this update: Sun 18 Oct 2026 23:39:00 +0000 Manifest next update: Tue 20 Oct 2026 00:18:00 +0000 Files and hashes: 1: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: X+ZlO7h/pL9t4N4Gq7NgEd0rssKL3EkGKfZrYxmlYG4=) 2: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: 35sB3F+pYRWs2vzmYiPiuHmOw2zefVJi3xxGSLrd8Oc=) 3: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: lzLPq+5ACK3Fp2G9Qq15Ai5VNsw2ESnTuC604MZBsC4=) 4: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl (hash: oghDHIhBXMBU0YfBn2rpxraSdS7TmRorWDzpL2IwtgY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 00:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:40:b0:aa:bf:ef:f9:cf:53:1e:6b:46:d1:c2:72:9c:c0:1e:c5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Validity Not Before: Oct 18 23:39:00 2026 GMT Not After : Oct 20 00:18:00 2026 GMT Subject: CN=58826EC2FD19EA411E6B4FA1D821EED3F9FD7F8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:50:2a:53:41:ef:04:0c:77:79:2b:62:2b: 95:ae:56:6d:1d:2a:66:4d:aa:b7:6b:f3:96:4d:40: 03:3a:24:50:9e:88:af:0f:4c:03:d4:61:72:56:eb: 6c:59:9e:fb:11:8c:18:a8:78:25:5d:bc:5f:fd:ed: 41:03:e1:a4:2a:ca:ca:bc:76:37:9a:a8:6c:38:06: 3d:99:88:ce:67:b7:e7:8c:b9:37:c3:19:c2:02:c0: da:2c:60:21:1b:31:01:36:63:4f:56:ec:93:de:31: 21:a8:85:b9:c2:b1:9f:f4:9c:54:d5:bc:dc:89:9c: 51:aa:44:cf:ad:4f:40:7a:6e:64:d7:fb:9a:0f:e2: 85:c3:53:0a:2a:51:e8:2b:bd:62:ba:6b:11:87:cf: 0d:df:30:96:d1:de:eb:e5:13:d1:02:a7:47:e6:2d: 61:42:ec:a6:b5:53:f5:76:ff:d9:f1:5e:97:73:0a: ad:b7:a8:41:f5:fd:8b:62:d0:f6:f7:80:0c:a4:86: 32:98:3b:2a:3d:f9:51:40:d7:ea:88:46:fe:a6:a0: a8:1a:4f:e9:6a:83:3a:f2:ab:43:81:aa:cc:f9:46: da:7d:f8:ac:f2:cb:39:80:d2:a5:76:c9:26:fd:d3: 5a:3f:43:d7:44:5c:00:55:1d:e7:6d:1d:76:92:74: 89:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:82:6E:C2:FD:19:EA:41:1E:6B:4F:A1:D8:21:EE:D3:F9:FD:7F:8E X509v3 Authority Key Identifier: keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:95:30:45:32:7c:04:b2:ab:1e:e1:22:8c:29:85:57:a9:2a: 6c:b9:28:01:58:f4:79:18:6f:80:9e:4f:1b:99:73:06:15:d0: 95:97:9d:ea:f1:3d:d9:1a:fd:18:de:44:48:b3:cb:37:0b:03: 3f:34:68:68:e9:0f:e3:56:dd:0e:4d:9e:17:7f:0f:07:21:51: fe:8d:e0:c5:03:d4:16:3d:c5:b2:bf:8a:86:e1:a0:86:ff:e7: 9b:d7:2f:2b:1d:58:fb:45:42:0b:4f:b5:3f:06:bd:fe:7a:ab: c7:02:73:66:a4:2d:05:70:bd:ec:39:f8:15:66:ed:fa:7f:96: e2:02:34:a5:b7:60:bb:fb:6e:dd:6e:f9:22:e2:76:19:6b:be: a2:98:b7:84:ea:ee:4e:59:3c:8f:6a:ce:81:d8:ce:60:26:31: 93:b9:cb:e8:40:62:5f:14:17:54:56:3b:41:64:f3:d3:6f:2b: 31:c9:48:9d:07:86:87:87:ce:7c:64:8e:26:92:66:90:9a:78: 27:b3:bf:16:bf:b4:54:32:38:da:fe:10:66:29:7a:9e:5a:ba: 1f:16:0f:b2:38:c4:bc:f2:99:1a:12:99:03:27:9a:8c:c8:b1: 52:0b:48:5a:d2:b4:5a:8f:e4:88:10:0c:49:5b:83:9d:25:2b: 3c:0d:7a:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKECwqr/v+c9THmtG0cJynMAexUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFC NEE1QUZEMjAeFw0yNjEwMTgyMzM5MDBaFw0yNjEwMjAwMDE4MDBaMDMxMTAvBgNV BAMTKDU4ODI2RUMyRkQxOUVBNDExRTZCNEZBMUQ4MjFFRUQzRjlGRDdGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cVAqU0HvBAx3eStiK5WuVm0d KmZNqrdr85ZNQAM6JFCeiK8PTAPUYXJW62xZnvsRjBioeCVdvF/97UED4aQqysq8 djeaqGw4Bj2ZiM5nt+eMuTfDGcICwNosYCEbMQE2Y09W7JPeMSGohbnCsZ/0nFTV vNyJnFGqRM+tT0B6bmTX+5oP4oXDUwoqUegrvWK6axGHzw3fMJbR3uvlE9ECp0fm LWFC7Ka1U/V2/9nxXpdzCq23qEH1/Yti0Pb3gAykhjKYOyo9+VFA1+qIRv6moKga T+lqgzryq0OBqsz5Rtp9+KzyyzmA0qV2ySb901o/Q9dEXABVHedtHXaSdIlHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWIJuwv0Z6kEea0+h2CHu0/n9f44wHwYDVR0j BBgwFoAUOJnJLdDUL5PX2oVANP2IurSlr9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkwNGY2NzAtN2RhYy00Y2Y0LTk5MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkRE MEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFCNEE1QUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODk5QzkyREQwRDQyRjkzRDdEQTg1NDAzNEZEODhCQUI0QTVB RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4 QkFCNEE1QUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6VMEUyfASyqx7hIowphVepKmy5KAFY9HkY b4CeTxuZcwYV0JWXnerxPdka/RjeREizyzcLAz80aGjpD+NW3Q5Nnhd/DwchUf6N 4MUD1BY9xbK/iobhoIb/55vXLysdWPtFQgtPtT8Gvf56q8cCc2akLQVwvew5+BVm 7fp/luICNKW3YLv7bt1u+SLidhlrvqKYt4Tq7k5ZPI9qzoHYzmAmMZO5y+hAYl8U F1RWO0Fk89NvKzHJSJ0HhoeHznxkjiaSZpCaeCezvxa/tFQyONr+EGYpep5auh8W D7I4xLzymRoSmQMnmozIsVILSFrStFqP5IgQDElbg50lKzwNesI= -----END CERTIFICATE-----Generated at Mon Oct 19 09:23:52 2026 by rpki-client