$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft File: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft (raw, json) Hash identifier: pnvEaQ7M/VJ0rZlJIOxZaz2QJBehzfhH2+yfdbSaUCY= Subject key identifier: 21:40:69:0B:15:44:A6:9F:FA:9D:FF:BF:01:6A:EF:AA:AF:86:55:13 Authority key identifier: 38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 Certificate issuer: /CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Certificate serial: 70FF979365EA62B6F1E15C0DF89B171258957EAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft Manifest number: A6 Signing time: Mon 31 Aug 2026 22:12:25 +0000 Manifest this update: Mon 31 Aug 2026 22:07:25 +0000 Manifest next update: Wed 02 Sep 2026 00:41:25 +0000 Files and hashes: 1: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: X+ZlO7h/pL9t4N4Gq7NgEd0rssKL3EkGKfZrYxmlYG4=) 2: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: 35sB3F+pYRWs2vzmYiPiuHmOw2zefVJi3xxGSLrd8Oc=) 3: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: lzLPq+5ACK3Fp2G9Qq15Ai5VNsw2ESnTuC604MZBsC4=) 4: 3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl (hash: EKuoMpOWQnEjalvS9T7Xi4vI7Q3OyubrjoPlD44egK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 00:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ff:97:93:65:ea:62:b6:f1:e1:5c:0d:f8:9b:17:12:58:95:7e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2 Validity Not Before: Aug 31 22:07:25 2026 GMT Not After : Sep 2 00:41:25 2026 GMT Subject: CN=2140690B1544A69FFA9DFFBF016AEFAAAF865513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:be:e2:17:77:b3:6f:69:78:51:42:86:4e: 01:75:28:4d:f9:69:aa:88:0d:bb:5f:f6:e1:ee:e6: cb:cf:4a:1e:8e:47:f2:61:74:cb:4a:31:46:c7:e4: 42:3d:2f:83:31:45:73:cf:93:95:1f:2b:97:f7:83: a4:6d:69:bf:14:36:d9:d1:0e:e2:45:b0:55:46:c4: 82:9a:45:0a:1a:8d:92:dd:db:20:36:92:07:e7:70: 68:ed:56:0d:84:00:d1:92:7b:74:aa:f7:bd:f8:40: 3a:ba:a3:11:3a:da:1b:f0:3e:e1:05:01:36:60:5a: a2:e9:5c:c6:f0:53:65:12:37:c7:e3:77:11:88:53: 6b:ff:b1:90:bc:2b:31:04:14:2a:49:56:39:26:d3: 60:f0:6e:9d:ed:99:2d:0f:13:dc:3f:dd:77:b4:95: b4:4c:b3:76:41:56:4a:e5:c1:c6:ab:03:bb:11:aa: 06:98:bd:50:9e:2d:dc:f0:81:26:fd:5a:4b:c9:51: 79:cb:42:b7:ec:7d:ec:a3:93:fa:01:a9:b3:f9:7e: 6e:40:3d:e4:20:4f:ff:0d:77:5b:9c:71:b1:00:33: 27:20:85:82:01:98:51:ed:aa:1e:65:ec:70:12:7f: 66:07:0d:3d:3b:92:64:2b:bc:2b:f8:6e:f4:c7:9c: a9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:40:69:0B:15:44:A6:9F:FA:9D:FF:BF:01:6A:EF:AA:AF:86:55:13 X509v3 Authority Key Identifier: keyid:38:99:C9:2D:D0:D4:2F:93:D7:DA:85:40:34:FD:88:BA:B4:A5:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3899C92DD0D42F93D7DA854034FD88BAB4A5AFD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:40:53:3f:59:2d:50:ed:ef:99:d2:54:11:b7:66:80:5e:75: 10:77:98:ee:34:47:cb:70:f2:9d:80:a3:df:3f:be:9f:e3:bf: 5c:8a:4c:8f:55:51:8a:85:60:f6:ae:33:66:bc:e6:2b:07:96: 48:19:5c:97:69:d1:7e:f1:6d:3c:4a:67:e0:de:dc:79:3a:96: 81:8c:ee:b2:d2:11:22:bf:be:5d:83:53:9f:2f:b0:82:91:78: 0d:26:ef:2e:b4:87:60:bf:37:b4:20:af:cb:56:cc:26:40:b9: 81:21:36:18:82:8e:d1:95:e7:a0:82:50:81:7f:7e:2c:bc:33: 89:9e:93:92:2e:6c:51:e7:d0:7a:1c:57:3e:40:bf:1e:68:82: 0a:36:6e:f4:08:f7:7d:d5:5e:af:41:a1:6f:ed:6d:4c:2e:a9: 54:fd:a7:10:a4:ba:4e:bf:c7:10:01:36:f9:88:e3:16:8c:09: b7:57:61:ef:44:d4:32:ff:97:ea:7a:36:38:b4:a7:ce:f9:cc: 48:06:f8:79:26:99:87:7d:ad:89:5f:ee:02:df:a5:1e:22:f6: 2b:5e:e9:89:ea:42:c1:19:d7:f4:ee:8e:a2:ed:38:44:1c:f7: a0:78:df:f1:bf:8a:90:88:b3:bf:c5:67:f4:6e:96:4d:f4:22: 97:4b:a1:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcP+Xk2XqYrbx4VwN+JsXEliVfq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFC NEE1QUZEMjAeFw0yNjA4MzEyMjA3MjVaFw0yNjA5MDIwMDQxMjVaMDMxMTAvBgNV BAMTKDIxNDA2OTBCMTU0NEE2OUZGQTlERkZCRjAxNkFFRkFBQUY4NjU1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cL7iF3ezb2l4UUKGTgF1KE35 aaqIDbtf9uHu5svPSh6OR/JhdMtKMUbH5EI9L4MxRXPPk5UfK5f3g6Rtab8UNtnR DuJFsFVGxIKaRQoajZLd2yA2kgfncGjtVg2EANGSe3Sq9734QDq6oxE62hvwPuEF ATZgWqLpXMbwU2USN8fjdxGIU2v/sZC8KzEEFCpJVjkm02Dwbp3tmS0PE9w/3Xe0 lbRMs3ZBVkrlwcarA7sRqgaYvVCeLdzwgSb9WkvJUXnLQrfsfeyjk/oBqbP5fm5A PeQgT/8Nd1uccbEAMycghYIBmFHtqh5l7HASf2YHDT07kmQrvCv4bvTHnKkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIUBpCxVEpp/6nf+/AWrvqq+GVRMwHwYDVR0j BBgwFoAUOJnJLdDUL5PX2oVANP2IurSlr9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTkwNGY2NzAtN2RhYy00Y2Y0LTk5MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkRE MEQ0MkY5M0Q3REE4NTQwMzRGRDg4QkFCNEE1QUZEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zODk5QzkyREQwRDQyRjkzRDdEQTg1NDAzNEZEODhCQUI0QTVB RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvMzg5OUM5MkREMEQ0MkY5M0Q3REE4NTQwMzRGRDg4 QkFCNEE1QUZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNAUz9ZLVDt75nSVBG3ZoBedRB3mO40R8tw 8p2Ao98/vp/jv1yKTI9VUYqFYPauM2a85isHlkgZXJdp0X7xbTxKZ+De3Hk6loGM 7rLSESK/vl2DU58vsIKReA0m7y60h2C/N7Qgr8tWzCZAuYEhNhiCjtGV56CCUIF/ fiy8M4mek5IubFHn0HocVz5Avx5oggo2bvQI933VXq9BoW/tbUwuqVT9pxCkuk6/ xxABNvmI4xaMCbdXYe9E1DL/l+p6Nji0p875zEgG+HkmmYd9rYlf7gLfpR4i9ite 6YnqQsEZ1/TujqLtOEQc96B43/G/ipCIs7/FZ/Rulk30IpdLoRw= -----END CERTIFICATE-----Generated at Tue Sep 1 03:21:15 2026 by rpki-client