$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft File: 309D66BED7C5AAB839669782F24FE6D817B8209A.mft (raw, json) Hash identifier: Cfm62okp89JHD2Y6ahojQM/Tzr6F53JKXQDFBDia+DI= Subject key identifier: 30:47:95:AD:E0:28:30:6F:65:54:63:8A:94:76:3B:B7:A5:15:31:59 Authority key identifier: 30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A Certificate issuer: /CN=309D66BED7C5AAB839669782F24FE6D817B8209A Certificate serial: 39208C4580E34E56D886B6D3A59B78CE313C90B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft Manifest number: BA Signing time: Thu 17 Sep 2026 02:41:52 +0000 Manifest this update: Thu 17 Sep 2026 02:36:52 +0000 Manifest next update: Fri 18 Sep 2026 02:57:52 +0000 Files and hashes: 1: 309D66BED7C5AAB839669782F24FE6D817B8209A.crl (hash: okMo89EFIbpNyhYmvxiIKvRNhWsYCMtahnlZxVeIcKs=) 2: 3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa (hash: +xmmKCCGNPjDepHqzXzJnlfxWWK0PUzYuwz3sX367Vg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:20:8c:45:80:e3:4e:56:d8:86:b6:d3:a5:9b:78:ce:31:3c:90:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309D66BED7C5AAB839669782F24FE6D817B8209A Validity Not Before: Sep 17 02:36:52 2026 GMT Not After : Sep 18 02:57:52 2026 GMT Subject: CN=304795ADE028306F6554638A94763BB7A5153159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:00:1a:1d:99:88:1e:04:30:e2:55:d7:db: a0:e6:77:f3:cb:4a:c2:05:c9:e4:08:db:aa:7c:c0: bf:f6:04:4c:28:8f:b0:a5:3a:ae:f0:44:0b:ee:99: e0:73:29:e0:f5:03:07:24:ea:49:fb:5b:f0:d6:00: a0:85:c3:86:0e:16:7e:bc:ca:97:15:b0:74:d9:29: 2d:4d:06:7e:44:76:40:1f:1b:e6:5a:00:bd:1b:f3: 9a:c2:50:0f:dc:14:d9:06:60:87:a6:d7:a2:a2:c8: dd:4b:1a:f0:30:67:b0:5b:e5:ed:5e:bf:dc:8d:04: a6:83:73:f0:fa:5d:99:49:72:96:d5:bd:01:73:e3: c6:e8:b3:2b:c0:02:15:99:a3:b0:19:77:88:3b:15: 2b:83:66:7a:d9:22:51:fc:2d:dc:4d:b5:f2:5d:9f: a6:09:67:da:03:35:d8:af:f9:2e:a7:5a:f8:89:68: 09:f9:27:6f:1d:df:15:f4:6d:57:2b:0b:68:08:5e: a3:5e:4d:b3:a6:91:0a:47:f5:44:9a:c8:7a:63:96: 43:3f:cc:2f:c7:b9:ca:74:8f:fe:b6:84:82:56:0f: 23:35:08:4d:81:46:26:6e:e7:8f:b1:93:36:74:50: 19:4a:dc:11:01:75:71:2f:35:54:69:0b:5a:33:8f: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:47:95:AD:E0:28:30:6F:65:54:63:8A:94:76:3B:B7:A5:15:31:59 X509v3 Authority Key Identifier: keyid:30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:13:2f:93:11:7e:05:75:ba:23:e7:a7:8d:a1:dd:66:6a:39: 0f:44:fe:78:10:80:b5:57:af:3e:97:4b:a6:6c:c4:6e:08:a7: e0:1b:6d:f3:bf:a2:a3:fc:d0:17:73:af:6d:77:24:05:74:c2: e9:ed:4a:a5:a4:fe:8d:ad:39:a5:dc:a6:c1:81:d1:84:d1:23: 01:e1:b7:2e:0a:72:5a:2e:4b:2e:8a:4f:5d:5a:47:2b:4a:11: 79:f3:43:b7:de:99:fd:28:9f:23:8c:73:ef:59:65:7b:5c:8a: d3:1e:79:4b:ce:8f:8a:c1:85:66:d2:51:49:0c:18:d8:46:67: 9b:6d:b0:48:7b:e0:91:2d:72:69:24:5f:31:26:21:23:3a:07: 00:17:17:57:ed:61:ef:39:d3:4c:fb:b8:d7:fa:2a:92:16:82: 10:3d:e2:b1:52:1d:ec:c4:1e:ad:52:3c:ed:95:22:12:49:14: 09:19:c9:1d:c6:21:fd:67:d5:85:0a:c7:cf:0c:c5:58:65:ab: e0:e6:99:d9:89:70:bc:04:2a:ff:db:a3:42:d2:93:a2:4b:4d: 79:62:87:99:39:fe:a0:5b:37:02:3f:3b:4e:62:44:15:09:1f: a3:d5:3d:89:e7:1b:fc:6c:3c:28:0f:11:73:05:f3:cb:ad:99: 9a:9b:63:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSCMRYDjTlbYhrbTpZt4zjE8kLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2RDgx N0I4MjA5QTAeFw0yNjA5MTcwMjM2NTJaFw0yNjA5MTgwMjU3NTJaMDMxMTAvBgNV BAMTKDMwNDc5NUFERTAyODMwNkY2NTU0NjM4QTk0NzYzQkI3QTUxNTMxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzwAaHZmIHgQw4lXX26Dmd/PL SsIFyeQI26p8wL/2BEwoj7ClOq7wRAvumeBzKeD1Awck6kn7W/DWAKCFw4YOFn68 ypcVsHTZKS1NBn5EdkAfG+ZaAL0b85rCUA/cFNkGYIem16KiyN1LGvAwZ7Bb5e1e v9yNBKaDc/D6XZlJcpbVvQFz48bosyvAAhWZo7AZd4g7FSuDZnrZIlH8LdxNtfJd n6YJZ9oDNdiv+S6nWviJaAn5J28d3xX0bVcrC2gIXqNeTbOmkQpH9USayHpjlkM/ zC/Hucp0j/62hIJWDyM1CE2BRiZu54+xkzZ0UBlK3BEBdXEvNVRpC1ozj0CVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMEeVreAoMG9lVGOKlHY7t6UVMVkwHwYDVR0j BBgwFoAUMJ1mvtfFqrg5ZpeC8k/m2Be4IJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQwZmNjYjItY2UxYy00ODYyLThlZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVE N0M1QUFCODM5NjY5NzgyRjI0RkU2RDgxN0I4MjA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMDlENjZCRUQ3QzVBQUI4Mzk2Njk3ODJGMjRGRTZEODE3Qjgy MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwZmNjYjItY2UxYy00ODYyLThl ZGYtOGMzNTI3MzAxMWMyLzAvMzA5RDY2QkVEN0M1QUFCODM5NjY5NzgyRjI0RkU2 RDgxN0I4MjA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGETL5MRfgV1uiPnp42h3WZqOQ9E/ngQgLVX rz6XS6ZsxG4Ip+AbbfO/oqP80Bdzr213JAV0wuntSqWk/o2tOaXcpsGB0YTRIwHh ty4KclouSy6KT11aRytKEXnzQ7femf0onyOMc+9ZZXtcitMeeUvOj4rBhWbSUUkM GNhGZ5ttsEh74JEtcmkkXzEmISM6BwAXF1ftYe8500z7uNf6KpIWghA94rFSHezE Hq1SPO2VIhJJFAkZyR3GIf1n1YUKx88MxVhlq+DmmdmJcLwEKv/bo0LSk6JLTXli h5k5/qBbNwI/O05iRBUJH6PVPYnnG/xsPCgPEXMF88utmZqbYxE= -----END CERTIFICATE-----Generated at Thu Sep 17 09:23:19 2026 by rpki-client