$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft File: 399FBE55CFD957C1E3849C75FE378403E394BB45.mft (raw, json) Hash identifier: YLt73FGQPxgHtnnEn85My2hJ3cxWJauIOHKVSn2SCcQ= Subject key identifier: 8E:16:17:02:F0:58:79:2F:14:CA:37:7C:4E:D5:BF:AC:60:C2:8E:92 Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Certificate serial: 63F48A8F31112D2F279813CB781831E682945B3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 03:53:19 +0000 Manifest this update: Thu 17 Sep 2026 03:48:19 +0000 Manifest next update: Fri 18 Sep 2026 06:26:19 +0000 Files and hashes: 1: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: /vRQ0F5lBxm5YccSzuUARECi1VFqg7FRoH3qOHTCFHs=) 2: 399FBE55CFD957C1E3849C75FE378403E394BB45.crl (hash: ZIL8mru+4IHMAcCdeI21c9Mx1OFcJcJeuYtPYg8DEZQ=) 3: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: gmPxQm5NcqK3BCfFQb7w+dLmFYWZ/DthSfb9I0IYOOQ=) 4: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: zSazRb0IpJJ4cBgKA2+8jgm7s2YnWXUiU+1QnaQiN1g=) 5: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: uojxwHiaMR8PO5h26JWS2B444u+QQh72ookAa5uFqSs=) 6: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: qood+9S8zNU9X/jpjUZIu26OXyUnDxyv/AsytcFufXA=) 7: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: rqJDuuQFB9Ir08Xt+9/dUd2pRxC5DTIO9a28+O4McDo=) 8: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: NrcqksrmsSbHeL16ugEy8PBgZElc8n2NevcNzHFW6Sc=) 9: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: Nda6FqqHwv307lkTxH+b0mWevIjFxVsW+c3rWmYY64U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f4:8a:8f:31:11:2d:2f:27:98:13:cb:78:18:31:e6:82:94:5b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Validity Not Before: Sep 17 03:48:19 2026 GMT Not After : Sep 18 06:26:19 2026 GMT Subject: CN=8E161702F058792F14CA377C4ED5BFAC60C28E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:8f:c6:a9:c9:31:36:55:d9:10:8b:3a:44: 5d:9f:40:b9:a3:b8:ca:a1:47:ce:2d:56:22:c1:f0: b0:e3:12:f7:1f:c3:cf:2b:8e:ba:5b:0b:a4:c7:bb: dd:7d:9d:d4:f4:07:01:34:3c:6b:2d:86:49:51:d2: a0:76:80:86:d6:06:b6:58:6d:bd:35:b9:4b:64:fb: 09:b1:65:25:61:4d:c5:20:d7:04:15:be:fc:b6:48: d3:2f:71:42:72:ab:d7:84:33:7f:c3:72:cb:7f:04: e6:db:ac:9e:ca:fb:1c:2c:b5:d2:8d:57:13:05:c2: ba:e8:c2:4c:b0:dd:a6:c0:1d:60:90:83:ae:74:22: c2:83:5a:5b:58:62:93:74:71:98:98:f1:06:f8:30: 40:4c:96:2c:66:b1:b1:23:3b:32:e8:4f:a5:8e:a7: 2a:89:50:81:4c:27:63:51:3e:14:0f:89:e1:40:f1: 85:b2:c3:19:fe:e3:db:2a:02:e7:0e:af:9c:78:5d: bd:5a:e8:2f:66:b1:b4:22:81:4b:69:7e:75:39:c0: e0:c7:dc:1c:e8:b6:57:b3:f4:75:af:a4:66:80:45: 5f:0d:cc:d0:0e:32:fc:12:4e:d3:1f:2d:08:e0:c5: 75:67:bb:d6:c9:b9:64:36:90:10:1a:83:c4:d6:c2: ac:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:16:17:02:F0:58:79:2F:14:CA:37:7C:4E:D5:BF:AC:60:C2:8E:92 X509v3 Authority Key Identifier: keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7e:60:96:d6:5b:5a:0e:02:af:67:e9:3b:bd:b4:21:98:57: 1a:27:35:23:a7:99:51:3f:38:02:01:45:68:67:f7:a7:7a:74: 98:af:5c:ac:6a:05:00:ea:78:70:27:2f:c9:18:53:a0:a8:57: 24:2a:7d:e8:10:7c:a0:11:08:7c:08:a9:8a:0c:59:ea:d8:85: c5:5e:dd:ff:fa:0a:61:4c:a3:73:4f:c6:a9:13:97:35:46:08: d3:aa:08:b9:5e:4d:95:58:d3:4b:b0:1b:d8:34:a7:be:2f:07: a8:9d:e6:c9:6c:ab:77:98:a6:1c:d8:b5:9a:e9:84:26:10:39: c2:64:3f:7f:71:e1:dc:0a:ca:47:b0:90:10:bb:6b:fd:1b:fa: 11:88:e2:f4:9d:dc:42:7a:e9:95:52:ee:aa:f1:74:4c:05:44: 20:f9:b9:00:62:83:3b:6a:5e:35:19:ce:84:42:ca:d2:4d:7f: 1a:86:65:b2:05:af:31:6b:d4:93:76:f0:c2:30:0f:de:02:39: 3c:36:87:20:32:b1:35:5a:37:8a:da:82:65:a4:5b:d9:73:35: 25:2c:e0:c6:bc:e4:86:8d:a0:05:25:d5:8f:53:41:d6:f1:2e: f9:9f:d2:02:35:6a:62:88:aa:cd:50:15:2d:40:c5:78:d4:25: ec:27:aa:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY/SKjzERLS8nmBPLeBgx5oKUWzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNF Mzk0QkI0NTAeFw0yNjA5MTcwMzQ4MTlaFw0yNjA5MTgwNjI2MTlaMDMxMTAvBgNV BAMTKDhFMTYxNzAyRjA1ODc5MkYxNENBMzc3QzRFRDVCRkFDNjBDMjhFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJo/GqckxNlXZEIs6RF2fQLmj uMqhR84tViLB8LDjEvcfw88rjrpbC6THu919ndT0BwE0PGsthklR0qB2gIbWBrZY bb01uUtk+wmxZSVhTcUg1wQVvvy2SNMvcUJyq9eEM3/Dcst/BObbrJ7K+xwstdKN VxMFwrrowkyw3abAHWCQg650IsKDWltYYpN0cZiY8Qb4MEBMlixmsbEjOzLoT6WO pyqJUIFMJ2NRPhQPieFA8YWywxn+49sqAucOr5x4Xb1a6C9msbQigUtpfnU5wODH 3Bzotlez9HWvpGaARV8NzNAOMvwSTtMfLQjgxXVnu9bJuWQ2kBAag8TWwqwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjhYXAvBYeS8Uyjd8TtW/rGDCjpIwHwYDVR0j BBgwFoAUOZ++Vc/ZV8HjhJx1/jeEA+OUu0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwZGZiNWEtODQ1ZS00ZGRmLWFjYTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVD RkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNFMzk0QkI0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOTlGQkU1NUNGRDk1N0MxRTM4NDlDNzVGRTM3ODQwM0UzOTRC QjQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwZGZiNWEtODQ1ZS00ZGRmLWFj YTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0 MDNFMzk0QkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHp+YJbWW1oOAq9n6Tu9tCGYVxonNSOnmVE/ OAIBRWhn96d6dJivXKxqBQDqeHAnL8kYU6CoVyQqfegQfKARCHwIqYoMWerYhcVe 3f/6CmFMo3NPxqkTlzVGCNOqCLleTZVY00uwG9g0p74vB6id5slsq3eYphzYtZrp hCYQOcJkP39x4dwKykewkBC7a/0b+hGI4vSd3EJ66ZVS7qrxdEwFRCD5uQBigztq XjUZzoRCytJNfxqGZbIFrzFr1JN28MIwD94COTw2hyAysTVaN4ragmWkW9lzNSUs 4Ma85IaNoAUl1Y9TQdbxLvmf0gI1amKIqs1QFS1AxXjUJewnqnI= -----END CERTIFICATE-----Generated at Thu Sep 17 06:38:19 2026 by rpki-client