$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft File: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft (raw, json) Hash identifier: gEDdfHM6IYQIt3uMN/7HOivpuiiVpvMY1nrqEdetmlE= Subject key identifier: 51:D2:A0:73:EE:23:90:13:AF:02:22:11:4B:5D:17:F9:C5:A6:30:34 Authority key identifier: 33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 Certificate issuer: /CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Certificate serial: 36C55C182742374B898B98778D0FB44331FE6B0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 23:04:37 +0000 Manifest this update: Wed 23 Sep 2026 22:59:37 +0000 Manifest next update: Thu 24 Sep 2026 23:35:37 +0000 Files and hashes: 1: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: qwCD6LMD3vcZUMJ0NyJQKQENdmqWnufrQ7c5rQMuFak=) 2: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: R6gLAkDdw5uoEeHIF+BZTSI8Nmt3rpd6kFAoBJizRp0=) 3: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: rjOP/mlx+e05g5g9m1lNDsLBX8nXjBRagTVjyUCAwbI=) 4: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: 3A+tKNYPDWO1jDhVDZUdC2NZs5B4MixvTHgsf4h9Xzc=) 5: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: T06sDsvRxE4yK7ECDWNomJNJ5HNU4tQJl/HnEtrv2wM=) 6: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl (hash: axTFVGhhxwjTai0rUqyApDP1/1tUjTzRhGjj+2W+Zwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c5:5c:18:27:42:37:4b:89:8b:98:77:8d:0f:b4:43:31:fe:6b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Validity Not Before: Sep 23 22:59:37 2026 GMT Not After : Sep 24 23:35:37 2026 GMT Subject: CN=51D2A073EE239013AF0222114B5D17F9C5A63034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:83:1e:e4:8f:6e:17:f2:b8:a9:02:f9:a3: 07:a9:92:6c:66:d6:6e:c9:79:d5:19:c7:7c:97:5f: a3:38:c8:63:04:b3:80:6d:4e:8a:46:47:9f:3e:10: 0b:75:03:c8:f8:f1:f1:c0:c6:e6:f2:1a:bd:ba:f3: 47:5b:1e:15:5e:f3:e5:36:58:00:bd:47:f5:c5:8d: 29:b7:96:90:e4:af:18:24:4c:40:e4:60:55:96:d5: de:76:97:8b:8c:96:df:b0:77:64:ee:20:8b:23:bf: 41:06:fc:1a:0e:96:49:67:dc:a5:ca:83:2b:c9:6a: 57:7c:19:13:54:26:97:6d:7c:d2:0c:1b:1d:58:06: 0e:0f:5a:ae:49:e5:d5:fb:88:95:93:f4:6b:72:ba: ca:e3:62:64:48:1d:e6:a8:55:55:b5:02:01:8a:1c: bd:c5:77:cb:08:ab:00:85:21:c1:11:c9:19:60:4e: f6:80:70:32:a2:a2:ba:bf:fe:b7:07:dc:d5:df:6f: 41:eb:2e:76:27:61:b9:2f:e9:ba:fc:c4:de:54:46: fb:e9:32:d2:77:30:3e:b9:10:9e:e0:14:a8:17:98: b2:1d:cf:47:c8:29:61:a9:ec:21:0e:7e:e1:d4:d2: 85:50:5d:82:5b:05:f4:be:67:a1:7d:d5:b9:1e:11: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D2:A0:73:EE:23:90:13:AF:02:22:11:4B:5D:17:F9:C5:A6:30:34 X509v3 Authority Key Identifier: keyid:33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4e:1b:a8:6d:9d:d6:9a:91:b0:1d:d2:db:16:19:72:36:b0: ea:ce:ff:b1:0c:8a:91:dd:a4:7c:ff:0a:54:93:07:25:d3:e1: 5a:1f:5e:00:30:1c:51:7d:7c:dd:ca:c4:83:5e:05:09:ff:b0: 97:08:19:ed:54:dc:07:b3:59:59:0e:c0:4f:03:a3:6b:19:dd: ac:23:59:5e:2e:f6:f6:a3:9e:75:36:14:f1:93:6d:3b:77:d4: 5a:93:20:8a:12:7a:fa:cd:b6:49:e3:fa:cb:c5:3a:b5:78:a3: f2:30:c7:84:6e:cf:6e:a2:d7:48:f0:2a:bf:49:ed:16:ce:1d: 1f:b5:c0:14:8c:c2:74:18:af:e3:de:82:92:93:f2:5d:13:d2: 43:dd:18:cb:47:fd:3b:d8:df:cb:0d:9d:94:01:e5:4f:4f:cd: ca:59:84:81:e7:79:0a:8e:06:42:46:24:77:65:f9:8a:dc:41: 4b:d9:04:93:fe:0c:15:17:bc:06:21:63:b1:38:6a:f9:ef:4e: 9a:7c:dc:95:89:c7:a3:3d:cd:68:12:89:27:ca:1d:f9:79:d5: ff:f6:88:94:d1:61:f8:4e:fc:34:40:7c:06:a4:ed:97:5c:a0: a3:a9:f2:9b:c1:1e:cd:93:08:e8:da:ed:b1:55:12:94:80:82: 46:92:3f:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNsVcGCdCN0uJi5h3jQ+0QzH+awwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlENDdG QjU2MUI2MjAeFw0yNjA5MjMyMjU5MzdaFw0yNjA5MjQyMzM1MzdaMDMxMTAvBgNV BAMTKDUxRDJBMDczRUUyMzkwMTNBRjAyMjIxMTRCNUQxN0Y5QzVBNjMwMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSIMe5I9uF/K4qQL5owepkmxm 1m7JedUZx3yXX6M4yGMEs4BtTopGR58+EAt1A8j48fHAxubyGr2680dbHhVe8+U2 WAC9R/XFjSm3lpDkrxgkTEDkYFWW1d52l4uMlt+wd2TuIIsjv0EG/BoOlkln3KXK gyvJald8GRNUJpdtfNIMGx1YBg4PWq5J5dX7iJWT9GtyusrjYmRIHeaoVVW1AgGK HL3Fd8sIqwCFIcERyRlgTvaAcDKiorq//rcH3NXfb0HrLnYnYbkv6br8xN5URvvp MtJ3MD65EJ7gFKgXmLIdz0fIKWGp7CEOfuHU0oVQXYJbBfS+Z6F91bkeEeBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUdKgc+4jkBOvAiIRS10X+cWmMDQwHwYDVR0j BBgwFoAUMxPigd82Tgv6MqQyKsydR/tWG2IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2MWQ3YTctYTExZS00MDBiLTkxNzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFE RjM2NEUwQkZBMzJBNDMyMkFDQzlENDdGQjU2MUI2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzEzRTI4MURGMzY0RTBCRkEzMkE0MzIyQUNDOUQ0N0ZCNTYx QjYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlE NDdGQjU2MUI2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZOG6htndaakbAd0tsWGXI2sOrO/7EMipHd pHz/ClSTByXT4VofXgAwHFF9fN3KxINeBQn/sJcIGe1U3AezWVkOwE8Do2sZ3awj WV4u9vajnnU2FPGTbTt31FqTIIoSevrNtknj+svFOrV4o/Iwx4Ruz26i10jwKr9J 7RbOHR+1wBSMwnQYr+PegpKT8l0T0kPdGMtH/TvY38sNnZQB5U9PzcpZhIHneQqO BkJGJHdl+YrcQUvZBJP+DBUXvAYhY7E4avnvTpp83JWJx6M9zWgSiSfKHfl51f/2 iJTRYfhO/DRAfAak7ZdcoKOp8pvBHs2TCOja7bFVEpSAgkaSP6c= -----END CERTIFICATE-----Generated at Thu Sep 24 14:33:09 2026 by rpki-client