$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft File: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft (raw, json) Hash identifier: 6ZS92UB50uK04A/SEhHA/feXYVK0TDIDMjcn1fjc/UY= Subject key identifier: 25:34:02:3E:79:97:75:82:A1:98:F5:41:09:9D:EE:1B:B8:15:34:E6 Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 310210AAA391EC4BFF363FEB86273D86C37205AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 13:07:21 +0000 Manifest this update: Wed 23 Sep 2026 13:02:21 +0000 Manifest next update: Thu 24 Sep 2026 16:19:21 +0000 Files and hashes: 1: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0=) 2: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 0WLfS7aDlUOO8gGFrEIWmBmwKDx6lnGogb/aAhlDo0s=) 3: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl (hash: FwIRHxzDD+lbhdQI5JSzSJEADEZriSwXK9Fs5qd6QRA=) 4: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: RYDFjSUq7+WTBKXlmjbV9d6C3LLSVr9xribVCYh4jog=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:02:10:aa:a3:91:ec:4b:ff:36:3f:eb:86:27:3d:86:c3:72:05:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: Sep 23 13:02:21 2026 GMT Not After : Sep 24 16:19:21 2026 GMT Subject: CN=2534023E79977582A198F541099DEE1BB81534E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:10:d9:92:31:49:25:7e:eb:03:01:8f:91: f0:01:a8:0e:7f:1a:66:78:d7:60:12:67:73:89:92: 98:b9:99:50:b7:dc:54:7d:9e:76:c4:c5:a6:5a:c9: ad:d1:f4:fd:82:21:f8:90:5f:37:9e:5a:28:ec:cf: d5:73:f0:e7:66:26:68:42:81:fd:4a:73:2f:8a:10: 3d:a8:c1:9e:c0:3f:c1:03:7d:70:5c:5c:b8:a4:8b: 5b:92:8b:a0:60:24:7d:65:f0:0a:01:ba:9e:ec:ad: 36:a1:c4:8a:57:1d:38:70:3c:ee:f2:71:af:d5:c4: 68:91:2a:eb:b9:5a:67:3b:54:f3:d7:3f:e6:31:7e: dd:ae:75:02:a8:63:03:bf:58:54:d0:cc:f0:a2:85: cc:fe:b3:1f:23:39:16:9a:33:0f:d1:89:38:7a:c8: cb:d4:b1:ff:08:a4:6c:6b:59:0d:93:2e:ca:fc:ab: 69:92:d1:9f:4c:fb:84:61:8d:6d:25:a3:bd:cb:13: cf:8e:0f:2d:02:60:70:af:61:b5:c9:e1:24:5f:7c: 60:1d:73:ba:45:81:de:b3:6a:02:70:bc:7b:45:d9: 5b:01:4f:f8:c5:2e:ec:3c:55:62:8b:87:59:9b:4d: 6d:9b:a9:10:83:59:a3:10:d8:c8:1b:3a:25:fd:c6: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:34:02:3E:79:97:75:82:A1:98:F5:41:09:9D:EE:1B:B8:15:34:E6 X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:df:5c:8d:f1:f2:87:99:ae:0b:e8:c6:b3:06:61:89:3d:64: ec:f1:ae:24:b4:72:55:1c:79:61:b7:ef:26:3f:03:e1:a1:66: 32:bd:74:c2:48:57:10:0a:7d:e0:fb:e9:a6:cf:12:70:49:f0: d4:df:75:d3:df:cf:00:4c:40:94:ba:9d:70:98:e3:c4:b0:d7: bb:9d:bf:09:6f:f9:30:c5:bc:19:f2:33:19:2e:7c:e1:30:13: 81:25:8f:4a:5a:e1:fc:b7:70:cb:10:08:5c:35:fc:dc:50:39: 2a:03:11:80:60:49:b3:bd:c7:ac:75:8b:78:2f:ef:4b:b9:a6: 15:9a:5e:d4:4a:16:ef:dc:55:b6:fa:04:22:5c:fd:dc:61:10: c6:c5:e6:37:35:72:4e:cf:af:bc:a0:c4:f3:15:b8:ad:bb:18: a3:1e:fd:ee:a3:90:5c:ad:83:1e:39:bb:dd:69:42:51:0c:01: bf:28:b2:ef:ff:86:b3:5f:9e:eb:63:20:2c:38:47:db:73:cc: 9f:60:a2:68:56:0c:83:0a:b2:9c:4a:8e:b8:e8:1a:81:9b:b5: be:60:96:6a:d7:70:10:2b:0e:41:39:bf:6f:e8:4d:08:50:aa: a2:f5:5c:33:cd:0e:ec:7f:3c:16:0c:a4:01:2e:d8:50:0b:5b: 19:bc:2a:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQIQqqOR7Ev/Nj/rhic9hsNyBaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjA5MjMxMzAyMjFaFw0yNjA5MjQxNjE5MjFaMDMxMTAvBgNV BAMTKDI1MzQwMjNFNzk5Nzc1ODJBMTk4RjU0MTA5OURFRTFCQjgxNTM0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykBDZkjFJJX7rAwGPkfABqA5/ GmZ412ASZ3OJkpi5mVC33FR9nnbExaZaya3R9P2CIfiQXzeeWijsz9Vz8OdmJmhC gf1Kcy+KED2owZ7AP8EDfXBcXLiki1uSi6BgJH1l8AoBup7srTahxIpXHThwPO7y ca/VxGiRKuu5Wmc7VPPXP+Yxft2udQKoYwO/WFTQzPCihcz+sx8jORaaMw/RiTh6 yMvUsf8IpGxrWQ2TLsr8q2mS0Z9M+4RhjW0lo73LE8+ODy0CYHCvYbXJ4SRffGAd c7pFgd6zagJwvHtF2VsBT/jFLuw8VWKLh1mbTW2bqRCDWaMQ2MgbOiX9xkFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJTQCPnmXdYKhmPVBCZ3uG7gVNOYwHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdD NjA0MTc2N0YyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACffXI3x8oeZrgvoxrMGYYk9ZOzxriS0clUc eWG37yY/A+GhZjK9dMJIVxAKfeD76abPEnBJ8NTfddPfzwBMQJS6nXCY48Sw17ud vwlv+TDFvBnyMxkufOEwE4Elj0pa4fy3cMsQCFw1/NxQOSoDEYBgSbO9x6x1i3gv 70u5phWaXtRKFu/cVbb6BCJc/dxhEMbF5jc1ck7Pr7ygxPMVuK27GKMe/e6jkFyt gx45u91pQlEMAb8osu//hrNfnutjICw4R9tzzJ9gomhWDIMKspxKjrjoGoGbtb5g lmrXcBArDkE5v2/oTQhQqqL1XDPNDux/PBYMpAEu2FALWxm8Klg= -----END CERTIFICATE-----Generated at Thu Sep 24 04:27:33 2026 by rpki-client