$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft File: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft (raw, json) Hash identifier: 9+k6J5+SELFHhptwoDx1S6IBMYhJXXNZibNT3YENoFE= Subject key identifier: 56:96:61:62:B0:5A:37:3D:06:89:09:CB:38:D8:2A:71:69:6C:B6:B7 Authority key identifier: C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 Certificate issuer: /CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Certificate serial: 325C3D3DC254E2F94A665EFD286C5FDED7F019C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 11:40:34 +0000 Manifest this update: Wed 23 Sep 2026 11:35:34 +0000 Manifest next update: Thu 24 Sep 2026 12:32:34 +0000 Files and hashes: 1: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: PA4mCIJ4WVxoHasll6BuHuPox/sleuIONJ29Vq08rHw=) 2: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: ax7Tz8igVzZFs/ShEmAUC7L5azN7xDE8dfSTDwz0nik=) 3: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl (hash: kqr1jenrPnztB67QuYrQ3MzpFQ9Og9NOPH0t/CavhTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5c:3d:3d:c2:54:e2:f9:4a:66:5e:fd:28:6c:5f:de:d7:f0:19:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Validity Not Before: Sep 23 11:35:34 2026 GMT Not After : Sep 24 12:32:34 2026 GMT Subject: CN=56966162B05A373D068909CB38D82A71696CB6B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:3c:bc:e7:8d:ff:43:ef:3c:0e:62:82:af: a3:c6:97:3f:f4:ab:72:9c:85:a2:80:29:4c:fa:f8: a6:26:cf:b3:0b:d5:32:e4:8a:1d:62:02:47:ce:2d: 49:bc:b7:19:cf:1c:a8:b5:24:42:5a:3d:9a:b4:06: c7:f2:91:c0:5e:5b:9f:5b:c6:50:52:ae:ad:96:59: 6a:76:41:e7:7c:21:7b:09:f9:8a:70:bb:21:07:8f: 27:8c:2b:1f:ac:cb:85:35:60:bd:c7:44:f4:70:1a: f7:ab:c9:7f:a3:33:c9:bb:48:c5:96:af:bf:06:b6: 7e:da:08:50:1c:ed:5c:a4:a0:64:30:a5:a6:80:de: ec:12:88:32:2a:04:78:fe:cc:bc:b1:af:6f:45:76: 55:60:1b:4a:67:e0:b5:66:cb:b0:74:51:a6:aa:29: 99:3d:d2:0b:c7:70:62:19:5b:de:60:7a:c5:02:9d: 7e:b5:bb:ea:4c:c8:85:cd:46:56:9b:5a:d3:3e:cd: 72:5b:9b:cc:d8:ca:f9:58:7b:0e:05:98:a1:68:94: 84:1e:a2:e0:ed:8a:53:51:08:46:0e:e1:ef:67:37: e9:19:0a:0a:38:68:87:b0:fc:20:82:ce:fa:1b:30: 53:c8:75:02:d0:24:a8:1c:3d:8a:f5:68:16:2c:ec: 04:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:96:61:62:B0:5A:37:3D:06:89:09:CB:38:D8:2A:71:69:6C:B6:B7 X509v3 Authority Key Identifier: keyid:C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:2d:31:94:ed:4e:58:ce:0f:4a:95:50:14:78:3c:59:95:cb: 38:da:f8:08:6b:ee:0d:57:f1:d0:70:52:c6:fc:70:fe:45:d1: 96:6e:a2:0b:02:d1:1a:15:9b:a1:1e:93:de:90:5d:f0:c0:06: ea:ce:32:27:d7:0c:b3:88:0b:fa:ff:3a:02:fc:0e:89:6d:64: 83:ee:76:60:b4:75:7d:25:0a:b1:6a:49:cf:f3:0f:9e:b5:83: 1d:bb:6b:51:a8:ea:5a:40:c4:67:2e:a9:04:90:22:f5:20:c5: f6:c3:e2:c3:d3:f4:dc:02:ae:59:81:2f:b0:be:0b:a4:25:74: 72:74:8e:71:72:8c:ba:cb:9a:b5:79:09:74:f1:13:52:61:16: 31:f5:9c:59:e4:aa:3b:1c:89:47:30:9b:9a:19:3a:59:d4:f9: 40:e0:f3:98:25:de:ff:3b:0f:99:07:1f:59:a7:09:69:c4:36: 99:cb:91:6d:8e:0a:fe:57:3f:b0:ee:53:cd:d9:95:52:5d:7c: bc:24:dd:34:05:ea:57:eb:98:67:23:cc:5b:8a:2c:78:9a:3c: d4:03:25:a6:79:1c:6a:32:10:f3:84:2a:64:8e:cb:a8:ab:b6: 8b:b8:ca:45:1b:c8:69:6b:58:db:0e:95:91:be:f6:d1:41:26: 55:54:02:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMlw9PcJU4vlKZl79KGxf3tfwGcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1 NUI5OUYyNTAeFw0yNjA5MjMxMTM1MzRaFw0yNjA5MjQxMjMyMzRaMDMxMTAvBgNV BAMTKDU2OTY2MTYyQjA1QTM3M0QwNjg5MDlDQjM4RDgyQTcxNjk2Q0I2QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LTy8543/Q+88DmKCr6PGlz/0 q3KchaKAKUz6+KYmz7ML1TLkih1iAkfOLUm8txnPHKi1JEJaPZq0BsfykcBeW59b xlBSrq2WWWp2Qed8IXsJ+YpwuyEHjyeMKx+sy4U1YL3HRPRwGveryX+jM8m7SMWW r78Gtn7aCFAc7VykoGQwpaaA3uwSiDIqBHj+zLyxr29FdlVgG0pn4LVmy7B0Uaaq KZk90gvHcGIZW95gesUCnX61u+pMyIXNRlabWtM+zXJbm8zYyvlYew4FmKFolIQe ouDtilNRCEYO4e9nN+kZCgo4aIew/CCCzvobMFPIdQLQJKgcPYr1aBYs7ARFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVpZhYrBaNz0GiQnLONgqcWlstrcwHwYDVR0j BBgwFoAUw9+0nNcOUuRFDPL+XnISqFW5nyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY2NTIwMDAtMWYyYy00NzkxLTgxYjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNE NzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1NUI5OUYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0RGQjQ5Q0Q3MEU1MkU0NDUwQ0YyRkU1RTcyMTJBODU1Qjk5 RjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY2NTIwMDAtMWYyYy00NzkxLTgx YjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEy QTg1NUI5OUYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEItMZTtTljOD0qVUBR4PFmVyzja+Ahr7g1X 8dBwUsb8cP5F0ZZuogsC0RoVm6Eek96QXfDABurOMifXDLOIC/r/OgL8DoltZIPu dmC0dX0lCrFqSc/zD561gx27a1Go6lpAxGcuqQSQIvUgxfbD4sPT9NwCrlmBL7C+ C6QldHJ0jnFyjLrLmrV5CXTxE1JhFjH1nFnkqjsciUcwm5oZOlnU+UDg85gl3v87 D5kHH1mnCWnENpnLkW2OCv5XP7DuU83ZlVJdfLwk3TQF6lfrmGcjzFuKLHiaPNQD JaZ5HGoyEPOEKmSOy6irtou4ykUbyGlrWNsOlZG+9tFBJlVUAkY= -----END CERTIFICATE-----Generated at Thu Sep 24 00:53:52 2026 by rpki-client