$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft File: 3B49013F73B5A7AF137F414DE362E405F31D32DC.mft (raw, json) Hash identifier: ZFQa97pCtF5JvQpiC7jfEUspXzU1zA9hWyNPv3+igo4= Subject key identifier: 12:15:FF:8A:76:FF:71:AB:03:6F:DA:AF:4C:B8:FA:74:5E:D9:0B:D6 Authority key identifier: 3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC Certificate issuer: /CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Certificate serial: 304BD9F65851FB9D0A887A4F993EFDC1220F3A19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 08:10:53 +0000 Manifest this update: Fri 25 Sep 2026 08:05:53 +0000 Manifest next update: Sat 26 Sep 2026 08:56:53 +0000 Files and hashes: 1: 3B49013F73B5A7AF137F414DE362E405F31D32DC.crl (hash: PTfARcq6azVK2oOBvQ8ZGdTVtRJOjcSzWWTN7Q/rI/A=) 2: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: 8mVUx2m6cehmTjXBEOh2fhiknIQmwcR5DCPv3UxdfA4=) 3: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: ahm/HoRAolOxtaIWGqQ0MLjBkp/CWv9tH60t0eSWQkU=) 4: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: KAa2YP9GlXrFj15zwBpksmX3bAfUKyYMHaAYDuzpQWY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4b:d9:f6:58:51:fb:9d:0a:88:7a:4f:99:3e:fd:c1:22:0f:3a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Validity Not Before: Sep 25 08:05:53 2026 GMT Not After : Sep 26 08:56:53 2026 GMT Subject: CN=1215FF8A76FF71AB036FDAAF4CB8FA745ED90BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7a:d6:18:5f:25:15:7f:82:1d:fa:cd:a1:d9: fc:f0:48:0d:a7:5a:c7:58:16:7d:dc:5d:0d:48:1f: 81:fe:b3:bd:ae:46:56:91:57:b2:51:66:55:9d:1c: 1c:c8:fe:04:e0:92:ba:e7:0c:0b:0d:f3:f0:f8:6d: 41:d0:84:ab:93:e7:fa:c7:2d:0e:b9:c2:c6:8a:47: a4:fd:69:e2:8b:bd:2a:e9:3d:2b:f7:eb:cc:70:c3: 70:6c:0c:10:41:e5:68:08:15:43:b0:61:ca:7c:03: 97:46:20:21:0b:fe:8c:91:23:6e:79:ae:de:ca:b0: db:88:c3:72:89:3e:fe:4f:51:fb:47:82:92:0b:52: e4:d5:c8:79:c0:7f:02:c0:8f:ab:cf:bd:87:60:bf: 52:a0:a1:ed:ea:b4:69:d2:be:73:47:18:ad:27:3f: 57:83:b8:e2:47:8c:bd:db:96:3c:55:e9:d3:f9:cf: bd:4c:b0:a3:1c:81:66:20:49:c2:a6:b8:2a:e8:49: 02:b3:cb:ec:7e:d2:ff:b5:44:54:cc:4d:1b:fd:ba: 04:0c:f1:70:6b:bc:65:7c:03:d4:3c:f8:b6:1c:78: 63:7e:db:ab:3b:ec:c4:91:9b:14:db:70:b8:a4:60: 20:76:c1:39:12:dd:92:79:ed:0d:6d:1c:a9:39:3c: a8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:15:FF:8A:76:FF:71:AB:03:6F:DA:AF:4C:B8:FA:74:5E:D9:0B:D6 X509v3 Authority Key Identifier: keyid:3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f5:59:2f:dc:66:a9:5c:59:aa:d3:93:48:fc:aa:13:8c:f6: 6f:b4:08:12:b6:d6:97:b5:22:8d:03:38:3f:6e:32:03:01:c9: 97:c3:90:da:d0:3a:78:19:99:c6:fc:ad:10:c7:39:60:6c:55: 00:ea:75:a2:15:07:4b:0c:60:54:4c:c6:fd:52:e9:79:18:58: 3a:c2:16:9c:d6:58:3d:22:39:9b:6d:89:f0:13:52:d8:a9:7d: 7e:99:19:52:04:4a:3b:2e:ed:57:8f:e6:91:c6:c5:ff:a0:47: 8a:fd:da:24:68:db:68:c9:16:12:13:64:16:88:be:ff:45:02: 16:bd:7b:2c:96:c0:97:63:f3:54:7c:f9:53:4b:fb:69:5d:95: 0d:94:f8:8d:1e:b2:f0:1f:b8:dd:c4:61:f3:b8:56:5c:4b:7e: a5:fe:63:e5:40:71:56:10:8b:25:0d:6a:b4:59:f2:54:f8:0f: a9:2e:5f:06:12:02:9e:3a:fc:6d:78:67:7e:d7:fc:60:b1:28: c7:51:d5:48:a5:06:32:38:aa:6d:85:4e:70:74:f7:18:4f:28: d2:86:27:78:cf:42:8c:35:4f:1e:04:fb:ff:65:9f:60:6d:2b: 09:98:4f:3d:fc:7d:a2:77:e5:34:02:e9:f8:01:12:0d:69:ac: ac:69:43:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMEvZ9lhR+50KiHpPmT79wSIPOhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVG MzFEMzJEQzAeFw0yNjA5MjUwODA1NTNaFw0yNjA5MjYwODU2NTNaMDMxMTAvBgNV BAMTKDEyMTVGRjhBNzZGRjcxQUIwMzZGREFBRjRDQjhGQTc0NUVEOTBCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGetYYXyUVf4Id+s2h2fzwSA2n WsdYFn3cXQ1IH4H+s72uRlaRV7JRZlWdHBzI/gTgkrrnDAsN8/D4bUHQhKuT5/rH LQ65wsaKR6T9aeKLvSrpPSv368xww3BsDBBB5WgIFUOwYcp8A5dGICEL/oyRI255 rt7KsNuIw3KJPv5PUftHgpILUuTVyHnAfwLAj6vPvYdgv1Kgoe3qtGnSvnNHGK0n P1eDuOJHjL3bljxV6dP5z71MsKMcgWYgScKmuCroSQKzy+x+0v+1RFTMTRv9ugQM 8XBrvGV8A9Q8+LYceGN+26s77MSRmxTbcLikYCB2wTkS3ZJ57Q1tHKk5PKgxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEhX/inb/casDb9qvTLj6dF7ZC9YwHwYDVR0j BBgwFoAUO0kBP3O1p68Tf0FN42LkBfMdMtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJmM2Y1ZDktY2ZiOC00MTIzLWEyYjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3 M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVGMzFEMzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjQ5MDEzRjczQjVBN0FGMTM3RjQxNERFMzYyRTQwNUYzMUQz MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0 MDVGMzFEMzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJT1WS/cZqlcWarTk0j8qhOM9m+0CBK21pe1 Io0DOD9uMgMByZfDkNrQOngZmcb8rRDHOWBsVQDqdaIVB0sMYFRMxv1S6XkYWDrC FpzWWD0iOZttifATUtipfX6ZGVIESjsu7VeP5pHGxf+gR4r92iRo22jJFhITZBaI vv9FAha9eyyWwJdj81R8+VNL+2ldlQ2U+I0esvAfuN3EYfO4VlxLfqX+Y+VAcVYQ iyUNarRZ8lT4D6kuXwYSAp46/G14Z37X/GCxKMdR1UilBjI4qm2FTnB09xhPKNKG J3jPQow1Tx4E+/9ln2BtKwmYTz38faJ35TQC6fgBEg1prKxpQ04= -----END CERTIFICATE-----Generated at Fri Sep 25 19:52:20 2026 by rpki-client