$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft File: B3CEDD0459F32B7E856E38152E88C017667C44C5.mft (raw, json) Hash identifier: uFj1E3xQ4dpPKUDCE5b6pZ3DKB2GMPrL5cqYBFG3fNc= Subject key identifier: 0C:7D:C6:E9:AF:A2:46:6A:B0:60:59:C1:17:36:AE:0E:E3:78:5F:E3 Authority key identifier: B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 Certificate issuer: /CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Certificate serial: 019446AFC16E1EE8F439AF5E754F6954A6442E58 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 05:58:12 +0000 Manifest this update: Thu 24 Sep 2026 05:53:12 +0000 Manifest next update: Fri 25 Sep 2026 09:55:12 +0000 Files and hashes: 1: B3CEDD0459F32B7E856E38152E88C017667C44C5.crl (hash: in7qtxV53fZIPjs8T6OygFLMXml2VaRdFwwDvPt3m1w=) 2: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: QGY4lzWj4Cp3rLIA8ZEjymdBTTpuyiO2y6++xao+5yg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:46:af:c1:6e:1e:e8:f4:39:af:5e:75:4f:69:54:a6:44:2e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Validity Not Before: Sep 24 05:53:12 2026 GMT Not After : Sep 25 09:55:12 2026 GMT Subject: CN=0C7DC6E9AFA2466AB06059C11736AE0EE3785FE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:95:6e:f1:60:82:45:28:b2:b1:66:62:ba: 26:fd:95:ec:73:13:93:5a:bc:fb:76:4b:0d:ae:7d: f1:23:81:e0:f0:32:b5:3e:98:8a:cb:2c:f9:3c:b2: 7a:61:54:43:66:de:f6:75:c6:65:d3:da:b9:9d:dd: 24:51:37:5e:18:81:8c:0d:a8:b1:42:ad:fd:23:a1: 1a:cc:5c:7a:d2:ac:bc:b9:93:79:59:3c:12:59:70: 7e:a2:3b:b2:df:5e:b9:41:56:46:e0:83:6d:a3:83: 81:41:aa:81:64:5a:3a:b7:19:25:24:ed:97:a1:7a: 86:fb:f1:d2:b5:cd:b9:92:75:ce:05:61:43:16:8c: a5:be:03:8e:34:cf:6e:57:55:44:81:25:56:0f:50: 22:ed:d2:f1:14:7e:7f:c9:b9:51:40:f9:be:ec:89: aa:c6:34:cf:01:95:97:c7:41:23:97:b1:4e:a3:ae: b0:a9:04:de:d3:b5:c5:70:90:1c:c9:55:ba:05:4b: c6:4a:ec:ae:a4:44:79:40:3e:4a:0f:cc:63:92:56: 37:92:1a:19:fe:ab:81:d0:74:73:08:c1:54:64:cd: fd:db:ef:0f:ef:f3:d4:1d:a9:7b:2c:1f:94:e4:52: 8c:30:28:44:12:11:5f:3a:73:68:1c:54:9b:b3:e4: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7D:C6:E9:AF:A2:46:6A:B0:60:59:C1:17:36:AE:0E:E3:78:5F:E3 X509v3 Authority Key Identifier: keyid:B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:1c:21:12:8d:77:ec:78:a0:8d:29:4b:59:44:6a:d9:e1:71: 95:77:c5:96:5d:e2:74:0c:f1:fd:a0:19:82:81:9f:41:36:8b: 98:7a:51:72:80:5c:fb:77:aa:64:ba:ab:e1:af:31:7f:80:ae: e3:94:ab:35:c1:1a:9d:d7:7d:3f:e5:d4:8d:f4:56:f5:0f:0f: 43:39:3a:c5:12:35:49:16:07:be:75:af:2c:ca:13:7f:23:9e: cf:88:d9:2d:f3:89:dc:30:11:86:84:08:ce:4e:48:d7:1b:64: 73:43:1c:3b:10:f4:7b:1c:21:2e:13:01:74:92:45:c0:19:79: 08:bc:05:7b:2f:c3:83:d8:e9:32:44:34:81:d3:6d:3d:4b:b4: a8:95:95:3d:08:38:1e:39:ec:77:8a:c6:92:57:89:f1:a8:4b: 4a:ad:e9:aa:a2:3a:2d:8e:36:7f:68:b4:f5:9d:6e:06:b9:26: d0:71:26:fd:f9:39:fd:75:00:95:85:df:14:a2:0a:9f:b3:21: b6:a1:0e:33:40:a2:ed:4b:d0:c3:30:c5:5f:7a:f8:1d:9d:ea: b8:9a:e2:ef:51:a0:0b:f6:a9:fc:07:03:17:a9:80:0a:fb:1b: 30:8a:4b:94:b3:be:41:31:63:b5:38:64:be:bd:46:4b:e3:92: bc:23:2e:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZRGr8FuHuj0Oa9edU9pVKZELlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2 NjdDNDRDNTAeFw0yNjA5MjQwNTUzMTJaFw0yNjA5MjUwOTU1MTJaMDMxMTAvBgNV BAMTKDBDN0RDNkU5QUZBMjQ2NkFCMDYwNTlDMTE3MzZBRTBFRTM3ODVGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRJVu8WCCRSiysWZiuib9lexz E5NavPt2Sw2uffEjgeDwMrU+mIrLLPk8snphVENm3vZ1xmXT2rmd3SRRN14YgYwN qLFCrf0joRrMXHrSrLy5k3lZPBJZcH6iO7LfXrlBVkbgg22jg4FBqoFkWjq3GSUk 7Zeheob78dK1zbmSdc4FYUMWjKW+A440z25XVUSBJVYPUCLt0vEUfn/JuVFA+b7s iarGNM8BlZfHQSOXsU6jrrCpBN7TtcVwkBzJVboFS8ZK7K6kRHlAPkoPzGOSVjeS Ghn+q4HQdHMIwVRkzf3b7w/v89QdqXssH5TkUowwKEQSEV86c2gcVJuz5ERFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDH3G6a+iRmqwYFnBFzauDuN4X+MwHwYDVR0j BBgwFoAUs87dBFnzK36FbjgVLojAF2Z8RMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiMWE3OTAtZGNlZC00NjRhLTg5NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1 OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2NjdDNDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0NFREQwNDU5RjMyQjdFODU2RTM4MTUyRTg4QzAxNzY2N0M0 NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMw MTc2NjdDNDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMcIRKNd+x4oI0pS1lEatnhcZV3xZZd4nQM 8f2gGYKBn0E2i5h6UXKAXPt3qmS6q+GvMX+AruOUqzXBGp3XfT/l1I30VvUPD0M5 OsUSNUkWB751ryzKE38jns+I2S3zidwwEYaECM5OSNcbZHNDHDsQ9HscIS4TAXSS RcAZeQi8BXsvw4PY6TJENIHTbT1LtKiVlT0IOB457HeKxpJXifGoS0qt6aqiOi2O Nn9otPWdbga5JtBxJv35Of11AJWF3xSiCp+zIbahDjNAou1L0MMwxV96+B2d6ria 4u9RoAv2qfwHAxepgAr7GzCKS5SzvkExY7U4ZL69RkvjkrwjLvw= -----END CERTIFICATE-----Generated at Thu Sep 24 17:26:57 2026 by rpki-client