$ rpki-client -vvvf rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft File: 3FCCB124CE6330827269179656BC9A7F04BCACF3.mft (raw, json) Hash identifier: DiENHcXrDec16SHV312O7ZqTLMNeDODL9a6udtvC9CM= Subject key identifier: 64:E9:E2:F4:68:3A:19:86:20:02:57:4E:6F:9F:D1:2B:72:FE:A7:78 Authority key identifier: 3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 Certificate issuer: /CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Certificate serial: 5224B091578C6CDE1260838EA757C9306B99B6B6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 23:45:26 +0000 Manifest this update: Wed 23 Sep 2026 23:40:26 +0000 Manifest next update: Fri 25 Sep 2026 00:22:26 +0000 Files and hashes: 1: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: SSEqRHV7zoEBGj203TATYpoeDOC/rqoDeoQ8cFsGA28=) 2: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: AQenx1dt+kU1dllLrJ4J77w2s2czEkS4jP/ajMi229M=) 3: 3FCCB124CE6330827269179656BC9A7F04BCACF3.crl (hash: YeMwanFZ05A0o+nfSHtlKBCvQflDPR/masaGCmM2ONk=) 4: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: vpj2Cz8QvcSUHt1I4ZpBnWfoJ+ZMnw91/FihIVwqKaA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:24:b0:91:57:8c:6c:de:12:60:83:8e:a7:57:c9:30:6b:99:b6:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Validity Not Before: Sep 23 23:40:26 2026 GMT Not After : Sep 25 00:22:26 2026 GMT Subject: CN=64E9E2F4683A19862002574E6F9FD12B72FEA778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ad:f1:f9:df:99:0a:10:b4:87:ab:a5:01:68: 55:7b:fa:e7:24:4a:0d:0c:aa:43:f3:6b:88:22:36: 9b:41:87:fa:b4:b3:cd:e3:99:5e:10:62:38:ab:c7: ff:85:ac:d4:49:3d:8f:9e:a1:a0:b9:cd:ee:fe:9e: 31:00:1d:c7:4d:1a:ad:06:24:43:ea:92:35:5e:71: 4e:80:b5:4f:c9:5e:8a:ea:bd:db:d6:30:ce:0a:d4: b7:c1:0b:8d:c8:bf:81:64:34:17:1f:90:89:95:f5: 1f:42:71:20:4f:96:b6:f4:99:cb:5c:7b:ea:d3:22: be:54:f4:be:5b:25:78:1d:77:62:0b:50:c2:b5:30: e4:dd:e0:39:f6:df:73:46:14:83:f8:0a:09:c4:e8: 3e:f4:d8:f4:08:e9:2c:73:9a:34:a5:c8:83:b6:05: f3:49:e9:93:4d:48:77:22:cd:03:f8:68:db:cd:1e: 1b:f0:9f:d3:ad:86:64:e3:02:34:fc:29:e0:28:c1: 16:73:be:f7:02:79:fe:88:66:c0:87:33:6a:cd:a1: 09:59:39:e8:7f:53:40:b4:42:5e:0c:71:a3:32:6e: d2:13:d9:8c:61:9e:34:13:2c:74:d4:93:9f:4d:8c: fc:ca:b6:7d:f5:fb:54:1a:45:25:55:79:da:8f:0c: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E9:E2:F4:68:3A:19:86:20:02:57:4E:6F:9F:D1:2B:72:FE:A7:78 X509v3 Authority Key Identifier: keyid:3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ff:54:87:d0:e5:e7:77:39:b6:66:30:3c:3b:71:c3:d1:32: e9:29:48:eb:4b:5a:d0:f1:f0:f1:df:97:45:05:7d:56:e5:e3: 51:35:d6:97:82:39:7b:cc:52:ce:7f:42:fd:9c:9f:07:c3:37: 2a:68:03:7b:df:bd:97:48:f5:9b:67:cc:9a:70:84:e1:f1:d9: ff:82:95:39:7d:4d:94:3f:fd:bf:8b:0e:ad:e6:75:91:87:13: 05:a7:ee:4d:47:1c:54:a4:4c:c2:b7:9a:f0:e7:70:2c:6e:54: a9:74:2a:6d:79:e8:a1:73:25:69:e2:13:9d:9c:db:a4:16:db: e9:c9:27:0d:50:8c:54:73:b1:fb:d7:e5:22:10:4b:5f:ce:20: 53:60:7d:b8:80:97:2d:0e:5e:74:05:ac:1b:72:f2:98:d4:97: 2f:2a:c1:11:92:86:21:6a:47:6b:64:d9:53:40:08:9b:3b:12: 7d:6b:af:65:55:1a:ec:0a:16:90:1e:20:e4:44:02:bb:dc:55: 72:f3:5d:93:b2:97:fa:93:42:9e:9b:e0:75:29:12:b8:9d:89: c4:97:1c:29:33:0f:51:00:74:38:e4:51:43:10:78:f8:2d:55: 16:06:46:f9:5d:69:37:f8:7d:7a:99:73:83:68:de:d1:63:d7: e7:2f:57:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUiSwkVeMbN4SYIOOp1fJMGuZtrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlBN0Yw NEJDQUNGMzAeFw0yNjA5MjMyMzQwMjZaFw0yNjA5MjUwMDIyMjZaMDMxMTAvBgNV BAMTKDY0RTlFMkY0NjgzQTE5ODYyMDAyNTc0RTZGOUZEMTJCNzJGRUE3NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvrfH535kKELSHq6UBaFV7+uck Sg0MqkPza4giNptBh/q0s83jmV4QYjirx/+FrNRJPY+eoaC5ze7+njEAHcdNGq0G JEPqkjVecU6AtU/JXorqvdvWMM4K1LfBC43Iv4FkNBcfkImV9R9CcSBPlrb0mctc e+rTIr5U9L5bJXgdd2ILUMK1MOTd4Dn233NGFIP4CgnE6D702PQI6SxzmjSlyIO2 BfNJ6ZNNSHcizQP4aNvNHhvwn9OthmTjAjT8KeAowRZzvvcCef6IZsCHM2rNoQlZ Oeh/U0C0Ql4McaMybtIT2YxhnjQTLHTUk59NjPzKtn31+1QaRSVVedqPDHwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZOni9Gg6GYYgAldOb5/RK3L+p3gwHwYDVR0j BBgwFoAUP8yxJM5jMIJyaReWVryafwS8rPMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMzZjYwZTYtYWZkZC00ZTEwLTgzYjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRD RTYzMzA4MjcyNjkxNzk2NTZCQzlBN0YwNEJDQUNGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNDQjEyNENFNjMzMDgyNzI2OTE3OTY1NkJDOUE3RjA0QkNB Q0YzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlB N0YwNEJDQUNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGr/VIfQ5ed3ObZmMDw7ccPRMukpSOtLWtDx 8PHfl0UFfVbl41E11peCOXvMUs5/Qv2cnwfDNypoA3vfvZdI9ZtnzJpwhOHx2f+C lTl9TZQ//b+LDq3mdZGHEwWn7k1HHFSkTMK3mvDncCxuVKl0Km156KFzJWniE52c 26QW2+nJJw1QjFRzsfvX5SIQS1/OIFNgfbiAly0OXnQFrBty8pjUly8qwRGShiFq R2tk2VNACJs7En1rr2VVGuwKFpAeIOREArvcVXLzXZOyl/qTQp6b4HUpEridicSX HCkzD1EAdDjkUUMQePgtVRYGRvldaTf4fXqZc4No3tFj1+cvV1A= -----END CERTIFICATE-----Generated at Thu Sep 24 05:42:01 2026 by rpki-client