$ rpki-client -vvvf rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft File: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft (raw, json) Hash identifier: l6+07gGyYGRKyfdh4SqdDEz3y01vqkYeuNlkBCw7y0U= Subject key identifier: 9E:FF:7E:8E:EC:E5:64:98:B6:B3:52:EA:09:6D:54:54:C3:15:D0:C3 Authority key identifier: C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B Certificate issuer: /CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Certificate serial: 32EC86588B73DBDCD533DF179ACA9BC0CBECF6EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:25:08 +0000 Manifest this update: Wed 23 Sep 2026 15:20:08 +0000 Manifest next update: Thu 24 Sep 2026 17:38:08 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: LIajhJuhOUTaJm+oofhgjNswmcoOFB63ng8TVN1eQsc=) 2: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: YLTFqPbE8HodWEXzk84zRnRAos+QxeVHNtxc/4KtNBA=) 3: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl (hash: jInmXIWCGsPbo6nZadeYWFIVtoOqeOcPazBVa2aqki0=) 4: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: Qghy68jg4bTWy5WkUB9ep5lnlWfvqYFDvEH2tiwveXs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ec:86:58:8b:73:db:dc:d5:33:df:17:9a:ca:9b:c0:cb:ec:f6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Validity Not Before: Sep 23 15:20:08 2026 GMT Not After : Sep 24 17:38:08 2026 GMT Subject: CN=9EFF7E8EECE56498B6B352EA096D5454C315D0C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ce:38:1b:94:c5:47:6a:f1:60:e0:8a:10:24: 66:3e:22:51:95:88:05:ce:33:58:6e:d3:a0:68:25: 7d:23:92:38:ce:f7:a1:30:b8:40:45:8e:ad:13:82: 3a:8f:70:0e:77:00:2c:7f:4b:9c:52:2d:1e:7b:fe: 55:11:28:ca:05:76:e6:73:25:55:13:4c:ea:20:23: 26:11:bb:50:6d:5e:a1:e5:ca:54:87:a5:e5:d9:7c: d6:33:05:d6:0c:2e:9c:bc:df:8a:f6:60:ea:e3:55: 0c:5e:cb:3b:56:11:55:46:bd:c4:a8:89:23:16:55: 74:6d:73:43:6b:e8:03:68:89:15:58:a7:17:ac:78: ce:ad:28:a2:1d:5f:33:9c:a4:0d:dc:9d:11:fd:da: cc:0a:16:8d:89:11:5c:3f:33:4a:4f:b1:50:99:2f: 21:70:bf:7d:7c:9c:2d:ae:4b:72:13:f1:0e:4c:cf: c5:b3:4a:9b:2e:c5:5b:8c:f6:f9:31:4b:d8:fb:1a: 13:1e:c8:de:d2:1f:93:25:a4:1e:0d:3d:e0:99:2d: 00:33:2a:fb:d1:6c:8f:27:b6:65:84:52:50:be:80: 05:67:20:f7:7c:65:62:5b:f0:24:59:b7:05:37:b6: f7:63:47:29:12:12:93:ee:17:da:ad:97:93:61:75: 4a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FF:7E:8E:EC:E5:64:98:B6:B3:52:EA:09:6D:54:54:C3:15:D0:C3 X509v3 Authority Key Identifier: keyid:C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d9:90:29:a9:6a:0e:08:d7:d7:94:17:8d:bf:48:88:9d:76: 79:33:f7:a4:af:ca:0f:45:c4:94:0b:12:e0:91:a1:d4:08:5e: bc:83:51:25:6d:88:1d:07:9f:a5:39:b1:b4:73:3a:8a:d5:8a: bc:2a:c1:a2:a9:e7:cd:f3:0c:51:8c:5b:22:1a:91:58:42:b2: d7:b6:ce:48:ad:68:3e:0c:8a:0a:8d:77:45:8b:11:e9:5f:46: 27:d6:b4:39:01:ce:11:33:75:e1:ae:4f:b1:d8:5a:59:5e:6f: 29:cc:19:9d:b4:65:5b:fb:52:72:5d:36:62:9a:d6:b6:43:b9: ff:e1:ce:b5:fe:88:3e:27:c0:f7:1e:64:13:8f:f8:2b:f0:c4: 1d:37:3c:f7:87:92:f9:d0:4c:db:2a:9f:83:e3:28:d7:2f:5c: 08:06:98:1a:d5:80:ee:d3:8c:42:10:b6:88:e7:72:ba:57:7f: 8f:29:ad:8f:5c:22:25:6b:5a:f4:a0:b3:5a:b0:2b:15:11:b9: bb:a2:4e:62:a2:7d:ab:8b:6f:30:38:2d:e6:ee:30:98:4b:fb: 30:d1:e3:a6:28:0e:4a:82:bb:b1:05:d8:77:4b:5b:f1:e6:4c: 5c:4e:53:d0:1d:e1:60:68:dc:e7:c2:57:f2:6a:30:c3:06:81: 18:73:16:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuyGWItz29zVM98XmsqbwMvs9uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYw RjdGN0Q4QjAeFw0yNjA5MjMxNTIwMDhaFw0yNjA5MjQxNzM4MDhaMDMxMTAvBgNV BAMTKDlFRkY3RThFRUNFNTY0OThCNkIzNTJFQTA5NkQ1NDU0QzMxNUQwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyzjgblMVHavFg4IoQJGY+IlGV iAXOM1hu06BoJX0jkjjO96EwuEBFjq0TgjqPcA53ACx/S5xSLR57/lURKMoFduZz JVUTTOogIyYRu1BtXqHlylSHpeXZfNYzBdYMLpy834r2YOrjVQxeyztWEVVGvcSo iSMWVXRtc0Nr6ANoiRVYpxeseM6tKKIdXzOcpA3cnRH92swKFo2JEVw/M0pPsVCZ LyFwv318nC2uS3IT8Q5Mz8WzSpsuxVuM9vkxS9j7GhMeyN7SH5MlpB4NPeCZLQAz KvvRbI8ntmWEUlC+gAVnIPd8ZWJb8CRZtwU3tvdjRykSEpPuF9qtl5NhdUpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnv9+juzlZJi2s1LqCW1UVMMV0MMwHwYDVR0j BBgwFoAUw8MJD52Wylk26ot9WemuZg9/fYswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTRjNzc2NjYtNGM3NC00NDBkLTkxNjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5 RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYwRjdGN0Q4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0MzMDkwRjlEOTZDQTU5MzZFQThCN0Q1OUU5QUU2NjBGN0Y3 RDhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFF NjYwRjdGN0Q4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7ZkCmpag4I19eUF42/SIiddnkz96Svyg9F xJQLEuCRodQIXryDUSVtiB0Hn6U5sbRzOorVirwqwaKp583zDFGMWyIakVhCste2 zkitaD4MigqNd0WLEelfRifWtDkBzhEzdeGuT7HYWllebynMGZ20ZVv7UnJdNmKa 1rZDuf/hzrX+iD4nwPceZBOP+CvwxB03PPeHkvnQTNsqn4PjKNcvXAgGmBrVgO7T jEIQtojncrpXf48prY9cIiVrWvSgs1qwKxURubuiTmKifauLbzA4LebuMJhL+zDR 46YoDkqCu7EF2HdLW/HmTFxOU9Ad4WBo3OfCV/JqMMMGgRhzFno= -----END CERTIFICATE-----Generated at Thu Sep 24 10:43:38 2026 by rpki-client