$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft File: 3C38CDC785C4C8B22E60377271E55409582CCE11.mft (raw, json) Hash identifier: kNp+jlRawINGNEKWXe/3JqWwtLVnqNow3OzM/P1PN9Q= Subject key identifier: F2:3F:F3:C2:CD:DD:E4:B2:B0:79:58:BB:AD:44:86:CA:A8:0C:E8:6E Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 Certificate issuer: /CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Certificate serial: 10D4D19FD73C62449DF293992E030C831995CAB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft Manifest number: C3 Signing time: Sat 26 Sep 2026 11:39:04 +0000 Manifest this update: Sat 26 Sep 2026 11:34:04 +0000 Manifest next update: Sun 27 Sep 2026 12:14:04 +0000 Files and hashes: 1: 3C38CDC785C4C8B22E60377271E55409582CCE11.crl (hash: 97rC4xOQfkd5UnkHMyXdBTF4Lw67KaPoCTxH2VxG+Bw=) 2: 3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa (hash: uY3yyx4wQkOkesdmZiKQBfO/mX9p5Uwb9aYVUKsyBH0=) 3: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: YTCmCer361lbPyWorpFl5d+Z6lvA+nitAm63kpLBrjA=) 4: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: YRj5C4EJmHgy7/Vm8+56TmtCB98kN0pGzPis/CT4F1s=) 5: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: CNqZtOi2G7stcR7KpWbtX7pHl0DtOjDNuPcEVY0GuK4=) 6: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: 6IAAYhSuJnzcb+wPAnz95hDBr9XmKVxiIbVUzRwnFY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d4:d1:9f:d7:3c:62:44:9d:f2:93:99:2e:03:0c:83:19:95:ca:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Validity Not Before: Sep 26 11:34:04 2026 GMT Not After : Sep 27 12:14:04 2026 GMT Subject: CN=F23FF3C2CDDDE4B2B07958BBAD4486CAA80CE86E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:a7:fa:ee:33:bf:c9:b8:53:53:63:12:40: e1:68:5e:55:c1:d5:d1:7e:a8:d0:7e:68:12:14:9e: 1b:e7:4a:fe:78:72:f4:5c:ff:3a:5f:82:ca:20:6d: 10:73:0b:1a:7f:b0:64:6f:1d:0f:81:df:2a:ed:43: bb:51:23:44:dd:e6:7c:86:d7:c8:d8:49:68:89:7b: 1a:27:f8:2d:b9:e8:c8:65:93:16:71:bf:4f:c8:53: e8:6c:57:50:c5:c5:c9:47:53:ba:87:c4:ae:b3:d1: 2e:53:d9:be:ce:5f:13:6d:c5:dd:58:c6:43:39:f3: 90:63:e0:e1:91:d7:34:64:de:dc:e7:da:87:82:87: 44:1b:05:bb:72:c2:8a:40:61:32:66:0a:aa:5a:e3: 2b:4b:0b:37:cb:08:39:57:ba:ad:b3:6d:0b:9f:39: 8f:14:50:ea:ff:30:2d:10:cc:c4:ac:66:c5:d9:ef: c3:d3:e0:3c:02:c1:ad:f4:1e:c3:12:f4:f4:4f:75: 10:e5:6e:45:71:00:e3:c4:c7:3d:d6:48:b8:4c:cf: 98:63:44:ca:d5:b4:c0:ab:03:4f:c3:1b:a3:15:cb: 50:fb:43:70:5d:e4:02:d2:7d:50:19:ec:1f:ff:0c: 59:27:38:3a:7b:2d:71:97:c1:d2:3e:3f:1c:8d:c1: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3F:F3:C2:CD:DD:E4:B2:B0:79:58:BB:AD:44:86:CA:A8:0C:E8:6E X509v3 Authority Key Identifier: keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:57:42:07:82:c0:ec:62:51:e0:f5:77:d8:a5:36:a5:20:6d: 31:08:aa:9d:07:68:04:c1:46:4d:3b:74:f3:d8:ae:93:42:31: 82:96:07:ed:8b:50:fd:ed:eb:d9:fc:51:e7:91:b4:3d:2f:ea: f7:18:1d:15:b2:9c:57:10:74:42:fa:da:96:69:2b:bc:c4:29: cd:2a:8a:d2:b1:42:2a:5e:ac:48:05:cf:bc:3c:0e:75:7f:0d: ae:31:41:29:10:8f:60:09:e3:ea:28:43:6f:0c:79:3b:53:9b: 6e:4e:6b:6b:35:bd:de:ea:e6:a7:a8:bd:63:05:4e:01:15:df: de:9f:2f:ca:e6:cb:c4:3f:c1:2d:85:99:21:62:23:55:c9:29: 08:aa:e0:a8:23:a5:90:d6:7e:cb:e6:0c:51:c7:47:85:e7:26: 30:70:ed:cc:24:10:6e:67:57:6b:2b:47:1f:2a:3d:0d:8d:32: b1:ed:f8:b9:ae:b4:f0:d2:89:7b:c7:a9:ca:d3:19:39:71:e2: 5c:51:42:01:ef:6d:4d:2a:f0:3e:47:cb:30:1f:e5:ab:cb:51: 3a:4a:61:1c:0e:24:37:98:63:cf:4b:5f:25:d9:8a:8c:da:0e: 03:56:e6:ba:9c:7e:f8:f7:d4:de:cf:b2:21:0a:ff:26:18:21: ac:fe:8e:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENTRn9c8YkSd8pOZLgMMgxmVyrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1 ODJDQ0UxMTAeFw0yNjA5MjYxMTM0MDRaFw0yNjA5MjcxMjE0MDRaMDMxMTAvBgNV BAMTKEYyM0ZGM0MyQ0REREU0QjJCMDc5NThCQkFENDQ4NkNBQTgwQ0U4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaH6f67jO/ybhTU2MSQOFoXlXB 1dF+qNB+aBIUnhvnSv54cvRc/zpfgsogbRBzCxp/sGRvHQ+B3yrtQ7tRI0Td5nyG 18jYSWiJexon+C256MhlkxZxv0/IU+hsV1DFxclHU7qHxK6z0S5T2b7OXxNtxd1Y xkM585Bj4OGR1zRk3tzn2oeCh0QbBbtywopAYTJmCqpa4ytLCzfLCDlXuq2zbQuf OY8UUOr/MC0QzMSsZsXZ78PT4DwCwa30HsMS9PRPdRDlbkVxAOPExz3WSLhMz5hj RMrVtMCrA0/DG6MVy1D7Q3Bd5ALSfVAZ7B//DFknODp7LXGXwdI+PxyNwQhNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8j/zws3d5LKweVi7rUSGyqgM6G4wHwYDVR0j BBgwFoAUPDjNx4XEyLIuYDdyceVUCVgszhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ3OTRkMzYtNjlmOC00NDA2LWJmOWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4 NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1ODJDQ0UxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzM4Q0RDNzg1QzRDOEIyMkU2MDM3NzI3MUU1NTQwOTU4MkND RTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm OWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0 MDk1ODJDQ0UxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZXQgeCwOxiUeD1d9ilNqUgbTEIqp0HaATB Rk07dPPYrpNCMYKWB+2LUP3t69n8UeeRtD0v6vcYHRWynFcQdEL62pZpK7zEKc0q itKxQiperEgFz7w8DnV/Da4xQSkQj2AJ4+ooQ28MeTtTm25Oa2s1vd7q5qeovWMF TgEV396fL8rmy8Q/wS2FmSFiI1XJKQiq4KgjpZDWfsvmDFHHR4XnJjBw7cwkEG5n V2srRx8qPQ2NMrHt+LmutPDSiXvHqcrTGTlx4lxRQgHvbU0q8D5HyzAf5avLUTpK YRwOJDeYY89LXyXZiozaDgNW5rqcfvj31N7PsiEK/yYYIaz+joY= -----END CERTIFICATE-----Generated at Sat Sep 26 20:51:54 2026 by rpki-client