$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft File: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft (raw, json) Hash identifier: hKl6QR6Y9+U1kYEprSJgM1nlgtgCskhQr6TPWHDKL/Q= Subject key identifier: 54:16:08:EB:94:BC:F8:45:16:E2:14:BA:14:6A:6B:B0:59:3A:23:11 Authority key identifier: 3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 Certificate issuer: /CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Certificate serial: 3CA8435B5D74EC3E67CCE7CC193C6DAB7336DB42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:16:12 +0000 Manifest this update: Wed 23 Sep 2026 16:11:12 +0000 Manifest next update: Thu 24 Sep 2026 16:32:12 +0000 Files and hashes: 1: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: 5BxZJ6/9J6eBwezWDHQK7gf8/iHFgfigBSsqY27prSE=) 2: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl (hash: 1lEKcFVfiLfPSPq/UAkrJqVhoilZhY2aEBEkaHGSRsk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a8:43:5b:5d:74:ec:3e:67:cc:e7:cc:19:3c:6d:ab:73:36:db:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Validity Not Before: Sep 23 16:11:12 2026 GMT Not After : Sep 24 16:32:12 2026 GMT Subject: CN=541608EB94BCF84516E214BA146A6BB0593A2311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c1:f9:b4:4b:7f:0b:6c:6a:33:cd:5c:ab:bd: b7:25:87:f4:67:3b:ba:0b:6f:14:9f:dc:27:ef:30: ec:9c:af:76:59:67:52:1c:76:02:83:83:bb:5b:79: 71:79:e7:ca:3a:19:83:f6:6b:da:bb:fe:b3:88:a4: 6b:a9:e6:7c:10:45:bf:f2:6a:f6:02:fa:f5:57:27: f4:5c:94:c9:6e:3a:6f:65:87:8f:0c:ee:4d:b3:9e: b8:0a:44:6c:75:2a:8a:47:1e:94:e4:d2:e9:c4:52: 68:aa:94:1a:55:3d:46:63:84:ea:a3:2e:9b:7c:ca: 01:3d:93:bb:06:ca:22:97:4e:c7:09:15:f0:61:26: 48:f1:c3:c9:d9:6e:39:e4:6f:87:5e:3f:88:75:18: c1:a1:fc:ba:a3:de:d6:51:47:ce:11:2c:30:bf:e4: d7:ae:8d:a4:dc:4c:a3:80:0a:ae:7b:88:71:7e:b6: fb:09:5c:99:29:05:c4:11:cb:e3:fc:7b:75:08:21: f3:92:33:75:5d:bf:e8:a3:ff:40:b5:ee:31:36:56: 15:d9:05:e4:6b:0a:aa:42:b8:ee:d0:b9:05:d8:85: 85:55:58:15:1f:b6:9f:b8:64:25:85:fc:84:33:0a: f0:47:d4:28:6c:54:57:70:80:e5:73:da:ae:5a:b5: 03:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:16:08:EB:94:BC:F8:45:16:E2:14:BA:14:6A:6B:B0:59:3A:23:11 X509v3 Authority Key Identifier: keyid:3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f4:a8:27:50:42:ef:4e:1b:29:7b:f7:79:a0:14:b6:e1:88: 73:7a:2f:e1:c6:f6:f7:40:5b:c3:2a:01:f1:f0:b8:f5:e4:b7: f0:b4:d8:a8:e0:15:8e:3a:e9:e8:6a:a8:2e:a7:eb:2c:b8:d2: 13:b3:80:b8:98:0b:d4:ce:41:ce:90:10:de:a5:7b:c2:5c:67: a4:6e:15:f1:b8:f6:6a:33:83:33:47:eb:d9:ed:05:85:e1:07: 03:66:38:ad:e3:b5:02:a5:4e:0c:5e:2b:0c:ec:fc:e9:9e:2a: 52:7d:0a:15:d7:10:f5:d9:e8:19:b7:b0:d5:73:04:21:8b:31: 32:74:a3:92:ac:5d:09:78:a2:68:63:2a:fd:d2:56:d5:f2:1a: 67:24:f8:d8:3d:62:24:3f:56:fc:f2:e7:ae:62:fb:94:f5:d9: 76:d5:d0:68:57:17:5f:15:18:47:83:d6:03:69:25:61:ef:f2: 56:42:d5:2f:1f:e4:37:d8:85:69:14:8c:89:6a:7f:44:ff:bc: 6e:cd:5d:5e:9b:c1:43:b7:a8:84:0b:12:ca:b3:e7:67:e5:77: 9d:a2:8c:98:a1:5e:b0:4d:72:e6:ff:c8:20:fb:b9:cd:89:2a: 28:72:19:eb:1e:cb:3b:1f:cc:ee:f7:42:8b:0b:70:b1:66:8c: 2f:b3:a2:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKhDW1107D5nzOfMGTxtq3M220IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3 MjgwNUVDMDAeFw0yNjA5MjMxNjExMTJaFw0yNjA5MjQxNjMyMTJaMDMxMTAvBgNV BAMTKDU0MTYwOEVCOTRCQ0Y4NDUxNkUyMTRCQTE0NkE2QkIwNTkzQTIzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCawfm0S38LbGozzVyrvbclh/Rn O7oLbxSf3CfvMOycr3ZZZ1IcdgKDg7tbeXF558o6GYP2a9q7/rOIpGup5nwQRb/y avYC+vVXJ/RclMluOm9lh48M7k2znrgKRGx1KopHHpTk0unEUmiqlBpVPUZjhOqj Lpt8ygE9k7sGyiKXTscJFfBhJkjxw8nZbjnkb4deP4h1GMGh/Lqj3tZRR84RLDC/ 5NeujaTcTKOACq57iHF+tvsJXJkpBcQRy+P8e3UIIfOSM3Vdv+ij/0C17jE2VhXZ BeRrCqpCuO7QuQXYhYVVWBUftp+4ZCWF/IQzCvBH1ChsVFdwgOVz2q5atQM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVBYI65S8+EUW4hS6FGprsFk6IxEwHwYDVR0j BBgwFoAUPNGso9b/zTvYicYkXfAXAXKAXsAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNjMTk3ZjgtNGUyZS00NmQ5LWJlMmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNE NkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3MjgwNUVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0QxQUNBM0Q2RkZDRDNCRDg4OUM2MjQ1REYwMTcwMTcyODA1 RUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3 MDE3MjgwNUVDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJj0qCdQQu9OGyl793mgFLbhiHN6L+HG9vdA W8MqAfHwuPXkt/C02KjgFY466ehqqC6n6yy40hOzgLiYC9TOQc6QEN6le8JcZ6Ru FfG49mozgzNH69ntBYXhBwNmOK3jtQKlTgxeKwzs/OmeKlJ9ChXXEPXZ6Bm3sNVz BCGLMTJ0o5KsXQl4omhjKv3SVtXyGmck+Ng9YiQ/Vvzy565i+5T12XbV0GhXF18V GEeD1gNpJWHv8lZC1S8f5DfYhWkUjIlqf0T/vG7NXV6bwUO3qIQLEsqz52fld52i jJihXrBNcub/yCD7uc2JKihyGeseyzsfzO73QosLcLFmjC+zorA= -----END CERTIFICATE-----Generated at Thu Sep 24 02:31:06 2026 by rpki-client