$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft File: 3E2F6BF0D403588302286670BF848A78CBDFCC03.mft (raw, json) Hash identifier: lVYdAqE5sJhxXFF8w0hNpRTwdC7s02lrTfzE0coFT2Y= Subject key identifier: C9:53:9E:A1:ED:E3:1A:92:AC:F7:07:3F:E7:C1:B7:C7:65:09:FE:BD Authority key identifier: 3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03 Certificate issuer: /CN=3E2F6BF0D403588302286670BF848A78CBDFCC03 Certificate serial: 5FA4F656E6FDE665D993813BEC730189A17E2F2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 14:17:34 +0000 Manifest this update: Sat 26 Sep 2026 14:12:34 +0000 Manifest next update: Sun 27 Sep 2026 16:11:34 +0000 Files and hashes: 1: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: rIYPSEZBQY119pZKRCgQ7fA+t5XlH5FXxB4mSA7mWtU=) 2: 3E2F6BF0D403588302286670BF848A78CBDFCC03.crl (hash: S3lAhtIr5WugD1+tJZOnMsVVWqxDt35D9Cpg62kmxL4=) 3: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: /MFUfSDFxjyUNAWC9nKYACUnYExfFRRhHuhwdWcwusA=) 4: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: KaRNE9dqQ7RSBfTQU4dvi8JpMAiXvlNB1zGB1/yX/kk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a4:f6:56:e6:fd:e6:65:d9:93:81:3b:ec:73:01:89:a1:7e:2f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2F6BF0D403588302286670BF848A78CBDFCC03 Validity Not Before: Sep 26 14:12:34 2026 GMT Not After : Sep 27 16:11:34 2026 GMT Subject: CN=C9539EA1EDE31A92ACF7073FE7C1B7C76509FEBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:0e:ac:7f:47:75:b4:9a:93:ca:2e:1f:fa: a3:ee:8f:7c:4e:0d:7c:13:38:a9:1e:4c:b2:e8:b1: d4:a2:5a:7b:bc:73:0c:ba:f5:d7:8c:68:99:05:cc: a0:21:87:9d:90:17:80:52:25:d8:a3:de:96:30:92: 8f:60:e3:38:98:35:02:00:8b:58:4b:55:95:48:69: 87:d8:36:ed:8d:81:fd:8a:15:10:84:9b:4d:7e:ae: fb:31:01:65:7d:11:42:96:69:a1:32:f0:fa:67:d3: 47:9c:68:32:a6:af:1d:31:0f:53:64:71:a3:ea:22: 3b:26:a1:1f:8a:eb:68:65:18:55:eb:4b:28:6e:d8: 57:4e:11:02:0f:8d:c2:42:77:aa:06:b2:62:a9:a9: c5:e1:a8:7c:d1:84:06:22:31:ab:9e:cc:07:70:e0: de:28:dd:0e:4a:74:22:be:84:5e:9d:d8:92:99:2c: 35:8c:91:dc:c1:a2:24:d2:62:1c:2b:a2:47:e3:3f: a7:db:ac:32:cd:a0:da:01:27:97:fa:9a:90:b5:17: 25:41:b5:78:87:20:9a:50:3f:28:5c:fe:b3:29:53: 96:71:8e:eb:5c:e7:fb:83:84:c6:c7:d5:6a:d7:2b: 9e:bb:23:88:34:fe:7d:9c:9b:e2:f9:5b:67:58:2d: 4d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:53:9E:A1:ED:E3:1A:92:AC:F7:07:3F:E7:C1:B7:C7:65:09:FE:BD X509v3 Authority Key Identifier: keyid:3E:2F:6B:F0:D4:03:58:83:02:28:66:70:BF:84:8A:78:CB:DF:CC:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E2F6BF0D403588302286670BF848A78CBDFCC03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3E2F6BF0D403588302286670BF848A78CBDFCC03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ff:d3:4f:c8:3a:26:df:44:73:b2:66:ef:62:cf:7e:f3:b0: 8f:9d:a9:da:99:4c:c8:fd:6e:be:93:e0:09:56:d1:f6:c2:f0: 6f:3a:fb:14:ce:62:64:1e:b3:15:a7:f7:37:7a:d3:e4:90:86: 67:36:14:2e:88:d0:89:4c:34:db:d4:74:46:39:1e:8e:df:b5: 67:a3:4d:7e:af:1b:56:36:ef:9d:7a:ae:7f:17:c8:90:53:07: 37:7b:d5:f5:43:3f:d6:56:6f:0f:cb:eb:b1:ba:87:a7:b9:12: a9:e4:9c:33:03:e1:ca:ff:ac:9c:db:6c:cd:42:86:c6:45:9b: ad:c7:8b:25:bc:88:33:95:ed:74:4d:e3:1d:1f:1b:fb:35:12: 99:e0:49:4a:65:01:41:07:24:e0:9c:0e:b7:12:c1:e4:f0:95: 2c:54:e7:b3:ed:d3:8d:cf:5d:dd:98:49:f9:2f:04:59:2a:e2: 84:47:7d:c1:d5:ae:44:91:12:1e:6b:eb:eb:38:4a:5b:a6:91: 71:8f:fc:f9:63:12:d2:84:e5:17:42:cd:a7:7e:15:1b:29:75: d1:cc:07:fd:6d:ae:ce:bb:19:2a:ff:02:b2:5f:e6:95:93:2e: 4d:ea:80:da:4c:d7:45:84:f9:c4:92:61:c5:94:35:7f:5e:e7: 7a:12:d4:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6T2Vub95mXZk4E77HMBiaF+LywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyRjZCRjBENDAzNTg4MzAyMjg2NjcwQkY4NDhBNzhD QkRGQ0MwMzAeFw0yNjA5MjYxNDEyMzRaFw0yNjA5MjcxNjExMzRaMDMxMTAvBgNV BAMTKEM5NTM5RUExRURFMzFBOTJBQ0Y3MDczRkU3QzFCN0M3NjUwOUZFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEg6sf0d1tJqTyi4f+qPuj3xO DXwTOKkeTLLosdSiWnu8cwy69deMaJkFzKAhh52QF4BSJdij3pYwko9g4ziYNQIA i1hLVZVIaYfYNu2Ngf2KFRCEm01+rvsxAWV9EUKWaaEy8Ppn00ecaDKmrx0xD1Nk caPqIjsmoR+K62hlGFXrSyhu2FdOEQIPjcJCd6oGsmKpqcXhqHzRhAYiMauezAdw 4N4o3Q5KdCK+hF6d2JKZLDWMkdzBoiTSYhwrokfjP6fbrDLNoNoBJ5f6mpC1FyVB tXiHIJpQPyhc/rMpU5Zxjutc5/uDhMbH1WrXK567I4g0/n2cm+L5W2dYLU0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyVOeoe3jGpKs9wc/58G3x2UJ/r0wHwYDVR0j BBgwFoAUPi9r8NQDWIMCKGZwv4SKeMvfzAMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZlZTdhNWYtNTEyMS00MTgxLWE2MzUtMTIxYjZlNjlhZDU5LzAvM0UyRjZCRjBE NDAzNTg4MzAyMjg2NjcwQkY4NDhBNzhDQkRGQ0MwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRTJGNkJGMEQ0MDM1ODgzMDIyODY2NzBCRjg0OEE3OENCREZD QzAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZlZTdhNWYtNTEyMS00MTgxLWE2 MzUtMTIxYjZlNjlhZDU5LzAvM0UyRjZCRjBENDAzNTg4MzAyMjg2NjcwQkY4NDhB NzhDQkRGQ0MwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP/00/IOibfRHOyZu9iz37zsI+dqdqZTMj9 br6T4AlW0fbC8G86+xTOYmQesxWn9zd60+SQhmc2FC6I0IlMNNvUdEY5Ho7ftWej TX6vG1Y27516rn8XyJBTBzd71fVDP9ZWbw/L67G6h6e5EqnknDMD4cr/rJzbbM1C hsZFm63HiyW8iDOV7XRN4x0fG/s1EpngSUplAUEHJOCcDrcSweTwlSxU57Pt043P Xd2YSfkvBFkq4oRHfcHVrkSREh5r6+s4SlumkXGP/PljEtKE5RdCzad+FRspddHM B/1trs67GSr/ArJf5pWTLk3qgNpM10WE+cSSYcWUNX9e53oS1P4= -----END CERTIFICATE-----Generated at Sun Sep 27 00:38:03 2026 by rpki-client