$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft File: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft (raw, json) Hash identifier: 9k7A+nqWPU5CLnSeCHbMmc5LJ3xpaTVupXgkiujyH2A= Subject key identifier: 68:F0:86:29:CD:10:4B:9D:04:44:D3:EB:8D:30:F0:6C:8E:7A:3A:BB Authority key identifier: 3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C Certificate issuer: /CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Certificate serial: 43A9547DD022014AB275C3B3C61C0C3CA0A8696F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft Manifest number: BF Signing time: Wed 23 Sep 2026 20:10:52 +0000 Manifest this update: Wed 23 Sep 2026 20:05:52 +0000 Manifest next update: Thu 24 Sep 2026 23:57:52 +0000 Files and hashes: 1: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: 6kElF6lyRfaEOBJkx0qFZUv24i4o0ISe0pvRjTce7Do=) 2: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl (hash: 71sf04Mr1M4QvDyFaG4iSNuZ91E2o/rXWhI5RhlfvQE=) 3: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: uDDSqQJALKhSiJ8HMA/VUDQe5THFv4WrWGBluPCxcKI=) 4: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 1EALwremo0OuX0UpvCbf2flDFJadlkhYoy6Ddmmbmd0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a9:54:7d:d0:22:01:4a:b2:75:c3:b3:c6:1c:0c:3c:a0:a8:69:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Validity Not Before: Sep 23 20:05:52 2026 GMT Not After : Sep 24 23:57:52 2026 GMT Subject: CN=68F08629CD104B9D0444D3EB8D30F06C8E7A3ABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:73:03:70:94:98:1e:83:82:fa:8b:67:65: ce:ad:3e:9b:3d:03:0f:0a:2c:32:b8:73:8d:12:23: 34:ad:9e:8f:bb:6f:f8:ac:69:aa:e1:35:b8:6a:2e: c0:03:11:26:c7:30:35:dd:75:de:8a:07:d1:06:56: 1a:6c:80:6f:af:96:e2:87:2f:1b:0d:ca:3b:34:24: 2a:e2:2d:9d:4f:3c:91:43:3c:63:e7:f5:a6:9c:bb: 6b:ea:7d:a7:4b:32:ad:ef:72:9f:10:2c:9b:29:7a: 09:28:c3:8b:b4:ec:75:7d:57:85:c7:2c:8d:50:5b: 2e:b9:9e:b3:e5:22:34:54:1d:8c:e1:5e:22:ef:9c: 7c:bf:7a:d7:05:15:f3:47:b0:2b:68:e2:bc:4a:81: db:4f:4b:77:25:52:be:8d:e9:e8:e1:31:ed:29:16: 94:4f:2b:f2:f6:8e:9b:36:22:ed:b1:f3:f5:ff:73: 36:a7:29:af:bd:e4:d5:cb:ed:f7:24:b6:1f:85:47: 5f:23:47:c5:55:5c:d1:4b:e9:0f:d7:c7:5d:7c:91: d5:ae:a6:94:a8:6e:ff:76:45:3c:30:19:bb:fb:1a: 3a:a5:8e:31:7c:12:6c:df:5a:d9:d8:ee:95:40:d9: 7c:8b:4e:d3:d1:fc:b0:45:3e:24:0e:48:7e:85:10: 35:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:86:29:CD:10:4B:9D:04:44:D3:EB:8D:30:F0:6C:8E:7A:3A:BB X509v3 Authority Key Identifier: keyid:3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:0d:f6:2d:90:62:6f:ba:43:94:37:c7:12:e3:d3:28:2a:0b: 9f:d5:8d:71:f3:1e:0d:cb:de:62:46:a8:44:f2:f2:11:17:bb: 79:7a:bc:d9:43:2f:38:cd:ba:d4:e3:eb:b2:a2:d1:7a:90:ec: 06:49:cc:59:b7:01:bd:ba:8e:2f:6f:66:26:f2:ae:57:7b:8b: 3d:2b:e3:80:41:07:e6:bb:79:41:25:94:d9:c1:c0:52:cb:a9: 3b:7c:e0:4d:2c:30:08:c0:b1:65:05:c7:e7:b7:b5:21:b2:5d: e3:78:8a:cb:df:94:31:c9:62:31:66:0f:49:97:f0:3e:c8:52: 94:83:54:bf:d8:a0:45:f3:fa:d1:69:6b:41:d9:30:cd:25:99: 11:21:70:13:bb:fa:bf:22:48:dc:87:ea:4c:25:6b:b8:be:69: 4d:a0:b6:5f:c2:f6:f9:94:2e:55:cc:16:1d:d7:65:2f:67:e7: e7:78:25:e2:4a:8a:f5:d6:c2:4e:c3:5f:1f:8d:5f:fa:1f:2a: b7:41:48:5c:06:c4:d9:62:64:fc:88:b6:f3:30:22:6e:5b:f7: 01:2b:ed:fc:6e:88:a2:50:ac:7b:e9:b1:c1:b1:8b:6c:fa:14: 40:19:2a:c3:94:63:50:de:19:5c:e9:e2:2c:9f:f7:46:c1:12: 89:bb:c6:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6lUfdAiAUqydcOzxhwMPKCoaW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdG OUE2MjUyQzAeFw0yNjA5MjMyMDA1NTJaFw0yNjA5MjQyMzU3NTJaMDMxMTAvBgNV BAMTKDY4RjA4NjI5Q0QxMDRCOUQwNDQ0RDNFQjhEMzBGMDZDOEU3QTNBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXHMDcJSYHoOC+otnZc6tPps9 Aw8KLDK4c40SIzStno+7b/isaarhNbhqLsADESbHMDXddd6KB9EGVhpsgG+vluKH LxsNyjs0JCriLZ1PPJFDPGPn9aacu2vqfadLMq3vcp8QLJspegkow4u07HV9V4XH LI1QWy65nrPlIjRUHYzhXiLvnHy/etcFFfNHsCto4rxKgdtPS3clUr6N6ejhMe0p FpRPK/L2jps2Iu2x8/X/czanKa+95NXL7fckth+FR18jR8VVXNFL6Q/Xx118kdWu ppSobv92RTwwGbv7GjqljjF8EmzfWtnY7pVA2XyLTtPR/LBFPiQOSH6FEDVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaPCGKc0QS50ERNPrjTDwbI56OrswHwYDVR0j BBgwFoAUPfTEomplFO8zfiTTrvIo9/mmJSwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JlZDgzYmQtODk4Ni00NDI5LWEwMTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2 QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdGOUE2MjUyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREY0QzRBMjZBNjUxNEVGMzM3RTI0RDNBRUYyMjhGN0Y5QTYy NTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4 RjdGOUE2MjUyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIN9i2QYm+6Q5Q3xxLj0ygqC5/VjXHzHg3L 3mJGqETy8hEXu3l6vNlDLzjNutTj67Ki0XqQ7AZJzFm3Ab26ji9vZibyrld7iz0r 44BBB+a7eUEllNnBwFLLqTt84E0sMAjAsWUFx+e3tSGyXeN4isvflDHJYjFmD0mX 8D7IUpSDVL/YoEXz+tFpa0HZMM0lmREhcBO7+r8iSNyH6kwla7i+aU2gtl/C9vmU LlXMFh3XZS9n5+d4JeJKivXWwk7DXx+NX/ofKrdBSFwGxNliZPyItvMwIm5b9wEr 7fxuiKJQrHvpscGxi2z6FEAZKsOUY1DeGVzp4iyf90bBEom7xrA= -----END CERTIFICATE-----Generated at Thu Sep 24 04:59:24 2026 by rpki-client