$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft File: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft (raw, json) Hash identifier: AKPVYCuBAywwoH/hol3KUwUW2ffT+UHYy6pllDKeVHM= Subject key identifier: 2B:04:36:A6:A4:CD:82:E8:E3:98:49:38:11:D9:D9:D9:29:12:0F:F1 Authority key identifier: 3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B Certificate issuer: /CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Certificate serial: 77D2DB26D185C50F7C17CD9369E01CFF21B8B24F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:21:05 +0000 Manifest this update: Wed 23 Sep 2026 20:16:05 +0000 Manifest next update: Thu 24 Sep 2026 21:22:05 +0000 Files and hashes: 1: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: TX/EOsfX6vX1OpTsTM5A3FXSv9I/LcPHoG5Z7q7voYg=) 2: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: +e+HfMOZldBa/LpS7h6lb+TbzFgEj7Ip8GzPugbfqcc=) 3: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl (hash: B2aEQ5aZP6GuXzRr9q3oF4+BIsRuPR/YGbOtI6BtBqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d2:db:26:d1:85:c5:0f:7c:17:cd:93:69:e0:1c:ff:21:b8:b2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Validity Not Before: Sep 23 20:16:05 2026 GMT Not After : Sep 24 21:22:05 2026 GMT Subject: CN=2B0436A6A4CD82E8E398493811D9D9D929120FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:76:23:02:e2:10:ae:ac:a0:09:c6:71:f8: 66:79:8f:dd:ff:e5:fe:85:a3:ef:17:18:54:3b:ab: ba:0c:f2:97:f4:f7:75:68:90:d6:87:c1:9a:f5:ca: 92:27:6a:6d:54:dd:69:f3:f2:f7:af:1a:fb:56:82: 10:12:91:cc:67:a3:9b:e2:9a:26:78:70:c1:10:3a: f5:64:ad:85:04:55:62:26:ff:a9:62:c3:2e:cc:77: b5:5d:9d:ea:2d:58:2d:28:f1:15:1d:9c:f8:65:c8: 65:51:3f:20:98:10:02:08:ca:05:ef:c3:85:17:b3: 5a:8d:1d:d1:b9:ee:20:82:8b:a6:e8:9b:70:d2:5c: 80:37:0c:99:9c:28:35:e4:f4:ae:15:a2:45:43:4f: 69:fb:07:2d:99:db:c2:b0:67:65:94:eb:ce:d8:4d: db:29:1c:d9:39:16:ab:56:f7:60:f6:e0:bd:c0:45: fa:0c:b3:35:c3:92:6c:08:f1:df:6f:44:8f:72:4c: 28:72:8d:e7:cd:39:b4:21:7f:5e:b0:ce:57:ea:a5: d0:52:b8:8c:50:86:1e:1e:c0:29:bc:61:44:18:c3: f6:cb:e9:c0:b6:f4:e3:b1:7a:03:0c:79:22:82:8c: 00:85:fd:85:df:b3:bb:17:0d:f1:08:ce:22:a4:9c: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:04:36:A6:A4:CD:82:E8:E3:98:49:38:11:D9:D9:D9:29:12:0F:F1 X509v3 Authority Key Identifier: keyid:3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:82:a6:3f:44:e8:bc:d3:13:e3:6e:fe:83:82:3a:90:e8:6b: f8:aa:ff:19:ee:8f:3d:c5:c1:1e:58:c5:ff:72:49:89:b9:47: 50:4c:3f:0e:58:04:7a:4a:77:6e:3c:8e:41:b8:ef:ba:a3:c6: 2d:be:a7:ac:68:3c:fe:ca:0d:45:37:1c:26:fd:fd:a8:10:3f: 5f:e3:0a:fe:38:3b:96:1e:02:e6:72:ed:55:6a:87:e7:44:6f: 6e:7b:9f:35:df:21:95:c5:e3:b5:85:45:d8:40:61:30:a9:19: f2:5e:ff:4d:48:af:6c:d9:69:97:ca:db:89:3d:0a:f9:94:d0: 6a:b2:9e:5c:8d:b0:3b:cf:ad:c2:3d:37:e6:7f:58:09:37:9f: 28:5d:58:9c:20:b5:d5:c7:16:f9:ae:93:2e:62:08:13:0e:0c: 43:cd:05:ee:9a:3f:68:54:fc:bf:9e:07:84:5d:bb:94:f8:11: 82:0d:b2:53:59:57:48:4a:fb:68:56:9c:0f:7c:22:33:01:d0: ac:6b:2f:49:62:11:dd:f5:5f:78:10:90:00:b6:59:74:c4:c6: d7:4e:ab:85:68:c7:31:35:30:77:6d:73:6e:f7:1c:e2:d6:46: ac:f6:51:d1:08:ac:6a:f2:32:11:3d:3f:b9:4f:24:f1:eb:c3: ac:c4:f1:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9LbJtGFxQ98F82TaeAc/yG4sk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIyM0Yw RTYzODM4QjAeFw0yNjA5MjMyMDE2MDVaFw0yNjA5MjQyMTIyMDVaMDMxMTAvBgNV BAMTKDJCMDQzNkE2QTRDRDgyRThFMzk4NDkzODExRDlEOUQ5MjkxMjBGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbK3YjAuIQrqygCcZx+GZ5j93/ 5f6Fo+8XGFQ7q7oM8pf093VokNaHwZr1ypInam1U3Wnz8vevGvtWghASkcxno5vi miZ4cMEQOvVkrYUEVWIm/6liwy7Md7VdneotWC0o8RUdnPhlyGVRPyCYEAIIygXv w4UXs1qNHdG57iCCi6bom3DSXIA3DJmcKDXk9K4VokVDT2n7By2Z28KwZ2WU687Y TdspHNk5FqtW92D24L3ARfoMszXDkmwI8d9vRI9yTChyjefNObQhf16wzlfqpdBS uIxQhh4ewCm8YUQYw/bL6cC29OOxegMMeSKCjACF/YXfs7sXDfEIziKknIYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKwQ2pqTNgujjmEk4EdnZ2SkSD/EwHwYDVR0j BBgwFoAUPcDESL3f2WaK4aDY8VoiPw5jg4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M0OTM1ZDgtOTZhMi00NTY0LTg1YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhC RERGRDk2NjhBRTFBMEQ4RjE1QTIyM0YwRTYzODM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREMwQzQ0OEJEREZEOTY2OEFFMUEwRDhGMTVBMjIzRjBFNjM4 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIy M0YwRTYzODM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeCpj9E6LzTE+Nu/oOCOpDoa/iq/xnujz3F wR5Yxf9ySYm5R1BMPw5YBHpKd248jkG477qjxi2+p6xoPP7KDUU3HCb9/agQP1/j Cv44O5YeAuZy7VVqh+dEb257nzXfIZXF47WFRdhAYTCpGfJe/01Ir2zZaZfK24k9 CvmU0GqynlyNsDvPrcI9N+Z/WAk3nyhdWJwgtdXHFvmuky5iCBMODEPNBe6aP2hU /L+eB4Rdu5T4EYINslNZV0hK+2hWnA98IjMB0KxrL0liEd31X3gQkAC2WXTExtdO q4VoxzE1MHdtc273HOLWRqz2UdEIrGryMhE9P7lPJPHrw6zE8Q0= -----END CERTIFICATE-----Generated at Thu Sep 24 06:27:39 2026 by rpki-client