$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft File: 3B53322385FC84075D5F59542B2C6639361DE40C.mft (raw, json) Hash identifier: 17vs88Ok7beXChpAWUnecxv3WTUwkTSuRjOi1EyQm5o= Subject key identifier: 38:EF:FB:1D:E0:C0:C8:4B:07:6F:B7:45:F4:F1:5D:45:B7:2D:40:EF Authority key identifier: 3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C Certificate issuer: /CN=3B53322385FC84075D5F59542B2C6639361DE40C Certificate serial: 5F9420BA10F5DD703E2AB5CCEE6131095124893C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 00:35:52 +0000 Manifest this update: Sat 26 Sep 2026 00:30:52 +0000 Manifest next update: Sun 27 Sep 2026 04:20:52 +0000 Files and hashes: 1: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: edgXYAVoofbMfNNTYL6wJjTWLg+lJA34PwxUNFokvFo=) 2: 3B53322385FC84075D5F59542B2C6639361DE40C.crl (hash: 5S0KkIKGa4FkOC8dwWQql/L+03JkX4UEt/L6Tf24lRM=) 3: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: zCD5tPWCUNUK6oOFsXZp8GFckmeJahFdBXRBLxy8mgQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 04:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:94:20:ba:10:f5:dd:70:3e:2a:b5:cc:ee:61:31:09:51:24:89:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B53322385FC84075D5F59542B2C6639361DE40C Validity Not Before: Sep 26 00:30:52 2026 GMT Not After : Sep 27 04:20:52 2026 GMT Subject: CN=38EFFB1DE0C0C84B076FB745F4F15D45B72D40EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:df:dc:5d:59:68:14:6d:72:3c:fc:ad:9b: 87:d7:30:2b:19:cd:33:9b:db:95:1f:a8:e9:43:95: 78:3c:f0:cf:dd:dd:a6:1d:04:fa:61:d9:d8:bd:39: ba:ce:e3:49:08:ed:44:a4:e8:a7:fb:53:22:09:94: 4b:5b:b2:57:5f:f0:62:88:94:c8:c4:8d:cf:de:99: 68:a5:8b:15:9f:02:8f:22:79:b4:78:d1:e2:a1:d4: 72:59:5c:69:ac:30:7e:b7:b3:d4:f8:12:8b:45:09: 78:e0:c2:ec:27:e1:bd:6e:0a:de:bb:d1:ef:41:16: b5:f6:68:81:8a:99:9a:63:51:fb:ca:7f:26:0b:4f: 37:79:78:5c:7c:01:99:80:a5:42:ec:01:dd:23:a5: 63:ab:cc:0a:74:03:71:4c:80:7a:5a:04:7c:b9:38: 82:ba:2a:7e:7c:eb:08:1c:4c:51:4e:2e:e0:e5:ea: df:16:af:18:5e:8d:64:39:36:dd:24:1d:7f:14:66: 26:0c:33:e8:0c:48:8a:cd:23:35:ba:49:cb:5f:81: 29:56:de:49:0b:d7:fd:7d:b6:09:43:04:89:21:3e: c5:c0:74:a8:ed:78:3c:b0:a9:54:91:82:fa:fd:40: dd:c3:06:c8:f7:66:2a:f5:ab:7d:76:1b:06:a6:6d: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EF:FB:1D:E0:C0:C8:4B:07:6F:B7:45:F4:F1:5D:45:B7:2D:40:EF X509v3 Authority Key Identifier: keyid:3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:3d:27:ae:ef:84:63:8e:ce:2f:8d:22:cc:db:04:42:74:8b: 64:76:b7:7f:0c:79:00:0e:ef:57:6e:78:3a:a1:05:3b:b7:d1: ad:2a:10:89:13:3d:88:9f:3f:97:32:c9:d6:51:a1:35:fb:55: e5:12:2f:d7:04:a7:c9:4d:66:3a:07:d7:08:d6:0e:61:cf:ca: cd:f1:bc:53:64:80:5e:24:7c:c4:c2:ae:64:16:e4:6b:a4:58: 3f:e7:c5:49:90:51:0e:dd:56:50:aa:31:c3:83:a4:6a:30:8f: 52:21:db:40:56:94:7c:6a:90:82:09:11:5a:55:b7:57:05:c4: f3:31:5a:61:15:45:55:ec:02:70:1e:35:fe:cf:70:47:07:1d: 8c:42:48:d1:c6:de:a6:83:91:4d:01:83:61:90:8b:ca:eb:80: 6a:cf:0c:72:3e:42:74:23:40:8d:f4:2c:a3:7e:ce:de:bc:f2: ef:f1:a3:b2:6c:db:8c:22:33:7b:38:f9:96:a7:e7:dd:43:e2: 4a:29:5f:4d:95:5f:23:37:06:9c:23:8e:d9:4f:b6:d4:a1:a1: 79:35:ec:d8:09:d6:4d:e5:2e:80:fb:99:14:57:f7:67:bb:10: a3:24:e5:02:29:7a:c7:fc:d9:ac:0e:87:73:34:2f:a2:90:53: 21:5a:06:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5QguhD13XA+KrXM7mExCVEkiTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2Mzkz NjFERTQwQzAeFw0yNjA5MjYwMDMwNTJaFw0yNjA5MjcwNDIwNTJaMDMxMTAvBgNV BAMTKDM4RUZGQjFERTBDMEM4NEIwNzZGQjc0NUY0RjE1RDQ1QjcyRDQwRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1U9/cXVloFG1yPPytm4fXMCsZ zTOb25UfqOlDlXg88M/d3aYdBPph2di9ObrO40kI7USk6Kf7UyIJlEtbsldf8GKI lMjEjc/emWilixWfAo8iebR40eKh1HJZXGmsMH63s9T4EotFCXjgwuwn4b1uCt67 0e9BFrX2aIGKmZpjUfvKfyYLTzd5eFx8AZmApULsAd0jpWOrzAp0A3FMgHpaBHy5 OIK6Kn586wgcTFFOLuDl6t8WrxhejWQ5Nt0kHX8UZiYMM+gMSIrNIzW6SctfgSlW 3kkL1/19tglDBIkhPsXAdKjteDywqVSRgvr9QN3DBsj3Zir1q312GwambWw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOO/7HeDAyEsHb7dF9PFdRbctQO8wHwYDVR0j BBgwFoAUO1MyI4X8hAddX1lUKyxmOTYd5AwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjYmQ2N2ItZDE5MC00YTRjLTgzYjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4 NUZDODQwNzVENUY1OTU0MkIyQzY2MzkzNjFERTQwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjUzMzIyMzg1RkM4NDA3NUQ1RjU5NTQyQjJDNjYzOTM2MURF NDBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2 MzkzNjFERTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACk9J67vhGOOzi+NIszbBEJ0i2R2t38MeQAO 71dueDqhBTu30a0qEIkTPYifP5cyydZRoTX7VeUSL9cEp8lNZjoH1wjWDmHPys3x vFNkgF4kfMTCrmQW5GukWD/nxUmQUQ7dVlCqMcODpGowj1Ih20BWlHxqkIIJEVpV t1cFxPMxWmEVRVXsAnAeNf7PcEcHHYxCSNHG3qaDkU0Bg2GQi8rrgGrPDHI+QnQj QI30LKN+zt688u/xo7Js24wiM3s4+Zan591D4kopX02VXyM3BpwjjtlPttShoXk1 7NgJ1k3lLoD7mRRX92e7EKMk5QIpesf82awOh3M0L6KQUyFaBoA= -----END CERTIFICATE-----Generated at Sat Sep 26 16:47:34 2026 by rpki-client