$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft File: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft (raw, json) Hash identifier: 8L/2aOdrkzcuQi96uGfimS7Yv/6gWG9NEegMDDAd1CY= Subject key identifier: 2A:FD:C3:2C:62:B6:92:58:90:CF:EB:BB:61:85:05:81:22:00:B1:6C Authority key identifier: 3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 Certificate issuer: /CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Certificate serial: 5BE2E31F0A50227ED49697672643AAEE4AA3312E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 22:12:37 +0000 Manifest this update: Sat 26 Sep 2026 22:07:37 +0000 Manifest next update: Sun 27 Sep 2026 23:52:37 +0000 Files and hashes: 1: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: YjIMELRXEclhQMTB2bkatZ5wI5uWZ25f1kc6MK+WlkM=) 2: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: cwuI5/SSK6CyR1JmdzwFEJUddA+iJMuPYmNhyqVybOU=) 3: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl (hash: tz7+gdLc6ezxH0vneUpCqBA39CK4WuKGoCaYHy9hOd0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e2:e3:1f:0a:50:22:7e:d4:96:97:67:26:43:aa:ee:4a:a3:31:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Validity Not Before: Sep 26 22:07:37 2026 GMT Not After : Sep 27 23:52:37 2026 GMT Subject: CN=2AFDC32C62B6925890CFEBBB618505812200B16C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:46:95:54:17:91:54:ca:d7:a8:e8:d0:4d:7b: a4:29:c5:9f:87:00:a9:c8:92:3b:11:ee:67:8c:65: 8e:49:81:dd:86:31:d8:84:e1:84:88:4b:45:fa:1f: 54:65:df:3b:6b:52:62:b8:e7:7f:b6:38:70:04:85: ce:e9:7c:f3:47:69:40:09:fa:d2:de:3b:a4:fd:7e: 3f:e6:7a:8e:a5:f5:9e:8b:a2:14:ef:77:1a:4f:f6: 39:36:d7:d6:e0:46:55:cb:a2:57:2f:00:93:d8:82: e6:75:9a:92:77:e1:d3:27:09:b2:fd:69:2c:37:0e: e1:a1:d9:e9:d6:d7:ef:ac:7b:02:4e:14:07:d7:a4: 8a:3a:cb:b5:9f:0e:85:b3:cb:d7:cc:bf:d4:08:3b: 9d:9b:3e:8e:d5:75:52:9a:9a:14:c2:80:0f:bf:e3: b4:3b:db:5a:36:4f:65:47:b3:e6:81:64:23:82:ca: f9:11:4e:1c:f6:24:d0:9f:eb:b1:fe:3f:46:b2:00: 60:cd:1b:40:c2:d5:ed:36:dc:b9:db:a0:c4:fa:92: 1b:5b:46:26:7c:4b:82:a7:5c:da:42:12:28:05:fc: fd:7e:43:29:46:3d:4e:0c:66:f7:a7:04:56:eb:61: 49:f4:eb:30:ce:af:27:03:ee:d5:62:9e:ca:24:a1: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FD:C3:2C:62:B6:92:58:90:CF:EB:BB:61:85:05:81:22:00:B1:6C X509v3 Authority Key Identifier: keyid:3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a7:22:90:58:24:98:48:fb:da:09:9b:97:56:ff:10:ff:bb: 0f:2e:e7:d1:ec:5c:e1:5c:20:5c:9f:3e:72:f9:a9:07:9b:c2: 91:b4:2d:f1:bf:32:83:26:a8:fd:0f:6c:6f:a4:7f:58:6b:32: a8:eb:36:2b:e4:7c:21:e5:55:6b:a3:84:92:a0:54:3d:63:fd: 08:5e:60:9f:f7:72:20:24:aa:0a:69:19:c5:67:d5:78:b7:b9: 5b:c7:a8:2f:e2:07:ce:94:18:e5:d7:53:b6:c5:06:17:46:18: 1c:07:28:96:98:4a:6a:db:41:fc:c7:a0:63:a0:4e:e1:3e:29: 14:bf:d4:fb:cd:0a:76:41:69:21:6f:06:97:fe:c6:f8:e7:be: b1:db:44:51:f3:c6:41:b6:20:3e:f4:43:67:12:09:fb:ec:63: 74:4f:35:30:a1:df:72:5d:9b:d7:c7:ac:3d:66:41:8a:0e:a9: 63:30:bb:b9:db:3d:18:0e:6d:84:90:ae:28:a1:fa:bf:30:7a: 3a:2a:c3:f5:5d:31:dc:6a:93:3e:91:a2:76:24:4a:da:f8:fa: 93:70:45:99:ef:4a:fb:78:38:26:92:a5:f6:1b:93:e0:31:cb: 43:57:99:23:94:a4:99:44:f6:dc:5e:5e:89:d5:c4:70:8f:1c: 22:a1:2d:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+LjHwpQIn7UlpdnJkOq7kqjMS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQw REJFRUY0NzAeFw0yNjA5MjYyMjA3MzdaFw0yNjA5MjcyMzUyMzdaMDMxMTAvBgNV BAMTKDJBRkRDMzJDNjJCNjkyNTg5MENGRUJCQjYxODUwNTgxMjIwMEIxNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRpVUF5FUyteo6NBNe6QpxZ+H AKnIkjsR7meMZY5Jgd2GMdiE4YSIS0X6H1Rl3ztrUmK453+2OHAEhc7pfPNHaUAJ +tLeO6T9fj/meo6l9Z6LohTvdxpP9jk219bgRlXLolcvAJPYguZ1mpJ34dMnCbL9 aSw3DuGh2enW1++sewJOFAfXpIo6y7WfDoWzy9fMv9QIO52bPo7VdVKamhTCgA+/ 47Q721o2T2VHs+aBZCOCyvkRThz2JNCf67H+P0ayAGDNG0DC1e023LnboMT6khtb RiZ8S4KnXNpCEigF/P1+QylGPU4MZvenBFbrYUn06zDOrycD7tVinsokoYB1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKv3DLGK2kliQz+u7YYUFgSIAsWwwHwYDVR0j BBgwFoAUP+Rd4P2S4r2Du/92ZQy1tA2+70cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWIzMTNkMTctNWI5Yi00ZDIzLTk0MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBG RDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQwREJFRUY0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU0NURFMEZEOTJFMkJEODNCQkZGNzY2NTBDQjVCNDBEQkVF RjQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1 QjQwREJFRUY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGunIpBYJJhI+9oJm5dW/xD/uw8u59HsXOFc IFyfPnL5qQebwpG0LfG/MoMmqP0PbG+kf1hrMqjrNivkfCHlVWujhJKgVD1j/Qhe YJ/3ciAkqgppGcVn1Xi3uVvHqC/iB86UGOXXU7bFBhdGGBwHKJaYSmrbQfzHoGOg TuE+KRS/1PvNCnZBaSFvBpf+xvjnvrHbRFHzxkG2ID70Q2cSCfvsY3RPNTCh33Jd m9fHrD1mQYoOqWMwu7nbPRgObYSQriih+r8wejoqw/VdMdxqkz6RonYkStr4+pNw RZnvSvt4OCaSpfYbk+Axy0NXmSOUpJlE9txeXonVxHCPHCKhLTU= -----END CERTIFICATE-----Generated at Sun Sep 27 08:36:56 2026 by rpki-client