$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft File: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft (raw, json) Hash identifier: 4knPQj3TAWNOfMoV5snB43M8BvdV+bONWzO6lMEa0b4= Subject key identifier: 9A:AA:32:EB:F1:B3:A2:03:F0:11:1D:B2:64:BB:F5:3B:5C:B1:F5:60 Authority key identifier: 3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC Certificate issuer: /CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Certificate serial: 0143907013229BB58C2F66C914A56AAF0BC5F016 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 00:51:06 +0000 Manifest this update: Fri 25 Sep 2026 00:46:06 +0000 Manifest next update: Sat 26 Sep 2026 03:02:06 +0000 Files and hashes: 1: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: NHpaZqHC4NTt91PhG1pzzVx+mpzKnTbfgFJI738LnKc=) 2: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: u3QjwTKhA3xZ6qBaPve22SqHeKd1Tl3v9fzrQkdIYDM=) 3: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl (hash: CIQ8MRGyteKQBs7IPdv/02fypnF4Tf4oqcv/iE9o3JQ=) 4: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: o6UES+tryYmpIwssyMXnmFCcFcBThAbWf6TdKlMd5ls=) 5: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: hCFV5sRxdzUQ0Ef1DHuXq2DMT11lGAzTPsRSkYtMfqM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:43:90:70:13:22:9b:b5:8c:2f:66:c9:14:a5:6a:af:0b:c5:f0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Validity Not Before: Sep 25 00:46:06 2026 GMT Not After : Sep 26 03:02:06 2026 GMT Subject: CN=9AAA32EBF1B3A203F0111DB264BBF53B5CB1F560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:09:92:26:ff:78:ad:6c:5c:fd:c6:9a:b6:fa: df:0c:ae:6a:5d:cc:d2:df:c7:87:3f:9c:6e:95:10: 94:3c:be:5e:73:08:30:3a:84:05:98:48:6a:04:54: 52:d6:17:1d:a9:c5:e2:f8:78:2b:ca:30:14:6e:60: cc:4a:50:98:c2:f5:88:75:c3:e0:59:aa:f4:94:0a: 75:06:93:99:78:c0:2e:3a:f9:f6:26:a6:85:fe:ff: 63:0c:00:df:3f:1b:4d:bb:b1:7e:62:23:e1:d4:a1: 51:d5:df:60:00:2f:76:43:cd:b7:76:61:fc:54:3c: 69:ac:8d:bb:68:fc:ac:20:cb:a7:37:7a:dc:ef:07: ec:b5:53:88:aa:6e:2d:3f:3c:19:73:f0:69:a9:74: 1e:58:d7:65:b6:c2:83:b6:98:c3:0e:fe:68:a3:b6: 78:39:b8:6f:d1:26:43:ba:d0:77:1b:cb:12:b9:3a: aa:b5:5a:02:ae:e9:81:ed:8a:b7:be:d4:6e:24:7c: a7:30:da:16:a6:bb:69:8d:34:a2:f6:85:10:ac:76: cd:28:71:0d:22:90:bd:1e:a1:c3:bf:56:08:68:fd: 57:fc:3c:d2:bc:b5:a0:de:c8:25:01:50:e2:b4:e0: 76:02:27:a9:10:01:d8:ea:ec:bb:53:15:49:38:03: 38:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AA:32:EB:F1:B3:A2:03:F0:11:1D:B2:64:BB:F5:3B:5C:B1:F5:60 X509v3 Authority Key Identifier: keyid:3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a7:e2:b1:e0:31:85:ad:a3:17:ea:3f:75:e3:42:53:18:6b: 52:f2:87:0b:18:8f:ca:fc:80:7d:ca:6b:8d:67:ad:64:2c:e2: be:17:01:52:c3:b1:4f:60:70:f2:75:35:d3:ea:e3:d5:3c:df: 2c:65:90:69:76:e1:99:b9:ea:22:a8:54:79:8e:58:69:1d:1b: ab:fe:d2:61:9f:11:82:97:11:5e:90:44:dc:b3:2f:27:49:fe: 20:fb:fe:7e:95:53:06:f5:cc:71:5c:5f:fd:d3:1a:77:00:b6: 52:6d:21:86:75:bf:68:cc:c5:39:27:5e:94:24:a9:b0:9e:c3: fd:ac:03:5b:1a:c3:f1:a9:c5:93:5a:05:3c:ba:27:92:f3:be: fb:35:5c:06:e4:79:ef:49:e2:10:b1:36:fc:69:1a:54:6b:be: 10:5b:a8:ce:a1:19:b4:fd:f0:07:b4:0b:00:00:57:ea:b7:e8: e1:b7:2d:91:69:12:d5:3a:25:7d:17:c4:0c:17:9d:d3:03:82: 01:75:39:9f:08:97:5b:77:ba:26:99:ba:7a:76:06:fd:2c:98: 04:05:90:5a:3d:37:e2:f1:c3:d8:7b:8c:fe:b5:c5:35:03:7c: d5:e0:15:24:e5:d5:6f:80:17:fd:f5:7c:fc:00:28:f7:55:54: 3d:e0:52:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAUOQcBMim7WML2bJFKVqrwvF8BYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdF M0U4OEZBQzAeFw0yNjA5MjUwMDQ2MDZaFw0yNjA5MjYwMzAyMDZaMDMxMTAvBgNV BAMTKDlBQUEzMkVCRjFCM0EyMDNGMDExMURCMjY0QkJGNTNCNUNCMUY1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeCZIm/3itbFz9xpq2+t8Mrmpd zNLfx4c/nG6VEJQ8vl5zCDA6hAWYSGoEVFLWFx2pxeL4eCvKMBRuYMxKUJjC9Yh1 w+BZqvSUCnUGk5l4wC46+fYmpoX+/2MMAN8/G027sX5iI+HUoVHV32AAL3ZDzbd2 YfxUPGmsjbto/Kwgy6c3etzvB+y1U4iqbi0/PBlz8GmpdB5Y12W2woO2mMMO/mij tng5uG/RJkO60HcbyxK5Oqq1WgKu6YHtire+1G4kfKcw2hamu2mNNKL2hRCsds0o cQ0ikL0eocO/Vgho/Vf8PNK8taDeyCUBUOK04HYCJ6kQAdjq7LtTFUk4AzhNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmqoy6/GzogPwER2yZLv1O1yx9WAwHwYDVR0j BBgwFoAUP8/wkMeSATBAvhBnaIwst+Poj6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRhYmMwYmEtOTIyMi00YzQ1LTgzNDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBD NzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdFM0U4OEZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNGRjA5MEM3OTIwMTMwNDBCRTEwNjc2ODhDMkNCN0UzRTg4 RkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJD QjdFM0U4OEZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqn4rHgMYWtoxfqP3XjQlMYa1LyhwsYj8r8 gH3Ka41nrWQs4r4XAVLDsU9gcPJ1NdPq49U83yxlkGl24Zm56iKoVHmOWGkdG6v+ 0mGfEYKXEV6QRNyzLydJ/iD7/n6VUwb1zHFcX/3TGncAtlJtIYZ1v2jMxTknXpQk qbCew/2sA1saw/GpxZNaBTy6J5Lzvvs1XAbkee9J4hCxNvxpGlRrvhBbqM6hGbT9 8Ae0CwAAV+q36OG3LZFpEtU6JX0XxAwXndMDggF1OZ8Il1t3uiaZunp2Bv0smAQF kFo9N+Lxw9h7jP61xTUDfNXgFSTl1W+AF/31fPwAKPdVVD3gUmc= -----END CERTIFICATE-----Generated at Fri Sep 25 02:55:45 2026 by rpki-client