$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft File: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft (raw, json) Hash identifier: QA3AViIrDFRSOobuVNGh1lk54uvUhyxpqDcIfOTCooI= Subject key identifier: F5:BB:D3:88:02:89:C3:4D:2A:5A:CF:5F:5A:72:41:BD:7C:A1:F2:11 Authority key identifier: 3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 Certificate issuer: /CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Certificate serial: 6C3EAB8F4EB94837DB9D03E64D4EA1C5B2D776C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 00:11:29 +0000 Manifest this update: Wed 23 Sep 2026 00:06:29 +0000 Manifest next update: Thu 24 Sep 2026 01:33:29 +0000 Files and hashes: 1: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: XvoXxYyRseZ9WRVoAocJ9gpnu/or6v87QzxE4f486Ao=) 2: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl (hash: n+AHCfuZJ7iPgBOdIrAofdtBbzHyTs+hT2NFMlQ8G5I=) 3: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: 99A+bJb86RNl0uIhsPESoN9F5vmyx2f3sELQT2/n36Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 01:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:3e:ab:8f:4e:b9:48:37:db:9d:03:e6:4d:4e:a1:c5:b2:d7:76:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Validity Not Before: Sep 23 00:06:29 2026 GMT Not After : Sep 24 01:33:29 2026 GMT Subject: CN=F5BBD3880289C34D2A5ACF5F5A7241BD7CA1F211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d0:50:1c:53:76:63:a9:cd:11:2a:af:0e:1b: 03:97:29:98:6a:04:27:02:40:0e:37:f5:41:19:77: f4:5b:8d:e3:96:bb:c3:95:a2:ee:f7:8f:e1:15:4b: a3:20:70:e9:35:3e:af:87:38:ae:83:44:14:96:ca: e3:87:0e:2e:9a:51:d6:24:ca:00:e6:4a:3c:6a:cc: b6:61:31:a2:f5:88:6c:09:01:ad:d8:ba:fb:84:e7: af:88:27:0d:16:31:40:8e:79:fc:54:dc:bf:59:1f: c3:20:5c:5a:55:5f:89:4c:84:48:96:2a:7e:ff:f1: b9:1e:3f:f7:97:19:f8:1d:ec:9a:c8:99:a9:73:e1: 9e:c8:2d:4d:9c:00:80:4c:46:16:87:f3:5e:4b:77: f2:83:fa:11:a9:63:3f:f0:f9:f2:b7:a9:a3:94:c3: 99:4c:f2:cd:ee:3f:16:62:90:bb:4f:c3:37:6f:70: 2d:41:3c:e9:cb:39:74:ae:59:a6:bf:8b:0a:07:c3: 92:14:ed:51:ae:07:4b:9f:39:90:c0:c2:07:bf:7e: 67:bb:6a:b4:cd:2d:65:87:1f:76:db:32:dd:43:d8: ec:74:3e:b9:8c:b6:ee:88:5a:82:f6:d6:74:88:59: c4:10:b4:94:5e:63:93:fa:ab:22:60:ab:fe:7f:b0: 0c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BB:D3:88:02:89:C3:4D:2A:5A:CF:5F:5A:72:41:BD:7C:A1:F2:11 X509v3 Authority Key Identifier: keyid:3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:61:e1:86:c0:a4:4f:59:06:f3:63:65:1a:c5:00:88:e9:d0: 84:9b:a0:e2:30:2d:e0:43:42:e8:cd:70:6a:32:d1:fa:7d:ba: 1b:e4:57:fa:86:bb:9a:b5:ad:fb:4e:50:77:0c:9e:1f:48:e5: d0:eb:42:8b:06:c9:2a:ba:86:1c:f0:2a:8d:3e:b6:c9:d3:ab: e4:a7:88:c3:40:99:e5:a0:64:2d:c9:6a:5a:48:22:2d:6d:29: 4c:eb:0b:3a:81:3d:f2:6f:56:9e:5b:36:1c:af:41:0b:7e:f2: 9f:dd:27:05:08:af:4e:04:d1:2a:37:29:29:6f:b6:b4:9d:a6: ca:13:19:70:4b:11:a7:17:65:44:9c:c0:42:0d:1d:44:3c:95: b4:b7:40:e2:21:3c:c5:8e:be:8f:2e:ca:1c:6f:e9:0a:2d:4b: fa:c1:a5:8b:d7:b9:3a:a0:1c:11:08:f9:81:5e:3d:a1:e2:9a: 49:7a:7c:54:90:45:4c:94:00:2e:17:90:3e:6a:c2:d2:f3:71: 38:54:2e:51:39:f1:e7:c5:35:3b:6e:b9:8a:ea:b3:e7:1f:86: 63:3c:89:15:f9:f4:0c:8d:4c:b0:1b:ad:86:22:45:14:32:75: 07:fd:8e:92:33:54:d2:ae:42:3b:56:a7:6a:7b:8d:4f:51:44: 7c:81:22:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbD6rj065SDfbnQPmTU6hxbLXdskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2 MUQ1NUFFOTAeFw0yNjA5MjMwMDA2MjlaFw0yNjA5MjQwMTMzMjlaMDMxMTAvBgNV BAMTKEY1QkJEMzg4MDI4OUMzNEQyQTVBQ0Y1RjVBNzI0MUJEN0NBMUYyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc0FAcU3Zjqc0RKq8OGwOXKZhq BCcCQA439UEZd/RbjeOWu8OVou73j+EVS6MgcOk1Pq+HOK6DRBSWyuOHDi6aUdYk ygDmSjxqzLZhMaL1iGwJAa3YuvuE56+IJw0WMUCOefxU3L9ZH8MgXFpVX4lMhEiW Kn7/8bkeP/eXGfgd7JrImalz4Z7ILU2cAIBMRhaH815Ld/KD+hGpYz/w+fK3qaOU w5lM8s3uPxZikLtPwzdvcC1BPOnLOXSuWaa/iwoHw5IU7VGuB0ufOZDAwge/fme7 arTNLWWHH3bbMt1D2Ox0PrmMtu6IWoL21nSIWcQQtJReY5P6qyJgq/5/sAy9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9bvTiAKJw00qWs9fWnJBvXyh8hEwHwYDVR0j BBgwFoAUPL3f6kvmtoRfjOiXY6s5OmHVWukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRkMWVhY2QtYTA2Ny00OTI0LTkyODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0 QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2MUQ1NUFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0JEREZFQTRCRTZCNjg0NUY4Q0U4OTc2M0FCMzkzQTYxRDU1 QUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5 M0E2MUQ1NUFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBh4YbApE9ZBvNjZRrFAIjp0ISboOIwLeBD QujNcGoy0fp9uhvkV/qGu5q1rftOUHcMnh9I5dDrQosGySq6hhzwKo0+tsnTq+Sn iMNAmeWgZC3JalpIIi1tKUzrCzqBPfJvVp5bNhyvQQt+8p/dJwUIr04E0So3KSlv trSdpsoTGXBLEacXZUScwEINHUQ8lbS3QOIhPMWOvo8uyhxv6QotS/rBpYvXuTqg HBEI+YFePaHimkl6fFSQRUyUAC4XkD5qwtLzcThULlE58efFNTtuuYrqs+cfhmM8 iRX59AyNTLAbrYYiRRQydQf9jpIzVNKuQjtWp2p7jU9RRHyBIsM= -----END CERTIFICATE-----Generated at Wed Sep 23 20:19:00 2026 by rpki-client