$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft File: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft (raw, json) Hash identifier: QGBzmOl7ie3hAM74d3q6ThaKfWvxzqAvzB1jcraGLu4= Subject key identifier: E1:B1:CC:9A:07:6C:C4:0C:AD:90:0C:7E:74:EC:98:B5:BA:8D:FA:30 Authority key identifier: 3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF Certificate issuer: /CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Certificate serial: 2AE2A77EE349C094B42426DBD095A15960485299 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 15:14:55 +0000 Manifest this update: Wed 23 Sep 2026 15:09:55 +0000 Manifest next update: Thu 24 Sep 2026 19:05:55 +0000 Files and hashes: 1: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl (hash: ItU/NOanuVeMzqFFaMxhmvN2kx+4cL+yV5cTW1DoijQ=) 2: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: +kmrv9UVKd6Gr+842CRBNPUYtLDCG179+fO5/CRRqOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e2:a7:7e:e3:49:c0:94:b4:24:26:db:d0:95:a1:59:60:48:52:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Validity Not Before: Sep 23 15:09:55 2026 GMT Not After : Sep 24 19:05:55 2026 GMT Subject: CN=E1B1CC9A076CC40CAD900C7E74EC98B5BA8DFA30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:67:c3:31:02:d5:4e:4c:64:a9:e6:35:2c: 60:3d:b5:ac:b8:83:c0:a7:b1:9a:9d:90:bb:fd:9e: 24:b0:e6:98:a4:1c:fc:b7:ab:68:9b:3a:6a:dd:da: 58:26:6e:75:23:ee:6b:a8:34:7d:4c:96:12:2a:f6: c6:58:57:ec:21:63:9e:43:24:af:86:fa:a2:23:0f: 7d:bf:47:92:3b:ab:94:c0:20:3a:14:0e:e4:05:1d: 3b:98:19:6f:c6:90:ca:49:f7:17:37:d4:6a:bc:6d: 9e:c5:8c:fd:3c:ef:9d:cb:97:9e:2a:55:42:22:5a: c4:06:f6:46:6a:2e:7a:f3:cb:cc:83:b9:28:91:73: 92:34:e1:f8:0d:31:cf:4d:62:74:3c:df:1b:a9:2e: a1:5a:de:86:3a:2e:ee:24:1a:50:d6:be:57:cb:00: 93:32:06:cf:c7:45:4a:d9:22:f4:eb:35:f0:7e:40: 03:8a:4d:11:a0:f8:cf:e7:22:57:a4:06:bb:d4:cf: 44:bf:21:35:6f:56:c0:5a:f7:18:42:c7:d7:e2:a3: 0e:39:82:c7:cc:65:c6:22:5a:2f:1e:b8:76:75:58: f9:88:ee:fd:0c:fd:2e:ee:43:65:f7:64:b4:e8:4f: 29:c9:54:9d:2c:e6:3c:2f:19:a2:7f:7f:db:c7:be: 0a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B1:CC:9A:07:6C:C4:0C:AD:90:0C:7E:74:EC:98:B5:BA:8D:FA:30 X509v3 Authority Key Identifier: keyid:3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:81:15:9b:ae:f2:57:e8:c9:3b:93:ea:91:5a:92:7a:70:f9: 64:80:76:50:0e:ef:a7:8d:5a:f0:e5:80:b5:b2:b6:a1:19:3c: e7:b3:b0:bd:51:83:39:3e:07:9f:2a:15:57:aa:0d:84:8a:fc: ae:2d:fa:6d:11:50:ff:00:ef:d3:43:79:e2:12:c1:8e:33:c2: 29:f6:15:30:f8:ef:f4:29:22:5d:a1:b0:a4:83:60:a4:ba:fb: 19:81:56:92:44:6e:47:df:06:0d:01:b0:b8:cb:f3:3c:09:b6: 20:8b:91:1c:ab:77:aa:fe:0f:02:83:02:eb:40:e5:8d:fe:77: fc:62:28:90:23:fe:f2:4d:08:81:f6:7e:44:30:99:c3:fa:0c: 9a:27:e3:37:16:76:08:d7:e0:54:0c:c4:c9:f7:c0:35:44:55: 55:f6:e2:42:57:61:83:a6:af:be:07:60:5d:ec:15:3a:45:3b: db:f0:cc:91:21:16:1b:92:17:93:9e:30:20:08:f2:b0:59:1c: 96:e0:c3:d3:4b:2c:31:8f:52:6b:27:4c:34:43:83:d7:42:e1: ca:3a:a5:d1:73:cb:37:21:ca:c2:c7:d0:94:b6:a1:9d:c9:8b: 29:56:7d:4d:b4:4e:09:61:d0:75:18:05:0e:80:bf:28:9e:e0: f5:e0:17:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuKnfuNJwJS0JCbb0JWhWWBIUpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZB QUMxRUVFRjAeFw0yNjA5MjMxNTA5NTVaFw0yNjA5MjQxOTA1NTVaMDMxMTAvBgNV BAMTKEUxQjFDQzlBMDc2Q0M0MENBRDkwMEM3RTc0RUM5OEI1QkE4REZBMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3WfDMQLVTkxkqeY1LGA9tay4 g8CnsZqdkLv9niSw5pikHPy3q2ibOmrd2lgmbnUj7muoNH1MlhIq9sZYV+whY55D JK+G+qIjD32/R5I7q5TAIDoUDuQFHTuYGW/GkMpJ9xc31Gq8bZ7FjP08753Ll54q VUIiWsQG9kZqLnrzy8yDuSiRc5I04fgNMc9NYnQ83xupLqFa3oY6Lu4kGlDWvlfL AJMyBs/HRUrZIvTrNfB+QAOKTRGg+M/nIlekBrvUz0S/ITVvVsBa9xhCx9fiow45 gsfMZcYiWi8euHZ1WPmI7v0M/S7uQ2X3ZLToTynJVJ0s5jwvGaJ/f9vHvgpZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4bHMmgdsxAytkAx+dOyYtbqN+jAwHwYDVR0j BBgwFoAUPLaDYcrHqAj3/cS66oYNpqrB7u8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiYzNmMjktNmY5ZC00N2QzLTllNzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFD QUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZBQUMxRUVFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0I2ODM2MUNBQzdBODA4RjdGREM0QkFFQTg2MERBNkFBQzFF RUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBE QTZBQUMxRUVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqBFZuu8lfoyTuT6pFaknpw+WSAdlAO76eN WvDlgLWytqEZPOezsL1Rgzk+B58qFVeqDYSK/K4t+m0RUP8A79NDeeISwY4zwin2 FTD47/QpIl2hsKSDYKS6+xmBVpJEbkffBg0BsLjL8zwJtiCLkRyrd6r+DwKDAutA 5Y3+d/xiKJAj/vJNCIH2fkQwmcP6DJon4zcWdgjX4FQMxMn3wDVEVVX24kJXYYOm r74HYF3sFTpFO9vwzJEhFhuSF5OeMCAI8rBZHJbgw9NLLDGPUmsnTDRDg9dC4co6 pdFzyzchysLH0JS2oZ3JiylWfU20Tglh0HUYBQ6Avyie4PXgF4M= -----END CERTIFICATE-----Generated at Thu Sep 24 03:40:21 2026 by rpki-client