$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft File: 3488252FDADC73654E2AAD815316475C9A5F94D8.mft (raw, json) Hash identifier: vJh+g/8YKkTL/+P7xGM57JkXlm77gE3LktVwoI4/xSs= Subject key identifier: 62:A2:09:1E:3D:B8:1C:EF:D1:B8:8A:BF:F0:9A:CC:ED:D1:F3:A7:D1 Authority key identifier: 34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8 Certificate issuer: /CN=3488252FDADC73654E2AAD815316475C9A5F94D8 Certificate serial: 13B88ABC9805B7456D815AC412CFCB00123FA175 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 17:32:25 +0000 Manifest this update: Thu 24 Sep 2026 17:27:25 +0000 Manifest next update: Fri 25 Sep 2026 19:59:25 +0000 Files and hashes: 1: 3488252FDADC73654E2AAD815316475C9A5F94D8.crl (hash: M80DD4yiD7nm0c8QjaIUbjRPn5kV5OVeEkateYZi8Ig=) 2: 3130332e36362e3139362e302f32322d3234203d3e20313331313131.roa (hash: jobGwFNdEOGscb8Suy+yh9BDuSyd+S9zj8PbD+vSbcU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b8:8a:bc:98:05:b7:45:6d:81:5a:c4:12:cf:cb:00:12:3f:a1:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3488252FDADC73654E2AAD815316475C9A5F94D8 Validity Not Before: Sep 24 17:27:25 2026 GMT Not After : Sep 25 19:59:25 2026 GMT Subject: CN=62A2091E3DB81CEFD1B88ABFF09ACCEDD1F3A7D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:94:6c:67:d9:f8:c7:83:23:b6:63:8d:81: 95:b6:3c:2d:71:b4:95:c5:f1:66:e5:ca:3d:be:a4: a1:2b:cc:82:5a:81:95:60:ea:69:b4:46:90:e4:72: 66:22:f7:90:3c:f7:43:da:ed:33:9d:a2:9e:3a:f1: 89:b8:15:4c:43:12:fa:8d:65:9c:2e:7f:12:0e:a4: d1:db:3f:f7:57:ce:0c:6b:c6:84:66:09:94:3f:23: c2:ca:02:7c:42:9d:66:27:69:74:01:4a:3a:4f:74: 40:7a:37:1e:30:1e:2f:60:24:af:53:83:3e:db:c0: eb:0c:b0:d1:8e:1e:15:a5:a8:72:b3:da:2a:39:22: 92:78:d6:51:7a:bf:1a:ae:59:a8:57:b1:ed:c1:bb: e1:77:ac:eb:ee:9e:3a:b2:f8:b0:ee:01:b8:5e:23: b6:7a:22:5c:30:4b:a3:df:da:38:3a:f3:f9:48:d3: e0:31:35:bf:55:0b:8d:69:c8:cd:e0:6b:0a:b2:ab: a5:dd:77:e3:d6:bc:61:06:16:bb:58:0c:f3:d0:a4: b9:d2:cd:4d:77:17:d6:63:56:58:7d:e2:ad:62:dd: 8e:41:24:ab:fd:68:ee:fb:b3:b6:6a:bf:ce:35:d3: c4:16:8d:12:25:25:d2:c1:b7:ba:d7:d9:8d:e3:d1: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A2:09:1E:3D:B8:1C:EF:D1:B8:8A:BF:F0:9A:CC:ED:D1:F3:A7:D1 X509v3 Authority Key Identifier: keyid:34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4d:69:15:7b:63:6d:eb:6c:5f:cc:10:7e:ee:24:d2:16:57: 4f:de:5b:c9:6b:2d:11:81:1b:77:af:0c:8f:53:0b:d4:38:1b: f2:c9:ab:8a:12:5c:ce:5b:09:9e:68:13:cf:52:97:47:f4:8e: 0b:3a:06:79:62:50:09:85:86:9c:ca:f6:43:77:5f:19:90:37: a2:a0:d1:7b:61:53:80:3c:e3:bd:10:01:0b:dc:ef:0c:1a:ef: 89:ac:f3:e8:c2:69:e6:49:09:9b:69:c1:5d:84:57:83:8c:d9: 7c:97:61:72:8f:a1:f2:11:30:e1:98:b6:9c:00:24:cc:e0:a8: b8:45:d2:21:53:a8:2e:d2:6b:67:29:30:7e:f6:4b:0f:90:54: 52:bb:4c:eb:08:d0:4c:46:9d:2f:90:08:b9:df:8b:6c:4b:6c: 1b:67:ff:7f:2d:60:43:36:57:7f:e9:71:fa:9a:67:3b:a8:cf: 79:ed:d0:68:bd:0e:9d:81:aa:17:a4:25:2b:36:52:c5:65:4e: 61:72:69:91:e7:55:87:ae:20:d9:85:cb:81:8f:73:0d:0e:a8: 4c:52:71:a9:25:0f:2d:a8:fd:30:8d:52:6a:b3:30:e1:b7:9c: 79:03:26:77:bc:9c:44:f8:d9:cd:63:c6:f9:cd:57:31:2f:6b: 41:3f:84:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7iKvJgFt0VtgVrEEs/LABI/oXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5 QTVGOTREODAeFw0yNjA5MjQxNzI3MjVaFw0yNjA5MjUxOTU5MjVaMDMxMTAvBgNV BAMTKDYyQTIwOTFFM0RCODFDRUZEMUI4OEFCRkYwOUFDQ0VERDFGM0E3RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/pRsZ9n4x4MjtmONgZW2PC1x tJXF8Wblyj2+pKErzIJagZVg6mm0RpDkcmYi95A890Pa7TOdop468Ym4FUxDEvqN ZZwufxIOpNHbP/dXzgxrxoRmCZQ/I8LKAnxCnWYnaXQBSjpPdEB6Nx4wHi9gJK9T gz7bwOsMsNGOHhWlqHKz2io5IpJ41lF6vxquWahXse3Bu+F3rOvunjqy+LDuAbhe I7Z6IlwwS6Pf2jg68/lI0+AxNb9VC41pyM3gawqyq6Xdd+PWvGEGFrtYDPPQpLnS zU13F9ZjVlh94q1i3Y5BJKv9aO77s7Zqv84108QWjRIlJdLBt7rX2Y3j0UjJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYqIJHj24HO/RuIq/8JrM7dHzp9EwHwYDVR0j BBgwFoAUNIglL9rcc2VOKq2BUxZHXJpflNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc3YTdmYWQtNTQ0Mi00YmM0LWJjMmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZE QURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5QTVGOTREOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDg4MjUyRkRBREM3MzY1NEUyQUFEODE1MzE2NDc1QzlBNUY5 NEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc3YTdmYWQtNTQ0Mi00YmM0LWJj MmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3 NUM5QTVGOTREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpNaRV7Y23rbF/MEH7uJNIWV0/eW8lrLRGB G3evDI9TC9Q4G/LJq4oSXM5bCZ5oE89Sl0f0jgs6BnliUAmFhpzK9kN3XxmQN6Kg 0XthU4A8470QAQvc7wwa74ms8+jCaeZJCZtpwV2EV4OM2XyXYXKPofIRMOGYtpwA JMzgqLhF0iFTqC7Sa2cpMH72Sw+QVFK7TOsI0ExGnS+QCLnfi2xLbBtn/38tYEM2 V3/pcfqaZzuoz3nt0Gi9Dp2BqhekJSs2UsVlTmFyaZHnVYeuINmFy4GPcw0OqExS caklDy2o/TCNUmqzMOG3nHkDJne8nET42c1jxvnNVzEva0E/hNk= -----END CERTIFICATE-----Generated at Fri Sep 25 02:34:12 2026 by rpki-client