$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft File: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft (raw, json) Hash identifier: mXrFYOJT2AWk1Kunvc7WbPUItiLxMBvS97qKnijHESs= Subject key identifier: 98:90:32:A1:19:F4:F8:D3:6E:13:D2:13:A8:49:6C:D7:F2:F0:8E:94 Authority key identifier: 3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 Certificate issuer: /CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Certificate serial: 4E019C59685D385AF71C06E338BFF448C113334B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 13:32:41 +0000 Manifest this update: Thu 24 Sep 2026 13:27:41 +0000 Manifest next update: Fri 25 Sep 2026 16:45:41 +0000 Files and hashes: 1: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl (hash: q97ca5Iukc0suMFJTlIioTNdXgdk9HkeAzI+PvlUxeE=) 2: 3135372e32302e3231392e302f32342d3234203d3e20313532343233.roa (hash: VLaO/ySY+ntAKUzijWFb7J8NTbjb4cdGL70vMkZXXug=) 3: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (hash: nv2/DUQnze7FZdnWg8O1b8JOsCb1KZzG0d/PmRvY8wo=) 4: 3135372e32302e3231382e302f32332d3233203d3e20313532343233.roa (hash: oN269PBRDnF940fO+bfI5PiA4IWS9ygfFhv4r3jDKlw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:01:9c:59:68:5d:38:5a:f7:1c:06:e3:38:bf:f4:48:c1:13:33:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Validity Not Before: Sep 24 13:27:41 2026 GMT Not After : Sep 25 16:45:41 2026 GMT Subject: CN=989032A119F4F8D36E13D213A8496CD7F2F08E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:5f:85:d4:1f:10:2a:5a:92:ae:05:0a:aa: 8d:b2:98:b9:1b:58:ba:f5:33:90:e6:7e:5f:56:f8: e2:26:ad:dd:78:cf:de:4e:db:88:63:da:a7:05:9d: 62:43:c1:d1:4f:03:37:42:9b:b6:ae:93:84:49:4a: c3:0f:89:af:a9:ad:25:d2:01:aa:f1:d8:79:b6:b0: b0:5b:1a:c0:c7:e4:69:fe:1e:51:d5:b4:6f:ff:ed: 96:22:e1:2b:de:88:14:c2:ee:69:20:42:e6:5a:84: e3:3c:ff:0b:eb:c2:7d:d9:34:05:36:70:32:bc:6a: 15:7d:0f:3a:f1:bf:d5:ea:f6:b5:8f:ab:4b:13:5d: 81:b1:a0:e4:41:ee:2b:cb:e8:2e:22:6f:61:6d:d2: 24:68:42:a4:f0:64:41:ff:d4:96:b4:7f:d7:b7:48: 71:93:eb:38:a0:b8:61:22:b5:68:12:58:d8:64:6a: 66:1f:1e:ab:d5:a8:4f:0f:65:cb:47:31:57:49:7f: 1c:2d:23:f4:6c:b2:c0:b5:bf:48:d8:57:0e:a7:e8: b2:88:cb:2b:46:de:7d:25:ff:7d:ce:f8:a8:ed:49: e1:00:11:c5:0c:45:b8:8c:70:e7:15:8e:42:08:07: ce:11:8e:db:01:fd:4d:49:4a:bd:59:8e:9f:d7:67: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:90:32:A1:19:F4:F8:D3:6E:13:D2:13:A8:49:6C:D7:F2:F0:8E:94 X509v3 Authority Key Identifier: keyid:3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:62:1b:a8:b6:d9:88:aa:43:7d:8e:1f:88:2d:d1:35:9b:ed: 44:5c:c2:90:f0:d1:2d:6b:10:f9:25:d5:3f:36:98:98:48:1a: ef:8d:b1:20:6c:bf:df:8a:ff:1f:d4:ea:75:19:ce:5a:0e:60: fc:e7:e5:34:bf:e3:46:06:e3:5f:0a:af:1f:7d:5f:f9:55:b0: c3:41:b9:e2:c9:f3:0e:da:cb:84:8e:6e:69:83:ec:54:4f:eb: 5b:a4:52:6f:24:f2:4e:a6:7b:2f:92:06:26:bf:65:27:6b:0b: b1:14:6e:58:ae:d4:87:5e:05:48:31:8e:0b:c1:98:f9:24:9e: 6f:a1:c9:d9:93:55:23:19:e7:c2:10:ad:c0:ec:6b:67:5e:5d: 5d:8a:93:03:65:bf:62:1d:eb:29:a6:f2:cd:ce:54:85:79:5c: cf:57:f1:97:3a:6b:bb:59:5a:9c:a8:e7:f5:89:f3:22:fc:69: b1:db:fd:b7:b9:dd:2b:fd:b0:9c:7b:07:01:37:43:7f:5c:5b: bb:7d:b3:ff:38:66:70:7f:28:75:26:fd:00:b6:6c:1d:6d:8c: 1e:c3:bb:b6:dc:7d:d8:95:6b:54:cc:ec:c5:93:91:ef:b9:be: 3f:7f:b8:5f:ab:53:f3:47:86:01:ef:0e:e2:ab:af:79:15:c9: 91:03:53:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgGcWWhdOFr3HAbjOL/0SMETM0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0 OUZFRkU1NDAeFw0yNjA5MjQxMzI3NDFaFw0yNjA5MjUxNjQ1NDFaMDMxMTAvBgNV BAMTKDk4OTAzMkExMTlGNEY4RDM2RTEzRDIxM0E4NDk2Q0Q3RjJGMDhFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVkV+F1B8QKlqSrgUKqo2ymLkb WLr1M5Dmfl9W+OImrd14z95O24hj2qcFnWJDwdFPAzdCm7auk4RJSsMPia+prSXS Aarx2Hm2sLBbGsDH5Gn+HlHVtG//7ZYi4SveiBTC7mkgQuZahOM8/wvrwn3ZNAU2 cDK8ahV9Dzrxv9Xq9rWPq0sTXYGxoORB7ivL6C4ib2Ft0iRoQqTwZEH/1Ja0f9e3 SHGT6ziguGEitWgSWNhkamYfHqvVqE8PZctHMVdJfxwtI/RsssC1v0jYVw6n6LKI yytG3n0l/33O+KjtSeEAEcUMRbiMcOcVjkIIB84RjtsB/U1JSr1Zjp/XZ01TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmJAyoRn0+NNuE9ITqEls1/LwjpQwHwYDVR0j BBgwFoAUPAvWuxtMsH3Fj28wFrXsN0n+/lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlODNhZmUtM2JkYy00NGIyLWE3MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIx QjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0OUZFRkU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQzBCRDZCQjFCNENCMDdEQzU4RjZGMzAxNkI1RUMzNzQ5RkVG RTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJlODNhZmUtM2JkYy00NGIyLWE3 MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVD Mzc0OUZFRkU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBiG6i22YiqQ32OH4gt0TWb7URcwpDw0S1r EPkl1T82mJhIGu+NsSBsv9+K/x/U6nUZzloOYPzn5TS/40YG418Krx99X/lVsMNB ueLJ8w7ay4SObmmD7FRP61ukUm8k8k6mey+SBia/ZSdrC7EUbliu1IdeBUgxjgvB mPkknm+hydmTVSMZ58IQrcDsa2deXV2KkwNlv2Id6ymm8s3OVIV5XM9X8Zc6a7tZ Wpyo5/WJ8yL8abHb/be53Sv9sJx7BwE3Q39cW7t9s/84ZnB/KHUm/QC2bB1tjB7D u7bcfdiVa1TM7MWTke+5vj9/uF+rU/NHhgHvDuKrr3kVyZEDUxg= -----END CERTIFICATE-----Generated at Fri Sep 25 03:14:06 2026 by rpki-client