$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft File: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft (raw, json) Hash identifier: SyZmnQ/apq36rw96wVg1U56H8+x+8BtjflHEL0F4BEU= Subject key identifier: 90:03:5C:84:30:BB:93:14:60:44:49:A1:F0:69:BB:9F:C1:D1:4B:C6 Authority key identifier: 3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 Certificate issuer: /CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Certificate serial: 4FF4330E90D574E2ADFD4471DAF3340AF6AD4380 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft Manifest number: 010A Signing time: Sat 14 Nov 2026 17:31:32 +0000 Manifest this update: Sat 14 Nov 2026 17:26:32 +0000 Manifest next update: Sun 15 Nov 2026 18:22:32 +0000 Files and hashes: 1: 3135372e32302e3231382e302f32332d3233203d3e20313431303536.roa (hash: pGCyYsaibQ+UQHF2d085YFoN6msKEDfYPYxMI79HHsc=) 2: 3135372e32302e3231382e302f32342d3234203d3e20313431303536.roa (hash: amufn5LXJwL9dAiLhQhIbvJncQves34m9l5dWhnZpi8=) 3: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl (hash: KhJKKkDzUAY8mejJCPiGZGYnJvmdBmKmj4gLrXGbylM=) 4: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (hash: nv2/DUQnze7FZdnWg8O1b8JOsCb1KZzG0d/PmRvY8wo=) 5: 3135372e32302e3231382e302f32332d3233203d3e20313532343233.roa (hash: oN269PBRDnF940fO+bfI5PiA4IWS9ygfFhv4r3jDKlw=) 6: 3135372e32302e3231392e302f32342d3234203d3e20313431303536.roa (hash: UVCPBM3XB9KSbJCj53MAfClqOKcywC16rGR30TDPY8U=) 7: 3135372e32302e3231392e302f32342d3234203d3e20313532343233.roa (hash: VLaO/ySY+ntAKUzijWFb7J8NTbjb4cdGL70vMkZXXug=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f4:33:0e:90:d5:74:e2:ad:fd:44:71:da:f3:34:0a:f6:ad:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Validity Not Before: Nov 14 17:26:32 2026 GMT Not After : Nov 15 18:22:32 2026 GMT Subject: CN=90035C8430BB9314604449A1F069BB9FC1D14BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:25:42:1e:4b:3f:38:ac:6e:49:48:8e:7c:65: 47:ef:9d:59:88:dc:d6:bc:82:e7:ef:0f:74:2c:00: 35:db:e2:29:6f:d9:2c:51:52:8e:22:d0:ac:fa:e7: b4:04:d7:bf:0b:82:5c:37:8a:dd:b6:b7:73:0b:a6: b8:03:4a:c9:37:b8:8c:f3:e9:ee:cb:2c:cc:7a:9d: df:ab:99:59:a2:84:37:d0:19:0b:54:6e:c4:36:8b: 9b:f2:5c:0e:b9:b3:bb:42:95:b6:c0:4c:54:14:87: ed:56:81:c7:a8:82:73:ab:e7:20:85:ad:9d:0e:ec: a0:62:6c:9f:2a:7c:04:ab:dc:be:17:dd:31:11:b5: 9f:32:35:b7:0c:f7:87:e4:ed:2e:76:16:6b:d5:2e: 1d:79:40:d0:e3:44:be:45:58:95:1c:41:c8:47:cc: f6:01:79:83:93:2e:16:10:af:2c:71:56:dd:90:d9: ac:fc:cb:ef:14:d0:06:fe:7f:ef:88:15:51:54:41: 43:44:02:30:ed:7f:1f:99:99:db:e2:fa:b8:29:36: 8c:ea:36:d8:77:fd:52:d5:2f:76:50:7d:d1:bd:a5: cd:3e:5d:fc:09:1d:a9:f0:ad:da:8b:dc:70:1c:04: 57:b3:a0:bc:95:0f:fe:15:2c:a3:f1:b6:ea:28:3d: ae:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:03:5C:84:30:BB:93:14:60:44:49:A1:F0:69:BB:9F:C1:D1:4B:C6 X509v3 Authority Key Identifier: keyid:3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:54:d0:52:98:9b:53:8f:10:ac:ed:be:7a:c5:04:48:70:4c: 2e:f8:0c:82:a7:1a:cc:32:09:cf:e1:31:5c:b9:2c:ba:21:f3: ed:94:41:f6:f7:51:5a:28:5a:aa:d2:37:6b:b1:9c:1e:ea:91: 10:66:57:98:ce:57:79:98:3a:90:82:e7:5e:09:0a:d3:9c:35: c8:6d:5e:e4:2d:00:e3:01:b3:61:5a:b1:c8:0e:07:d1:2a:4c: bc:d0:4a:5b:1a:3e:7c:a4:db:ba:fb:db:44:66:86:21:a0:69: 45:ef:ee:ac:48:08:00:2a:f6:86:48:6b:12:bd:9c:93:e9:09: e9:e6:65:d9:5b:20:2d:98:60:eb:6b:e3:00:07:fb:35:e2:4e: 17:4b:c6:a9:34:3a:e2:4e:f5:ba:a2:d8:70:a6:10:34:1c:81: 81:ad:7a:73:64:59:be:69:bb:25:73:36:2c:5c:d8:53:ed:04: 3a:f1:80:4b:16:84:f9:95:89:c9:ff:ff:7c:34:92:66:27:6d: 27:69:82:06:18:71:d7:50:34:2e:34:f3:3a:28:83:fd:e3:3d: fd:23:e5:9c:8f:a1:06:68:1d:a8:34:ba:85:dc:6d:20:4c:4b: 9e:0f:20:fd:cf:b9:e2:58:4d:4e:21:85:34:15:fa:a4:d7:3a: 0f:6d:69:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/QzDpDVdOKt/URx2vM0CvatQ4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0 OUZFRkU1NDAeFw0yNjExMTQxNzI2MzJaFw0yNjExMTUxODIyMzJaMDMxMTAvBgNV BAMTKDkwMDM1Qzg0MzBCQjkzMTQ2MDQ0NDlBMUYwNjlCQjlGQzFEMTRCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3JUIeSz84rG5JSI58ZUfvnVmI 3Na8gufvD3QsADXb4ilv2SxRUo4i0Kz657QE178Lglw3it22t3MLprgDSsk3uIzz 6e7LLMx6nd+rmVmihDfQGQtUbsQ2i5vyXA65s7tClbbATFQUh+1WgceognOr5yCF rZ0O7KBibJ8qfASr3L4X3TERtZ8yNbcM94fk7S52FmvVLh15QNDjRL5FWJUcQchH zPYBeYOTLhYQryxxVt2Q2az8y+8U0Ab+f++IFVFUQUNEAjDtfx+Zmdvi+rgpNozq Nth3/VLVL3ZQfdG9pc0+XfwJHanwrdqL3HAcBFezoLyVD/4VLKPxtuooPa65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkANchDC7kxRgREmh8Gm7n8HRS8YwHwYDVR0j BBgwFoAUPAvWuxtMsH3Fj28wFrXsN0n+/lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlODNhZmUtM2JkYy00NGIyLWE3MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIx QjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0OUZFRkU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQzBCRDZCQjFCNENCMDdEQzU4RjZGMzAxNkI1RUMzNzQ5RkVG RTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJlODNhZmUtM2JkYy00NGIyLWE3 MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVD Mzc0OUZFRkU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9U0FKYm1OPEKztvnrFBEhwTC74DIKnGswy Cc/hMVy5LLoh8+2UQfb3UVooWqrSN2uxnB7qkRBmV5jOV3mYOpCC514JCtOcNcht XuQtAOMBs2FascgOB9EqTLzQSlsaPnyk27r720RmhiGgaUXv7qxICAAq9oZIaxK9 nJPpCenmZdlbIC2YYOtr4wAH+zXiThdLxqk0OuJO9bqi2HCmEDQcgYGtenNkWb5p uyVzNixc2FPtBDrxgEsWhPmVicn//3w0kmYnbSdpggYYcddQNC408zoog/3jPf0j 5ZyPoQZoHag0uoXcbSBMS54PIP3PueJYTU4hhTQV+qTXOg9taa8= -----END CERTIFICATE-----Generated at Sun Nov 15 00:27:38 2026 by rpki-client