$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft File: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft (raw, json) Hash identifier: ZjI/2L9eycbs/iLVxte+gkANWloY3NcXYg2deaXwOL0= Subject key identifier: 06:86:66:69:2C:89:CF:60:A4:0C:6D:EB:E8:8C:C7:3F:88:C0:6F:06 Authority key identifier: 3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE Certificate issuer: /CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Certificate serial: 772C09097F4EC0EFE9A768E6AA08E08CF4B1C65D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 19:14:14 +0000 Manifest this update: Fri 25 Sep 2026 19:09:14 +0000 Manifest next update: Sat 26 Sep 2026 21:13:14 +0000 Files and hashes: 1: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: Q+S9A/y116CZNR4HsWvWafo8POLMzZHES9UK/q+FgoQ=) 2: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl (hash: PKrOFyRnM0b1xyygFlGSJ+ZpjEH+FXJ+GEnQy5VdftQ=) 3: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: hwkmKFqZZs0/Na72m9HaYmz05ZyTB7V+dfx8PoWeKHY=) 4: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: nPHGyPRlVU4NvbiCVIa+b1x20FU3xtj+iCnjkj2L1yY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2c:09:09:7f:4e:c0:ef:e9:a7:68:e6:aa:08:e0:8c:f4:b1:c6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Validity Not Before: Sep 25 19:09:14 2026 GMT Not After : Sep 26 21:13:14 2026 GMT Subject: CN=068666692C89CF60A40C6DEBE88CC73F88C06F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5f:d4:f8:fc:1f:c7:b5:d0:9d:66:3f:e4:fc: 21:ed:fc:ec:99:88:f9:3d:44:ce:d6:2b:30:4f:e7: 3d:17:a7:e2:80:cb:21:9c:2d:7b:37:76:70:f0:69: d7:57:cc:7c:c3:fe:aa:82:1b:f2:e4:b0:6f:0b:20: e8:f2:ca:a8:5e:cd:d1:a7:42:86:4b:7c:3f:65:0b: 1c:e5:3c:92:d3:ab:51:0a:08:9b:b2:5a:f4:43:96: 2b:19:92:f4:3e:d8:ae:16:64:3d:89:2d:6b:85:d6: 46:c2:71:25:d5:c0:e5:c8:df:c2:e0:cf:8e:21:af: 49:89:fc:e8:f6:d0:2b:41:a1:70:5f:d9:14:5d:45: 37:26:2f:12:be:ed:c7:bb:b4:0c:99:9b:ee:4a:36: 44:75:db:1e:f6:a7:11:69:69:de:58:6f:f5:22:1e: 96:a1:11:de:d2:8c:c4:9b:6b:b3:0b:5c:29:62:9c: ca:09:8a:e3:66:97:08:4c:bf:05:94:54:e6:14:a0: f7:36:4e:73:40:6e:a1:0a:6e:1c:3f:82:11:09:b5: dd:c7:c9:51:54:2a:92:d9:e0:38:e2:05:7a:66:c0: 08:69:ce:e8:94:f5:a6:0d:55:0c:cc:ad:75:7c:f9: c6:f9:c6:88:67:21:2b:63:15:e8:c1:94:8e:30:03: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:86:66:69:2C:89:CF:60:A4:0C:6D:EB:E8:8C:C7:3F:88:C0:6F:06 X509v3 Authority Key Identifier: keyid:3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f3:ca:13:d1:a6:ed:aa:a8:69:9b:b5:bb:89:d3:e8:2c:c4: aa:cc:61:e2:c7:e0:3f:06:8e:93:02:f4:91:47:3f:28:28:f2: ca:ae:4d:49:9a:20:72:ff:e2:bb:09:3e:2e:89:09:c6:fb:5c: 93:99:94:b8:ad:a2:3e:dc:67:0f:2a:a2:97:c2:13:aa:05:40: 0c:50:e9:eb:82:04:4b:58:6f:87:71:43:51:f2:e1:d5:8a:ae: af:6b:aa:c1:21:7d:c6:a8:99:3e:d4:59:5d:1e:d0:e2:ef:27: 50:ab:0b:9c:bd:19:6a:3b:c7:d1:9f:0c:ac:43:05:7d:23:19: b2:b9:83:7f:68:58:80:3c:ce:8e:70:80:3b:b9:c7:1c:5b:ac: d7:0b:99:fe:a5:05:54:df:38:41:ca:e1:23:b0:02:f4:93:69: ef:92:03:27:f9:8d:a3:60:78:58:40:5e:73:73:3b:61:73:fe: 6c:65:41:55:6b:26:2b:26:46:8b:ff:b3:a2:b4:d7:63:46:8e: a4:cb:9d:a8:44:31:87:0b:d5:e2:44:f0:ae:af:b0:95:c5:11: 90:e2:62:64:4c:5d:86:5c:34:1a:83:a6:df:bb:62:6e:19:ec: c1:f1:56:ff:b9:5c:26:76:cd:48:74:f0:59:c6:66:87:09:fd: 36:65:8f:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdywJCX9OwO/pp2jmqgjgjPSxxl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5 NkM4MjdERTAeFw0yNjA5MjUxOTA5MTRaFw0yNjA5MjYyMTEzMTRaMDMxMTAvBgNV BAMTKDA2ODY2NjY5MkM4OUNGNjBBNDBDNkRFQkU4OENDNzNGODhDMDZGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoX9T4/B/HtdCdZj/k/CHt/OyZ iPk9RM7WKzBP5z0Xp+KAyyGcLXs3dnDwaddXzHzD/qqCG/LksG8LIOjyyqhezdGn QoZLfD9lCxzlPJLTq1EKCJuyWvRDlisZkvQ+2K4WZD2JLWuF1kbCcSXVwOXI38Lg z44hr0mJ/Oj20CtBoXBf2RRdRTcmLxK+7ce7tAyZm+5KNkR12x72pxFpad5Yb/Ui HpahEd7SjMSba7MLXClinMoJiuNmlwhMvwWUVOYUoPc2TnNAbqEKbhw/ghEJtd3H yVFUKpLZ4DjiBXpmwAhpzuiU9aYNVQzMrXV8+cb5xohnIStjFejBlI4wA1k/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBoZmaSyJz2CkDG3r6IzHP4jAbwYwHwYDVR0j BBgwFoAUPYsbD/x4ZLGg6ZoJ6/WnbJbIJ94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWEwNzczODYtMzAxYi00ZmYxLTg3MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZG Qzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5NkM4MjdERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRDhCMUIwRkZDNzg2NEIxQTBFOTlBMDlFQkY1QTc2Qzk2Qzgy N0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3 NkM5NkM4MjdERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPzyhPRpu2qqGmbtbuJ0+gsxKrMYeLH4D8G jpMC9JFHPygo8squTUmaIHL/4rsJPi6JCcb7XJOZlLitoj7cZw8qopfCE6oFQAxQ 6euCBEtYb4dxQ1Hy4dWKrq9rqsEhfcaomT7UWV0e0OLvJ1CrC5y9GWo7x9GfDKxD BX0jGbK5g39oWIA8zo5wgDu5xxxbrNcLmf6lBVTfOEHK4SOwAvSTae+SAyf5jaNg eFhAXnNzO2Fz/mxlQVVrJismRov/s6K012NGjqTLnahEMYcL1eJE8K6vsJXFEZDi YmRMXYZcNBqDpt+7Ym4Z7MHxVv+5XCZ2zUh08FnGZocJ/TZlj3M= -----END CERTIFICATE-----Generated at Fri Sep 25 23:35:20 2026 by rpki-client