$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft File: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft (raw, json) Hash identifier: RK4pe274M72tCMNk3c+6TBWHcSUNaNZ2wFRAGIzFJG4= Subject key identifier: 65:87:2D:20:B9:AE:B2:AD:1F:7C:03:AC:4B:ED:B3:D9:85:DD:40:D2 Authority key identifier: 3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 Certificate issuer: /CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Certificate serial: 5913093A2142ED722C8B16137C58EF3CBD0D8940 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 19:14:26 +0000 Manifest this update: Thu 24 Sep 2026 19:09:26 +0000 Manifest next update: Fri 25 Sep 2026 19:56:26 +0000 Files and hashes: 1: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: hWMY9RV6tjoaYaPOGZQpY6qftIWF9uA81eVJc//u+sM=) 2: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl (hash: AlRM7XviurhRuDVdqY6z6wTaTyaNY86ZxvBr0Rat0lk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:13:09:3a:21:42:ed:72:2c:8b:16:13:7c:58:ef:3c:bd:0d:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Validity Not Before: Sep 24 19:09:26 2026 GMT Not After : Sep 25 19:56:26 2026 GMT Subject: CN=65872D20B9AEB2AD1F7C03AC4BEDB3D985DD40D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:7f:85:02:cd:9c:d3:70:dc:37:b4:63:16: ce:1e:85:2b:c3:79:ea:81:2a:70:95:d4:8f:c7:61: 5f:f0:4b:0e:93:f2:93:78:8d:55:96:09:cf:f8:94: 99:f2:c6:25:79:b8:1a:48:8a:0c:a2:95:14:b6:ec: 3b:43:ef:04:3f:90:8c:ed:77:a6:28:9b:ac:25:b7: b5:6f:e8:9b:f0:de:f1:4c:3e:7a:01:49:7e:d8:6d: 20:e1:dd:f2:0c:3d:93:25:e4:b3:ad:bd:ee:61:47: 53:b7:40:e0:62:f2:a8:44:60:93:c8:fa:e3:06:a2: df:88:5b:6e:49:ea:f5:51:2c:ef:66:c2:47:11:12: 02:42:80:5b:28:2b:e2:75:05:f1:09:b7:ef:31:ec: 53:ef:72:64:f3:7e:2b:ab:6e:12:8c:bd:0e:70:13: 7d:30:e3:25:c8:f4:fc:36:0b:4d:f6:f2:03:79:71: 78:ad:4a:6f:f6:25:15:40:37:3e:b0:75:89:41:44: a6:0a:99:4d:e8:6a:5b:ff:79:73:fb:b5:43:ea:36: 97:0a:2a:c8:82:bc:cc:b0:09:a9:ad:28:c6:b9:3a: 57:52:dd:42:bc:24:d3:5e:c3:46:73:16:26:c2:cb: c0:bf:21:5b:97:fb:0a:3c:e2:f6:35:7a:f7:fa:c2: 65:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:87:2D:20:B9:AE:B2:AD:1F:7C:03:AC:4B:ED:B3:D9:85:DD:40:D2 X509v3 Authority Key Identifier: keyid:3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cb:4c:83:aa:29:c3:17:22:70:d9:c5:92:c6:42:8b:73:3f: d8:67:22:31:3d:01:04:e6:7c:f6:d5:2e:c8:db:c9:c1:4f:e4: 3f:9f:34:62:fc:27:dd:93:57:2b:64:d7:03:30:29:2d:4b:bf: bd:fa:03:1b:b3:18:1c:47:91:fd:60:30:7f:f6:2d:42:27:37: f3:b7:3a:17:28:56:31:d6:cd:a8:50:2a:57:5e:03:84:84:32: 1b:80:8c:3c:8d:af:60:57:01:08:a0:bb:29:4d:06:95:e9:5b: bc:8e:c1:90:fa:d8:f8:1a:2a:19:d0:8d:ca:eb:0c:5c:cc:05: 1d:66:5b:ec:2f:f3:9b:d8:13:76:26:a0:c6:84:39:78:68:d3: 4f:a9:b9:6c:74:b4:2e:48:87:76:c5:e1:e1:86:fb:21:e2:b9: a9:9d:17:c8:52:10:61:61:89:61:1c:31:ba:7a:d6:b6:1c:5e: a1:d5:09:46:0d:73:0a:83:af:6b:08:43:c1:fb:83:19:9b:fb: 3c:20:6f:0b:f8:5b:83:81:fb:d7:95:d3:0e:fd:60:2c:7d:9c: b5:14:0c:71:69:b9:6e:79:9e:e0:00:1b:02:94:23:54:9e:9a: c0:7e:06:20:e9:78:e6:79:19:9c:a1:03:6e:89:a4:06:6d:17: 60:71:8b:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRMJOiFC7XIsixYTfFjvPL0NiUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1 NDNCQjU3MDAeFw0yNjA5MjQxOTA5MjZaFw0yNjA5MjUxOTU2MjZaMDMxMTAvBgNV BAMTKDY1ODcyRDIwQjlBRUIyQUQxRjdDMDNBQzRCRURCM0Q5ODVERDQwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC013+FAs2c03DcN7RjFs4ehSvD eeqBKnCV1I/HYV/wSw6T8pN4jVWWCc/4lJnyxiV5uBpIigyilRS27DtD7wQ/kIzt d6Yom6wlt7Vv6Jvw3vFMPnoBSX7YbSDh3fIMPZMl5LOtve5hR1O3QOBi8qhEYJPI +uMGot+IW25J6vVRLO9mwkcREgJCgFsoK+J1BfEJt+8x7FPvcmTzfiurbhKMvQ5w E30w4yXI9Pw2C0328gN5cXitSm/2JRVANz6wdYlBRKYKmU3oalv/eXP7tUPqNpcK KsiCvMywCamtKMa5OldS3UK8JNNew0ZzFibCy8C/IVuX+wo84vY1evf6wmUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZYctILmusq0ffAOsS+2z2YXdQNIwHwYDVR0j BBgwFoAUPCDf6p5L2M81+gLpLMn1oVQ7tXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNkZTFjZmQtY2JiYy00ZjA4LTg5Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5 RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1NDNCQjU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIwREZFQTlFNEJEOENGMzVGQTAyRTkyQ0M5RjVBMTU0M0JC NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1 QTE1NDNCQjU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7LTIOqKcMXInDZxZLGQotzP9hnIjE9AQTm fPbVLsjbycFP5D+fNGL8J92TVytk1wMwKS1Lv736AxuzGBxHkf1gMH/2LUInN/O3 OhcoVjHWzahQKldeA4SEMhuAjDyNr2BXAQiguylNBpXpW7yOwZD62PgaKhnQjcrr DFzMBR1mW+wv85vYE3YmoMaEOXho00+puWx0tC5Ih3bF4eGG+yHiuamdF8hSEGFh iWEcMbp61rYcXqHVCUYNcwqDr2sIQ8H7gxmb+zwgbwv4W4OB+9eV0w79YCx9nLUU DHFpuW55nuAAGwKUI1SemsB+BiDpeOZ5GZyhA26JpAZtF2Bxiys= -----END CERTIFICATE-----Generated at Fri Sep 25 02:37:34 2026 by rpki-client