$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft File: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft (raw, json) Hash identifier: kWihHmqDdIUpadLU3tf1lSFc410OktvZmAb7keYbnpU= Subject key identifier: D2:7F:35:B1:04:8A:7C:FE:37:87:47:30:CD:35:7D:C6:4E:B4:4C:ED Authority key identifier: 33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 Certificate issuer: /CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Certificate serial: 7AC1547F91A6F36BA223ED4B98E157C6D607671A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft Manifest number: BD Signing time: Mon 21 Sep 2026 00:32:17 +0000 Manifest this update: Mon 21 Sep 2026 00:27:17 +0000 Manifest next update: Tue 22 Sep 2026 01:23:17 +0000 Files and hashes: 1: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: qwCD6LMD3vcZUMJ0NyJQKQENdmqWnufrQ7c5rQMuFak=) 2: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: R6gLAkDdw5uoEeHIF+BZTSI8Nmt3rpd6kFAoBJizRp0=) 3: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: 3A+tKNYPDWO1jDhVDZUdC2NZs5B4MixvTHgsf4h9Xzc=) 4: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl (hash: ELRdIkYjI2tycTetM+7KAmVuusnml5JoBfj7Nq138lI=) 5: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: rjOP/mlx+e05g5g9m1lNDsLBX8nXjBRagTVjyUCAwbI=) 6: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: T06sDsvRxE4yK7ECDWNomJNJ5HNU4tQJl/HnEtrv2wM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c1:54:7f:91:a6:f3:6b:a2:23:ed:4b:98:e1:57:c6:d6:07:67:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Validity Not Before: Sep 21 00:27:17 2026 GMT Not After : Sep 22 01:23:17 2026 GMT Subject: CN=D27F35B1048A7CFE37874730CD357DC64EB44CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:96:c6:26:dd:99:01:e0:e5:94:20:70:07: a9:43:e4:2f:6a:6a:b1:6d:84:39:18:d5:6d:8e:19: 60:48:b7:42:ea:d0:13:07:ab:76:bb:23:70:ae:1f: 15:c4:aa:76:b6:09:b0:8c:ff:6e:dd:93:51:c2:4d: 3a:2b:23:e7:6c:44:d8:1b:86:22:27:13:42:13:9c: 7b:48:30:f5:99:ce:8a:3b:ab:2f:df:7c:5d:a3:32: 4d:44:93:69:f2:5b:fb:7a:38:3f:03:c5:06:b4:16: 5c:1f:a5:2d:c2:f5:ba:5e:97:7c:a8:48:69:9d:2d: cb:52:e3:29:b4:99:7f:05:ed:c9:90:58:70:06:4d: ac:c8:7b:71:c7:0d:7a:fe:07:e7:e3:67:24:f0:78: 38:a3:56:8a:e2:6d:e9:d5:12:37:d7:7c:84:e1:f5: f6:34:92:01:cd:d2:92:7a:82:67:e8:dd:51:f6:00: a7:7b:04:65:9d:76:53:5d:85:ef:d2:70:38:9c:51: a9:f8:a6:59:8f:a2:8d:dc:9c:fe:37:77:b6:43:c9: 4a:7f:3a:f7:79:3d:7c:7d:5a:15:ac:60:8c:18:1d: ef:31:a6:ae:1f:75:fb:0a:d4:91:4a:ab:3e:06:93: e4:58:6b:52:2d:6d:3c:cd:d3:8c:01:0e:dd:63:5b: 99:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7F:35:B1:04:8A:7C:FE:37:87:47:30:CD:35:7D:C6:4E:B4:4C:ED X509v3 Authority Key Identifier: keyid:33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ad:cb:d9:84:d1:88:4e:72:91:20:6c:84:c6:96:4f:27:c6: 78:ad:8d:bf:62:3a:e4:da:1b:9e:50:08:1b:94:15:5b:9b:0d: 69:95:a1:b7:5f:60:a2:0b:0c:95:5a:c7:b7:83:ae:9d:a1:ab: c8:2a:59:08:1f:e2:f3:e1:e6:5c:7b:b3:09:0d:36:04:7c:b9: 41:6b:f5:c1:3c:7f:ad:be:d6:b1:14:d4:9a:62:d3:ff:19:71: 70:f1:ec:3e:42:89:30:66:3f:b8:d2:4b:f8:0f:3b:10:63:c1: 2a:a2:c6:58:2b:6d:64:dd:94:01:b7:9c:60:06:a9:10:b8:c6: dc:7c:0b:4a:67:78:00:53:fd:f0:c6:20:17:ea:2d:95:cb:01: b6:14:c8:9c:2a:a8:1b:19:79:cb:1e:23:9e:81:c4:57:84:25: d8:0d:43:72:06:18:3a:0a:ff:ca:92:ad:a3:b4:a6:67:d6:ab: 2a:dc:3d:e4:7b:dc:f4:d6:14:2f:2c:08:8d:74:a8:fb:7c:97: 4d:ee:e4:9a:d0:93:ef:78:92:60:2e:4f:3a:92:77:47:3e:6c: 41:aa:3b:c2:8d:ea:ba:01:b4:40:97:81:69:f6:0e:e9:43:83: 46:a0:c6:6d:bc:ef:14:a1:46:ae:8f:84:c9:9d:69:65:dd:39: 8e:ac:00:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUesFUf5Gm82uiI+1LmOFXxtYHZxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlENDdG QjU2MUI2MjAeFw0yNjA5MjEwMDI3MTdaFw0yNjA5MjIwMTIzMTdaMDMxMTAvBgNV BAMTKEQyN0YzNUIxMDQ4QTdDRkUzNzg3NDczMENEMzU3REM2NEVCNDRDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8pZbGJt2ZAeDllCBwB6lD5C9q arFthDkY1W2OGWBIt0Lq0BMHq3a7I3CuHxXEqna2CbCM/27dk1HCTTorI+dsRNgb hiInE0ITnHtIMPWZzoo7qy/ffF2jMk1Ek2nyW/t6OD8DxQa0FlwfpS3C9bpel3yo SGmdLctS4ym0mX8F7cmQWHAGTazIe3HHDXr+B+fjZyTweDijVoribenVEjfXfITh 9fY0kgHN0pJ6gmfo3VH2AKd7BGWddlNdhe/ScDicUan4plmPoo3cnP43d7ZDyUp/ Ovd5PXx9WhWsYIwYHe8xpq4fdfsK1JFKqz4Gk+RYa1ItbTzN04wBDt1jW5nfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0n81sQSKfP43h0cwzTV9xk60TO0wHwYDVR0j BBgwFoAUMxPigd82Tgv6MqQyKsydR/tWG2IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2MWQ3YTctYTExZS00MDBiLTkxNzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFE RjM2NEUwQkZBMzJBNDMyMkFDQzlENDdGQjU2MUI2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzEzRTI4MURGMzY0RTBCRkEzMkE0MzIyQUNDOUQ0N0ZCNTYx QjYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlE NDdGQjU2MUI2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2ty9mE0YhOcpEgbITGlk8nxnitjb9iOuTa G55QCBuUFVubDWmVobdfYKILDJVax7eDrp2hq8gqWQgf4vPh5lx7swkNNgR8uUFr 9cE8f62+1rEU1Jpi0/8ZcXDx7D5CiTBmP7jSS/gPOxBjwSqixlgrbWTdlAG3nGAG qRC4xtx8C0pneABT/fDGIBfqLZXLAbYUyJwqqBsZecseI56BxFeEJdgNQ3IGGDoK /8qSraO0pmfWqyrcPeR73PTWFC8sCI10qPt8l03u5JrQk+94kmAuTzqSd0c+bEGq O8KN6roBtECXgWn2DulDg0agxm287xShRq6PhMmdaWXdOY6sAOc= -----END CERTIFICATE-----Generated at Mon Sep 21 18:13:45 2026 by rpki-client