$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft File: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft (raw, json) Hash identifier: QD2CmcA7+CzPiD5WNm+xyv7rHm4pP1bBd3brZ6xrDY0= Subject key identifier: 41:63:0B:D9:A4:62:CC:6A:D5:B7:6E:C3:6E:C6:79:F7:72:DD:68:3A Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 106DD81DF9CF70A9D83B87BDF827529DC551F897 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:33:19 +0000 Manifest this update: Mon 21 Sep 2026 09:28:19 +0000 Manifest next update: Tue 22 Sep 2026 10:09:19 +0000 Files and hashes: 1: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: RYDFjSUq7+WTBKXlmjbV9d6C3LLSVr9xribVCYh4jog=) 2: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 0WLfS7aDlUOO8gGFrEIWmBmwKDx6lnGogb/aAhlDo0s=) 3: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0=) 4: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl (hash: MFjhHaDgME1pzP8EhSmemeipbP1wu5EsigvtkwmmmVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6d:d8:1d:f9:cf:70:a9:d8:3b:87:bd:f8:27:52:9d:c5:51:f8:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: Sep 21 09:28:19 2026 GMT Not After : Sep 22 10:09:19 2026 GMT Subject: CN=41630BD9A462CC6AD5B76EC36EC679F772DD683A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:34:30:06:69:4b:e8:b4:1b:e9:a6:fe:fe: bc:b5:a2:a8:c3:e4:c0:93:4b:70:18:f5:4f:d6:7e: 4a:3f:14:3c:08:f3:44:09:89:d0:67:d0:fd:80:aa: 76:7a:ac:09:fa:ee:ec:88:39:a7:e6:4f:2e:41:80: f4:74:53:dd:d6:63:70:44:02:32:0e:f2:15:07:62: 66:58:da:13:4d:be:9f:51:df:f2:5f:b6:da:04:e0: 21:e7:af:32:46:74:3d:36:d0:ea:66:f6:c4:55:36: 77:bf:22:71:de:06:b3:5d:e8:fb:24:50:5c:30:fb: 04:c4:eb:df:2a:3f:21:eb:84:ca:e5:0b:83:5c:79: 42:28:02:56:6f:23:58:c5:f5:07:54:78:18:0f:c3: 95:a7:e7:9e:47:7c:91:7b:ee:45:d8:59:0e:dc:77: 79:b5:f7:07:91:34:79:5f:74:47:d0:c8:3d:c0:16: 3b:a8:bc:c5:a2:73:6d:0f:26:f0:8e:16:6c:65:22: 45:3b:72:2c:20:52:44:2c:1f:25:fe:6a:ef:65:af: c9:16:c0:f2:e6:12:e7:9a:7d:8e:98:bb:fe:f9:1a: c2:1f:b2:a8:ae:d3:53:8c:c3:0e:2a:43:a6:a7:79: 48:2c:2f:2d:6c:a1:8e:c7:2e:02:80:ce:53:a4:51: 5b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:63:0B:D9:A4:62:CC:6A:D5:B7:6E:C3:6E:C6:79:F7:72:DD:68:3A X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:19:f7:e1:5d:86:38:05:93:1b:41:47:58:f4:ff:ad:e9:4b: 72:d1:36:b3:c3:1c:c3:8f:8d:27:86:49:9e:45:f5:6e:35:df: 09:fd:54:e5:34:70:8f:63:19:06:2a:e4:ad:10:b3:ca:af:a5: be:6e:b7:52:da:6a:34:1e:41:12:6e:6e:23:90:b9:b6:e5:6d: 90:6d:68:69:90:df:ad:e9:c8:1b:cb:0d:1a:00:5c:40:1a:69: f5:cb:0a:e9:01:6c:cd:2d:f2:c7:31:86:21:1d:d8:fc:7c:f7: f7:97:02:4b:16:21:38:58:18:f8:17:70:31:f5:c7:8a:9b:55: e4:ac:90:cf:74:de:7f:81:1f:49:89:39:e4:1b:69:4a:38:b0: 2b:49:67:ad:fa:a9:00:1c:4d:83:1c:af:cb:d0:ef:f9:5d:33: 85:67:14:03:43:bf:dc:64:43:b7:3f:7f:2e:1d:ba:f2:00:ed: 55:22:91:c5:57:e1:f8:50:c5:6a:f8:c8:96:9a:3d:7e:1a:27: 6d:ac:57:d5:94:92:44:0b:1b:4c:2f:8c:73:69:06:03:71:8f: 26:ac:46:3b:e5:c4:35:06:92:13:f8:6c:00:88:d5:7c:cb:93: 92:7e:9e:f4:b9:0b:23:68:13:f5:30:3f:11:6e:11:36:ab:c5: 04:24:2a:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEG3YHfnPcKnYO4e9+CdSncVR+JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjA5MjEwOTI4MTlaFw0yNjA5MjIxMDA5MTlaMDMxMTAvBgNV BAMTKDQxNjMwQkQ5QTQ2MkNDNkFENUI3NkVDMzZFQzY3OUY3NzJERDY4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCszQwBmlL6LQb6ab+/ry1oqjD 5MCTS3AY9U/Wfko/FDwI80QJidBn0P2AqnZ6rAn67uyIOafmTy5BgPR0U93WY3BE AjIO8hUHYmZY2hNNvp9R3/JfttoE4CHnrzJGdD020Opm9sRVNne/InHeBrNd6Psk UFww+wTE698qPyHrhMrlC4NceUIoAlZvI1jF9QdUeBgPw5Wn555HfJF77kXYWQ7c d3m19weRNHlfdEfQyD3AFjuovMWic20PJvCOFmxlIkU7ciwgUkQsHyX+au9lr8kW wPLmEueafY6Yu/75GsIfsqiu01OMww4qQ6aneUgsLy1soY7HLgKAzlOkUVvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQWML2aRizGrVt27DbsZ593LdaDowHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdD NjA0MTc2N0YyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIZ9+FdhjgFkxtBR1j0/63pS3LRNrPDHMOP jSeGSZ5F9W413wn9VOU0cI9jGQYq5K0Qs8qvpb5ut1LaajQeQRJubiOQubblbZBt aGmQ363pyBvLDRoAXEAaafXLCukBbM0t8scxhiEd2Px89/eXAksWIThYGPgXcDH1 x4qbVeSskM903n+BH0mJOeQbaUo4sCtJZ636qQAcTYMcr8vQ7/ldM4VnFANDv9xk Q7c/fy4duvIA7VUikcVX4fhQxWr4yJaaPX4aJ22sV9WUkkQLG0wvjHNpBgNxjyas RjvlxDUGkhP4bACI1XzLk5J+nvS5CyNoE/UwPxFuETarxQQkKkY= -----END CERTIFICATE-----Generated at Mon Sep 21 11:42:55 2026 by rpki-client