$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft File: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft (raw, json) Hash identifier: gA29Xoh9cJkV8cX9UP6NMC5CdxiOHwqC8Tt9gZixC+0= Subject key identifier: 09:FF:9A:F4:0E:41:05:1B:DC:5A:D5:0C:CF:40:C9:6C:1A:5E:86:D6 Authority key identifier: C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 Certificate issuer: /CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Certificate serial: 46DC35492C4C1F43086CFBC480B02A523D556990 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 04:37:21 +0000 Manifest this update: Mon 21 Sep 2026 04:32:21 +0000 Manifest next update: Tue 22 Sep 2026 06:42:21 +0000 Files and hashes: 1: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: PA4mCIJ4WVxoHasll6BuHuPox/sleuIONJ29Vq08rHw=) 2: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: ax7Tz8igVzZFs/ShEmAUC7L5azN7xDE8dfSTDwz0nik=) 3: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl (hash: DegfrAitW1JmLWo7lCoGnN67TKkLbdNqN1TLY8r33kc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:dc:35:49:2c:4c:1f:43:08:6c:fb:c4:80:b0:2a:52:3d:55:69:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Validity Not Before: Sep 21 04:32:21 2026 GMT Not After : Sep 22 06:42:21 2026 GMT Subject: CN=09FF9AF40E41051BDC5AD50CCF40C96C1A5E86D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:2f:1c:bf:52:4a:2c:ae:2a:3c:5c:7e:a8: ae:68:ca:94:47:39:a3:89:98:83:6e:df:ed:4d:46: 3b:d0:40:5f:af:bc:fa:95:fd:61:d8:9e:3f:b0:19: c1:39:03:e8:b6:28:c9:22:7a:dc:01:33:32:4c:51: ab:01:d5:aa:72:64:38:fb:9a:c8:4b:80:64:45:dc: 26:84:49:c0:3e:79:8c:a7:74:67:9e:f5:7d:aa:17: de:61:18:3a:6c:5c:43:c2:08:1c:cb:9e:7d:48:94: af:00:d1:9c:52:9a:11:dc:5e:04:32:99:a8:38:a7: 1b:e2:8e:41:4a:27:5a:b4:c0:e0:7a:d8:c0:d9:18: d7:6c:90:f2:e4:d7:b6:72:5f:3b:3e:f5:8b:13:c5: 14:8f:06:a5:c0:73:e3:8b:fb:66:bb:9b:81:d1:b3: 11:a3:cd:47:0b:b4:f0:a9:3c:a3:49:61:1e:2e:91: 99:e0:24:d8:b0:43:34:81:c9:fc:83:db:14:61:27: cd:3b:27:38:ed:0a:33:bd:47:70:c5:10:5d:61:33: 2c:4d:6c:44:33:98:b6:65:c7:4c:9f:8c:26:86:85: 5d:4a:b1:8a:be:0e:d4:d8:be:32:ca:ce:07:09:54: 3f:e0:1b:a0:de:3e:21:4b:28:87:28:08:00:79:12: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FF:9A:F4:0E:41:05:1B:DC:5A:D5:0C:CF:40:C9:6C:1A:5E:86:D6 X509v3 Authority Key Identifier: keyid:C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:38:f6:92:7f:81:f5:ab:d2:8e:ba:d1:7a:46:70:03:a2:7a: 38:a2:83:e0:3d:58:a7:94:00:5d:4c:ec:ea:85:b6:97:4c:66: eb:64:39:a7:39:26:85:6e:cf:1c:ad:d0:4c:e4:c7:3c:cd:cc: 88:5e:1a:40:bc:00:99:fb:04:af:e0:96:53:7b:60:16:b9:4d: f2:15:98:62:16:78:fc:71:d2:c6:d8:9f:74:cf:5c:af:c7:9a: d9:8f:b1:1f:03:dc:1d:4e:92:02:b4:d7:c5:1c:33:05:ad:25: a4:d9:19:74:93:03:51:f9:b8:d0:be:06:af:72:5b:3d:29:36: e3:8e:75:f6:65:bd:04:85:32:7d:dc:9c:14:9c:0a:8a:aa:46: 5c:e0:ca:38:16:c5:69:0b:de:e3:dc:24:13:cc:10:0e:1f:52: ff:86:ca:f6:0c:ea:4f:fe:ef:bd:51:a2:3b:b1:c8:1c:a1:ce: 90:ce:9b:a1:d2:d9:5f:41:b3:84:c1:56:e0:66:7c:35:c7:8e: ab:14:6a:37:41:91:e0:be:be:4f:c8:3e:fa:13:ee:f6:9a:03: f9:b2:61:94:15:4b:e4:6d:14:c7:22:53:40:cf:5c:5f:8d:8e: 15:ec:19:09:73:7e:63:7f:90:8f:fe:e3:1a:e7:c9:11:dc:df: 03:a5:b7:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtw1SSxMH0MIbPvEgLAqUj1VaZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1 NUI5OUYyNTAeFw0yNjA5MjEwNDMyMjFaFw0yNjA5MjIwNjQyMjFaMDMxMTAvBgNV BAMTKDA5RkY5QUY0MEU0MTA1MUJEQzVBRDUwQ0NGNDBDOTZDMUE1RTg2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcei8cv1JKLK4qPFx+qK5oypRH OaOJmINu3+1NRjvQQF+vvPqV/WHYnj+wGcE5A+i2KMkietwBMzJMUasB1apyZDj7 mshLgGRF3CaEScA+eYyndGee9X2qF95hGDpsXEPCCBzLnn1IlK8A0ZxSmhHcXgQy mag4pxvijkFKJ1q0wOB62MDZGNdskPLk17ZyXzs+9YsTxRSPBqXAc+OL+2a7m4HR sxGjzUcLtPCpPKNJYR4ukZngJNiwQzSByfyD2xRhJ807JzjtCjO9R3DFEF1hMyxN bEQzmLZlx0yfjCaGhV1KsYq+DtTYvjLKzgcJVD/gG6DePiFLKIcoCAB5EsDHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCf+a9A5BBRvcWtUMz0DJbBpehtYwHwYDVR0j BBgwFoAUw9+0nNcOUuRFDPL+XnISqFW5nyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY2NTIwMDAtMWYyYy00NzkxLTgxYjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNE NzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1NUI5OUYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0RGQjQ5Q0Q3MEU1MkU0NDUwQ0YyRkU1RTcyMTJBODU1Qjk5 RjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY2NTIwMDAtMWYyYy00NzkxLTgx YjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEy QTg1NUI5OUYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJE49pJ/gfWr0o660XpGcAOiejiig+A9WKeU AF1M7OqFtpdMZutkOac5JoVuzxyt0EzkxzzNzIheGkC8AJn7BK/gllN7YBa5TfIV mGIWePxx0sbYn3TPXK/HmtmPsR8D3B1OkgK018UcMwWtJaTZGXSTA1H5uNC+Bq9y Wz0pNuOOdfZlvQSFMn3cnBScCoqqRlzgyjgWxWkL3uPcJBPMEA4fUv+GyvYM6k/+ 771RojuxyByhzpDOm6HS2V9Bs4TBVuBmfDXHjqsUajdBkeC+vk/IPvoT7vaaA/my YZQVS+RtFMciU0DPXF+NjhXsGQlzfmN/kI/+4xrnyRHc3wOlt9s= -----END CERTIFICATE-----Generated at Mon Sep 21 10:06:19 2026 by rpki-client