$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3013F863B72465F23DBE01F2D482B7ACD5CB2102.mft File: 3013F863B72465F23DBE01F2D482B7ACD5CB2102.mft (raw, json) Hash identifier: vUtGJNIp+6wfFoK92WmbWYRs7x022gL+uNL8/eqvGLY= Subject key identifier: 5E:69:72:16:9F:E6:A8:83:5E:6E:AA:77:DB:44:6E:66:AE:D3:EB:DD Authority key identifier: 30:13:F8:63:B7:24:65:F2:3D:BE:01:F2:D4:82:B7:AC:D5:CB:21:02 Certificate issuer: /CN=3013F863B72465F23DBE01F2D482B7ACD5CB2102 Certificate serial: 0B4C06A97F5591D05AD9ED8AFA3B30E894023B5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3013F863B72465F23DBE01F2D482B7ACD5CB2102.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3013F863B72465F23DBE01F2D482B7ACD5CB2102.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 23:25:01 +0000 Manifest this update: Wed 23 Sep 2026 23:20:01 +0000 Manifest next update: Thu 24 Sep 2026 23:32:01 +0000 Files and hashes: 1: 3130332e38332e38342e302f32342d3234203d3e20313530323533.roa (hash: 96xn4Z4fHNhe//Bx3elNei7tFB+vdRhBVoho694JstE=) 2: 3013F863B72465F23DBE01F2D482B7ACD5CB2102.crl (hash: j/1G14eXyEIdDDhN8aPHa+8vpt5q5rn3f5lqYZuJuR8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3013F863B72465F23DBE01F2D482B7ACD5CB2102.crl rsync://rpki-rsync.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3013F863B72465F23DBE01F2D482B7ACD5CB2102.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3013F863B72465F23DBE01F2D482B7ACD5CB2102.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4c:06:a9:7f:55:91:d0:5a:d9:ed:8a:fa:3b:30:e8:94:02:3b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3013F863B72465F23DBE01F2D482B7ACD5CB2102 Validity Not Before: Sep 23 23:20:01 2026 GMT Not After : Sep 24 23:32:01 2026 GMT Subject: CN=5E6972169FE6A8835E6EAA77DB446E66AED3EBDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:2d:6d:d4:50:2c:8f:49:7f:a9:7c:66:2e: b7:eb:de:79:d2:70:73:8d:f0:13:24:3f:e7:37:0f: dd:76:3c:84:8a:ec:da:54:59:08:53:fb:8c:e8:5a: 49:b8:07:be:7b:29:1d:72:6b:ff:23:59:e0:b6:8d: 87:17:2b:66:64:68:bc:6a:10:39:03:ff:4d:1c:31: 90:99:83:98:95:19:fb:46:81:02:2e:bd:7f:fd:0f: 67:17:f1:72:2b:f6:99:f4:46:55:df:04:a3:47:0b: 41:6b:9e:38:35:38:bd:86:b3:95:f4:f7:ed:da:84: f1:71:71:bc:5e:ac:96:7c:d9:4a:17:0d:95:2a:9d: cc:7d:4d:3b:01:9b:88:99:90:8b:ba:a0:db:ff:6f: 1b:21:61:c0:e5:ec:90:10:45:54:fc:84:8a:76:a2: 57:5d:2a:bb:6a:23:f7:5a:30:59:b6:5c:70:75:ad: fc:72:82:f3:4d:20:e6:d2:8f:95:f8:00:45:9e:eb: df:59:3a:d2:ad:a9:58:7d:5f:a7:ca:da:ae:9c:5a: 38:3d:17:ee:48:e8:2a:ca:e1:28:c9:df:be:77:3a: dc:a8:ff:58:8b:ef:57:25:c8:5d:a2:b3:cc:34:b4: de:fd:5c:f3:db:e5:cc:e1:05:11:8c:60:71:15:33: bb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:69:72:16:9F:E6:A8:83:5E:6E:AA:77:DB:44:6E:66:AE:D3:EB:DD X509v3 Authority Key Identifier: keyid:30:13:F8:63:B7:24:65:F2:3D:BE:01:F2:D4:82:B7:AC:D5:CB:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3013F863B72465F23DBE01F2D482B7ACD5CB2102.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3013F863B72465F23DBE01F2D482B7ACD5CB2102.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/3013F863B72465F23DBE01F2D482B7ACD5CB2102.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:f5:22:e1:04:c9:1f:1f:19:c5:b7:13:68:bb:c3:9b:d1:96: 07:db:3f:ac:ce:ca:72:96:c8:d5:8b:3d:ac:44:5f:93:f9:b4: b8:a5:ab:e2:49:ad:af:20:42:7d:78:1d:31:0d:ea:73:02:d9: 00:1e:6e:15:68:47:de:f1:7b:14:71:c7:8b:81:6d:55:03:21: 1b:c3:9f:cd:61:30:b1:4e:bb:11:8f:55:d6:f6:f3:09:06:e3: 47:de:d5:f6:05:45:dc:09:41:2e:de:c4:20:bd:a8:9e:c9:5b: 87:5c:cf:c9:7f:f6:08:c2:bc:22:fe:0e:d7:4d:c4:c8:44:34: 04:ff:f4:04:e8:61:54:5f:a5:1f:b7:cb:e8:9d:91:62:e8:d0: 47:09:c6:eb:0b:55:b1:49:a0:87:c4:93:2c:75:db:62:c8:50: 4c:96:1b:02:17:47:0e:7c:37:5a:ee:eb:fd:0a:bb:ba:42:d9: 02:7e:83:13:b7:b6:cc:22:28:ab:be:2a:e8:0c:9f:39:40:c0: 9b:f6:43:d8:3d:5f:9c:0b:bf:74:c4:46:c8:7d:1f:73:5b:e7: e5:68:ee:f5:3e:2a:66:97:bf:14:83:2b:61:ac:db:35:51:58: c7:98:9e:93:6f:1d:ee:c0:b4:f3:08:01:f1:39:90:53:7f:66: 10:0a:e4:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC0wGqX9VkdBa2e2K+jsw6JQCO1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxM0Y4NjNCNzI0NjVGMjNEQkUwMUYyRDQ4MkI3QUNE NUNCMjEwMjAeFw0yNjA5MjMyMzIwMDFaFw0yNjA5MjQyMzMyMDFaMDMxMTAvBgNV BAMTKDVFNjk3MjE2OUZFNkE4ODM1RTZFQUE3N0RCNDQ2RTY2QUVEM0VCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ki1t1FAsj0l/qXxmLrfr3nnS cHON8BMkP+c3D912PISK7NpUWQhT+4zoWkm4B757KR1ya/8jWeC2jYcXK2ZkaLxq EDkD/00cMZCZg5iVGftGgQIuvX/9D2cX8XIr9pn0RlXfBKNHC0Frnjg1OL2Gs5X0 9+3ahPFxcbxerJZ82UoXDZUqncx9TTsBm4iZkIu6oNv/bxshYcDl7JAQRVT8hIp2 olddKrtqI/daMFm2XHB1rfxygvNNIObSj5X4AEWe699ZOtKtqVh9X6fK2q6cWjg9 F+5I6CrK4SjJ3753Otyo/1iL71clyF2is8w0tN79XPPb5czhBRGMYHEVM7vBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXmlyFp/mqINebqp320RuZq7T690wHwYDVR0j BBgwFoAUMBP4Y7ckZfI9vgHy1IK3rNXLIQIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZlNDBhOTgtOTNlZi00YWY4LWE0MzYtNDY5NzQwMTU0NzgyLzAvMzAxM0Y4NjNC NzI0NjVGMjNEQkUwMUYyRDQ4MkI3QUNENUNCMjEwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMDEzRjg2M0I3MjQ2NUYyM0RCRTAxRjJENDgyQjdBQ0Q1Q0Iy MTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZlNDBhOTgtOTNlZi00YWY4LWE0 MzYtNDY5NzQwMTU0NzgyLzAvMzAxM0Y4NjNCNzI0NjVGMjNEQkUwMUYyRDQ4MkI3 QUNENUNCMjEwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMH1IuEEyR8fGcW3E2i7w5vRlgfbP6zOynKW yNWLPaxEX5P5tLilq+JJra8gQn14HTEN6nMC2QAebhVoR97xexRxx4uBbVUDIRvD n81hMLFOuxGPVdb28wkG40fe1fYFRdwJQS7exCC9qJ7JW4dcz8l/9gjCvCL+DtdN xMhENAT/9AToYVRfpR+3y+idkWLo0EcJxusLVbFJoIfEkyx122LIUEyWGwIXRw58 N1ru6/0Ku7pC2QJ+gxO3tswiKKu+KugMnzlAwJv2Q9g9X5wLv3TERsh9H3Nb5+Vo 7vU+KmaXvxSDK2Gs2zVRWMeYnpNvHe7AtPMIAfE5kFN/ZhAK5J8= -----END CERTIFICATE-----Generated at Thu Sep 24 10:07:24 2026 by rpki-client