$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft File: B3CEDD0459F32B7E856E38152E88C017667C44C5.mft (raw, json) Hash identifier: 9aCYuPKZd79K6ONCdf6rEqHvdmMm/U9UWmRrr86Q6W0= Subject key identifier: 36:2E:AB:6D:5D:A0:23:66:5F:D2:A1:D9:13:F5:D5:65:6B:79:2D:AA Authority key identifier: B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 Certificate issuer: /CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Certificate serial: 20D59A16C7972472B92482FB7DDEF1D06A99049F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft Manifest number: BC Signing time: Mon 21 Sep 2026 05:18:12 +0000 Manifest this update: Mon 21 Sep 2026 05:13:12 +0000 Manifest next update: Tue 22 Sep 2026 08:42:12 +0000 Files and hashes: 1: B3CEDD0459F32B7E856E38152E88C017667C44C5.crl (hash: C7O58ngIMk3fF156HWn5ixYeCbLO+LS6vOzTwRUFARc=) 2: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: QGY4lzWj4Cp3rLIA8ZEjymdBTTpuyiO2y6++xao+5yg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d5:9a:16:c7:97:24:72:b9:24:82:fb:7d:de:f1:d0:6a:99:04:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Validity Not Before: Sep 21 05:13:12 2026 GMT Not After : Sep 22 08:42:12 2026 GMT Subject: CN=362EAB6D5DA023665FD2A1D913F5D5656B792DAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:c1:0d:c7:3d:d5:51:a6:7c:09:a4:68:bc: c0:bf:0a:12:64:38:eb:d7:ec:d7:b2:b0:e9:0f:8d: b4:b0:90:05:2e:1c:c8:5b:01:c4:ea:cb:ff:9d:ce: 3a:ee:b6:db:51:75:50:7e:c2:dd:10:79:58:08:24: 67:1f:66:90:63:6e:07:d2:51:b6:31:54:f2:8e:09: 62:11:85:a4:4b:28:44:25:96:e9:0a:64:b0:f8:7a: 43:6a:76:91:fa:78:1c:54:86:20:82:21:07:70:45: f0:6b:e9:1e:0a:b9:88:07:95:6a:d9:0b:34:95:c8: 7a:be:85:23:14:18:55:94:b1:17:3b:e8:a3:05:25: ff:7e:ee:97:7b:c6:d8:d6:21:98:2d:ac:35:0a:1e: 36:53:75:f2:13:cb:16:ff:85:d0:b4:ea:00:12:a1: 12:52:eb:fb:ac:a0:9d:b9:9f:6f:0e:ab:a5:9e:42: 4a:c6:be:86:fd:ba:4f:fe:ef:7b:c9:bc:6a:91:5e: 84:25:88:b5:ca:b9:94:b3:49:e5:bf:5b:d1:a5:bf: f1:99:95:8a:1b:0f:e3:6a:d2:03:e6:29:88:42:30: 8b:5b:fa:35:91:aa:33:de:e9:2f:a2:13:ad:99:7a: 58:01:54:6d:e5:f4:8c:b9:20:bd:b2:81:83:c6:40: d6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2E:AB:6D:5D:A0:23:66:5F:D2:A1:D9:13:F5:D5:65:6B:79:2D:AA X509v3 Authority Key Identifier: keyid:B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0f:20:71:84:19:f9:d2:c9:98:08:45:dd:a1:2f:02:1e:91: 97:da:ff:1d:dd:bc:ca:12:d2:86:97:89:c0:69:77:38:a7:8d: 44:c8:a1:85:e2:0f:f8:ed:74:d1:f9:d4:fa:c9:29:df:0a:28: ee:90:19:64:cd:b4:14:12:c0:cb:57:aa:9d:37:5b:94:0b:07: 85:00:52:ab:77:90:cb:98:65:a7:a9:25:81:64:3e:a7:2d:8e: cd:33:5c:fe:d4:62:8a:c3:f5:b8:12:5b:23:dc:70:8b:ed:86: a9:64:91:96:e6:da:7f:21:e5:d6:de:f6:85:9e:72:c8:fe:f1: 39:f1:e0:84:27:11:18:17:ab:8e:46:02:15:5b:bc:d7:9b:e0: 64:af:c1:03:e6:47:c3:bd:58:f9:0d:92:26:82:4e:f9:e0:ca: 02:fc:ea:45:ff:b7:56:33:23:68:16:a4:df:f1:e2:ea:7c:ec: e2:23:e1:dc:2e:28:34:be:9b:e5:60:9b:de:ed:6f:ff:fb:48: 22:3c:35:67:48:d0:83:07:23:3b:5e:20:f9:5c:38:cf:b8:48: 97:70:f2:cb:f9:aa:d4:f1:b4:25:ce:33:3b:84:d2:37:7d:da: ed:43:59:79:d6:8d:ec:f4:fd:d8:57:a0:f8:85:bf:89:a2:bf: 70:45:8f:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINWaFseXJHK5JIL7fd7x0GqZBJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2 NjdDNDRDNTAeFw0yNjA5MjEwNTEzMTJaFw0yNjA5MjIwODQyMTJaMDMxMTAvBgNV BAMTKDM2MkVBQjZENURBMDIzNjY1RkQyQTFEOTEzRjVENTY1NkI3OTJEQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ+8ENxz3VUaZ8CaRovMC/ChJk OOvX7NeysOkPjbSwkAUuHMhbAcTqy/+dzjrutttRdVB+wt0QeVgIJGcfZpBjbgfS UbYxVPKOCWIRhaRLKEQllukKZLD4ekNqdpH6eBxUhiCCIQdwRfBr6R4KuYgHlWrZ CzSVyHq+hSMUGFWUsRc76KMFJf9+7pd7xtjWIZgtrDUKHjZTdfITyxb/hdC06gAS oRJS6/usoJ25n28Oq6WeQkrGvob9uk/+73vJvGqRXoQliLXKuZSzSeW/W9Glv/GZ lYobD+Nq0gPmKYhCMItb+jWRqjPe6S+iE62ZelgBVG3l9Iy5IL2ygYPGQNZPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNi6rbV2gI2Zf0qHZE/XVZWt5LaowHwYDVR0j BBgwFoAUs87dBFnzK36FbjgVLojAF2Z8RMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiMWE3OTAtZGNlZC00NjRhLTg5NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1 OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2NjdDNDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0NFREQwNDU5RjMyQjdFODU2RTM4MTUyRTg4QzAxNzY2N0M0 NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMw MTc2NjdDNDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMPIHGEGfnSyZgIRd2hLwIekZfa/x3dvMoS 0oaXicBpdzinjUTIoYXiD/jtdNH51PrJKd8KKO6QGWTNtBQSwMtXqp03W5QLB4UA Uqt3kMuYZaepJYFkPqctjs0zXP7UYorD9bgSWyPccIvthqlkkZbm2n8h5dbe9oWe csj+8Tnx4IQnERgXq45GAhVbvNeb4GSvwQPmR8O9WPkNkiaCTvngygL86kX/t1Yz I2gWpN/x4up87OIj4dwuKDS+m+Vgm97tb//7SCI8NWdI0IMHIzteIPlcOM+4SJdw 8sv5qtTxtCXOMzuE0jd92u1DWXnWjez0/dhXoPiFv4miv3BFj9g= -----END CERTIFICATE-----Generated at Mon Sep 21 19:48:18 2026 by rpki-client