$ rpki-client -vvvf rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft File: 3FCCB124CE6330827269179656BC9A7F04BCACF3.mft (raw, json) Hash identifier: euXWE2M8xBEGUCGqufbeNzO7Oa9FvjdbhWzDcLeVvtw= Subject key identifier: C2:0C:61:46:A4:56:EC:EE:48:F1:61:28:87:81:C8:1F:AF:B1:CE:83 Authority key identifier: 3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 Certificate issuer: /CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Certificate serial: 7D0428186D3B128909C3A3C377CF529DF174AF9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 17:07:08 +0000 Manifest this update: Mon 09 Nov 2026 17:02:08 +0000 Manifest next update: Tue 10 Nov 2026 20:12:08 +0000 Files and hashes: 1: 3FCCB124CE6330827269179656BC9A7F04BCACF3.crl (hash: FzYm6bhX/CTvokvrm88IszNvujc0cxbJaYVEc4rucg8=) 2: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: AQenx1dt+kU1dllLrJ4J77w2s2czEkS4jP/ajMi229M=) 3: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: vpj2Cz8QvcSUHt1I4ZpBnWfoJ+ZMnw91/FihIVwqKaA=) 4: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: SSEqRHV7zoEBGj203TATYpoeDOC/rqoDeoQ8cFsGA28=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:04:28:18:6d:3b:12:89:09:c3:a3:c3:77:cf:52:9d:f1:74:af:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Validity Not Before: Nov 9 17:02:08 2026 GMT Not After : Nov 10 20:12:08 2026 GMT Subject: CN=C20C6146A456ECEE48F161288781C81FAFB1CE83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b3:0b:3f:2e:6d:1c:e9:49:dc:50:bb:f2:5a: a8:6c:88:a9:0b:b3:23:73:4c:02:f8:6d:1a:a8:fa: f3:dd:db:f8:cc:ec:15:9b:2f:c1:88:e1:a3:9c:44: bd:3d:43:db:d6:0c:6e:f4:30:c8:d5:ac:ef:f8:fc: bb:86:74:44:af:45:05:f2:fe:8f:b2:2a:0d:91:5f: 8a:3a:fb:ad:ee:39:03:a5:47:8b:27:2a:57:04:39: a1:8e:94:3b:8d:28:c6:69:d8:16:37:51:1a:3b:49: 63:f8:62:fb:64:ad:5f:23:6e:00:23:62:7d:b1:30: e7:d4:df:b8:91:22:f7:59:69:7f:ea:0e:5b:0b:aa: e9:1b:e4:90:8d:bf:64:e5:65:fa:42:9c:0f:68:3b: 4b:00:93:6a:52:d4:aa:a5:ae:0c:0b:0e:d7:7e:fa: ec:44:5e:d1:e5:0e:59:45:1d:0a:f7:9c:45:2e:fc: ca:03:8e:b4:1b:0a:a1:e3:ca:4d:9d:52:2d:3e:41: 38:a8:a6:3f:b7:61:07:26:0c:4a:f6:60:c9:df:3e: b3:b5:94:ff:66:2a:34:21:68:7a:19:8e:1d:5c:ba: f8:bc:4f:97:47:eb:6f:5c:d1:77:a9:57:0d:c6:30: 9a:1c:50:fc:20:a1:bb:c8:88:0a:e8:34:17:4b:0b: 16:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0C:61:46:A4:56:EC:EE:48:F1:61:28:87:81:C8:1F:AF:B1:CE:83 X509v3 Authority Key Identifier: keyid:3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f9:cd:c2:87:34:8a:5f:7a:f9:21:ae:16:7c:86:31:de:82: d9:6b:c7:f9:2a:f1:bb:d3:34:56:d8:bd:01:42:f5:b5:d8:8e: 16:c5:b5:f1:fd:83:03:8e:68:17:4b:2f:cf:12:78:3d:75:33: 49:03:73:02:6c:b6:07:3f:4b:c6:f4:4a:85:f2:60:8c:fa:0f: a2:13:2a:30:07:a9:5a:ed:74:d2:b5:98:41:b4:34:bb:58:f4: 24:d0:8a:2b:a2:02:a1:80:16:8e:41:1a:26:44:85:3a:f4:54: 31:63:cb:06:12:ce:68:f8:7d:5f:2a:c8:23:5a:9a:65:89:67: 80:c4:fb:5f:5d:ed:c6:94:7c:d1:13:d0:7e:bc:14:8c:ac:c5: 2a:a9:f1:0b:a1:cb:16:39:31:3e:03:d5:21:f3:26:95:1c:1b: 50:ef:31:83:ad:cd:d7:d2:6d:28:dd:1f:ef:a3:11:65:de:b4: 0a:ab:2f:f3:46:d9:3d:03:0e:f5:ff:ec:84:76:e4:d2:95:34: 45:cc:f5:54:d1:99:af:a8:12:9c:89:7b:20:99:ac:2c:ad:71: 78:8d:28:89:fb:d4:05:a1:a8:2d:8d:27:d1:fa:9e:bb:1d:d6: c5:51:ac:f4:63:99:a8:68:d4:c1:54:86:d4:ac:4b:da:cc:f2: e2:34:07:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQQoGG07EokJw6PDd89SnfF0r5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlBN0Yw NEJDQUNGMzAeFw0yNjExMDkxNzAyMDhaFw0yNjExMTAyMDEyMDhaMDMxMTAvBgNV BAMTKEMyMEM2MTQ2QTQ1NkVDRUU0OEYxNjEyODg3ODFDODFGQUZCMUNFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNsws/Lm0c6UncULvyWqhsiKkL syNzTAL4bRqo+vPd2/jM7BWbL8GI4aOcRL09Q9vWDG70MMjVrO/4/LuGdESvRQXy /o+yKg2RX4o6+63uOQOlR4snKlcEOaGOlDuNKMZp2BY3URo7SWP4YvtkrV8jbgAj Yn2xMOfU37iRIvdZaX/qDlsLqukb5JCNv2TlZfpCnA9oO0sAk2pS1KqlrgwLDtd+ +uxEXtHlDllFHQr3nEUu/MoDjrQbCqHjyk2dUi0+QTiopj+3YQcmDEr2YMnfPrO1 lP9mKjQhaHoZjh1cuvi8T5dH629c0XepVw3GMJocUPwgobvIiAroNBdLCxbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwgxhRqRW7O5I8WEoh4HIH6+xzoMwHwYDVR0j BBgwFoAUP8yxJM5jMIJyaReWVryafwS8rPMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMzZjYwZTYtYWZkZC00ZTEwLTgzYjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRD RTYzMzA4MjcyNjkxNzk2NTZCQzlBN0YwNEJDQUNGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNDQjEyNENFNjMzMDgyNzI2OTE3OTY1NkJDOUE3RjA0QkNB Q0YzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlB N0YwNEJDQUNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGr5zcKHNIpfevkhrhZ8hjHegtlrx/kq8bvT NFbYvQFC9bXYjhbFtfH9gwOOaBdLL88SeD11M0kDcwJstgc/S8b0SoXyYIz6D6IT KjAHqVrtdNK1mEG0NLtY9CTQiiuiAqGAFo5BGiZEhTr0VDFjywYSzmj4fV8qyCNa mmWJZ4DE+19d7caUfNET0H68FIysxSqp8QuhyxY5MT4D1SHzJpUcG1DvMYOtzdfS bSjdH++jEWXetAqrL/NG2T0DDvX/7IR25NKVNEXM9VTRma+oEpyJeyCZrCytcXiN KIn71AWhqC2NJ9H6nrsd1sVRrPRjmaho1MFUhtSsS9rM8uI0B+I= -----END CERTIFICATE-----Generated at Mon Nov 9 21:27:28 2026 by rpki-client