$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft File: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft (raw, json) Hash identifier: oQDTPY2NohfK3joqRwDBpikps+Gt3boXY/XsLJgNyDI= Subject key identifier: 99:25:F8:27:C5:20:7C:4C:C3:F2:12:08:A1:47:1B:1A:AE:6A:B3:C3 Authority key identifier: 3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 Certificate issuer: /CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Certificate serial: 1318B4504A9A93429E9C1CF797C0914DBD91DBB4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 16:57:29 +0000 Manifest this update: Tue 10 Nov 2026 16:52:29 +0000 Manifest next update: Wed 11 Nov 2026 18:56:29 +0000 Files and hashes: 1: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl (hash: 2EpTzUZsD4BmBYf8mo7OHg+F4jy8UQLSs4C6sE0ptjY=) 2: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: 5BxZJ6/9J6eBwezWDHQK7gf8/iHFgfigBSsqY27prSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:18:b4:50:4a:9a:93:42:9e:9c:1c:f7:97:c0:91:4d:bd:91:db:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Validity Not Before: Nov 10 16:52:29 2026 GMT Not After : Nov 11 18:56:29 2026 GMT Subject: CN=9925F827C5207C4CC3F21208A1471B1AAE6AB3C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:75:e2:09:33:45:5c:a9:a6:83:2f:1c:d2:90: c1:69:67:d8:8a:f0:49:e8:1f:6d:44:dc:6a:21:aa: 9f:ef:55:ac:42:33:b3:d8:b3:d0:5b:c9:74:96:90: 6d:9b:97:63:fd:ec:d7:4d:e2:75:5d:ec:4f:10:be: 8b:22:95:87:f0:44:12:64:ec:8d:38:68:68:f0:88: 73:54:48:a6:c4:4f:36:d3:b6:be:b5:16:96:93:8d: f4:5c:03:ad:cc:f7:bd:f0:89:67:5e:b6:71:54:22: 33:fb:a9:03:78:ac:a1:b0:9e:97:2b:ee:45:52:b6: db:44:ba:4b:a0:58:e0:f0:d0:d6:dc:e1:8d:fa:fb: 58:1b:4b:6f:1b:93:a6:f6:ae:d1:45:11:0b:23:be: 6e:d9:36:0f:76:4a:b7:fd:29:eb:1d:10:0f:bb:00: 4f:ab:b3:8a:26:6a:85:e4:5d:30:69:86:7b:84:10: e3:09:3a:5b:9c:73:21:33:76:6f:fd:1f:7b:19:50: d6:ff:f0:59:2c:79:8c:89:2b:71:d7:1c:e6:e8:a6: bb:ba:97:35:0c:a6:a3:cc:78:6e:74:56:48:fa:e9: 65:bc:e0:36:46:58:fb:1a:67:34:35:ad:10:60:41: 7e:32:15:28:f4:a0:f3:87:42:3b:7e:0f:36:f9:99: 94:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:25:F8:27:C5:20:7C:4C:C3:F2:12:08:A1:47:1B:1A:AE:6A:B3:C3 X509v3 Authority Key Identifier: keyid:3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:91:e6:e0:9a:4d:3b:94:f4:48:6b:a7:e4:50:5a:04:1d:cd: eb:cf:f9:59:6b:e0:0e:82:68:bb:e4:21:27:ab:2d:af:13:eb: 3a:d8:7c:3a:17:78:8f:51:03:9b:ab:1c:93:bf:c0:db:65:55: b6:47:49:07:7b:f0:f2:41:d6:b0:2b:98:c9:33:54:8c:df:1d: 2e:6f:c3:19:cc:43:71:2f:a1:36:1f:6e:32:9c:38:9a:1e:ae: 83:d5:95:b5:b2:26:d8:b8:bc:9b:6c:7c:6f:73:f7:25:b5:c0: 7f:39:b8:66:e6:7c:db:81:a0:ba:f0:5f:4c:fb:1e:1f:d2:66: ff:1d:ec:b0:06:7a:cc:6b:31:a5:d1:3a:85:96:31:0b:2d:fd: ed:9c:77:85:43:b2:31:73:78:9c:6f:fc:a6:78:76:6d:54:be: 31:12:8c:1e:43:0b:92:f8:1d:16:9a:d1:eb:73:de:53:11:07: 9e:76:d9:6b:12:91:e8:ea:9c:3d:ac:b9:d8:44:02:f0:d1:13: 14:bd:da:b0:ad:bf:2a:4e:11:b7:f4:4b:97:4a:15:d2:ef:c4: 34:37:36:1d:b0:26:10:cc:4e:bd:b3:1c:ce:34:6d:4a:f7:38: 61:f2:dd:c3:fb:8d:f3:ec:c1:1d:3a:92:90:46:92:a6:07:cc: 2c:5f:71:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUExi0UEqak0KenBz3l8CRTb2R27QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3 MjgwNUVDMDAeFw0yNjExMTAxNjUyMjlaFw0yNjExMTExODU2MjlaMDMxMTAvBgNV BAMTKDk5MjVGODI3QzUyMDdDNENDM0YyMTIwOEExNDcxQjFBQUU2QUIzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFdeIJM0VcqaaDLxzSkMFpZ9iK 8EnoH21E3Gohqp/vVaxCM7PYs9BbyXSWkG2bl2P97NdN4nVd7E8QvosilYfwRBJk 7I04aGjwiHNUSKbETzbTtr61FpaTjfRcA63M973wiWdetnFUIjP7qQN4rKGwnpcr 7kVStttEukugWODw0Nbc4Y36+1gbS28bk6b2rtFFEQsjvm7ZNg92Srf9KesdEA+7 AE+rs4omaoXkXTBphnuEEOMJOluccyEzdm/9H3sZUNb/8FkseYyJK3HXHObopru6 lzUMpqPMeG50Vkj66WW84DZGWPsaZzQ1rRBgQX4yFSj0oPOHQjt+Dzb5mZSpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmSX4J8UgfEzD8hIIoUcbGq5qs8MwHwYDVR0j BBgwFoAUPNGso9b/zTvYicYkXfAXAXKAXsAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNjMTk3ZjgtNGUyZS00NmQ5LWJlMmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNE NkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3MjgwNUVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0QxQUNBM0Q2RkZDRDNCRDg4OUM2MjQ1REYwMTcwMTcyODA1 RUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3 MDE3MjgwNUVDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKR5uCaTTuU9Ehrp+RQWgQdzevP+Vlr4A6C aLvkISerLa8T6zrYfDoXeI9RA5urHJO/wNtlVbZHSQd78PJB1rArmMkzVIzfHS5v wxnMQ3EvoTYfbjKcOJoeroPVlbWyJti4vJtsfG9z9yW1wH85uGbmfNuBoLrwX0z7 Hh/SZv8d7LAGesxrMaXROoWWMQst/e2cd4VDsjFzeJxv/KZ4dm1UvjESjB5DC5L4 HRaa0etz3lMRB5522WsSkejqnD2sudhEAvDRExS92rCtvypOEbf0S5dKFdLvxDQ3 Nh2wJhDMTr2zHM40bUr3OGHy3cP7jfPswR06kpBGkqYHzCxfcRg= -----END CERTIFICATE-----Generated at Tue Nov 10 20:46:26 2026 by rpki-client