$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft File: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft (raw, json) Hash identifier: Xm6adpqL1dJN1RBjQ1oRJYj9BzVLXqiwgFKJ10oCyGw= Subject key identifier: 74:87:9E:A0:30:E2:BC:54:F7:2F:6D:2F:CB:3C:19:CE:0C:99:40:86 Authority key identifier: 3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 Certificate issuer: /CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Certificate serial: 0F70F4392C2296F0449181F34BFE51480F14C1CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft Manifest number: BE Signing time: Mon 21 Sep 2026 10:44:46 +0000 Manifest this update: Mon 21 Sep 2026 10:39:46 +0000 Manifest next update: Tue 22 Sep 2026 11:26:46 +0000 Files and hashes: 1: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl (hash: jPnRUIEhY8cJbqbEzenes+qPU/WwhgpGe6pc+QCGPXE=) 2: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: 5BxZJ6/9J6eBwezWDHQK7gf8/iHFgfigBSsqY27prSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 11:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:70:f4:39:2c:22:96:f0:44:91:81:f3:4b:fe:51:48:0f:14:c1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Validity Not Before: Sep 21 10:39:46 2026 GMT Not After : Sep 22 11:26:46 2026 GMT Subject: CN=74879EA030E2BC54F72F6D2FCB3C19CE0C994086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:40:0a:fd:f9:33:c9:7b:90:2d:7e:58:11:45: 1d:09:54:d2:98:5c:0a:f9:04:4a:28:61:28:46:29: 1e:d0:74:23:0d:4d:3a:7a:c4:64:e3:d7:88:c8:d6: d9:a1:a0:32:e4:ca:05:61:b4:8b:32:01:74:09:1b: 28:26:2e:c3:b3:3c:e3:e4:cf:eb:b6:0d:66:e3:3e: 0e:87:4c:fd:3f:7c:cf:a4:67:cd:48:c6:21:0c:ee: 7c:01:f7:e0:37:80:fa:9a:5f:45:f8:65:cc:96:55: 18:10:7b:bb:99:91:38:00:4a:ce:6a:da:d6:50:2f: 25:52:51:40:e5:82:64:a8:40:18:18:ac:dd:df:c3: 35:fb:78:4f:1d:b5:8a:e8:1b:2c:f2:63:c1:9c:b3: d4:a4:a9:04:f8:bb:51:0f:ce:f3:72:32:55:ee:c9: 4f:05:8d:84:84:14:f9:a3:4c:54:1d:a2:9d:9c:c5: 6d:0c:5e:83:ec:c1:f1:0a:02:65:1f:75:01:db:9e: 4f:3c:86:1b:2e:34:99:46:85:02:a8:53:59:ac:c5: fe:28:90:b2:f9:06:ea:0f:74:80:b6:2f:55:0f:3d: 85:aa:c0:75:3f:86:78:61:08:4d:45:7e:2a:c0:ea: fc:9c:87:8d:20:8b:cd:a1:88:5c:a9:95:02:8e:3b: f5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:87:9E:A0:30:E2:BC:54:F7:2F:6D:2F:CB:3C:19:CE:0C:99:40:86 X509v3 Authority Key Identifier: keyid:3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b1:da:7c:8c:29:c5:95:6e:d0:c5:81:2b:8b:df:68:05:0e: 5c:68:88:68:71:b1:06:a7:c0:bf:3f:63:c7:d8:8e:ad:89:c1: 36:88:cf:47:90:a3:2b:ad:15:1b:f0:27:34:e4:61:1e:25:1f: c1:55:45:0b:e3:33:bb:24:e5:46:f9:d7:8d:6b:de:9b:10:3b: 03:8c:e2:57:eb:08:61:4c:03:81:dd:ac:c6:63:57:cf:df:27: 9e:49:8e:82:8d:ff:42:f4:11:f0:3d:b3:30:e8:8d:cd:4a:19: 2f:42:41:a2:50:10:6b:04:f9:a6:5b:e4:77:46:1e:9b:7f:a3: eb:f5:72:a7:57:2d:59:b5:f2:c3:3c:55:a4:a6:bc:9d:d5:c8: 2c:51:56:2d:bf:61:49:5f:05:f1:2c:ec:42:4f:49:99:e4:ba: 1b:9a:3d:8d:6f:f0:5e:26:2e:dc:4e:fd:7b:35:3c:cb:6a:27: ec:ff:9f:cb:05:f6:d3:bf:67:dd:16:35:65:76:f0:56:5e:2c: e0:db:1e:1a:f0:4f:48:76:ca:0e:a8:22:41:2c:48:f2:37:38: 54:23:19:a1:8e:75:cd:67:df:32:b4:75:60:a5:07:7d:39:5d: ae:20:9e:84:ff:c7:42:e0:0d:37:07:c1:29:82:a7:7d:49:3a: 1c:b8:d8:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3D0OSwilvBEkYHzS/5RSA8Uwc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3 MjgwNUVDMDAeFw0yNjA5MjExMDM5NDZaFw0yNjA5MjIxMTI2NDZaMDMxMTAvBgNV BAMTKDc0ODc5RUEwMzBFMkJDNTRGNzJGNkQyRkNCM0MxOUNFMEM5OTQwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgQAr9+TPJe5AtflgRRR0JVNKY XAr5BEooYShGKR7QdCMNTTp6xGTj14jI1tmhoDLkygVhtIsyAXQJGygmLsOzPOPk z+u2DWbjPg6HTP0/fM+kZ81IxiEM7nwB9+A3gPqaX0X4ZcyWVRgQe7uZkTgASs5q 2tZQLyVSUUDlgmSoQBgYrN3fwzX7eE8dtYroGyzyY8Gcs9SkqQT4u1EPzvNyMlXu yU8FjYSEFPmjTFQdop2cxW0MXoPswfEKAmUfdQHbnk88hhsuNJlGhQKoU1msxf4o kLL5BuoPdIC2L1UPPYWqwHU/hnhhCE1FfirA6vych40gi82hiFyplQKOO/V5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdIeeoDDivFT3L20vyzwZzgyZQIYwHwYDVR0j BBgwFoAUPNGso9b/zTvYicYkXfAXAXKAXsAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNjMTk3ZjgtNGUyZS00NmQ5LWJlMmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNE NkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3MjgwNUVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0QxQUNBM0Q2RkZDRDNCRDg4OUM2MjQ1REYwMTcwMTcyODA1 RUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3 MDE3MjgwNUVDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGux2nyMKcWVbtDFgSuL32gFDlxoiGhxsQan wL8/Y8fYjq2JwTaIz0eQoyutFRvwJzTkYR4lH8FVRQvjM7sk5Ub5141r3psQOwOM 4lfrCGFMA4HdrMZjV8/fJ55JjoKN/0L0EfA9szDojc1KGS9CQaJQEGsE+aZb5HdG Hpt/o+v1cqdXLVm18sM8VaSmvJ3VyCxRVi2/YUlfBfEs7EJPSZnkuhuaPY1v8F4m LtxO/Xs1PMtqJ+z/n8sF9tO/Z90WNWV28FZeLODbHhrwT0h2yg6oIkEsSPI3OFQj GaGOdc1n3zK0dWClB305Xa4gnoT/x0LgDTcHwSmCp31JOhy42F0= -----END CERTIFICATE-----Generated at Tue Sep 22 02:07:36 2026 by rpki-client