$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft File: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft (raw, json) Hash identifier: /+GBovkP2Di2lQql4XAD2k8Jx6XtiCrMtuQHS4vMLbU= Subject key identifier: 21:36:29:64:7B:76:F3:09:55:1C:35:A1:5D:87:73:24:59:98:D7:7A Authority key identifier: 3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C Certificate issuer: /CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Certificate serial: 2CE486F9589A94AE08C4F1EAFD3A97033263E59E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft Manifest number: BB Signing time: Sun 20 Sep 2026 18:29:40 +0000 Manifest this update: Sun 20 Sep 2026 18:24:40 +0000 Manifest next update: Mon 21 Sep 2026 22:18:40 +0000 Files and hashes: 1: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl (hash: hbBld4FqO6mbJn72bBYfuQnLK6jA7iCjtWwh2VBsci4=) 2: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: 6kElF6lyRfaEOBJkx0qFZUv24i4o0ISe0pvRjTce7Do=) 3: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 1EALwremo0OuX0UpvCbf2flDFJadlkhYoy6Ddmmbmd0=) 4: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: uDDSqQJALKhSiJ8HMA/VUDQe5THFv4WrWGBluPCxcKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e4:86:f9:58:9a:94:ae:08:c4:f1:ea:fd:3a:97:03:32:63:e5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Validity Not Before: Sep 20 18:24:40 2026 GMT Not After : Sep 21 22:18:40 2026 GMT Subject: CN=213629647B76F309551C35A15D8773245998D77A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:83:5e:b9:8b:6a:56:05:29:f0:b8:fe:40: 7e:8c:a8:9c:83:49:81:46:d2:35:78:12:94:4e:18: f7:c6:db:96:30:c1:1c:91:ff:c8:22:ff:1e:ab:21: 0e:2e:48:fc:f5:38:62:1b:f1:ff:85:8a:7d:f1:fd: 9f:a7:e2:2d:a9:b7:d8:4f:d3:3e:7d:f8:03:de:8b: 00:3a:c6:e5:fe:06:53:41:4f:13:db:49:cb:4b:ab: a1:c3:60:aa:1e:20:59:dc:db:8a:bc:bb:65:b0:c3: 52:58:a6:10:3e:cc:02:b3:e3:0a:a3:08:f4:78:20: f3:3a:92:cd:f4:7a:17:58:cd:e0:d7:99:85:a7:c3: 8a:cf:f5:2d:c0:5a:33:cb:22:14:9e:cb:bf:41:0d: a8:90:af:0f:8e:0e:f1:b0:a2:56:0c:0a:76:d3:f1: 46:b7:85:f2:d9:89:d0:fb:72:91:7a:fb:5e:d4:50: f3:86:8c:93:46:ba:0b:69:42:41:c2:29:46:32:56: 05:6b:0c:ad:39:57:ff:d2:99:56:bb:89:1b:64:15: 26:15:8f:fe:8c:b2:eb:eb:52:7c:f6:28:b4:7c:65: 2a:c3:0b:1e:c4:46:fa:05:d9:64:bd:37:fb:49:9b: b2:c6:18:28:07:40:2c:74:4b:44:44:97:71:5a:80: c6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:36:29:64:7B:76:F3:09:55:1C:35:A1:5D:87:73:24:59:98:D7:7A X509v3 Authority Key Identifier: keyid:3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0a:f4:0f:3a:61:47:37:4f:f0:76:4d:95:6a:43:08:c8:b5: 2a:fe:a7:83:4d:9f:ad:c0:73:8a:0e:87:c8:05:d0:55:6d:e1: 97:da:38:72:e2:32:6b:03:04:b3:ee:d0:05:4e:ee:10:b9:f0: 09:cc:ca:84:5e:d4:c0:49:c7:eb:04:1b:a6:9b:42:31:ff:47: 1d:f7:82:67:e5:05:7b:63:1d:3e:b4:88:d9:9b:bc:2e:9f:82: 15:d9:84:d6:28:14:47:01:d0:04:03:00:36:5e:09:13:88:65: 05:8e:f2:5d:e1:ef:86:0f:42:a7:62:34:03:eb:ef:f0:aa:87: b9:ee:25:73:04:8e:03:3a:2e:b9:d1:3e:96:88:be:d5:a4:78: 19:3b:15:aa:ce:10:b9:2d:24:69:48:b4:13:d0:c4:fb:c0:76: 5a:88:6f:33:d9:e9:55:7b:0d:e0:fd:8b:d9:51:f2:ff:f2:a1: c7:29:b4:a6:90:a6:36:a1:b4:31:18:4d:93:57:70:a2:7e:54: b0:4f:5a:bc:04:27:e1:a0:87:b6:80:e9:96:2f:a7:87:e3:79: 43:97:7c:24:99:e5:ca:73:bc:b4:43:6d:44:c0:72:e1:ae:36: ee:66:46:4d:86:ec:d6:a4:1c:10:df:2a:ae:03:43:95:68:df: ff:3b:33:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOSG+VialK4IxPHq/TqXAzJj5Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdG OUE2MjUyQzAeFw0yNjA5MjAxODI0NDBaFw0yNjA5MjEyMjE4NDBaMDMxMTAvBgNV BAMTKDIxMzYyOTY0N0I3NkYzMDk1NTFDMzVBMTVEODc3MzI0NTk5OEQ3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCza4NeuYtqVgUp8Lj+QH6MqJyD SYFG0jV4EpROGPfG25YwwRyR/8gi/x6rIQ4uSPz1OGIb8f+Fin3x/Z+n4i2pt9hP 0z59+APeiwA6xuX+BlNBTxPbSctLq6HDYKoeIFnc24q8u2Www1JYphA+zAKz4wqj CPR4IPM6ks30ehdYzeDXmYWnw4rP9S3AWjPLIhSey79BDaiQrw+ODvGwolYMCnbT 8Ua3hfLZidD7cpF6+17UUPOGjJNGugtpQkHCKUYyVgVrDK05V//SmVa7iRtkFSYV j/6MsuvrUnz2KLR8ZSrDCx7ERvoF2WS9N/tJm7LGGCgHQCx0S0REl3FagMbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUITYpZHt28wlVHDWhXYdzJFmY13owHwYDVR0j BBgwFoAUPfTEomplFO8zfiTTrvIo9/mmJSwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JlZDgzYmQtODk4Ni00NDI5LWEwMTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2 QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdGOUE2MjUyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREY0QzRBMjZBNjUxNEVGMzM3RTI0RDNBRUYyMjhGN0Y5QTYy NTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4 RjdGOUE2MjUyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwK9A86YUc3T/B2TZVqQwjItSr+p4NNn63A c4oOh8gF0FVt4ZfaOHLiMmsDBLPu0AVO7hC58AnMyoRe1MBJx+sEG6abQjH/Rx33 gmflBXtjHT60iNmbvC6fghXZhNYoFEcB0AQDADZeCROIZQWO8l3h74YPQqdiNAPr 7/Cqh7nuJXMEjgM6LrnRPpaIvtWkeBk7FarOELktJGlItBPQxPvAdlqIbzPZ6VV7 DeD9i9lR8v/yoccptKaQpjahtDEYTZNXcKJ+VLBPWrwEJ+Ggh7aA6ZYvp4fjeUOX fCSZ5cpzvLRDbUTAcuGuNu5mRk2G7NakHBDfKq4DQ5Vo3/87M9U= -----END CERTIFICATE-----Generated at Mon Sep 21 17:11:04 2026 by rpki-client