$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft File: 3B53322385FC84075D5F59542B2C6639361DE40C.mft (raw, json) Hash identifier: P6TbZ1YLsoCU/IJd5M20oNJdLEu7P7SyAja3BEI0d64= Subject key identifier: 28:CF:2D:F9:23:E9:DB:C7:8C:00:4E:09:C1:2C:DE:7E:C7:EC:F6:6D Authority key identifier: 3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C Certificate issuer: /CN=3B53322385FC84075D5F59542B2C6639361DE40C Certificate serial: 57A5C7AD47A2262A2C3F36BAADBAA3C1ED63D0C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 00:57:22 +0000 Manifest this update: Wed 23 Sep 2026 00:52:22 +0000 Manifest next update: Thu 24 Sep 2026 01:44:22 +0000 Files and hashes: 1: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: zCD5tPWCUNUK6oOFsXZp8GFckmeJahFdBXRBLxy8mgQ=) 2: 3B53322385FC84075D5F59542B2C6639361DE40C.crl (hash: S2w2qo1zdRZrpqS4j/VnhpFTVYuyx3Z3+DFRb5dof9U=) 3: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: edgXYAVoofbMfNNTYL6wJjTWLg+lJA34PwxUNFokvFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 01:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a5:c7:ad:47:a2:26:2a:2c:3f:36:ba:ad:ba:a3:c1:ed:63:d0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B53322385FC84075D5F59542B2C6639361DE40C Validity Not Before: Sep 23 00:52:22 2026 GMT Not After : Sep 24 01:44:22 2026 GMT Subject: CN=28CF2DF923E9DBC78C004E09C12CDE7EC7ECF66D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:c9:da:e6:91:2c:49:e8:a8:3f:c3:86:59: ca:9f:f7:e7:4d:07:5f:1d:ba:4b:b8:57:b3:07:27: 2e:eb:0a:7b:37:b8:6d:5a:c4:f7:58:84:9a:58:e0: 94:67:9d:31:45:8b:0e:57:1b:e1:89:6b:65:01:65: 44:75:ef:3f:2c:2e:22:90:fd:27:d2:eb:3a:32:eb: 36:65:20:68:29:0b:f7:20:8b:52:e2:24:5f:8a:b3: 8c:62:b3:a6:7b:7e:4e:ab:51:37:13:9d:4c:9e:e1: e7:6b:4c:4b:43:86:04:20:b5:01:0f:cc:cf:a0:72: 27:12:50:bc:58:87:ef:6e:04:e0:df:55:a1:45:de: 10:d1:c1:43:fd:f1:33:cb:37:1c:b6:03:b7:db:24: a1:f0:66:d8:a1:f4:1b:f8:4b:89:10:a4:11:c8:ca: d2:37:53:58:32:d3:53:9e:87:38:e3:da:c9:54:b6: 51:81:2a:05:c5:d6:4f:c4:2a:fa:c8:35:7d:72:ea: 67:21:aa:bb:17:13:a2:b6:26:18:c5:62:92:95:07: 27:9b:1b:23:9c:1a:e9:39:76:6f:de:7b:e1:4a:f5: 8e:96:61:d2:7d:9c:ca:16:68:f6:86:62:ad:c9:5f: b8:ba:a4:e6:1b:f9:2a:81:47:ff:06:69:6f:41:a1: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CF:2D:F9:23:E9:DB:C7:8C:00:4E:09:C1:2C:DE:7E:C7:EC:F6:6D X509v3 Authority Key Identifier: keyid:3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:67:0f:07:d4:13:79:04:e6:85:a0:ab:3d:2d:b4:56:9e:e3: 87:08:a6:cb:39:2f:23:f2:40:f8:d0:18:63:1f:37:00:86:b9: 09:76:06:22:a3:cd:a2:88:07:18:d8:e0:6d:58:9f:b9:5e:6a: 64:ca:30:3d:9c:e2:3a:8f:73:21:a2:67:df:f4:27:85:9a:bc: fd:48:f9:5e:23:ed:f6:cf:8a:17:5b:28:ba:58:c1:69:0b:c0: 0a:8e:ca:41:11:c5:04:f2:ea:dc:02:04:cc:a8:79:94:85:ce: b7:d6:79:e5:5b:d7:d0:91:c3:67:25:dd:3d:cf:13:86:16:c0: a8:83:dc:ed:7e:3a:81:af:eb:32:3a:e1:55:c3:b1:ef:b2:5c: 34:71:30:61:73:7f:67:57:a7:33:30:ca:a6:2d:df:cc:7f:a0: 80:8d:4c:0f:4c:2c:50:c6:fe:7a:2d:da:0b:97:70:bd:64:46: 9e:19:39:66:1a:b2:a9:c5:a0:44:22:c7:45:1d:7e:35:f1:8e: 6c:8b:1c:92:06:ee:4b:49:39:5f:e9:f0:bf:52:e6:94:8f:59: b9:15:a5:de:eb:8a:9f:34:71:03:66:20:6c:8e:45:59:80:a6: 43:86:cd:56:48:40:41:2f:b6:8c:da:47:3c:63:36:82:5a:92: f3:43:8e:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6XHrUeiJiosPza6rbqjwe1j0MQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2Mzkz NjFERTQwQzAeFw0yNjA5MjMwMDUyMjJaFw0yNjA5MjQwMTQ0MjJaMDMxMTAvBgNV BAMTKDI4Q0YyREY5MjNFOURCQzc4QzAwNEUwOUMxMkNERTdFQzdFQ0Y2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWicna5pEsSeioP8OGWcqf9+dN B18duku4V7MHJy7rCns3uG1axPdYhJpY4JRnnTFFiw5XG+GJa2UBZUR17z8sLiKQ /SfS6zoy6zZlIGgpC/cgi1LiJF+Ks4xis6Z7fk6rUTcTnUye4edrTEtDhgQgtQEP zM+gcicSULxYh+9uBODfVaFF3hDRwUP98TPLNxy2A7fbJKHwZtih9Bv4S4kQpBHI ytI3U1gy01Oehzjj2slUtlGBKgXF1k/EKvrINX1y6mchqrsXE6K2JhjFYpKVByeb GyOcGuk5dm/ee+FK9Y6WYdJ9nMoWaPaGYq3JX7i6pOYb+SqBR/8GaW9BoUS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKM8t+SPp28eMAE4JwSzefsfs9m0wHwYDVR0j BBgwFoAUO1MyI4X8hAddX1lUKyxmOTYd5AwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjYmQ2N2ItZDE5MC00YTRjLTgzYjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4 NUZDODQwNzVENUY1OTU0MkIyQzY2MzkzNjFERTQwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjUzMzIyMzg1RkM4NDA3NUQ1RjU5NTQyQjJDNjYzOTM2MURF NDBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2 MzkzNjFERTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhnDwfUE3kE5oWgqz0ttFae44cIpss5LyPy QPjQGGMfNwCGuQl2BiKjzaKIBxjY4G1Yn7leamTKMD2c4jqPcyGiZ9/0J4WavP1I +V4j7fbPihdbKLpYwWkLwAqOykERxQTy6twCBMyoeZSFzrfWeeVb19CRw2cl3T3P E4YWwKiD3O1+OoGv6zI64VXDse+yXDRxMGFzf2dXpzMwyqYt38x/oICNTA9MLFDG /not2guXcL1kRp4ZOWYasqnFoEQix0UdfjXxjmyLHJIG7ktJOV/p8L9S5pSPWbkV pd7rip80cQNmIGyORVmApkOGzVZIQEEvtozaRzxjNoJakvNDjh8= -----END CERTIFICATE-----Generated at Wed Sep 23 12:04:48 2026 by rpki-client