$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft File: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft (raw, json) Hash identifier: eKv99gdh7B9IMg7LVMrRmRJOs+TeuwbZ6u5T50K7020= Subject key identifier: B7:78:8C:54:15:E1:F3:E8:B5:32:C3:58:7A:48:BD:61:CB:90:FE:78 Authority key identifier: 3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 Certificate issuer: /CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Certificate serial: 0A66D6F76A9F1554E7C64F9C85311E4989DE9880 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 15:54:11 +0000 Manifest this update: Sun 27 Sep 2026 15:49:11 +0000 Manifest next update: Mon 28 Sep 2026 17:03:11 +0000 Files and hashes: 1: 3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl (hash: wFoUP8YQDhzctJp+9JWh+kDTyXGKzethv5WWuBNRoPI=) 2: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: cwuI5/SSK6CyR1JmdzwFEJUddA+iJMuPYmNhyqVybOU=) 3: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: YjIMELRXEclhQMTB2bkatZ5wI5uWZ25f1kc6MK+WlkM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:66:d6:f7:6a:9f:15:54:e7:c6:4f:9c:85:31:1e:49:89:de:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47 Validity Not Before: Sep 27 15:49:11 2026 GMT Not After : Sep 28 17:03:11 2026 GMT Subject: CN=B7788C5415E1F3E8B532C3587A48BD61CB90FE78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:59:fd:f4:32:89:42:34:85:b8:f4:c9:c5: c5:4d:76:55:6e:4d:1d:ba:a7:3d:b3:96:45:7a:24: 3d:b5:fd:07:3c:d5:be:ca:33:54:d9:13:ab:75:3a: 3b:d1:68:50:42:c4:91:7d:16:0f:d4:05:2d:69:71: 22:8f:30:ba:0e:34:51:47:be:2e:97:53:18:10:44: 92:71:3c:d1:10:9b:a6:1b:c8:4e:fc:fb:b3:6c:b2: 98:3f:f4:69:fd:28:b6:49:29:9c:0a:a2:a1:02:9c: cc:d0:39:ed:30:66:8e:47:fa:61:a8:c5:a1:e3:b2: 43:b0:89:dd:20:76:57:74:ff:2c:f7:a2:12:94:18: 30:6a:f7:48:0d:4f:80:b2:56:a4:6f:59:31:7c:82: 7d:ef:3f:5e:02:78:e6:5b:3d:25:e8:d4:26:93:35: 60:93:ee:7a:d6:d7:36:fa:e2:24:12:61:83:c4:79: a3:d7:da:eb:61:6c:79:15:80:97:a7:ec:73:2a:48: af:b9:68:33:c0:01:ee:de:95:97:a4:d3:9e:74:7a: c2:cc:d9:e5:61:91:1a:66:cb:dd:85:75:42:77:a9: e2:e6:55:74:9d:80:29:11:63:d8:2f:79:b4:7a:95: e6:b6:08:f6:06:35:1d:93:30:f1:20:fb:7f:2b:71: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:78:8C:54:15:E1:F3:E8:B5:32:C3:58:7A:48:BD:61:CB:90:FE:78 X509v3 Authority Key Identifier: keyid:3F:E4:5D:E0:FD:92:E2:BD:83:BB:FF:76:65:0C:B5:B4:0D:BE:EF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3FE45DE0FD92E2BD83BBFF76650CB5B40DBEEF47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:79:83:5e:8a:18:f9:ca:38:2a:61:f4:8b:01:93:76:99:ed: c6:9c:92:e4:a5:62:bd:83:30:6b:fc:62:17:e5:23:a4:8c:41: c7:7f:04:fc:9d:aa:22:42:95:af:8e:9d:da:0a:89:df:1c:65: 8c:b9:1c:82:3f:ee:9b:b0:2b:2f:df:83:7a:d0:9a:fc:f4:ba: b2:43:09:92:e8:17:6f:54:b9:10:f2:4a:a2:e7:d8:78:19:32: a6:4d:e6:d4:83:97:72:9f:27:ad:37:bf:4f:ea:6a:65:ec:a0: 7d:8a:e8:8e:87:5f:d6:1f:f2:ad:f9:98:2c:c5:22:6f:7b:ea: c7:72:b8:62:c1:0c:a1:11:62:1c:4d:2d:74:f5:cd:83:82:92: 4d:8b:b6:64:50:c7:b0:ba:c6:ac:f2:1d:74:9f:a9:d2:50:a6: a9:75:b7:11:f1:09:17:ef:23:15:31:27:96:35:72:5e:26:d1: 65:ac:cb:c5:59:5a:47:ca:5d:cd:36:f3:3c:33:9a:00:c9:8a: 31:e3:f0:d1:a0:95:45:3b:23:1f:40:45:b7:73:35:b6:e5:54: b6:af:02:6c:c8:31:fe:f3:f2:fa:a0:2b:9e:9f:55:75:88:46: df:cd:cb:47:ce:1d:c1:13:c2:97:8a:7c:ec:70:3c:65:03:bc: 8f:45:c5:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCmbW92qfFVTnxk+chTEeSYnemIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQw REJFRUY0NzAeFw0yNjA5MjcxNTQ5MTFaFw0yNjA5MjgxNzAzMTFaMDMxMTAvBgNV BAMTKEI3Nzg4QzU0MTVFMUYzRThCNTMyQzM1ODdBNDhCRDYxQ0I5MEZFNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4Vn99DKJQjSFuPTJxcVNdlVu TR26pz2zlkV6JD21/Qc81b7KM1TZE6t1OjvRaFBCxJF9Fg/UBS1pcSKPMLoONFFH vi6XUxgQRJJxPNEQm6YbyE78+7Nsspg/9Gn9KLZJKZwKoqECnMzQOe0wZo5H+mGo xaHjskOwid0gdld0/yz3ohKUGDBq90gNT4CyVqRvWTF8gn3vP14CeOZbPSXo1CaT NWCT7nrW1zb64iQSYYPEeaPX2uthbHkVgJen7HMqSK+5aDPAAe7elZek0550esLM 2eVhkRpmy92FdUJ3qeLmVXSdgCkRY9gvebR6lea2CPYGNR2TMPEg+38rccfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt3iMVBXh8+i1MsNYeki9YcuQ/ngwHwYDVR0j BBgwFoAUP+Rd4P2S4r2Du/92ZQy1tA2+70cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWIzMTNkMTctNWI5Yi00ZDIzLTk0MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBG RDkyRTJCRDgzQkJGRjc2NjUwQ0I1QjQwREJFRUY0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU0NURFMEZEOTJFMkJEODNCQkZGNzY2NTBDQjVCNDBEQkVF RjQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvM0ZFNDVERTBGRDkyRTJCRDgzQkJGRjc2NjUwQ0I1 QjQwREJFRUY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF15g16KGPnKOCph9IsBk3aZ7cackuSlYr2D MGv8YhflI6SMQcd/BPydqiJCla+OndoKid8cZYy5HII/7puwKy/fg3rQmvz0urJD CZLoF29UuRDySqLn2HgZMqZN5tSDl3KfJ603v0/qamXsoH2K6I6HX9Yf8q35mCzF Im976sdyuGLBDKERYhxNLXT1zYOCkk2LtmRQx7C6xqzyHXSfqdJQpql1txHxCRfv IxUxJ5Y1cl4m0WWsy8VZWkfKXc028zwzmgDJijHj8NGglUU7Ix9ARbdzNbblVLav AmzIMf7z8vqgK56fVXWIRt/Ny0fOHcETwpeKfOxwPGUDvI9FxY4= -----END CERTIFICATE-----Generated at Mon Sep 28 00:28:11 2026 by rpki-client