$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft File: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft (raw, json) Hash identifier: iF93812EJpMerI3je0GqLBIJ9NpgoPB+RklPO3EQdoU= Subject key identifier: B2:A4:7B:6C:57:57:AA:88:0C:3B:1F:AE:23:EC:BD:3F:AD:73:94:38 Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Certificate serial: 02FF107F2761631FF634CFA376B07F84AC808030 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 09:07:44 +0000 Manifest this update: Tue 22 Sep 2026 09:02:44 +0000 Manifest next update: Wed 23 Sep 2026 12:13:44 +0000 Files and hashes: 1: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: IrDevpHt2Ab23kGrasFiPh/xJfyvQGBWQhBHMroNBCE=) 2: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: ecGK2uv0QOr0Ium9PEGE2jPN+opG6R8n6ZDZWs8qtW8=) 3: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: S54fglHVGgOkdpOGlybfdLwbJlLyDvqF1bFNcWMY+6I=) 4: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: s1284mAgTGH50deceslU106KOtM4knEtXWIuryUSU50=) 5: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: Z9jMWV3QBPuL76HRS4eEvm14hiKdvW3s+uuBGhhBiQI=) 6: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl (hash: b4w4pvtRqyKGWgE3uKUBtdLHqTwEk0869WMvu6vebS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ff:10:7f:27:61:63:1f:f6:34:cf:a3:76:b0:7f:84:ac:80:80:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Validity Not Before: Sep 22 09:02:44 2026 GMT Not After : Sep 23 12:13:44 2026 GMT Subject: CN=B2A47B6C5757AA880C3B1FAE23ECBD3FAD739438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:aa:e9:65:b3:23:d8:43:49:cf:9d:68:2b: 42:f3:7f:21:74:4b:91:b7:89:4d:49:f6:2a:0e:e6: 24:e7:fd:07:91:01:fa:eb:ca:2d:50:4c:83:39:b6: ae:7d:11:6d:a5:2f:cd:b3:32:e6:af:a7:9e:48:8d: 59:0d:2d:4e:51:f6:48:a3:75:34:d6:53:9e:96:99: 92:2d:da:82:55:c8:a1:29:aa:4d:82:53:8c:d4:e4: 0b:5c:7a:33:df:2d:cc:c1:34:6a:5c:0f:19:ca:c2: 5a:94:3a:58:ca:08:59:23:71:85:73:d6:7a:69:be: 8b:23:f8:fc:50:36:27:4a:32:fd:30:f5:da:ae:32: 90:e7:e8:14:fe:a5:a5:e5:44:dc:54:56:26:01:12: 96:e6:15:0d:a1:ba:59:bf:f6:c2:dc:a1:49:27:79: 30:93:a5:ef:cf:4e:5b:8d:a4:2a:ee:ca:33:ab:ce: a8:c5:42:a6:f6:5b:83:9c:9f:23:da:f9:a8:d6:9e: 55:81:24:6d:fa:75:98:3a:50:18:c0:34:5c:9d:4f: c6:3c:9a:6b:3f:67:88:a2:4b:99:8d:75:31:da:c3: a6:11:03:ab:24:e1:40:7e:16:b2:57:60:2c:52:1b: 97:1e:1a:2e:ff:43:c2:11:6c:eb:12:9a:55:b0:3c: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A4:7B:6C:57:57:AA:88:0C:3B:1F:AE:23:EC:BD:3F:AD:73:94:38 X509v3 Authority Key Identifier: keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:4e:09:7a:9a:2e:ff:be:f2:cb:d7:fe:cb:cc:48:94:36:2f: ab:f2:bb:bf:ab:33:6c:ae:5c:41:5b:33:ad:5c:3f:6c:2e:8e: 4b:48:a6:e7:6c:97:05:39:c4:d1:cc:9c:3a:3a:26:24:e2:4e: 52:1e:f6:ca:8a:e9:50:5e:7e:10:c6:23:1d:3d:c3:e1:da:68: 6f:34:82:36:75:c8:a8:79:91:76:90:fc:9c:f8:4f:91:54:9a: d5:72:bb:09:aa:86:37:6e:db:e0:16:0f:50:3e:b0:ed:9a:4e: 08:a1:09:a3:af:85:74:54:96:06:08:f1:f2:03:1c:a4:64:4e: fb:43:62:90:eb:cd:a4:09:e4:94:9d:45:a9:64:72:70:11:50: ba:b2:e2:b0:ca:d6:03:0f:ec:41:ae:09:fc:b0:e0:c6:16:50: 42:18:0a:9e:80:2c:0c:eb:36:8e:d8:3c:d7:9b:1b:c9:5c:81: cb:2e:49:2a:5e:69:85:ef:fa:8a:c0:21:a1:38:19:e0:c7:da: ad:a8:b3:33:07:a0:c8:f2:16:81:4a:1a:a2:b7:ca:e0:25:fb: 01:a3:98:fc:76:53:f1:f2:52:dd:0b:0d:a0:b0:5a:c0:ad:0d: 50:5e:e5:d6:d8:30:12:23:f4:55:ed:fe:0e:ce:76:7b:e0:0c: 41:b0:53:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAv8QfydhYx/2NM+jdrB/hKyAgDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEy NDhBMTUxOTAeFw0yNjA5MjIwOTAyNDRaFw0yNjA5MjMxMjEzNDRaMDMxMTAvBgNV BAMTKEIyQTQ3QjZDNTc1N0FBODgwQzNCMUZBRTIzRUNCRDNGQUQ3Mzk0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrM6rpZbMj2ENJz51oK0LzfyF0 S5G3iU1J9ioO5iTn/QeRAfrryi1QTIM5tq59EW2lL82zMuavp55IjVkNLU5R9kij dTTWU56WmZIt2oJVyKEpqk2CU4zU5AtcejPfLczBNGpcDxnKwlqUOljKCFkjcYVz 1nppvosj+PxQNidKMv0w9dquMpDn6BT+paXlRNxUViYBEpbmFQ2hulm/9sLcoUkn eTCTpe/PTluNpCruyjOrzqjFQqb2W4OcnyPa+ajWnlWBJG36dZg6UBjANFydT8Y8 mms/Z4iiS5mNdTHaw6YRA6sk4UB+FrJXYCxSG5ceGi7/Q8IRbOsSmlWwPAHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsqR7bFdXqogMOx+uI+y9P61zlDgwHwYDVR0j BBgwFoAUPVfLInHy50cPKsI1jByiKiSKFRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE5ZjgxY2ItNWE1OS00MGYzLTg2YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3 MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEyNDhBMTUxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDU3Q0IyMjcxRjJFNzQ3MEYyQUMyMzU4QzFDQTIyQTI0OEEx NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0Ey MkEyNDhBMTUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVOCXqaLv++8svX/svMSJQ2L6vyu7+rM2yu XEFbM61cP2wujktIpudslwU5xNHMnDo6JiTiTlIe9sqK6VBefhDGIx09w+HaaG80 gjZ1yKh5kXaQ/Jz4T5FUmtVyuwmqhjdu2+AWD1A+sO2aTgihCaOvhXRUlgYI8fID HKRkTvtDYpDrzaQJ5JSdRalkcnARULqy4rDK1gMP7EGuCfyw4MYWUEIYCp6ALAzr No7YPNebG8lcgcsuSSpeaYXv+orAIaE4GeDH2q2oszMHoMjyFoFKGqK3yuAl+wGj mPx2U/HyUt0LDaCwWsCtDVBe5dbYMBIj9FXt/g7OdnvgDEGwU/8= -----END CERTIFICATE-----Generated at Tue Sep 22 14:40:46 2026 by rpki-client