$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft File: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft (raw, json) Hash identifier: hXZA+7BOdgv4kmRZRRvX6Yx5Hue6UsXFQRpPHTAIU74= Subject key identifier: 49:6B:DE:83:71:5E:92:EF:4C:F5:D7:AE:F7:06:93:41:44:B4:28:90 Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Certificate serial: 11979BE3FAA1FDA38283DAA189E2BA63FCD5E9FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 20:21:07 +0000 Manifest this update: Wed 23 Sep 2026 20:16:07 +0000 Manifest next update: Thu 24 Sep 2026 22:17:07 +0000 Files and hashes: 1: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: s1284mAgTGH50deceslU106KOtM4knEtXWIuryUSU50=) 2: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl (hash: sPp7zr5BB8lC3AK94AeNLhzHnPKJXgssyyhEhUsXIXI=) 3: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: Z9jMWV3QBPuL76HRS4eEvm14hiKdvW3s+uuBGhhBiQI=) 4: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: S54fglHVGgOkdpOGlybfdLwbJlLyDvqF1bFNcWMY+6I=) 5: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: ecGK2uv0QOr0Ium9PEGE2jPN+opG6R8n6ZDZWs8qtW8=) 6: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: IrDevpHt2Ab23kGrasFiPh/xJfyvQGBWQhBHMroNBCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:97:9b:e3:fa:a1:fd:a3:82:83:da:a1:89:e2:ba:63:fc:d5:e9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Validity Not Before: Sep 23 20:16:07 2026 GMT Not After : Sep 24 22:17:07 2026 GMT Subject: CN=496BDE83715E92EF4CF5D7AEF706934144B42890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:ed:ad:69:c4:f2:7a:27:07:63:e5:e4:ac: da:bf:2a:49:3f:e5:03:6a:a6:4c:84:1b:31:c1:e9: d4:76:8a:c3:ef:52:e0:8e:cf:98:de:64:29:e6:26: 96:74:2f:ca:a9:ac:03:e7:c3:22:19:bc:df:71:6d: 0c:35:95:5a:7c:9d:0e:ec:53:86:fe:65:e4:4d:97: cc:56:3a:2c:e3:bc:47:d4:c5:58:bb:31:b9:fe:f3: 04:3b:cc:c1:f1:3f:37:29:cb:ba:54:9f:4f:05:a3: f5:fb:92:50:e1:8d:ac:66:41:d8:60:d6:b1:be:d8: 08:19:de:d7:1b:fa:87:d0:59:7d:c1:9e:4b:88:4a: 2f:ca:3a:00:85:70:11:51:5e:63:72:9a:b3:a4:f9: 3f:d8:04:34:35:86:33:6d:4b:cc:d8:97:75:3e:5e: b2:f4:41:9d:90:ea:fd:ae:7c:f0:1b:9b:d1:01:64: c5:5d:4b:3c:7c:19:e0:1b:7d:d3:73:9b:90:8a:37: 3e:18:0e:fc:5f:b3:4c:a1:1d:bd:84:fa:86:03:bc: cc:5f:6f:8c:24:07:9c:4a:2a:b1:50:ac:60:72:53: 53:64:4c:58:5b:d1:0c:95:1e:25:a1:81:e5:cc:d3: d0:74:de:12:54:30:e6:8d:cc:c2:fe:4c:82:d5:ac: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6B:DE:83:71:5E:92:EF:4C:F5:D7:AE:F7:06:93:41:44:B4:28:90 X509v3 Authority Key Identifier: keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c5:1a:6c:5f:40:5d:79:52:ed:fb:21:99:9c:f1:48:77:13: 16:fc:68:2d:fd:58:96:0f:ce:d9:86:cb:cf:1a:10:5c:23:5c: 2d:74:52:e2:ab:9e:fa:27:cf:b8:22:d6:ad:6d:ad:2b:d5:34: cf:1d:90:d0:7e:bc:23:48:bf:25:ab:ba:61:7d:4e:db:31:55: 25:a7:00:47:a2:1e:5c:59:c6:65:42:2c:fc:5d:6a:71:2f:c1: d7:93:61:4d:c8:a0:2b:84:db:a7:ae:7c:c6:e5:79:27:3c:32: 6a:2f:d9:97:79:ea:3d:d7:94:cb:b9:72:c8:50:cb:41:bd:b4: 91:a3:cd:e1:9c:a5:8d:31:d3:36:d1:7a:40:be:e1:a2:cf:bf: 7d:bd:32:14:96:90:8c:61:f0:8e:49:66:81:43:f4:4a:c1:cb: f7:e7:b9:c1:26:58:7c:88:ea:a5:87:d8:98:69:38:45:7e:f7: 83:b2:f1:aa:4a:9a:7c:05:03:28:9f:e3:96:81:7a:24:b5:4f: e8:9d:69:a4:94:4b:59:aa:65:17:d4:b8:be:b2:cb:db:af:b5: fa:62:3d:62:70:2a:53:84:e9:bb:a4:43:e8:64:e5:77:bc:02: e9:1e:fe:44:06:db:a8:b5:50:06:88:8a:84:e4:86:62:50:bb: e5:be:d0:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZeb4/qh/aOCg9qhieK6Y/zV6fwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEy NDhBMTUxOTAeFw0yNjA5MjMyMDE2MDdaFw0yNjA5MjQyMjE3MDdaMDMxMTAvBgNV BAMTKDQ5NkJERTgzNzE1RTkyRUY0Q0Y1RDdBRUY3MDY5MzQxNDRCNDI4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8e2tacTyeicHY+XkrNq/Kkk/ 5QNqpkyEGzHB6dR2isPvUuCOz5jeZCnmJpZ0L8qprAPnwyIZvN9xbQw1lVp8nQ7s U4b+ZeRNl8xWOizjvEfUxVi7Mbn+8wQ7zMHxPzcpy7pUn08Fo/X7klDhjaxmQdhg 1rG+2AgZ3tcb+ofQWX3BnkuISi/KOgCFcBFRXmNymrOk+T/YBDQ1hjNtS8zYl3U+ XrL0QZ2Q6v2ufPAbm9EBZMVdSzx8GeAbfdNzm5CKNz4YDvxfs0yhHb2E+oYDvMxf b4wkB5xKKrFQrGByU1NkTFhb0QyVHiWhgeXM09B03hJUMOaNzML+TILVrHMrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSWveg3Feku9M9deu9waTQUS0KJAwHwYDVR0j BBgwFoAUPVfLInHy50cPKsI1jByiKiSKFRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE5ZjgxY2ItNWE1OS00MGYzLTg2YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3 MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEyNDhBMTUxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDU3Q0IyMjcxRjJFNzQ3MEYyQUMyMzU4QzFDQTIyQTI0OEEx NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0Ey MkEyNDhBMTUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfFGmxfQF15Uu37IZmc8Uh3Exb8aC39WJYP ztmGy88aEFwjXC10UuKrnvonz7gi1q1trSvVNM8dkNB+vCNIvyWrumF9TtsxVSWn AEeiHlxZxmVCLPxdanEvwdeTYU3IoCuE26eufMbleSc8Mmov2Zd56j3XlMu5cshQ y0G9tJGjzeGcpY0x0zbRekC+4aLPv329MhSWkIxh8I5JZoFD9ErBy/fnucEmWHyI 6qWH2JhpOEV+94Oy8apKmnwFAyif45aBeiS1T+idaaSUS1mqZRfUuL6yy9uvtfpi PWJwKlOE6bukQ+hk5Xe8Auke/kQG26i1UAaIioTkhmJQu+W+0BY= -----END CERTIFICATE-----Generated at Thu Sep 24 08:51:48 2026 by rpki-client