$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft File: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft (raw, json) Hash identifier: xN3H8rqIg/NXPzPFwnaxuhamfQqkAiiE8+36zkGUCyc= Subject key identifier: 27:4E:52:84:20:72:44:C7:EF:B0:33:32:28:F1:0D:BA:78:D9:92:F7 Authority key identifier: 3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC Certificate issuer: /CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Certificate serial: 26F7E99A862B3004D8E00B68F3F2B7C0DE505BF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft Manifest number: BD Signing time: Sun 20 Sep 2026 11:36:33 +0000 Manifest this update: Sun 20 Sep 2026 11:31:33 +0000 Manifest next update: Mon 21 Sep 2026 14:20:33 +0000 Files and hashes: 1: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: hCFV5sRxdzUQ0Ef1DHuXq2DMT11lGAzTPsRSkYtMfqM=) 2: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: NHpaZqHC4NTt91PhG1pzzVx+mpzKnTbfgFJI738LnKc=) 3: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl (hash: j6AXzV4p9hTcRLJhtcJOdEProzCfDkRajcLNylPJz0I=) 4: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: u3QjwTKhA3xZ6qBaPve22SqHeKd1Tl3v9fzrQkdIYDM=) 5: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: o6UES+tryYmpIwssyMXnmFCcFcBThAbWf6TdKlMd5ls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f7:e9:9a:86:2b:30:04:d8:e0:0b:68:f3:f2:b7:c0:de:50:5b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Validity Not Before: Sep 20 11:31:33 2026 GMT Not After : Sep 21 14:20:33 2026 GMT Subject: CN=274E5284207244C7EFB0333228F10DBA78D992F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:52:ec:29:0d:72:d6:68:1e:8e:a7:b3:7e:19: 36:d1:ad:41:f9:c3:f7:70:3f:ca:d1:70:99:4e:3a: e6:08:9f:2a:9f:02:ac:dd:49:57:ad:43:1c:fa:b2: 4f:00:de:cd:6c:8d:c4:44:41:b2:d3:34:94:5f:fb: e6:25:84:69:3f:2c:52:de:0a:18:8f:35:ee:7c:c6: ce:26:5a:b2:de:83:a6:86:25:69:19:10:d5:d9:33: c8:e2:d9:48:38:5c:9c:39:96:1a:1d:42:60:2f:d3: f8:01:38:b4:9e:24:75:47:e5:44:5a:74:92:58:7c: a8:54:e6:56:24:f5:8a:dc:07:0b:ef:9a:0b:10:dc: de:86:ef:00:58:8f:ac:67:ed:db:c9:46:f1:ff:e1: 4d:3c:a0:6d:8e:fe:5a:fc:62:b8:7e:24:ba:77:f3: fe:e4:61:c6:40:ee:66:c5:b6:4c:e7:7f:4f:d1:4d: 20:79:e7:df:ea:7d:79:bb:aa:29:ab:07:e4:01:83: 63:f5:f8:6d:4a:38:01:ce:e3:58:53:42:31:8e:53: dd:a3:e5:fc:91:c1:c3:d1:cb:4a:d2:ae:3c:f2:65: 76:58:04:0c:bd:85:2a:40:13:40:30:81:33:af:d4: 25:34:78:6b:70:83:52:f1:ac:4d:ac:3e:4c:fb:62: ab:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4E:52:84:20:72:44:C7:EF:B0:33:32:28:F1:0D:BA:78:D9:92:F7 X509v3 Authority Key Identifier: keyid:3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bd:ac:b8:e6:19:dc:02:82:d0:ee:76:e7:43:af:34:5d:23: 3d:3a:a0:26:89:ff:1e:ce:c1:60:87:97:c6:9c:33:5e:59:df: de:cb:ab:b3:30:a8:77:d5:1d:9c:96:a7:70:ed:15:0c:4d:a3: 77:18:96:e9:77:6f:43:0c:f3:0b:7f:fb:30:49:cd:b5:20:b9: cf:93:2c:fa:43:af:da:f0:1b:9d:90:8e:0f:5e:0e:29:05:05: b2:92:e5:de:30:7a:56:2a:fa:2e:66:a5:1d:99:86:50:68:90: 6f:7b:f8:24:6e:57:32:5f:a7:3d:27:90:3b:48:d3:77:f2:1e: 0f:27:45:99:06:de:f1:61:18:df:a0:0e:7d:e2:06:dc:fe:8d: e7:58:06:77:a8:29:e3:a4:79:d4:ed:e6:72:f7:19:90:c7:cd: 13:a4:49:4e:ec:ee:dc:ba:5d:77:23:1a:59:a3:f2:24:69:5d: 01:38:7c:a7:77:60:c6:df:ae:81:58:12:65:1f:94:e9:d7:a0: 5a:4c:13:bc:a9:b1:b2:f7:99:36:fe:4b:04:86:ed:34:23:fc: 25:c6:9a:55:e6:bf:f4:69:2c:8c:6a:8e:35:21:68:6f:fc:dc: 32:3e:11:b0:84:de:45:05:8b:1d:a2:ab:e6:3c:5c:09:b0:66: 44:b4:35:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJvfpmoYrMATY4Ato8/K3wN5QW/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdF M0U4OEZBQzAeFw0yNjA5MjAxMTMxMzNaFw0yNjA5MjExNDIwMzNaMDMxMTAvBgNV BAMTKDI3NEU1Mjg0MjA3MjQ0QzdFRkIwMzMzMjI4RjEwREJBNzhEOTkyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUuwpDXLWaB6Op7N+GTbRrUH5 w/dwP8rRcJlOOuYInyqfAqzdSVetQxz6sk8A3s1sjcREQbLTNJRf++YlhGk/LFLe ChiPNe58xs4mWrLeg6aGJWkZENXZM8ji2Ug4XJw5lhodQmAv0/gBOLSeJHVH5URa dJJYfKhU5lYk9YrcBwvvmgsQ3N6G7wBYj6xn7dvJRvH/4U08oG2O/lr8Yrh+JLp3 8/7kYcZA7mbFtkznf0/RTSB559/qfXm7qimrB+QBg2P1+G1KOAHO41hTQjGOU92j 5fyRwcPRy0rSrjzyZXZYBAy9hSpAE0AwgTOv1CU0eGtwg1LxrE2sPkz7Yqv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ05ShCByRMfvsDMyKPENunjZkvcwHwYDVR0j BBgwFoAUP8/wkMeSATBAvhBnaIwst+Poj6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRhYmMwYmEtOTIyMi00YzQ1LTgzNDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBD NzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdFM0U4OEZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNGRjA5MEM3OTIwMTMwNDBCRTEwNjc2ODhDMkNCN0UzRTg4 RkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJD QjdFM0U4OEZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABy9rLjmGdwCgtDududDrzRdIz06oCaJ/x7O wWCHl8acM15Z397Lq7MwqHfVHZyWp3DtFQxNo3cYlul3b0MM8wt/+zBJzbUguc+T LPpDr9rwG52Qjg9eDikFBbKS5d4welYq+i5mpR2ZhlBokG97+CRuVzJfpz0nkDtI 03fyHg8nRZkG3vFhGN+gDn3iBtz+jedYBneoKeOkedTt5nL3GZDHzROkSU7s7ty6 XXcjGlmj8iRpXQE4fKd3YMbfroFYEmUflOnXoFpME7ypsbL3mTb+SwSG7TQj/CXG mlXmv/RpLIxqjjUhaG/83DI+EbCE3kUFix2iq+Y8XAmwZkS0NQ4= -----END CERTIFICATE-----Generated at Sun Sep 20 21:15:27 2026 by rpki-client