$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft File: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft (raw, json) Hash identifier: jNKY+E2Iw49uclKPS5rD++RGxPQq99NrEy08nTivt/c= Subject key identifier: 26:EC:F4:56:50:4D:8E:A4:3A:C5:A0:3C:82:A5:2E:B4:72:FD:6C:31 Authority key identifier: 3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 Certificate issuer: /CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Certificate serial: 0204DC534D3688EF9987AE9BD8C147464A52AE84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft Manifest number: BF Signing time: Tue 22 Sep 2026 06:09:03 +0000 Manifest this update: Tue 22 Sep 2026 06:04:03 +0000 Manifest next update: Wed 23 Sep 2026 08:08:03 +0000 Files and hashes: 1: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl (hash: V77TAd1SkUCiHtsM5WAPIApFb/FwDnhS0QEP8m3el4M=) 2: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: XvoXxYyRseZ9WRVoAocJ9gpnu/or6v87QzxE4f486Ao=) 3: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: 99A+bJb86RNl0uIhsPESoN9F5vmyx2f3sELQT2/n36Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 08:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:04:dc:53:4d:36:88:ef:99:87:ae:9b:d8:c1:47:46:4a:52:ae:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Validity Not Before: Sep 22 06:04:03 2026 GMT Not After : Sep 23 08:08:03 2026 GMT Subject: CN=26ECF456504D8EA43AC5A03C82A52EB472FD6C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:59:f8:bc:04:fa:2b:6e:36:4d:82:95:39: 90:cf:f9:5b:5d:29:c7:e4:3c:e3:a8:54:18:a9:c3: af:39:4b:56:7d:18:82:2e:75:d2:e8:45:94:78:5d: 2e:90:18:0c:4a:ad:a6:b7:8c:60:bd:70:e4:f9:df: 18:4e:b7:6b:26:9b:48:9c:17:82:b6:c6:e2:a1:56: c3:0c:41:8b:57:c3:16:19:b0:9f:2c:26:71:25:42: 1f:fa:ba:5e:f5:ca:4d:90:75:ed:1f:2a:5c:c7:8a: 64:1e:1c:41:7b:28:fc:ed:04:28:56:d8:af:77:67: 79:c4:d7:90:05:0e:2f:a3:52:4d:dd:4c:4e:7c:17: 90:87:30:92:a8:60:00:5f:c6:29:11:d5:21:67:3c: 45:85:1f:d8:e5:77:58:19:a5:82:53:3f:30:e8:39: 87:ef:e1:49:ec:4a:74:33:53:c7:24:69:1f:89:5d: d2:29:7c:b6:22:ee:41:15:cc:91:1d:db:1b:44:67: d0:a9:24:12:35:05:bc:93:0b:9c:4f:c2:16:a6:3a: a1:af:c2:b2:60:7e:3c:f1:53:cb:a3:1d:34:3a:86: 13:59:3d:6d:db:1c:81:3c:05:6a:cb:fd:aa:c0:8e: 68:32:1d:ea:fc:8c:7c:86:6d:fa:64:05:a4:30:ad: 33:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EC:F4:56:50:4D:8E:A4:3A:C5:A0:3C:82:A5:2E:B4:72:FD:6C:31 X509v3 Authority Key Identifier: keyid:3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f6:b2:b7:69:86:1d:01:2f:ea:91:1d:41:fe:20:c2:65:af: f2:bd:7b:0b:f1:bf:02:0e:67:70:f1:bc:61:c1:83:7c:33:e8: 1e:04:6d:4d:db:83:41:1a:1e:b4:28:f0:0b:92:4b:d4:76:45: b9:15:b8:ab:94:31:1a:6c:27:29:cd:ec:0f:e2:f2:46:53:a0: 6f:e2:b0:e2:09:52:de:45:bf:ba:0f:c5:89:87:67:47:0d:df: 09:08:83:ad:64:c5:a7:aa:26:c5:17:2f:e7:65:8e:d1:96:4a: b4:b1:63:ec:f3:55:b2:08:6e:ad:9a:d2:7d:e1:e4:14:8c:05: c5:09:14:8f:b0:a2:15:36:c3:b7:6c:24:5f:08:fe:71:8e:39: f4:f8:23:e8:b4:18:98:ac:36:7b:76:0d:dc:61:c5:d4:06:fd: 81:0e:8b:a6:dd:f2:cf:a4:e3:74:2b:9e:b8:05:ba:5d:d9:2f: c3:88:e0:4b:6c:0a:a7:dd:40:58:f4:af:96:b9:90:c6:9e:16: a7:e3:9c:80:3d:57:00:dc:46:af:b0:a2:08:a5:52:f9:21:26: 9f:94:25:c4:35:22:39:15:55:b7:f6:83:3c:15:27:af:43:f3: 1b:4b:f8:b3:37:a0:e5:93:5c:b7:5e:98:38:b2:1d:67:67:16: 3a:2f:35:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAgTcU002iO+Zh66b2MFHRkpSroQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2 MUQ1NUFFOTAeFw0yNjA5MjIwNjA0MDNaFw0yNjA5MjMwODA4MDNaMDMxMTAvBgNV BAMTKDI2RUNGNDU2NTA0RDhFQTQzQUM1QTAzQzgyQTUyRUI0NzJGRDZDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVVn4vAT6K242TYKVOZDP+Vtd KcfkPOOoVBipw685S1Z9GIIuddLoRZR4XS6QGAxKraa3jGC9cOT53xhOt2smm0ic F4K2xuKhVsMMQYtXwxYZsJ8sJnElQh/6ul71yk2Qde0fKlzHimQeHEF7KPztBChW 2K93Z3nE15AFDi+jUk3dTE58F5CHMJKoYABfxikR1SFnPEWFH9jld1gZpYJTPzDo OYfv4UnsSnQzU8ckaR+JXdIpfLYi7kEVzJEd2xtEZ9CpJBI1BbyTC5xPwhamOqGv wrJgfjzxU8ujHTQ6hhNZPW3bHIE8BWrL/arAjmgyHer8jHyGbfpkBaQwrTM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJuz0VlBNjqQ6xaA8gqUutHL9bDEwHwYDVR0j BBgwFoAUPL3f6kvmtoRfjOiXY6s5OmHVWukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRkMWVhY2QtYTA2Ny00OTI0LTkyODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0 QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2MUQ1NUFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0JEREZFQTRCRTZCNjg0NUY4Q0U4OTc2M0FCMzkzQTYxRDU1 QUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5 M0E2MUQ1NUFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABH2srdphh0BL+qRHUH+IMJlr/K9ewvxvwIO Z3DxvGHBg3wz6B4EbU3bg0EaHrQo8AuSS9R2RbkVuKuUMRpsJynN7A/i8kZToG/i sOIJUt5Fv7oPxYmHZ0cN3wkIg61kxaeqJsUXL+dljtGWSrSxY+zzVbIIbq2a0n3h 5BSMBcUJFI+wohU2w7dsJF8I/nGOOfT4I+i0GJisNnt2DdxhxdQG/YEOi6bd8s+k 43QrnrgFul3ZL8OI4EtsCqfdQFj0r5a5kMaeFqfjnIA9VwDcRq+wogilUvkhJp+U JcQ1IjkVVbf2gzwVJ69D8xtL+LM3oOWTXLdemDiyHWdnFjovNVw= -----END CERTIFICATE-----Generated at Tue Sep 22 16:03:51 2026 by rpki-client