$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft File: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft (raw, json) Hash identifier: 5SoeGXy30uZRW8cD1cw8hPo0Hbsysn449ZVfsUe3NHc= Subject key identifier: 63:77:1D:34:CC:29:E0:99:33:D3:69:47:04:A5:76:4C:6C:D3:FA:E7 Authority key identifier: 3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF Certificate issuer: /CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Certificate serial: 228EFDF2B541628C18C18328941C835A5E13CAB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft Manifest number: BE Signing time: Sun 20 Sep 2026 14:29:49 +0000 Manifest this update: Sun 20 Sep 2026 14:24:49 +0000 Manifest next update: Mon 21 Sep 2026 14:57:49 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: +kmrv9UVKd6Gr+842CRBNPUYtLDCG179+fO5/CRRqOw=) 2: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl (hash: e+moAy0r4U/ZuaNJa/B7efmN1RH1rgf7PS8ZkzXdgz0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8e:fd:f2:b5:41:62:8c:18:c1:83:28:94:1c:83:5a:5e:13:ca:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Validity Not Before: Sep 20 14:24:49 2026 GMT Not After : Sep 21 14:57:49 2026 GMT Subject: CN=63771D34CC29E09933D3694704A5764C6CD3FAE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:99:6c:dc:20:fe:28:ad:ee:8d:36:a7:46:2b: d5:50:a7:0c:09:ea:23:41:39:11:d0:c0:e2:f1:4d: 7c:36:70:ef:3f:c6:b3:a5:09:54:1a:d2:d4:e5:0f: 02:0e:6c:9f:36:36:f2:62:e5:4c:9e:63:cc:8b:3d: d6:8e:60:47:c8:78:6a:64:06:1d:0f:44:bf:05:3e: a0:57:2e:4b:86:f8:49:15:7c:33:6a:58:51:0e:a6: 99:52:c3:3c:b7:cc:35:70:a6:77:c4:48:19:a5:c3: 57:60:eb:bd:ae:e9:6e:d0:65:12:6f:a7:c3:e8:97: 39:2f:93:ae:67:d6:05:da:5a:00:17:0c:59:2e:3c: 19:53:df:0f:05:35:6e:b3:3d:1d:46:62:b2:7c:e6: 68:65:87:5f:74:83:72:57:98:52:dd:fa:7a:4b:22: 0e:22:87:d5:ad:13:4e:c0:0a:c5:2f:81:8f:e7:e8: 5d:62:c5:28:96:7e:27:23:14:0b:5e:0f:d4:42:9b: f6:56:46:d2:1b:e9:a6:37:7f:2b:61:f4:56:77:04: cb:1e:ec:c3:d4:43:8b:33:7e:9e:5a:d0:53:58:a6: 18:a9:7f:53:69:c5:93:16:00:5f:9f:14:54:5b:e0: d2:0a:94:a0:1f:7a:10:1f:b5:bd:2a:3b:f6:62:e6: 14:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:77:1D:34:CC:29:E0:99:33:D3:69:47:04:A5:76:4C:6C:D3:FA:E7 X509v3 Authority Key Identifier: keyid:3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:16:f9:5c:5e:8f:3f:dc:20:e1:aa:cb:d3:d2:6c:31:16:9b: 0d:c7:92:32:92:1c:22:7b:fc:1a:43:9d:83:1a:9d:97:c6:e3: 03:3d:c5:a7:9e:be:fb:55:55:b3:9e:14:97:6c:fd:3a:94:60: dd:d3:f5:97:69:41:11:f2:44:0b:b3:a5:56:e0:45:20:51:50: 12:6c:f2:51:03:e2:60:4e:de:84:60:26:bb:ca:29:fd:02:fa: 1a:df:08:b5:35:a9:60:d0:d1:59:dd:2a:0c:0b:d5:e3:f7:70: bd:7e:6c:c4:f7:d2:f8:23:0a:cb:9e:ee:e6:cc:27:27:de:b2: e1:c6:6d:30:4d:22:62:ab:dd:12:0d:67:48:31:ae:a4:bd:32: 6c:d9:97:b3:07:a9:84:d1:2b:05:a4:4e:ea:4b:36:f9:fc:75: 7d:ef:2d:13:64:f6:34:fe:ee:9a:3f:d3:4a:d8:02:49:72:18: f1:fe:52:d0:aa:d4:cf:d3:13:44:9d:ea:e9:51:88:b8:a8:dc: 83:1b:48:98:ca:5d:a0:3b:d7:cd:f4:c0:61:95:cc:c8:d1:06: af:0e:76:c9:c0:ac:dd:da:9b:52:6f:b1:d4:b8:45:d9:1a:e3: 3b:d7:4c:81:79:e4:a4:51:6d:6a:39:48:79:96:35:e1:be:4a: c6:e9:af:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIo798rVBYowYwYMolByDWl4TyrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZB QUMxRUVFRjAeFw0yNjA5MjAxNDI0NDlaFw0yNjA5MjExNDU3NDlaMDMxMTAvBgNV BAMTKDYzNzcxRDM0Q0MyOUUwOTkzM0QzNjk0NzA0QTU3NjRDNkNEM0ZBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFmWzcIP4ore6NNqdGK9VQpwwJ 6iNBORHQwOLxTXw2cO8/xrOlCVQa0tTlDwIObJ82NvJi5UyeY8yLPdaOYEfIeGpk Bh0PRL8FPqBXLkuG+EkVfDNqWFEOpplSwzy3zDVwpnfESBmlw1dg672u6W7QZRJv p8Polzkvk65n1gXaWgAXDFkuPBlT3w8FNW6zPR1GYrJ85mhlh190g3JXmFLd+npL Ig4ih9WtE07ACsUvgY/n6F1ixSiWficjFAteD9RCm/ZWRtIb6aY3fyth9FZ3BMse 7MPUQ4szfp5a0FNYphipf1NpxZMWAF+fFFRb4NIKlKAfehAftb0qO/Zi5hTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY3cdNMwp4Jkz02lHBKV2TGzT+ucwHwYDVR0j BBgwFoAUPLaDYcrHqAj3/cS66oYNpqrB7u8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiYzNmMjktNmY5ZC00N2QzLTllNzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFD QUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZBQUMxRUVFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0I2ODM2MUNBQzdBODA4RjdGREM0QkFFQTg2MERBNkFBQzFF RUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBE QTZBQUMxRUVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0W+Vxejz/cIOGqy9PSbDEWmw3HkjKSHCJ7 /BpDnYManZfG4wM9xaeevvtVVbOeFJds/TqUYN3T9ZdpQRHyRAuzpVbgRSBRUBJs 8lED4mBO3oRgJrvKKf0C+hrfCLU1qWDQ0VndKgwL1eP3cL1+bMT30vgjCsue7ubM JyfesuHGbTBNImKr3RINZ0gxrqS9MmzZl7MHqYTRKwWkTupLNvn8dX3vLRNk9jT+ 7po/00rYAklyGPH+UtCq1M/TE0Sd6ulRiLio3IMbSJjKXaA71830wGGVzMjRBq8O dsnArN3am1JvsdS4Rdka4zvXTIF55KRRbWo5SHmWNeG+Ssbpr80= -----END CERTIFICATE-----Generated at Mon Sep 21 05:40:22 2026 by rpki-client