$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft File: 3488252FDADC73654E2AAD815316475C9A5F94D8.mft (raw, json) Hash identifier: YhK8s2ykuG9JCuPqW6fjVYTfnZJbjE9lFFjbJknA8vE= Subject key identifier: D0:A6:C2:41:38:8C:54:63:00:7D:87:91:F2:18:3B:92:F5:72:6C:08 Authority key identifier: 34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8 Certificate issuer: /CN=3488252FDADC73654E2AAD815316475C9A5F94D8 Certificate serial: 5BF23E3D8DC2B06C527FE7D7357868BB16B74C74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft Manifest number: BE Signing time: Sun 20 Sep 2026 23:00:22 +0000 Manifest this update: Sun 20 Sep 2026 22:55:22 +0000 Manifest next update: Tue 22 Sep 2026 00:10:22 +0000 Files and hashes: 1: 3130332e36362e3139362e302f32322d3234203d3e20313331313131.roa (hash: jobGwFNdEOGscb8Suy+yh9BDuSyd+S9zj8PbD+vSbcU=) 2: 3488252FDADC73654E2AAD815316475C9A5F94D8.crl (hash: vwXN04mt4QmHMOer343TpLsHoBj9xsCuL0vR+p+aDrg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f2:3e:3d:8d:c2:b0:6c:52:7f:e7:d7:35:78:68:bb:16:b7:4c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3488252FDADC73654E2AAD815316475C9A5F94D8 Validity Not Before: Sep 20 22:55:22 2026 GMT Not After : Sep 22 00:10:22 2026 GMT Subject: CN=D0A6C241388C5463007D8791F2183B92F5726C08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:01:23:3e:36:c1:1a:38:ba:13:13:7f:1c: 11:ad:b7:66:c7:15:40:99:5a:21:5a:58:a3:38:5a: 67:db:db:b7:79:d6:5b:c7:fc:23:5e:0c:6e:0a:ec: 14:c0:05:d7:de:fb:53:5a:d6:8f:3e:67:33:fe:1b: 60:aa:5e:b8:14:ed:af:60:56:00:f1:62:e6:58:da: 7c:1c:21:44:48:50:95:7e:52:7f:52:91:0d:50:03: 7a:95:96:f1:ee:18:89:f8:76:a7:8d:76:d9:21:d3: 82:7e:9d:ae:76:81:98:90:4b:a9:78:56:37:6a:6c: ba:57:84:a9:8c:4a:61:a2:27:de:ad:94:16:89:97: f6:24:48:e2:6b:f3:1a:ad:fd:29:8f:e8:af:12:58: 60:64:3b:bb:3e:01:7b:02:17:c3:6c:d1:9e:f8:0a: db:56:fd:c9:10:dd:b7:de:af:1e:95:e9:9a:9a:a6: 9f:3f:bf:dd:da:01:73:1e:ba:b1:21:82:02:86:28: 0b:a0:dd:23:fe:9d:7c:d3:ff:b2:04:88:9b:44:d2: 90:f9:cf:fb:3b:ed:2b:64:b5:cb:82:00:f0:fc:e0: f3:86:e5:8e:4d:63:1a:56:34:fc:bd:de:46:56:42: fb:a2:4f:bb:26:f5:f6:28:f2:e7:53:6a:4e:ad:98: c4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A6:C2:41:38:8C:54:63:00:7D:87:91:F2:18:3B:92:F5:72:6C:08 X509v3 Authority Key Identifier: keyid:34:88:25:2F:DA:DC:73:65:4E:2A:AD:81:53:16:47:5C:9A:5F:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3488252FDADC73654E2AAD815316475C9A5F94D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d77a7fad-5442-4bc4-bc2f-0bf8c226d9db/0/3488252FDADC73654E2AAD815316475C9A5F94D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0a:7e:d2:b0:fc:59:66:95:eb:df:bb:09:85:b8:27:57:3c: a9:b1:1f:7b:ea:fe:49:f7:1d:4a:f4:91:30:a3:bf:ed:6f:ff: cc:97:ea:60:b6:d5:d9:b5:da:9b:ea:95:79:30:d5:98:eb:6f: 4d:79:5e:9a:19:f3:f4:13:5c:63:bd:cc:02:e2:e7:36:a7:8a: b6:75:e3:15:dd:77:30:98:51:6c:2b:7c:85:d0:a0:e1:31:8b: 1b:e8:6e:cc:4f:d2:b4:a2:e4:dc:71:4a:6f:e7:ef:de:2f:cd: 88:73:90:cc:eb:73:bf:3a:f5:6c:ce:89:b8:ef:3c:1d:33:fa: ae:64:d1:e9:27:49:51:4b:ef:df:50:3e:3d:e5:93:76:fb:e4: 2e:d0:0d:0a:4f:79:04:f4:35:c6:df:8d:0d:18:a1:26:82:be: 2c:f5:e4:77:6d:a3:82:9e:64:5c:6d:4f:70:ed:fb:6d:ff:3d: 8b:87:d2:07:9f:81:f0:f7:67:af:a1:c4:9b:c9:50:2c:09:69: e2:27:16:26:a1:d1:71:1f:e4:93:22:ac:0b:b5:91:5b:ce:60: 8f:ea:39:6a:e7:e4:01:13:b5:c2:a5:e8:bc:a9:78:1e:8d:92: 1f:41:dc:ef:4d:38:e4:e4:f1:be:ee:5d:5d:f8:6f:26:bd:44: 4f:a0:75:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/I+PY3CsGxSf+fXNXhouxa3THQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5 QTVGOTREODAeFw0yNjA5MjAyMjU1MjJaFw0yNjA5MjIwMDEwMjJaMDMxMTAvBgNV BAMTKEQwQTZDMjQxMzg4QzU0NjMwMDdEODc5MUYyMTgzQjkyRjU3MjZDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTwEjPjbBGji6ExN/HBGtt2bH FUCZWiFaWKM4Wmfb27d51lvH/CNeDG4K7BTABdfe+1Na1o8+ZzP+G2CqXrgU7a9g VgDxYuZY2nwcIURIUJV+Un9SkQ1QA3qVlvHuGIn4dqeNdtkh04J+na52gZiQS6l4 VjdqbLpXhKmMSmGiJ96tlBaJl/YkSOJr8xqt/SmP6K8SWGBkO7s+AXsCF8Ns0Z74 CttW/ckQ3bferx6V6Zqapp8/v93aAXMeurEhggKGKAug3SP+nXzT/7IEiJtE0pD5 z/s77StktcuCAPD84POG5Y5NYxpWNPy93kZWQvuiT7sm9fYo8udTak6tmMTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0KbCQTiMVGMAfYeR8hg7kvVybAgwHwYDVR0j BBgwFoAUNIglL9rcc2VOKq2BUxZHXJpflNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc3YTdmYWQtNTQ0Mi00YmM0LWJjMmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZE QURDNzM2NTRFMkFBRDgxNTMxNjQ3NUM5QTVGOTREOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNDg4MjUyRkRBREM3MzY1NEUyQUFEODE1MzE2NDc1QzlBNUY5 NEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc3YTdmYWQtNTQ0Mi00YmM0LWJj MmYtMGJmOGMyMjZkOWRiLzAvMzQ4ODI1MkZEQURDNzM2NTRFMkFBRDgxNTMxNjQ3 NUM5QTVGOTREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoKftKw/FlmlevfuwmFuCdXPKmxH3vq/kn3 HUr0kTCjv+1v/8yX6mC21dm12pvqlXkw1Zjrb015XpoZ8/QTXGO9zALi5zanirZ1 4xXddzCYUWwrfIXQoOExixvobsxP0rSi5NxxSm/n794vzYhzkMzrc7869WzOibjv PB0z+q5k0eknSVFL799QPj3lk3b75C7QDQpPeQT0NcbfjQ0YoSaCviz15Hdto4Ke ZFxtT3Dt+23/PYuH0gefgfD3Z6+hxJvJUCwJaeInFiah0XEf5JMirAu1kVvOYI/q OWrn5AETtcKl6LypeB6Nkh9B3O9NOOTk8b7uXV34bya9RE+gdeM= -----END CERTIFICATE-----Generated at Mon Sep 21 05:38:55 2026 by rpki-client