$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft File: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft (raw, json) Hash identifier: oF0JTl0CzleeNbTVrmR8VKzoeuZfsPi8SqgeTarFIYc= Subject key identifier: 01:1A:CD:D0:4A:31:8B:71:D0:3B:5C:78:81:D9:41:68:19:D4:DA:A3 Authority key identifier: 3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 Certificate issuer: /CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Certificate serial: 52F1B0B79FA0AF80BF233318FB366A2E04C2A426 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:42:04 +0000 Manifest this update: Mon 21 Sep 2026 12:37:04 +0000 Manifest next update: Tue 22 Sep 2026 15:09:04 +0000 Files and hashes: 1: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl (hash: 1TvJIuanEGd2NdK7giszOV/O9Q6zOHQc0zS7mPmTnUg=) 2: 3135372e32302e3231382e302f32332d3233203d3e20313532343233.roa (hash: oN269PBRDnF940fO+bfI5PiA4IWS9ygfFhv4r3jDKlw=) 3: 3135372e32302e3231392e302f32342d3234203d3e20313532343233.roa (hash: VLaO/ySY+ntAKUzijWFb7J8NTbjb4cdGL70vMkZXXug=) 4: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (hash: nv2/DUQnze7FZdnWg8O1b8JOsCb1KZzG0d/PmRvY8wo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f1:b0:b7:9f:a0:af:80:bf:23:33:18:fb:36:6a:2e:04:c2:a4:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Validity Not Before: Sep 21 12:37:04 2026 GMT Not After : Sep 22 15:09:04 2026 GMT Subject: CN=011ACDD04A318B71D03B5C7881D9416819D4DAA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:60:de:e0:a1:aa:27:1e:4f:ad:3f:21:7b: 9f:dc:e7:38:5a:9c:a5:af:df:fa:a3:ce:1c:1e:2d: e7:6a:37:5a:75:12:c5:f9:61:b4:d9:c2:84:88:85: 23:2d:08:6e:c7:40:8d:d3:5d:62:4e:b2:01:de:34: 3c:2f:63:ea:22:0c:e9:b9:6f:6b:64:eb:8b:c8:18: 7d:f5:9d:4f:f2:d2:98:5e:4e:f4:ea:72:8e:75:8b: 83:c4:27:b4:8e:c5:f5:6e:83:b6:84:60:e2:81:39: b0:69:c5:34:57:f1:0f:74:4d:23:ba:b8:7b:d7:c7: 37:7f:9c:9c:43:c2:f8:09:1e:11:e7:f4:8e:ee:d8: 26:9f:c3:cb:fa:e6:f6:77:73:82:59:80:58:fd:8f: b3:14:56:5b:3b:cf:68:54:1e:0b:94:1d:3b:75:39: a1:ec:4a:60:08:db:f9:aa:4e:07:4c:ef:a4:a8:3e: 8d:2d:af:e1:d7:4a:b5:dc:a7:31:ae:ce:f4:28:87: eb:65:5a:73:19:05:04:e8:0b:d8:8d:cf:c3:b4:64: a0:86:f7:3f:5c:c9:4c:34:ec:bf:09:54:d2:90:16: 14:32:f7:f8:f0:5b:81:61:13:4a:a7:32:b6:97:fe: 45:d7:7b:6d:b9:17:c8:4f:3f:92:a1:a8:84:7b:61: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1A:CD:D0:4A:31:8B:71:D0:3B:5C:78:81:D9:41:68:19:D4:DA:A3 X509v3 Authority Key Identifier: keyid:3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a7:06:cc:46:90:52:e5:ec:7a:52:6e:d8:9a:9f:fa:1a:99: 88:9a:2b:7e:6f:eb:ab:45:07:b4:c3:ba:75:70:6e:7a:5b:52: b7:82:cd:2c:25:ef:a9:35:b6:01:99:e0:1a:3e:4e:de:8b:4b: 5d:04:99:fc:77:92:16:ce:c7:95:36:38:bf:2c:07:5b:3f:2a: b7:6c:d1:db:0a:f2:f5:2f:a5:84:a9:3d:80:b2:bd:c5:42:26: 89:e7:83:63:da:68:33:59:0c:df:70:8f:9f:75:ed:07:ba:ba: 0e:27:67:1e:69:ed:d7:d6:3d:57:db:2d:1d:70:9e:04:b1:84: 13:c3:32:2d:93:99:34:1f:ac:fe:66:b3:84:92:56:f7:53:5f: ae:e6:42:fa:e8:96:0a:1f:bd:6b:d1:3a:a9:34:f9:a2:eb:61: 81:f9:1b:97:24:54:cd:bb:d1:a2:9d:f2:e6:37:98:74:c0:cb: 3b:cd:5f:6b:e0:cf:2c:f7:3b:85:48:4f:b0:0d:d9:e9:e0:e3: 86:ab:2b:00:6c:48:7b:ff:14:17:00:d1:e3:59:ad:b8:ef:66: 68:51:b0:54:ca:16:5b:6f:5d:9c:53:cc:66:02:71:1c:ad:50: 98:ea:a4:47:5f:9a:34:ba:64:dd:ab:97:f9:e5:0c:ef:7b:55: fe:b2:f4:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUvGwt5+gr4C/IzMY+zZqLgTCpCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0 OUZFRkU1NDAeFw0yNjA5MjExMjM3MDRaFw0yNjA5MjIxNTA5MDRaMDMxMTAvBgNV BAMTKDAxMUFDREQwNEEzMThCNzFEMDNCNUM3ODgxRDk0MTY4MTlENERBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX4WDe4KGqJx5PrT8he5/c5zha nKWv3/qjzhweLedqN1p1EsX5YbTZwoSIhSMtCG7HQI3TXWJOsgHeNDwvY+oiDOm5 b2tk64vIGH31nU/y0pheTvTqco51i4PEJ7SOxfVug7aEYOKBObBpxTRX8Q90TSO6 uHvXxzd/nJxDwvgJHhHn9I7u2Cafw8v65vZ3c4JZgFj9j7MUVls7z2hUHguUHTt1 OaHsSmAI2/mqTgdM76SoPo0tr+HXSrXcpzGuzvQoh+tlWnMZBQToC9iNz8O0ZKCG 9z9cyUw07L8JVNKQFhQy9/jwW4FhE0qnMraX/kXXe225F8hPP5KhqIR7YWTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUARrN0Eoxi3HQO1x4gdlBaBnU2qMwHwYDVR0j BBgwFoAUPAvWuxtMsH3Fj28wFrXsN0n+/lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlODNhZmUtM2JkYy00NGIyLWE3MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIx QjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0OUZFRkU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQzBCRDZCQjFCNENCMDdEQzU4RjZGMzAxNkI1RUMzNzQ5RkVG RTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJlODNhZmUtM2JkYy00NGIyLWE3 MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVD Mzc0OUZFRkU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFenBsxGkFLl7HpSbtian/oamYiaK35v66tF B7TDunVwbnpbUreCzSwl76k1tgGZ4Bo+Tt6LS10Emfx3khbOx5U2OL8sB1s/Krds 0dsK8vUvpYSpPYCyvcVCJonng2PaaDNZDN9wj5917Qe6ug4nZx5p7dfWPVfbLR1w ngSxhBPDMi2TmTQfrP5ms4SSVvdTX67mQvrolgofvWvROqk0+aLrYYH5G5ckVM27 0aKd8uY3mHTAyzvNX2vgzyz3O4VIT7AN2eng44arKwBsSHv/FBcA0eNZrbjvZmhR sFTKFltvXZxTzGYCcRytUJjqpEdfmjS6ZN2rl/nlDO97Vf6y9Lg= -----END CERTIFICATE-----Generated at Mon Sep 21 16:33:59 2026 by rpki-client