$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft File: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft (raw, json) Hash identifier: HlFKcZ2eCGdsFVr0CzXErNoYbFybBbU/xm9zRd7v1zg= Subject key identifier: 23:8B:07:85:09:62:63:73:84:5F:89:88:82:08:39:8E:E6:4C:0D:6B Authority key identifier: 3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 Certificate issuer: /CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Certificate serial: 1B37AC4CD1FA7F4E73DD72CAB218D80D68240B1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft Manifest number: BF Signing time: Mon 21 Sep 2026 18:03:55 +0000 Manifest this update: Mon 21 Sep 2026 17:58:55 +0000 Manifest next update: Tue 22 Sep 2026 20:15:55 +0000 Files and hashes: 1: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl (hash: H+dK+6JFsGRivLkQzIJQ59PvOXnZyJtcH8XzDXEZUAE=) 2: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: hWMY9RV6tjoaYaPOGZQpY6qftIWF9uA81eVJc//u+sM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:37:ac:4c:d1:fa:7f:4e:73:dd:72:ca:b2:18:d8:0d:68:24:0b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Validity Not Before: Sep 21 17:58:55 2026 GMT Not After : Sep 22 20:15:55 2026 GMT Subject: CN=238B078509626373845F89888208398EE64C0D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:dd:a6:09:6e:0f:31:8b:94:2a:ea:20:0e: 4a:0e:25:e3:40:04:e4:04:68:92:26:d9:7e:8e:71: 2c:17:f2:b3:21:fb:41:b8:00:25:0f:4b:92:5e:f4: d9:97:cc:68:7e:9f:3d:ac:bb:66:50:c6:25:a5:b6: c7:a1:82:94:88:77:ee:5a:78:1b:cf:79:48:ad:8a: 3e:14:fb:a5:d8:3a:1e:ab:4a:d7:c2:cf:50:94:ca: bb:90:d6:6a:1e:23:3e:d2:70:93:06:f1:fa:61:bb: 51:db:b9:70:9e:b5:55:d3:7a:47:e6:64:eb:a1:e2: 62:84:d9:f3:ce:84:70:0d:3a:96:5b:cd:8e:fe:eb: 8d:98:27:c3:33:df:19:fb:28:ef:cc:fe:c8:77:c4: 93:70:c0:80:79:c6:cb:23:68:95:a1:fa:4b:49:06: 0c:9c:c1:66:be:6d:e8:ba:4d:bd:a4:c9:76:82:75: 6c:57:23:5b:da:1d:66:6d:c5:46:9f:31:36:e9:9f: 0d:7d:53:7e:0a:66:dd:d6:a4:d9:c7:1d:ec:91:ef: 9f:67:b5:4c:ae:25:16:24:87:ac:6b:08:fb:cc:09: 5d:6b:c3:7f:c0:65:09:1c:e2:08:dd:b4:45:02:f4: 4f:36:47:59:70:d4:b8:7e:cc:7f:44:21:7e:00:dc: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8B:07:85:09:62:63:73:84:5F:89:88:82:08:39:8E:E6:4C:0D:6B X509v3 Authority Key Identifier: keyid:3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6f:b4:1c:2a:27:fe:89:82:21:85:27:58:05:1b:df:f3:d8: e9:d0:64:e5:04:36:a7:aa:ef:f8:e0:e6:f2:6f:0f:c7:8f:63: 66:28:40:99:9c:70:12:ee:41:93:22:2e:28:29:46:a9:e6:12: a5:8b:5b:2e:24:83:6c:0f:1b:7c:4f:f6:65:1e:41:9a:b9:63: fe:fc:23:bf:ca:9a:fb:d8:c7:78:1a:9d:1b:c2:87:ed:81:66: 43:8f:68:fc:56:1a:a6:49:e4:14:9e:0c:68:cf:35:1a:b1:2c: 13:f0:73:cd:64:19:70:ab:4e:f9:7e:f9:70:8d:51:2a:bd:c4: df:6b:3e:d9:e6:96:58:9a:bc:6f:aa:dd:12:53:f9:45:63:5c: b3:d1:aa:ca:d6:41:71:45:ed:46:8e:8a:ef:cf:97:0b:2e:76: 75:27:13:01:37:4a:20:67:6a:66:60:94:17:e3:80:61:54:f2: ad:31:d8:c3:ac:96:1c:99:92:af:ee:04:be:ea:f1:51:88:04: ea:a1:0d:e2:32:c8:4b:16:74:3a:60:94:54:ba:c1:55:ca:07: 1a:16:90:5a:aa:57:75:1e:1a:99:fe:3e:96:7a:1f:40:fc:0c: 45:bf:0f:c4:b3:51:d8:fb:61:d4:f2:b0:f4:b5:cb:8a:40:83: 80:a0:07:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGzesTNH6f05z3XLKshjYDWgkCxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1 NDNCQjU3MDAeFw0yNjA5MjExNzU4NTVaFw0yNjA5MjIyMDE1NTVaMDMxMTAvBgNV BAMTKDIzOEIwNzg1MDk2MjYzNzM4NDVGODk4ODgyMDgzOThFRTY0QzBENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/d2mCW4PMYuUKuogDkoOJeNA BOQEaJIm2X6OcSwX8rMh+0G4ACUPS5Je9NmXzGh+nz2su2ZQxiWltsehgpSId+5a eBvPeUitij4U+6XYOh6rStfCz1CUyruQ1moeIz7ScJMG8fphu1HbuXCetVXTekfm ZOuh4mKE2fPOhHANOpZbzY7+642YJ8Mz3xn7KO/M/sh3xJNwwIB5xssjaJWh+ktJ BgycwWa+bei6Tb2kyXaCdWxXI1vaHWZtxUafMTbpnw19U34KZt3WpNnHHeyR759n tUyuJRYkh6xrCPvMCV1rw3/AZQkc4gjdtEUC9E82R1lw1Lh+zH9EIX4A3GO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI4sHhQliY3OEX4mIggg5juZMDWswHwYDVR0j BBgwFoAUPCDf6p5L2M81+gLpLMn1oVQ7tXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNkZTFjZmQtY2JiYy00ZjA4LTg5Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5 RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1NDNCQjU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIwREZFQTlFNEJEOENGMzVGQTAyRTkyQ0M5RjVBMTU0M0JC NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1 QTE1NDNCQjU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhvtBwqJ/6JgiGFJ1gFG9/z2OnQZOUENqeq 7/jg5vJvD8ePY2YoQJmccBLuQZMiLigpRqnmEqWLWy4kg2wPG3xP9mUeQZq5Y/78 I7/KmvvYx3ganRvCh+2BZkOPaPxWGqZJ5BSeDGjPNRqxLBPwc81kGXCrTvl++XCN USq9xN9rPtnmlliavG+q3RJT+UVjXLPRqsrWQXFF7UaOiu/PlwsudnUnEwE3SiBn amZglBfjgGFU8q0x2MOslhyZkq/uBL7q8VGIBOqhDeIyyEsWdDpglFS6wVXKBxoW kFqqV3UeGpn+PpZ6H0D8DEW/D8SzUdj7YdTysPS1y4pAg4CgB/0= -----END CERTIFICATE-----Generated at Tue Sep 22 02:01:22 2026 by rpki-client