$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft File: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft (raw, json) Hash identifier: IA7/aO5X8sQiOxTg688xUtKPTL4c5PYiWrq/HNdaCkc= Subject key identifier: 86:64:9C:C6:CA:CF:F2:7C:18:99:91:CA:AE:C4:F2:99:E9:B7:69:A2 Authority key identifier: 3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 Certificate issuer: /CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Certificate serial: 57534F647C1B62CC6A88D5B2BF6F1360DA9CEDB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 09:36:08 +0000 Manifest this update: Sun 15 Nov 2026 09:31:08 +0000 Manifest next update: Mon 16 Nov 2026 13:27:08 +0000 Files and hashes: 1: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: hWMY9RV6tjoaYaPOGZQpY6qftIWF9uA81eVJc//u+sM=) 2: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl (hash: oz+LdqAmpgN+RtGObinSrTb4wuyslC7Tl3+RpihQObI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:53:4f:64:7c:1b:62:cc:6a:88:d5:b2:bf:6f:13:60:da:9c:ed:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Validity Not Before: Nov 15 09:31:08 2026 GMT Not After : Nov 16 13:27:08 2026 GMT Subject: CN=86649CC6CACFF27C189991CAAEC4F299E9B769A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e1:3a:30:f5:d7:3e:4b:eb:d2:ba:df:70:3a: 5a:75:23:5b:85:c8:4d:db:ee:78:99:77:1a:52:88: 63:b1:7e:95:b2:73:d0:5e:6f:e4:a3:f3:2b:1c:72: c9:bc:c5:03:b5:c5:a3:fc:77:d8:a1:2f:23:28:24: 28:18:78:72:1d:91:82:2c:65:36:84:02:b4:25:79: c8:1b:88:f2:a2:60:6c:54:89:c1:0f:23:eb:43:f4: 0b:a0:de:f9:ab:a7:66:9a:87:af:af:4c:f6:e0:da: b9:8a:2e:4b:68:c9:02:c3:17:b5:a1:d7:42:c2:27: 50:31:15:4a:e3:23:65:3a:23:51:f5:d8:4f:48:64: 56:41:2a:e2:82:7f:ba:c0:e8:9e:8e:d1:a6:2d:99: 7d:d1:af:02:82:7d:fb:cd:e7:2c:b6:c9:09:b1:dc: 5c:73:0d:39:93:26:97:86:55:fe:78:2c:eb:af:57: b6:42:81:de:25:24:8b:8a:5f:f3:c9:92:aa:c4:0a: c4:6b:c8:ec:2e:a2:9f:75:e0:b6:57:fa:24:13:58: e7:9e:a2:72:b4:e1:c3:44:af:f3:b3:75:fa:45:b8: c8:c6:d6:fc:58:44:0b:f0:df:73:50:13:dd:a9:6d: dd:f6:7f:a0:91:c7:2c:a6:cb:44:c0:45:ca:71:5f: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:64:9C:C6:CA:CF:F2:7C:18:99:91:CA:AE:C4:F2:99:E9:B7:69:A2 X509v3 Authority Key Identifier: keyid:3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:2f:e3:80:42:88:87:e7:b7:da:a5:89:68:22:56:5d:52:0e: 7a:7f:70:cd:78:52:94:bb:ee:a5:88:b3:a9:93:23:e1:90:54: 85:48:a4:99:28:35:d6:35:6f:17:03:99:5c:50:46:8e:20:59: fc:ce:68:d2:38:0b:5d:3d:53:17:70:63:a2:4f:37:ef:75:eb: 53:f9:24:0f:52:c6:e4:fd:38:63:2d:c0:a5:5d:96:40:59:3c: d0:88:c9:36:5f:42:a5:39:79:6e:d5:18:76:d5:7e:a3:ef:e6: bd:30:e2:78:b8:3c:71:5f:72:89:44:c0:d0:58:51:cc:6c:f5: f5:f4:56:58:ef:41:a3:50:47:7a:03:9b:df:03:60:06:c1:b8: ed:ed:3d:db:12:1f:1a:f3:29:b1:53:64:c2:50:4b:f8:4e:c1: 1f:c8:18:a8:f3:c5:94:1d:f2:eb:d7:c7:9c:57:66:d5:a3:d1: 49:c4:f2:11:8e:a7:02:e2:40:e1:58:12:94:25:9d:17:ec:f7: d7:4e:51:74:2f:e4:b6:72:37:5c:cc:bd:2c:f9:d6:e2:a0:49: 91:66:68:37:59:38:d6:26:d4:e5:f8:7a:f2:49:38:10:3e:16: de:1f:75:52:1f:86:97:ae:e5:98:15:21:1a:3b:9b:0c:89:00: d8:a5:bb:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1NPZHwbYsxqiNWyv28TYNqc7bcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1 NDNCQjU3MDAeFw0yNjExMTUwOTMxMDhaFw0yNjExMTYxMzI3MDhaMDMxMTAvBgNV BAMTKDg2NjQ5Q0M2Q0FDRkYyN0MxODk5OTFDQUFFQzRGMjk5RTlCNzY5QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4Tow9dc+S+vSut9wOlp1I1uF yE3b7niZdxpSiGOxfpWyc9Beb+Sj8ysccsm8xQO1xaP8d9ihLyMoJCgYeHIdkYIs ZTaEArQlecgbiPKiYGxUicEPI+tD9Aug3vmrp2aah6+vTPbg2rmKLktoyQLDF7Wh 10LCJ1AxFUrjI2U6I1H12E9IZFZBKuKCf7rA6J6O0aYtmX3RrwKCffvN5yy2yQmx 3FxzDTmTJpeGVf54LOuvV7ZCgd4lJIuKX/PJkqrECsRryOwuop914LZX+iQTWOee onK04cNEr/OzdfpFuMjG1vxYRAvw33NQE92pbd32f6CRxyymy0TARcpxX+/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhmScxsrP8nwYmZHKrsTymem3aaIwHwYDVR0j BBgwFoAUPCDf6p5L2M81+gLpLMn1oVQ7tXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNkZTFjZmQtY2JiYy00ZjA4LTg5Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5 RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1NDNCQjU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIwREZFQTlFNEJEOENGMzVGQTAyRTkyQ0M5RjVBMTU0M0JC NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1 QTE1NDNCQjU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgv44BCiIfnt9qliWgiVl1SDnp/cM14UpS7 7qWIs6mTI+GQVIVIpJkoNdY1bxcDmVxQRo4gWfzOaNI4C109UxdwY6JPN+9161P5 JA9SxuT9OGMtwKVdlkBZPNCIyTZfQqU5eW7VGHbVfqPv5r0w4ni4PHFfcolEwNBY Ucxs9fX0VljvQaNQR3oDm98DYAbBuO3tPdsSHxrzKbFTZMJQS/hOwR/IGKjzxZQd 8uvXx5xXZtWj0UnE8hGOpwLiQOFYEpQlnRfs99dOUXQv5LZyN1zMvSz51uKgSZFm aDdZONYm1OX4evJJOBA+Ft4fdVIfhpeu5ZgVIRo7mwyJANilu68= -----END CERTIFICATE-----Generated at Sun Nov 15 19:26:04 2026 by rpki-client