$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft File: 3F5C3F8352410D0935346BFC981A5941F86DE152.mft (raw, json) Hash identifier: uF4KM4Tmjg/W3oK7+EToqqZ2HOQw7iVWOLh0hn91L8Q= Subject key identifier: 41:0C:4F:C4:CA:CA:25:5D:91:F1:0B:3C:91:E6:00:3A:B2:B7:71:00 Authority key identifier: 3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52 Certificate issuer: /CN=3F5C3F8352410D0935346BFC981A5941F86DE152 Certificate serial: 5A4C08EC208826AC5DCD88DDA5F57259C9476339 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft Manifest number: F8 Signing time: Mon 02 Nov 2026 12:23:29 +0000 Manifest this update: Mon 02 Nov 2026 12:18:29 +0000 Manifest next update: Tue 03 Nov 2026 13:43:29 +0000 Files and hashes: 1: 3F5C3F8352410D0935346BFC981A5941F86DE152.crl (hash: yQExWipoKAE3/T1amhtjSIhJ3YPIeGVBACUGtFh1RfE=) 2: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 5KhdGAwFpBBISTY9aqPLqjFXwI/SAn/2iKibebTV35o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4c:08:ec:20:88:26:ac:5d:cd:88:dd:a5:f5:72:59:c9:47:63:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F5C3F8352410D0935346BFC981A5941F86DE152 Validity Not Before: Nov 2 12:18:29 2026 GMT Not After : Nov 3 13:43:29 2026 GMT Subject: CN=410C4FC4CACA255D91F10B3C91E6003AB2B77100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:51:20:37:99:6c:89:9d:3a:84:53:4d:cc:29: 3b:8f:62:4f:ea:55:e0:e9:b1:f8:b4:27:fb:6c:0d: ec:a5:87:17:56:c2:ff:a8:e5:8f:cc:2f:b7:15:63: e8:7d:cb:8e:c9:59:c4:24:9e:ba:0c:39:56:42:5d: 54:7a:ef:b6:fb:81:a0:ff:79:3d:67:81:64:1d:5a: 99:53:c9:8d:04:01:43:d5:32:62:8e:6d:16:e5:24: c5:a8:e2:75:6d:f2:92:7a:88:d3:68:13:78:a1:96: 79:17:d2:fd:50:e6:2d:e3:9d:51:9b:4f:d3:0e:5b: ce:45:c5:a8:fc:8a:d3:a8:b9:25:7c:60:e0:b4:15: 8e:d0:5f:bb:25:e0:49:d5:1f:0e:b3:b4:7f:21:a1: af:64:04:84:ef:66:2e:b7:0a:67:9f:9f:3d:b6:f7: 05:b2:3e:1a:24:5f:b7:40:64:bc:bd:c1:d2:f6:3b: 0e:f1:47:82:6c:4f:4e:20:af:f0:1d:4a:53:93:1d: 99:5e:e9:66:7d:6d:4f:13:98:ec:27:9b:f7:84:7e: 22:e6:74:9b:c6:2b:14:d3:0d:65:a7:98:76:26:d2: 99:09:58:f9:c9:0e:10:87:3b:6a:c3:55:28:8e:06: fd:aa:bd:6a:06:7c:5e:80:26:88:8a:b0:e9:ea:1f: a8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0C:4F:C4:CA:CA:25:5D:91:F1:0B:3C:91:E6:00:3A:B2:B7:71:00 X509v3 Authority Key Identifier: keyid:3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:81:7f:d3:a9:1b:af:e3:b6:98:3f:ee:24:ed:e6:25:8c:e6: ba:2c:1d:1d:c6:17:00:33:f6:d7:41:e3:c8:93:d5:30:49:74: 17:c9:ab:fe:e6:6c:7f:80:b2:d1:90:b1:4f:bc:5e:24:0f:21: 81:a1:c6:4c:f3:6b:3e:92:92:10:6f:15:b5:67:a9:f3:04:f4: d4:d1:06:03:08:70:89:e3:74:ce:c8:a2:dd:3d:de:02:9e:28: 0a:79:df:87:f0:17:a3:c2:4b:a3:43:41:e1:40:05:e8:8a:15: 8e:0f:1e:de:6b:71:e9:19:6c:43:4e:88:6b:8b:2f:c4:dd:b9: c9:cc:2f:19:55:6d:22:3f:5d:9b:f9:39:c8:e3:4c:52:4b:29: bd:0a:b5:c9:a7:9b:db:3b:e2:86:99:7a:a4:c5:65:dd:3c:54: 65:c0:d3:71:05:c3:d0:69:8a:5d:a7:b3:ca:fc:46:b6:f2:90: 64:1e:f4:43:39:bf:92:f7:54:9b:b1:3a:ce:77:3c:07:4f:d6: b0:47:01:d4:06:8f:84:e6:fe:79:00:cf:91:a5:ba:c6:5d:8c: d8:b6:55:53:8d:5b:3b:ab:55:07:f9:32:34:b0:7d:62:38:ea: 16:0d:ff:a9:bd:c9:00:7e:fc:68:db:53:12:9b:a9:81:42:f4: 68:5a:42:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWkwI7CCIJqxdzYjdpfVyWclHYzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFG ODZERTE1MjAeFw0yNjExMDIxMjE4MjlaFw0yNjExMDMxMzQzMjlaMDMxMTAvBgNV BAMTKDQxMEM0RkM0Q0FDQTI1NUQ5MUYxMEIzQzkxRTYwMDNBQjJCNzcxMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUUSA3mWyJnTqEU03MKTuPYk/q VeDpsfi0J/tsDeylhxdWwv+o5Y/ML7cVY+h9y47JWcQknroMOVZCXVR677b7gaD/ eT1ngWQdWplTyY0EAUPVMmKObRblJMWo4nVt8pJ6iNNoE3ihlnkX0v1Q5i3jnVGb T9MOW85Fxaj8itOouSV8YOC0FY7QX7sl4EnVHw6ztH8hoa9kBITvZi63Cmefnz22 9wWyPhokX7dAZLy9wdL2Ow7xR4JsT04gr/AdSlOTHZle6WZ9bU8TmOwnm/eEfiLm dJvGKxTTDWWnmHYm0pkJWPnJDhCHO2rDVSiOBv2qvWoGfF6AJoiKsOnqH6jhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQQxPxMrKJV2R8Qs8keYAOrK3cQAwHwYDVR0j BBgwFoAUP1w/g1JBDQk1NGv8mBpZQfht4VIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UxMjc0M2QtZDU2ZC00YTc3LTkwZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1 MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFGODZERTE1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjVDM0Y4MzUyNDEwRDA5MzUzNDZCRkM5ODFBNTk0MUY4NkRF MTUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5 NDFGODZERTE1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+Bf9OpG6/jtpg/7iTt5iWM5rosHR3GFwAz 9tdB48iT1TBJdBfJq/7mbH+AstGQsU+8XiQPIYGhxkzzaz6SkhBvFbVnqfME9NTR BgMIcInjdM7Iot093gKeKAp534fwF6PCS6NDQeFABeiKFY4PHt5rcekZbENOiGuL L8TducnMLxlVbSI/XZv5OcjjTFJLKb0Ktcmnm9s74oaZeqTFZd08VGXA03EFw9Bp il2ns8r8RrbykGQe9EM5v5L3VJuxOs53PAdP1rBHAdQGj4Tm/nkAz5GlusZdjNi2 VVONWzurVQf5MjSwfWI46hYN/6m9yQB+/GjbUxKbqYFC9GhaQsA= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:49 2026 by rpki-client