$ rpki-client -vvvf rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft File: 3FCCB124CE6330827269179656BC9A7F04BCACF3.mft (raw, json) Hash identifier: IcK+YdfIln0ztuI5+S2f4DHb8I5QFKwI6FLaL93PCy4= Subject key identifier: 9F:D2:83:9A:6E:D0:89:F3:5C:DF:3E:11:D6:26:50:7B:3C:49:8A:51 Authority key identifier: 3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 Certificate issuer: /CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Certificate serial: 145F072862864A26578CBF9E184A65AFF628E54E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 00:13:23 +0000 Manifest this update: Thu 03 Sep 2026 00:08:23 +0000 Manifest next update: Fri 04 Sep 2026 00:42:23 +0000 Files and hashes: 1: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: AQenx1dt+kU1dllLrJ4J77w2s2czEkS4jP/ajMi229M=) 2: 3FCCB124CE6330827269179656BC9A7F04BCACF3.crl (hash: LiFYxgDBqKc/89401iIqQqTfa5tyg0kOGgsTFDPjQsU=) 3: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: SSEqRHV7zoEBGj203TATYpoeDOC/rqoDeoQ8cFsGA28=) 4: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: vpj2Cz8QvcSUHt1I4ZpBnWfoJ+ZMnw91/FihIVwqKaA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 00:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5f:07:28:62:86:4a:26:57:8c:bf:9e:18:4a:65:af:f6:28:e5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Validity Not Before: Sep 3 00:08:23 2026 GMT Not After : Sep 4 00:42:23 2026 GMT Subject: CN=9FD2839A6ED089F35CDF3E11D626507B3C498A51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b5:4d:7f:e7:ff:52:06:ba:a9:fb:b7:8e:b5: 42:34:78:de:e4:3a:63:e9:a4:a9:ef:c9:bd:33:8a: 0d:02:ea:72:44:d8:81:50:1d:28:63:43:9f:45:19: 55:cd:de:fb:cf:53:49:21:df:38:f4:ad:19:c2:d0: 84:7a:57:3e:7a:bb:0c:b0:b8:34:67:49:4d:50:14: e6:c3:e1:08:3c:f0:31:7f:cf:57:4b:47:9c:07:0a: 66:01:7e:66:86:71:de:37:5c:fc:3e:06:e5:f5:56: 28:4c:95:e8:12:79:3b:c0:be:bb:e8:09:eb:8e:91: f6:6e:2a:4e:f1:68:39:5f:3e:ea:9d:e9:fb:82:c0: ce:ff:60:df:3c:e3:d0:0e:47:c7:f4:42:b4:97:62: 43:8e:71:f5:da:c0:5e:1b:29:fe:9a:74:26:6b:92: 3c:79:fa:d7:2d:3c:55:c4:a5:ab:5c:c8:00:62:de: ab:44:d3:da:7d:51:11:48:a5:84:e9:12:ef:c7:c3: aa:a7:e9:43:05:31:0c:74:cd:f5:1e:9a:ef:cb:95: b6:30:0e:0c:b3:ba:ba:64:d5:22:68:ca:03:bc:f5: 04:35:af:9c:08:83:43:77:47:e9:33:b9:1e:9c:bf: 55:f9:c2:91:da:3d:7f:b7:df:69:c9:e2:1f:77:b2: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D2:83:9A:6E:D0:89:F3:5C:DF:3E:11:D6:26:50:7B:3C:49:8A:51 X509v3 Authority Key Identifier: keyid:3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f3:7d:7d:e5:c2:2e:87:13:fd:f5:fd:ed:13:fa:d3:bc:5f: 07:67:0d:2b:1a:1c:31:2a:cb:14:74:9a:ad:2a:72:36:f4:8d: fe:fc:bf:02:31:36:e6:c5:c9:8f:15:8f:17:6f:ed:d1:40:db: 4a:dd:98:18:ff:88:bb:03:50:6b:79:44:8c:da:70:70:66:ee: 04:d7:39:16:80:90:2a:94:01:52:c0:15:bb:d5:4b:82:14:d2: 23:57:0b:95:81:f3:13:ea:7d:be:fd:ee:13:df:a2:85:22:e2: 23:e9:8e:23:74:90:f3:d0:81:ad:85:91:44:16:5e:d2:59:fd: 7c:96:04:73:1e:39:2e:61:a4:d8:8a:e6:8d:37:63:51:a8:84: 65:17:30:2f:86:25:60:6e:ae:25:ee:cc:5f:30:ce:21:da:a8: ab:3c:e7:11:5d:6d:91:81:17:e2:ac:db:39:8e:4e:b7:36:50: c1:5d:42:72:75:71:0d:ff:15:cc:d9:ec:e3:66:85:d5:6f:35: 99:c9:90:af:25:87:52:18:5d:ab:97:92:d4:85:48:3c:01:8d: bb:cf:23:c0:9c:b3:25:96:23:f4:96:36:fc:0a:e1:75:e7:d8: 98:ac:8e:3c:52:2a:4d:00:ef:2c:48:a6:33:37:bc:19:f0:c0: 13:b2:71:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFF8HKGKGSiZXjL+eGEplr/Yo5U4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlBN0Yw NEJDQUNGMzAeFw0yNjA5MDMwMDA4MjNaFw0yNjA5MDQwMDQyMjNaMDMxMTAvBgNV BAMTKDlGRDI4MzlBNkVEMDg5RjM1Q0RGM0UxMUQ2MjY1MDdCM0M0OThBNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDotU1/5/9SBrqp+7eOtUI0eN7k OmPppKnvyb0zig0C6nJE2IFQHShjQ59FGVXN3vvPU0kh3zj0rRnC0IR6Vz56uwyw uDRnSU1QFObD4Qg88DF/z1dLR5wHCmYBfmaGcd43XPw+BuX1VihMlegSeTvAvrvo CeuOkfZuKk7xaDlfPuqd6fuCwM7/YN8849AOR8f0QrSXYkOOcfXawF4bKf6adCZr kjx5+tctPFXEpatcyABi3qtE09p9URFIpYTpEu/Hw6qn6UMFMQx0zfUemu/LlbYw Dgyzurpk1SJoygO89QQ1r5wIg0N3R+kzuR6cv1X5wpHaPX+332nJ4h93ssKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn9KDmm7QifNc3z4R1iZQezxJilEwHwYDVR0j BBgwFoAUP8yxJM5jMIJyaReWVryafwS8rPMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMzZjYwZTYtYWZkZC00ZTEwLTgzYjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRD RTYzMzA4MjcyNjkxNzk2NTZCQzlBN0YwNEJDQUNGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNDQjEyNENFNjMzMDgyNzI2OTE3OTY1NkJDOUE3RjA0QkNB Q0YzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlB N0YwNEJDQUNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjzfX3lwi6HE/31/e0T+tO8XwdnDSsaHDEq yxR0mq0qcjb0jf78vwIxNubFyY8Vjxdv7dFA20rdmBj/iLsDUGt5RIzacHBm7gTX ORaAkCqUAVLAFbvVS4IU0iNXC5WB8xPqfb797hPfooUi4iPpjiN0kPPQga2FkUQW XtJZ/XyWBHMeOS5hpNiK5o03Y1GohGUXMC+GJWBuriXuzF8wziHaqKs85xFdbZGB F+Ks2zmOTrc2UMFdQnJ1cQ3/FczZ7ONmhdVvNZnJkK8lh1IYXauXktSFSDwBjbvP I8CcsyWWI/SWNvwK4XXn2JisjjxSKk0A7yxIpjM3vBnwwBOycT0= -----END CERTIFICATE-----Generated at Thu Sep 3 14:16:34 2026 by rpki-client