$ rpki-client -vvvf rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft File: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft (raw, json) Hash identifier: R3iVaG9uJVOmubBPmtx34ZZH+TsNYuIUWFgvltN3COg= Subject key identifier: 1F:09:D8:6B:BE:2F:90:65:84:A2:47:0A:EA:4B:D7:A4:AC:9C:41:B9 Authority key identifier: C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B Certificate issuer: /CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Certificate serial: 0CD6124D60A51880FEBC938BA0ED55C657EB2625 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 12:13:24 +0000 Manifest this update: Wed 04 Nov 2026 12:08:24 +0000 Manifest next update: Thu 05 Nov 2026 12:41:24 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: Qghy68jg4bTWy5WkUB9ep5lnlWfvqYFDvEH2tiwveXs=) 2: C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl (hash: xLULnDMb1FGPVbibXUqGLE+1CnTsGX/30GyFnzXOfY8=) 3: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: LIajhJuhOUTaJm+oofhgjNswmcoOFB63ng8TVN1eQsc=) 4: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: YLTFqPbE8HodWEXzk84zRnRAos+QxeVHNtxc/4KtNBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 12:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d6:12:4d:60:a5:18:80:fe:bc:93:8b:a0:ed:55:c6:57:eb:26:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B Validity Not Before: Nov 4 12:08:24 2026 GMT Not After : Nov 5 12:41:24 2026 GMT Subject: CN=1F09D86BBE2F906584A2470AEA4BD7A4AC9C41B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:52:93:61:47:0f:f1:c2:22:0c:94:f6:38: 54:40:c6:58:07:de:d7:0a:57:a5:62:72:07:4f:83: d3:14:64:85:86:5b:60:86:1f:44:f7:10:da:1c:fa: 42:2c:6e:54:b0:ba:80:90:b3:c8:54:e6:69:49:1e: 52:90:69:00:d8:07:c6:84:b4:e9:51:4d:66:aa:9f: da:c8:37:6f:9e:c5:40:77:74:9d:44:f4:71:45:22: 54:a6:d9:7f:ef:5f:ca:31:65:f6:b0:35:49:c9:09: d5:3a:eb:a0:0b:cf:b8:32:8a:8b:64:83:36:c5:8d: 23:b2:a3:82:36:09:52:ae:a6:2e:ab:81:72:6f:fb: 90:08:22:58:2d:4e:fa:56:28:75:2e:bc:b5:76:7a: b6:fc:b7:2d:da:ca:0e:bf:7e:b4:95:dd:b6:8c:d2: eb:78:53:a1:af:07:e7:42:fb:10:56:91:66:3f:f3: 63:58:12:13:60:ff:b3:33:3c:fb:3f:37:e4:00:e6: e7:3d:45:99:3a:52:68:80:a5:1e:f3:0c:32:93:38: 55:d7:1a:40:0d:df:f1:41:e4:c0:d0:32:e9:f5:44: 02:e0:ae:5c:c1:66:eb:f3:9b:1b:55:83:c6:eb:0c: 53:4d:0c:e1:53:7f:29:06:48:20:f7:2a:d3:6e:07: 6f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:09:D8:6B:BE:2F:90:65:84:A2:47:0A:EA:4B:D7:A4:AC:9C:41:B9 X509v3 Authority Key Identifier: keyid:C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b8:e8:58:0d:b2:9c:3a:0c:96:d5:30:d6:1a:02:55:f3:39: e0:16:f0:e1:d9:8f:53:34:83:0b:95:0e:bf:d5:64:97:9e:87: d0:aa:90:ed:4e:9b:e9:e1:ee:ae:84:3b:c2:c3:df:66:6c:85: 75:a4:c7:66:65:aa:41:27:be:c3:5a:73:7f:e4:1f:cc:bd:6a: 99:2f:6f:be:bc:cf:54:2b:9d:11:c0:44:28:53:66:bb:f9:b1: bf:c3:ca:79:77:49:d0:df:c4:dd:29:d0:b5:ca:8e:84:d9:8c: 67:65:2d:cd:52:11:25:ae:41:7e:07:cd:c3:f2:47:02:22:00: c3:e3:c2:cd:74:2f:d0:ef:23:56:14:b1:f4:15:d7:34:0d:c8: cc:d8:8b:79:b0:73:41:d3:e4:d5:a5:88:5d:86:ba:12:a3:b1: 94:2b:0e:29:83:86:78:bd:2a:5f:56:ae:1e:94:6a:02:e0:ed: 22:01:8d:cd:9a:dd:7b:54:0d:21:cf:88:9e:38:2f:57:36:4b: ef:e6:fd:f2:e9:4f:d1:4d:9f:22:ac:60:ce:a3:6c:07:04:e8: 22:67:c6:3a:90:b1:07:fe:9e:79:de:f9:37:e1:96:62:32:03: bc:aa:41:17:b0:46:96:ed:90:9c:90:c3:b7:51:59:d3:9a:56: 66:72:fb:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNYSTWClGID+vJOLoO1VxlfrJiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYw RjdGN0Q4QjAeFw0yNjExMDQxMjA4MjRaFw0yNjExMDUxMjQxMjRaMDMxMTAvBgNV BAMTKDFGMDlEODZCQkUyRjkwNjU4NEEyNDcwQUVBNEJEN0E0QUM5QzQxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwklKTYUcP8cIiDJT2OFRAxlgH 3tcKV6VicgdPg9MUZIWGW2CGH0T3ENoc+kIsblSwuoCQs8hU5mlJHlKQaQDYB8aE tOlRTWaqn9rIN2+exUB3dJ1E9HFFIlSm2X/vX8oxZfawNUnJCdU666ALz7gyiotk gzbFjSOyo4I2CVKupi6rgXJv+5AIIlgtTvpWKHUuvLV2erb8ty3ayg6/frSV3baM 0ut4U6GvB+dC+xBWkWY/82NYEhNg/7MzPPs/N+QA5uc9RZk6UmiApR7zDDKTOFXX GkAN3/FB5MDQMun1RALgrlzBZuvzmxtVg8brDFNNDOFTfykGSCD3KtNuB28PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHwnYa74vkGWEokcK6kvXpKycQbkwHwYDVR0j BBgwFoAUw8MJD52Wylk26ot9WemuZg9/fYswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTRjNzc2NjYtNGM3NC00NDBkLTkxNjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5 RDk2Q0E1OTM2RUE4QjdENTlFOUFFNjYwRjdGN0Q4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0MzMDkwRjlEOTZDQTU5MzZFQThCN0Q1OUU5QUU2NjBGN0Y3 RDhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvQzNDMzA5MEY5RDk2Q0E1OTM2RUE4QjdENTlFOUFF NjYwRjdGN0Q4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ246FgNspw6DJbVMNYaAlXzOeAW8OHZj1M0 gwuVDr/VZJeeh9CqkO1Om+nh7q6EO8LD32ZshXWkx2ZlqkEnvsNac3/kH8y9apkv b768z1QrnRHARChTZrv5sb/Dynl3SdDfxN0p0LXKjoTZjGdlLc1SESWuQX4HzcPy RwIiAMPjws10L9DvI1YUsfQV1zQNyMzYi3mwc0HT5NWliF2GuhKjsZQrDimDhni9 Kl9Wrh6UagLg7SIBjc2a3XtUDSHPiJ44L1c2S+/m/fLpT9FNnyKsYM6jbAcE6CJn xjqQsQf+nnne+TfhlmIyA7yqQRewRpbtkJyQw7dRWdOaVmZy+3E= -----END CERTIFICATE-----Generated at Thu Nov 5 05:19:17 2026 by rpki-client