$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft File: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft (raw, json) Hash identifier: fFPQhGPuqSjZIiRJ1ZU55H1e1s7pfPQke2Dwqh4WtLg= Subject key identifier: D2:D9:76:41:91:6A:1F:0A:FF:EB:0C:EA:A8:D7:31:AD:C0:EE:00:BD Authority key identifier: 3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C Certificate issuer: /CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Certificate serial: 490AF009456AB38A80D269E30CB84F1BED47BD47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft Manifest number: A4 Signing time: Thu 03 Sep 2026 07:31:48 +0000 Manifest this update: Thu 03 Sep 2026 07:26:48 +0000 Manifest next update: Fri 04 Sep 2026 11:17:48 +0000 Files and hashes: 1: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: 6kElF6lyRfaEOBJkx0qFZUv24i4o0ISe0pvRjTce7Do=) 2: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl (hash: KoSkqM5eQU6ZR9mWQyvTmZxHlR+QnlidbxDZZz+rEjE=) 3: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 1EALwremo0OuX0UpvCbf2flDFJadlkhYoy6Ddmmbmd0=) 4: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: uDDSqQJALKhSiJ8HMA/VUDQe5THFv4WrWGBluPCxcKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0a:f0:09:45:6a:b3:8a:80:d2:69:e3:0c:b8:4f:1b:ed:47:bd:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Validity Not Before: Sep 3 07:26:48 2026 GMT Not After : Sep 4 11:17:48 2026 GMT Subject: CN=D2D97641916A1F0AFFEB0CEAA8D731ADC0EE00BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:81:a3:0b:c5:51:06:ca:8c:75:58:09:22: b2:13:3c:4e:0d:52:a6:1d:eb:34:1f:de:22:53:58: 94:d1:61:c6:90:1e:f5:3f:77:e7:91:75:a9:c5:1e: 66:d6:22:58:54:fd:0f:8f:53:c5:81:24:06:14:08: c7:a9:8f:69:b4:83:40:05:67:40:1c:9c:ea:f5:ef: 22:3d:7b:a1:4d:79:ca:72:dc:aa:fb:5d:73:13:79: 3e:54:7a:65:02:99:7b:87:d4:e3:58:e0:d3:a7:a2: 6a:78:48:91:53:63:07:46:ad:e4:30:08:69:ec:47: 6c:97:74:d8:e6:3f:10:db:54:80:6b:48:b0:3d:33: ca:04:2a:a4:c9:b5:82:12:25:db:5e:28:1f:e6:92: a0:25:a1:84:56:a7:b1:76:98:0e:1f:a0:78:79:2e: 07:ce:0b:ce:0e:59:1f:7e:2d:46:73:5e:23:37:53: 44:fb:33:11:e0:bb:f0:7f:05:a7:c6:e6:ed:16:54: 78:ab:56:94:d3:2b:48:ef:70:dd:e5:10:52:fd:1f: 14:b2:99:f3:e4:6c:8b:16:e3:dd:03:e0:0a:89:99: 3c:bb:12:e0:ee:62:e4:86:7a:4f:6c:31:7c:1e:da: 63:1d:16:10:8b:1f:4f:3b:92:38:cd:8a:f9:f2:e1: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D9:76:41:91:6A:1F:0A:FF:EB:0C:EA:A8:D7:31:AD:C0:EE:00:BD X509v3 Authority Key Identifier: keyid:3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:25:95:03:ee:39:c7:94:78:9e:cb:b9:02:12:d9:27:15:c0: f4:1c:16:5a:ed:c5:3f:67:bc:11:af:28:85:cb:fc:bb:3f:0e: fa:2c:a5:41:fd:16:21:8f:1c:8d:23:23:38:a9:73:19:b8:33: 0f:30:fb:53:69:40:c0:36:c7:7e:af:cb:38:d4:02:f6:3a:1d: e4:f2:55:9b:73:94:0f:b4:1c:cd:15:c9:dd:e0:3c:ac:c2:5f: 1c:d0:87:4f:89:3a:b7:80:9e:b1:e2:23:2f:e8:9c:c3:e8:f9: 9b:34:00:65:c1:85:14:23:b6:83:a7:6f:a5:1a:89:a9:95:6b: 11:1f:0a:6f:85:ae:9b:dc:ce:94:a9:50:f8:75:c8:6b:7b:48: 8e:ce:1f:7d:37:f1:b8:c7:f8:f4:28:bf:27:9a:f6:d5:6a:76: cf:81:e3:bd:d9:26:84:49:cc:3f:c2:cf:66:52:e5:48:70:5b: d0:aa:98:6b:25:9e:13:84:04:6f:a6:14:ec:59:97:15:f0:ea: a9:26:58:ab:9f:9f:c3:78:ac:a8:7d:b1:2e:b7:9a:fb:9c:db: 1b:59:ff:f1:29:34:f5:4d:47:87:2f:dd:8c:b9:f3:35:6c:ac: d3:d9:fd:a5:ff:c7:c9:dd:0c:40:44:e7:4e:3a:5a:83:2f:7d: 43:58:6a:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQrwCUVqs4qA0mnjDLhPG+1HvUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdG OUE2MjUyQzAeFw0yNjA5MDMwNzI2NDhaFw0yNjA5MDQxMTE3NDhaMDMxMTAvBgNV BAMTKEQyRDk3NjQxOTE2QTFGMEFGRkVCMENFQUE4RDczMUFEQzBFRTAwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOYGjC8VRBsqMdVgJIrITPE4N UqYd6zQf3iJTWJTRYcaQHvU/d+eRdanFHmbWIlhU/Q+PU8WBJAYUCMepj2m0g0AF Z0AcnOr17yI9e6FNecpy3Kr7XXMTeT5UemUCmXuH1ONY4NOnomp4SJFTYwdGreQw CGnsR2yXdNjmPxDbVIBrSLA9M8oEKqTJtYISJdteKB/mkqAloYRWp7F2mA4foHh5 LgfOC84OWR9+LUZzXiM3U0T7MxHgu/B/BafG5u0WVHirVpTTK0jvcN3lEFL9HxSy mfPkbIsW490D4AqJmTy7EuDuYuSGek9sMXwe2mMdFhCLH087kjjNivny4RANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0tl2QZFqHwr/6wzqqNcxrcDuAL0wHwYDVR0j BBgwFoAUPfTEomplFO8zfiTTrvIo9/mmJSwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JlZDgzYmQtODk4Ni00NDI5LWEwMTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2 QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdGOUE2MjUyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREY0QzRBMjZBNjUxNEVGMzM3RTI0RDNBRUYyMjhGN0Y5QTYy NTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4 RjdGOUE2MjUyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwllQPuOceUeJ7LuQIS2ScVwPQcFlrtxT9n vBGvKIXL/Ls/DvospUH9FiGPHI0jIzipcxm4Mw8w+1NpQMA2x36vyzjUAvY6HeTy VZtzlA+0HM0Vyd3gPKzCXxzQh0+JOreAnrHiIy/onMPo+Zs0AGXBhRQjtoOnb6Ua iamVaxEfCm+FrpvczpSpUPh1yGt7SI7OH3038bjH+PQovyea9tVqds+B473ZJoRJ zD/Cz2ZS5UhwW9CqmGslnhOEBG+mFOxZlxXw6qkmWKufn8N4rKh9sS63mvuc2xtZ //EpNPVNR4cv3Yy58zVsrNPZ/aX/x8ndDEBE5046WoMvfUNYan0= -----END CERTIFICATE-----Generated at Thu Sep 3 18:53:47 2026 by rpki-client