$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft File: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft (raw, json) Hash identifier: miqpSY3ObXFPWV62T6fB7UjWv0aoINpUNv65JvlW7Ns= Subject key identifier: A4:90:23:7F:E2:F3:9B:53:0C:62:C4:50:F5:06:18:89:3E:C9:D3:13 Authority key identifier: 3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B Certificate issuer: /CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Certificate serial: 469C741B175BD14DEAAF2E7A35B88EE5A2FC2E49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 23:26:45 +0000 Manifest this update: Mon 02 Nov 2026 23:21:45 +0000 Manifest next update: Wed 04 Nov 2026 00:48:45 +0000 Files and hashes: 1: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: +e+HfMOZldBa/LpS7h6lb+TbzFgEj7Ip8GzPugbfqcc=) 2: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl (hash: dSXS+16hcgBwLbq/VaVi/wrF6Ox+xwgQcw/rcQxzBPI=) 3: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: TX/EOsfX6vX1OpTsTM5A3FXSv9I/LcPHoG5Z7q7voYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 00:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9c:74:1b:17:5b:d1:4d:ea:af:2e:7a:35:b8:8e:e5:a2:fc:2e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Validity Not Before: Nov 2 23:21:45 2026 GMT Not After : Nov 4 00:48:45 2026 GMT Subject: CN=A490237FE2F39B530C62C450F50618893EC9D313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4b:88:85:55:33:17:db:93:f0:cb:b4:d5:4d: 6a:bc:16:47:35:63:d5:ef:21:18:54:98:2f:97:46: f8:67:1a:65:7a:0a:e0:ef:ad:fe:bf:99:d2:ef:98: ab:4c:5e:fc:ee:e5:42:5d:9a:7c:a7:b5:8e:a2:af: 3d:27:96:ad:37:e2:b2:12:b7:90:dd:14:99:fe:a6: 5a:36:2b:a3:de:cc:2d:a3:80:4c:49:9d:0f:c2:48: d0:cc:23:7d:27:9f:74:7a:6a:ba:b0:5c:91:34:54: 66:5e:2c:a3:bb:4a:ae:d7:01:39:2d:23:d5:21:9b: fa:5c:48:3a:d2:0a:df:9c:98:4a:5d:fd:3a:f8:6e: 51:82:67:6c:65:b3:c6:a3:96:72:29:23:7f:2b:2a: b6:16:2b:3f:7e:79:14:46:23:ec:70:42:d9:cc:68: 3c:76:c0:cc:7c:1c:5a:7a:bd:b1:1d:22:56:17:b0: 5d:9b:05:42:84:1f:b8:2e:d0:6e:b7:41:2d:d9:8f: 6d:20:04:4f:3a:ea:07:9e:28:6a:60:6d:f1:62:82: 9e:d4:9e:dc:b9:c0:4b:9e:f8:13:95:3f:e8:e3:5e: 2b:63:91:9f:3a:74:e1:aa:11:04:82:67:8c:96:bb: f9:c9:ba:79:3e:3b:14:06:82:d1:df:7c:6c:23:9f: 6c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:90:23:7F:E2:F3:9B:53:0C:62:C4:50:F5:06:18:89:3E:C9:D3:13 X509v3 Authority Key Identifier: keyid:3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:10:80:c7:0e:3c:f8:77:37:50:b9:5a:4b:ca:ae:29:58:d9: 91:68:b6:0e:43:17:b3:3a:47:95:63:a9:8a:28:d5:8b:ec:ee: 19:58:b5:27:5a:96:a0:ec:1b:45:e8:b1:18:4c:23:01:4e:7b: b2:ec:9f:4a:c6:27:1c:c9:f0:68:80:c3:df:c8:6e:c2:54:f8: 8b:f2:1f:bd:0a:c7:30:57:01:d1:f2:35:63:c1:f8:e8:b1:e9: 8c:25:10:ed:f4:a1:65:ef:71:a4:67:d9:05:c5:b1:e9:78:46: b5:26:57:1e:74:5b:65:88:8e:1d:5a:52:96:22:c4:2e:60:bd: 2d:e3:d4:ae:6c:7b:53:ea:fe:15:d2:ae:b6:83:12:fe:a6:28: 7b:35:41:22:ac:3e:b5:a3:a4:d8:8a:56:33:c8:e4:4f:a2:0b: ea:39:56:bc:99:44:e8:77:ec:ae:25:ce:2a:1d:06:16:ba:b0: 11:1d:b0:d0:e7:f7:49:b5:58:63:d7:c6:ad:af:d4:5a:54:b5: 22:82:07:e7:02:c1:19:45:7a:26:20:68:1a:0d:b3:0a:b4:5d: 8a:29:d4:43:d9:c8:54:8e:25:56:cb:20:d1:13:79:5c:a6:08: b9:9a:9e:cd:8c:f7:b0:c8:ae:eb:d7:1b:3f:53:18:62:26:56: 1c:e6:0e:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpx0Gxdb0U3qry56NbiO5aL8LkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIyM0Yw RTYzODM4QjAeFw0yNjExMDIyMzIxNDVaFw0yNjExMDQwMDQ4NDVaMDMxMTAvBgNV BAMTKEE0OTAyMzdGRTJGMzlCNTMwQzYyQzQ1MEY1MDYxODg5M0VDOUQzMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNS4iFVTMX25Pwy7TVTWq8Fkc1 Y9XvIRhUmC+XRvhnGmV6CuDvrf6/mdLvmKtMXvzu5UJdmnyntY6irz0nlq034rIS t5DdFJn+plo2K6PezC2jgExJnQ/CSNDMI30nn3R6arqwXJE0VGZeLKO7Sq7XATkt I9Uhm/pcSDrSCt+cmEpd/Tr4blGCZ2xls8ajlnIpI38rKrYWKz9+eRRGI+xwQtnM aDx2wMx8HFp6vbEdIlYXsF2bBUKEH7gu0G63QS3Zj20gBE866geeKGpgbfFigp7U nty5wEue+BOVP+jjXitjkZ86dOGqEQSCZ4yWu/nJunk+OxQGgtHffGwjn2wdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpJAjf+Lzm1MMYsRQ9QYYiT7J0xMwHwYDVR0j BBgwFoAUPcDESL3f2WaK4aDY8VoiPw5jg4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M0OTM1ZDgtOTZhMi00NTY0LTg1YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhC RERGRDk2NjhBRTFBMEQ4RjE1QTIyM0YwRTYzODM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREMwQzQ0OEJEREZEOTY2OEFFMUEwRDhGMTVBMjIzRjBFNjM4 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIy M0YwRTYzODM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYQgMcOPPh3N1C5WkvKrilY2ZFotg5DF7M6 R5VjqYoo1Yvs7hlYtSdalqDsG0XosRhMIwFOe7Lsn0rGJxzJ8GiAw9/IbsJU+Ivy H70KxzBXAdHyNWPB+Oix6YwlEO30oWXvcaRn2QXFsel4RrUmVx50W2WIjh1aUpYi xC5gvS3j1K5se1Pq/hXSrraDEv6mKHs1QSKsPrWjpNiKVjPI5E+iC+o5VryZROh3 7K4lziodBha6sBEdsNDn90m1WGPXxq2v1FpUtSKCB+cCwRlFeiYgaBoNswq0XYop 1EPZyFSOJVbLINETeVymCLmans2M97DIruvXGz9TGGImVhzmDm0= -----END CERTIFICATE-----Generated at Tue Nov 3 11:13:14 2026 by rpki-client