$ rpki-client -vvvf rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft File: C3CDEFC1D42DBC526894B49382D693AB81922151.mft (raw, json) Hash identifier: ueaouP2y7b+emJtn52AF/j6zDSaiU26LwX+MPNec7os= Subject key identifier: E2:58:D5:37:05:04:36:71:BA:29:78:E0:5E:7C:3D:34:B2:62:C3:96 Authority key identifier: C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51 Certificate issuer: /CN=C3CDEFC1D42DBC526894B49382D693AB81922151 Certificate serial: 30D80E6985B8562CD59AC1085AE6463BAEBD2D3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 13:40:05 +0000 Manifest this update: Wed 02 Sep 2026 13:35:05 +0000 Manifest next update: Thu 03 Sep 2026 17:22:05 +0000 Files and hashes: 1: C3CDEFC1D42DBC526894B49382D693AB81922151.crl (hash: ZcRB5qE77siCZBEMNEJ/vI1S+3f0zcTT0r1BQdVtvz4=) 2: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: U7/0nIu+Bj5x9bRwZDPcfh3tl44rRdCnsM5J63akTiA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 17:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d8:0e:69:85:b8:56:2c:d5:9a:c1:08:5a:e6:46:3b:ae:bd:2d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CDEFC1D42DBC526894B49382D693AB81922151 Validity Not Before: Sep 2 13:35:05 2026 GMT Not After : Sep 3 17:22:05 2026 GMT Subject: CN=E258D53705043671BA2978E05E7C3D34B262C396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:49:4c:1f:ee:7e:49:bd:eb:14:7d:b5:55:c3: b9:45:95:16:54:a9:c4:0e:ac:fb:ec:98:3c:2e:04: 4e:72:d7:bb:44:5a:02:56:ca:4c:f7:e3:5b:0e:a2: 48:0b:c4:be:05:6e:e3:b2:cd:0b:38:95:2d:c9:a0: 5f:c8:01:2b:d8:81:54:60:6d:83:8f:94:e0:18:de: 1b:79:91:1f:6c:66:4f:c2:9c:c1:51:eb:aa:64:f1: 16:92:36:f2:f5:ca:b0:3d:78:76:58:9e:cb:8f:a6: a0:dc:51:a6:72:89:d3:15:4a:c3:cd:70:4f:35:cb: bf:d8:1b:ae:99:db:7b:8d:8e:65:55:3a:30:5d:02: 7c:ca:ac:90:6a:89:ad:53:79:c6:0a:73:27:b2:19: 3d:5a:53:39:4a:95:11:d6:d3:29:11:d2:74:f6:f9: 17:33:d9:57:06:9e:20:d3:cd:cb:02:9f:29:62:05: c0:77:7a:e1:16:78:09:d7:f5:89:e0:00:c0:24:60: b7:0f:15:9d:ca:f0:1b:4b:42:81:92:8b:7d:e2:68: 50:f8:3b:1b:57:b9:b1:ad:3c:0b:96:60:4f:0a:89: 5f:62:2a:a8:26:f0:69:9e:b9:52:58:fd:42:54:33: d5:71:ad:4d:e8:4b:c8:2e:2c:6f:21:85:c3:6c:2f: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:58:D5:37:05:04:36:71:BA:29:78:E0:5E:7C:3D:34:B2:62:C3:96 X509v3 Authority Key Identifier: keyid:C3:CD:EF:C1:D4:2D:BC:52:68:94:B4:93:82:D6:93:AB:81:92:21:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3CDEFC1D42DBC526894B49382D693AB81922151.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/C3CDEFC1D42DBC526894B49382D693AB81922151.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:32:0e:9d:0d:58:37:b6:02:15:5e:53:f4:45:32:8c:32:44: 99:29:a7:68:7e:29:85:96:4e:b9:53:76:af:e8:52:e2:ea:37: e9:25:dd:44:87:cd:27:2e:51:23:94:34:d2:d4:7d:ad:7d:53: 6a:50:da:d4:72:89:05:5b:f6:0e:17:85:06:2c:ae:98:f0:c2: 61:c1:a2:30:b3:d5:8f:4e:ea:d8:70:ce:d7:63:91:32:97:6d: 98:20:b6:4c:3d:8c:3a:03:5e:10:35:f9:97:10:b1:a2:6d:3a: 21:a4:aa:a6:e2:24:5c:44:e9:95:28:1b:b3:e7:1a:5a:fb:19: c1:54:4b:6e:49:07:4a:ad:3e:58:bb:c1:ae:62:e8:aa:bc:08: f8:b1:29:fa:5e:ff:10:37:e4:e5:00:c7:52:23:6e:05:92:ee: ba:05:42:c8:f3:2d:b0:3f:93:c9:0c:91:88:76:e3:db:4c:c0: b7:b2:3f:02:84:6f:6b:d9:a3:b9:28:cd:04:fc:d3:76:d0:75: 14:94:10:49:90:0e:25:ad:c6:71:64:d1:07:d0:5a:61:f8:37: bf:ea:8d:6f:6f:98:d9:5c:2e:63:b4:64:ae:bc:24:7e:32:06: f7:4b:09:81:a9:9c:fe:03:64:4b:0e:c4:04:69:25:b5:19:b8: 62:bb:0c:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNgOaYW4VizVmsEIWuZGO669LTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDREVGQzFENDJEQkM1MjY4OTRCNDkzODJENjkzQUI4 MTkyMjE1MTAeFw0yNjA5MDIxMzM1MDVaFw0yNjA5MDMxNzIyMDVaMDMxMTAvBgNV BAMTKEUyNThENTM3MDUwNDM2NzFCQTI5NzhFMDVFN0MzRDM0QjI2MkMzOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrSUwf7n5JvesUfbVVw7lFlRZU qcQOrPvsmDwuBE5y17tEWgJWykz341sOokgLxL4FbuOyzQs4lS3JoF/IASvYgVRg bYOPlOAY3ht5kR9sZk/CnMFR66pk8RaSNvL1yrA9eHZYnsuPpqDcUaZyidMVSsPN cE81y7/YG66Z23uNjmVVOjBdAnzKrJBqia1TecYKcyeyGT1aUzlKlRHW0ykR0nT2 +Rcz2VcGniDTzcsCnyliBcB3euEWeAnX9YngAMAkYLcPFZ3K8BtLQoGSi33iaFD4 OxtXubGtPAuWYE8KiV9iKqgm8GmeuVJY/UJUM9VxrU3oS8guLG8hhcNsL/SHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ljVNwUENnG6KXjgXnw9NLJiw5YwHwYDVR0j BBgwFoAUw83vwdQtvFJolLSTgtaTq4GSIVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTVkZjUxMmYtMGQxYS00YjA5LWI5YTQtYTljNTI1ZWMyODE3LzAvQzNDREVGQzFE NDJEQkM1MjY4OTRCNDkzODJENjkzQUI4MTkyMjE1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0NERUZDMUQ0MkRCQzUyNjg5NEI0OTM4MkQ2OTNBQjgxOTIy MTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvQzNDREVGQzFENDJEQkM1MjY4OTRCNDkzODJENjkz QUI4MTkyMjE1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQyDp0NWDe2AhVeU/RFMowyRJkpp2h+KYWW TrlTdq/oUuLqN+kl3USHzScuUSOUNNLUfa19U2pQ2tRyiQVb9g4XhQYsrpjwwmHB ojCz1Y9O6thwztdjkTKXbZggtkw9jDoDXhA1+ZcQsaJtOiGkqqbiJFxE6ZUoG7Pn Glr7GcFUS25JB0qtPli7wa5i6Kq8CPixKfpe/xA35OUAx1IjbgWS7roFQsjzLbA/ k8kMkYh249tMwLeyPwKEb2vZo7kozQT803bQdRSUEEmQDiWtxnFk0QfQWmH4N7/q jW9vmNlcLmO0ZK68JH4yBvdLCYGpnP4DZEsOxARpJbUZuGK7DHA= -----END CERTIFICATE-----Generated at Thu Sep 3 06:00:33 2026 by rpki-client