$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft File: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft (raw, json) Hash identifier: llDWmR2CjZmZF+QWC2UtpB/u4B5U302SVz3FHYu2o54= Subject key identifier: AB:B7:6C:CC:5D:D8:29:55:D9:AC:47:EB:64:56:79:32:76:41:91:60 Authority key identifier: 3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC Certificate issuer: /CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Certificate serial: 3611570627BE534521CCC604707677D48C04FA2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 05:44:54 +0000 Manifest this update: Thu 03 Sep 2026 05:39:54 +0000 Manifest next update: Fri 04 Sep 2026 06:43:54 +0000 Files and hashes: 1: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: u3QjwTKhA3xZ6qBaPve22SqHeKd1Tl3v9fzrQkdIYDM=) 2: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: NHpaZqHC4NTt91PhG1pzzVx+mpzKnTbfgFJI738LnKc=) 3: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: o6UES+tryYmpIwssyMXnmFCcFcBThAbWf6TdKlMd5ls=) 4: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: hCFV5sRxdzUQ0Ef1DHuXq2DMT11lGAzTPsRSkYtMfqM=) 5: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl (hash: wVcXor9XC9CqPjpm0TUW/6v58lEIiOGJp9RGBkCAzYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:11:57:06:27:be:53:45:21:cc:c6:04:70:76:77:d4:8c:04:fa:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Validity Not Before: Sep 3 05:39:54 2026 GMT Not After : Sep 4 06:43:54 2026 GMT Subject: CN=ABB76CCC5DD82955D9AC47EB6456793276419160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:cc:f6:9d:f1:81:87:59:14:c5:ec:2c:67: 12:b0:e7:e5:f5:e7:df:9d:6b:f5:05:ff:37:65:1f: 07:25:65:d4:04:24:2d:3e:d4:bf:b9:99:b2:68:b1: 59:2f:a6:9f:fa:10:dd:84:d0:2e:7e:cc:fe:89:b2: 42:9b:02:84:e5:2d:2d:e8:89:76:9c:58:db:0d:3f: 9c:8d:a4:28:0d:d4:01:99:88:a3:17:11:91:87:3d: ed:4a:cf:e7:7c:a6:7b:bb:4e:5e:4d:03:20:f7:c5: 73:75:8e:21:57:01:0f:bb:ee:b1:e8:10:a8:d5:0c: 71:63:d4:ce:3b:a4:a1:f2:e9:ed:43:af:19:91:3a: 57:78:e0:7d:23:a0:f9:1b:77:4f:86:17:70:65:1d: f0:aa:61:e9:ed:d0:e1:4a:73:f2:ea:4a:ad:aa:ac: ba:cc:12:df:5f:e0:2b:48:f4:28:fe:c6:e7:8e:47: 9e:16:28:79:b9:b0:ce:91:40:6a:af:f1:7e:ca:0d: 42:a6:9d:0e:c3:cf:e8:a3:55:83:98:30:92:3d:71: bd:09:00:a1:04:82:74:d7:7b:e9:8f:f9:a6:a3:dd: aa:4b:6a:f4:03:fb:54:b8:e3:f4:0f:4b:3e:60:e9: 3b:c4:ca:9f:89:d8:40:4d:b7:69:6b:79:b7:f3:16: 26:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B7:6C:CC:5D:D8:29:55:D9:AC:47:EB:64:56:79:32:76:41:91:60 X509v3 Authority Key Identifier: keyid:3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:34:cf:36:2c:84:4d:06:86:52:42:09:1a:d2:3c:70:74:47: 4e:74:e9:86:11:d6:de:68:cc:8b:d7:f2:65:f2:b3:4d:bf:ec: d3:96:c3:aa:62:c6:6a:ea:62:49:59:c2:52:c9:02:0c:4b:1a: 7c:eb:5f:ae:0f:04:2c:57:02:c2:14:8f:2c:b1:63:f0:48:3c: 08:3e:76:21:57:a7:84:55:de:12:e6:3a:0d:67:72:5d:8f:0d: 6e:a7:2d:be:22:02:c8:30:bb:4c:21:c7:2a:8f:87:db:4d:df: f0:0b:7d:45:26:30:db:47:51:ce:2c:e1:30:79:9d:ee:19:bf: a6:17:63:63:2c:6f:4e:5e:0f:f1:23:f2:4f:dc:92:76:3d:df: 57:af:7b:20:ea:aa:42:3c:12:19:02:89:26:e5:90:49:03:d8: e3:1f:bc:aa:b0:65:4a:6b:c1:c9:e5:d9:cc:23:37:04:51:10: ca:b4:ea:36:82:2a:67:ea:11:16:c5:59:45:64:a9:8e:f7:dc: a1:72:c9:e3:f9:43:8e:ef:34:89:5b:44:ed:cd:f3:de:14:ce: e5:46:67:04:b5:cd:f3:8d:44:e7:ff:90:23:d8:cf:b1:a8:44: 8c:ca:cf:4c:3e:f9:df:97:5c:f7:aa:e8:0e:bf:5d:45:6e:5c: 0f:ac:7d:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNhFXBie+U0UhzMYEcHZ31IwE+i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdF M0U4OEZBQzAeFw0yNjA5MDMwNTM5NTRaFw0yNjA5MDQwNjQzNTRaMDMxMTAvBgNV BAMTKEFCQjc2Q0NDNUREODI5NTVEOUFDNDdFQjY0NTY3OTMyNzY0MTkxNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlcz2nfGBh1kUxewsZxKw5+X1 59+da/UF/zdlHwclZdQEJC0+1L+5mbJosVkvpp/6EN2E0C5+zP6JskKbAoTlLS3o iXacWNsNP5yNpCgN1AGZiKMXEZGHPe1Kz+d8pnu7Tl5NAyD3xXN1jiFXAQ+77rHo EKjVDHFj1M47pKHy6e1DrxmROld44H0joPkbd0+GF3BlHfCqYent0OFKc/LqSq2q rLrMEt9f4CtI9Cj+xueOR54WKHm5sM6RQGqv8X7KDUKmnQ7Dz+ijVYOYMJI9cb0J AKEEgnTXe+mP+aaj3apLavQD+1S44/QPSz5g6TvEyp+J2EBNt2lrebfzFiZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq7dszF3YKVXZrEfrZFZ5MnZBkWAwHwYDVR0j BBgwFoAUP8/wkMeSATBAvhBnaIwst+Poj6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRhYmMwYmEtOTIyMi00YzQ1LTgzNDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBD NzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdFM0U4OEZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNGRjA5MEM3OTIwMTMwNDBCRTEwNjc2ODhDMkNCN0UzRTg4 RkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJD QjdFM0U4OEZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK80zzYshE0GhlJCCRrSPHB0R0506YYR1t5o zIvX8mXys02/7NOWw6pixmrqYklZwlLJAgxLGnzrX64PBCxXAsIUjyyxY/BIPAg+ diFXp4RV3hLmOg1ncl2PDW6nLb4iAsgwu0whxyqPh9tN3/ALfUUmMNtHUc4s4TB5 ne4Zv6YXY2Msb05eD/Ej8k/cknY931eveyDqqkI8EhkCiSblkEkD2OMfvKqwZUpr wcnl2cwjNwRREMq06jaCKmfqERbFWUVkqY733KFyyeP5Q47vNIlbRO3N894UzuVG ZwS1zfONROf/kCPYz7GoRIzKz0w++d+XXPeq6A6/XUVuXA+sfVM= -----END CERTIFICATE-----Generated at Thu Sep 3 09:27:32 2026 by rpki-client