$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft File: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft (raw, json) Hash identifier: RBFRnsgShPkXbWmkrGGt2vxZLgF+n/gDdmX/PrDLo6s= Subject key identifier: 97:0E:59:8A:92:10:3A:2E:E4:8F:25:E7:38:DA:C7:64:C4:96:40:60 Authority key identifier: 3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 Certificate issuer: /CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Certificate serial: 3B09997B9E4B2DA97A6420747971417F3FEEDFC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 07:21:41 +0000 Manifest this update: Mon 02 Nov 2026 07:16:41 +0000 Manifest next update: Tue 03 Nov 2026 10:25:41 +0000 Files and hashes: 1: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: XvoXxYyRseZ9WRVoAocJ9gpnu/or6v87QzxE4f486Ao=) 2: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: 99A+bJb86RNl0uIhsPESoN9F5vmyx2f3sELQT2/n36Q=) 3: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl (hash: OcoSCPLvWPG8zupJo39JY0F58oLQzCZdaxgS/h7fhrg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 10:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:09:99:7b:9e:4b:2d:a9:7a:64:20:74:79:71:41:7f:3f:ee:df:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Validity Not Before: Nov 2 07:16:41 2026 GMT Not After : Nov 3 10:25:41 2026 GMT Subject: CN=970E598A92103A2EE48F25E738DAC764C4964060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:03:d4:ce:5a:54:35:77:19:70:1e:a4:12: bc:3e:bb:ad:7b:c0:d4:92:ff:af:a4:06:02:a3:b3: f0:b3:54:b3:ef:48:8c:70:0a:ac:52:f2:d2:4e:cd: c6:b3:b7:8e:e7:c2:47:ce:06:b6:ac:9b:52:54:a0: 40:2a:3d:08:51:c4:8b:4d:b1:1f:dc:5b:fa:c0:28: a5:8c:9a:b6:ad:f5:59:d8:a2:55:06:67:6e:2b:01: 62:05:98:9e:8c:0c:e4:13:58:d7:15:24:bb:05:34: 4b:72:19:f8:bb:a7:ce:58:fe:6a:80:d1:07:41:ed: 7a:3e:b1:85:dc:67:18:c5:7a:fb:61:9f:a1:ed:d8: d4:6a:81:e5:cb:b8:81:2b:9c:d7:df:a3:ee:3b:17: a2:16:53:2b:07:28:e7:54:ba:ea:3a:cd:4b:18:03: 34:eb:84:0b:9a:1f:f1:bc:ea:af:1f:b1:4c:f1:ba: 9e:10:d3:39:82:2c:2d:9c:cc:0c:ba:79:21:9c:f4: f5:da:0c:2c:71:df:79:7f:7f:ff:69:e8:65:e8:d0: 93:b3:59:2b:31:2c:db:60:9e:67:68:da:dc:16:b5: dd:db:d8:b9:21:02:b4:4f:b5:36:4f:3f:ed:67:05: c3:df:a5:37:cd:a9:5f:fc:8b:83:29:54:13:d2:67: 54:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0E:59:8A:92:10:3A:2E:E4:8F:25:E7:38:DA:C7:64:C4:96:40:60 X509v3 Authority Key Identifier: keyid:3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:5c:df:81:78:3d:4c:a4:e2:ca:0d:3e:c8:93:e1:3f:6a:f7: 82:d0:3f:9c:1c:88:03:c3:d6:6e:e7:05:62:04:4f:1e:ef:41: 83:9a:78:87:b0:0d:5a:98:94:45:f7:a7:fe:d0:e5:4e:3a:bf: 39:d5:56:d5:11:af:c4:f5:75:c0:59:77:7e:7c:9d:45:02:ae: 21:da:ef:0a:3c:68:bf:17:22:8d:2b:6f:b4:5b:36:47:27:7d: 34:0d:56:12:8a:7b:88:08:9b:9f:b3:78:d6:ee:dc:c0:de:b5: 45:ac:1a:0f:53:7e:5d:14:b7:58:57:cb:65:94:63:67:92:82: dd:ed:e8:5f:54:bc:f1:b6:9e:41:3d:b4:44:13:7e:87:32:0d: 85:2c:8b:ba:57:c9:01:1b:e2:4b:ad:97:71:17:89:ed:39:03: 74:4d:d6:06:0d:d4:c5:b3:fc:8e:e9:fc:31:02:e1:05:0b:b7: cb:63:fb:c9:49:60:ef:f4:dd:a4:27:29:58:66:65:b9:19:11: c2:f7:51:0f:8d:ab:06:dd:a6:1e:48:9d:15:6d:1d:57:cb:a0: 21:6e:8f:76:e7:ca:7b:9e:e3:b9:78:98:1f:e9:3d:aa:63:04: af:48:e3:d4:8c:3e:f8:d7:06:0a:5c:d8:80:8e:e0:37:16:72: 8e:53:b3:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOwmZe55LLal6ZCB0eXFBfz/u38YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2 MUQ1NUFFOTAeFw0yNjExMDIwNzE2NDFaFw0yNjExMDMxMDI1NDFaMDMxMTAvBgNV BAMTKDk3MEU1OThBOTIxMDNBMkVFNDhGMjVFNzM4REFDNzY0QzQ5NjQwNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEQPUzlpUNXcZcB6kErw+u617 wNSS/6+kBgKjs/CzVLPvSIxwCqxS8tJOzcazt47nwkfOBrasm1JUoEAqPQhRxItN sR/cW/rAKKWMmrat9VnYolUGZ24rAWIFmJ6MDOQTWNcVJLsFNEtyGfi7p85Y/mqA 0QdB7Xo+sYXcZxjFevthn6Ht2NRqgeXLuIErnNffo+47F6IWUysHKOdUuuo6zUsY AzTrhAuaH/G86q8fsUzxup4Q0zmCLC2czAy6eSGc9PXaDCxx33l/f/9p6GXo0JOz WSsxLNtgnmdo2twWtd3b2LkhArRPtTZPP+1nBcPfpTfNqV/8i4MpVBPSZ1RxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlw5ZipIQOi7kjyXnONrHZMSWQGAwHwYDVR0j BBgwFoAUPL3f6kvmtoRfjOiXY6s5OmHVWukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRkMWVhY2QtYTA2Ny00OTI0LTkyODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0 QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2MUQ1NUFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0JEREZFQTRCRTZCNjg0NUY4Q0U4OTc2M0FCMzkzQTYxRDU1 QUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5 M0E2MUQ1NUFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBc34F4PUyk4soNPsiT4T9q94LQP5wciAPD 1m7nBWIETx7vQYOaeIewDVqYlEX3p/7Q5U46vznVVtURr8T1dcBZd358nUUCriHa 7wo8aL8XIo0rb7RbNkcnfTQNVhKKe4gIm5+zeNbu3MDetUWsGg9Tfl0Ut1hXy2WU Y2eSgt3t6F9UvPG2nkE9tEQTfocyDYUsi7pXyQEb4kutl3EXie05A3RN1gYN1MWz /I7p/DEC4QULt8tj+8lJYO/03aQnKVhmZbkZEcL3UQ+Nqwbdph5InRVtHVfLoCFu j3bnynue47l4mB/pPapjBK9I49SMPvjXBgpc2ICO4DcWco5Ts5g= -----END CERTIFICATE-----Generated at Mon Nov 2 14:29:52 2026 by rpki-client