$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft File: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft (raw, json) Hash identifier: Aoj5/1vkciBwehz80DQimi9ETPrhxYfudRMEDK85szE= Subject key identifier: 69:3C:B4:9B:01:DC:87:DE:63:CB:D5:2C:C9:9C:78:DE:B2:35:1B:1B Authority key identifier: 3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF Certificate issuer: /CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Certificate serial: 5606283929E31E8E33358072418A8EE7ACDF7617 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 01:50:13 +0000 Manifest this update: Thu 03 Sep 2026 01:45:13 +0000 Manifest next update: Fri 04 Sep 2026 02:02:13 +0000 Files and hashes: 1: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl (hash: 8LvOZjQEGy5yd+Jqhlj+PPlYRw8FszI+BKACntA6cXU=) 2: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: +kmrv9UVKd6Gr+842CRBNPUYtLDCG179+fO5/CRRqOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 02:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:06:28:39:29:e3:1e:8e:33:35:80:72:41:8a:8e:e7:ac:df:76:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Validity Not Before: Sep 3 01:45:13 2026 GMT Not After : Sep 4 02:02:13 2026 GMT Subject: CN=693CB49B01DC87DE63CBD52CC99C78DEB2351B1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:49:6e:b1:06:4e:86:cc:3c:3d:6b:9a:dc: 53:6c:8d:e0:99:84:ea:24:a8:86:c4:0b:9d:63:82: 1a:d3:67:4a:80:d1:ca:26:20:ab:87:d8:c3:36:6e: 5d:43:43:6c:e7:93:f4:26:5a:57:b4:bf:b7:4e:56: aa:ee:b2:64:a5:e3:e0:b0:7e:89:72:80:83:6d:87: d7:d7:90:2e:72:eb:1d:10:a2:70:14:e0:65:6b:50: 31:fc:5d:04:cf:27:18:b5:a7:35:72:95:4a:71:98: eb:8e:b4:5a:0b:01:d6:29:ff:8c:be:51:95:c4:3e: df:a9:30:86:1c:f1:cf:99:26:5a:bb:03:e0:bd:6e: 39:ee:d9:55:d3:18:da:ea:9f:8a:fe:48:ec:73:a1: 77:7a:f9:d3:0a:a0:d1:6d:f2:ea:ca:e9:14:fc:fc: f9:df:5c:d5:75:ac:61:d5:16:f2:42:d5:ca:16:43: 81:0d:40:57:72:b7:b9:3b:3c:32:1d:bf:34:27:b8: bd:99:05:03:b0:cc:ba:38:af:2c:b7:d3:be:dc:20: 35:c3:eb:47:f5:1c:31:36:3b:bb:da:8d:0c:d1:33: e8:b1:b2:4e:98:be:d8:83:34:fd:27:84:de:9b:db: b4:e9:33:40:b7:0b:44:3b:d2:07:d4:04:f1:2b:95: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3C:B4:9B:01:DC:87:DE:63:CB:D5:2C:C9:9C:78:DE:B2:35:1B:1B X509v3 Authority Key Identifier: keyid:3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:58:97:53:8d:76:fb:aa:68:e9:9a:a8:44:d8:37:00:01:8f: 6d:0f:08:55:c7:71:82:79:a3:5c:1a:30:96:11:58:ff:55:36: 0d:1a:aa:3f:99:d3:94:0c:a8:d8:4e:62:81:5c:98:95:d9:0a: 51:53:c1:7f:e8:3a:63:91:46:81:66:b4:e4:17:27:20:53:a1: 35:8f:d7:d9:93:3c:4d:d4:05:f3:f3:3d:90:5a:14:1a:24:6b: d0:4c:14:b9:20:8d:a0:81:74:df:a8:39:d1:da:09:db:a5:7c: cd:3a:3f:f2:eb:c2:74:47:a0:a1:2b:8b:d4:f6:59:04:56:7a: c3:e2:78:66:e3:8b:20:84:e3:49:df:ca:82:f2:d5:71:83:8e: 18:d3:af:f0:ff:79:08:5c:de:3a:bb:ea:cb:e6:9a:a5:51:d1: c5:a0:18:43:80:cf:c9:f5:16:e2:a5:a8:69:db:3a:64:8c:8d: 2d:9e:a0:2d:a2:b0:99:86:a4:02:9f:96:30:2b:44:94:0a:ae: c9:2a:c7:f6:8f:d7:48:de:32:fd:ef:3e:22:97:51:c2:f1:ae: ef:2a:17:5a:f8:11:83:8d:c8:69:41:44:da:2a:c9:c0:ee:d3: 0f:5c:d0:9e:70:90:5c:29:9a:b6:ab:3c:c2:e8:d1:43:ab:a3: a1:c3:7d:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgYoOSnjHo4zNYByQYqO56zfdhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZB QUMxRUVFRjAeFw0yNjA5MDMwMTQ1MTNaFw0yNjA5MDQwMjAyMTNaMDMxMTAvBgNV BAMTKDY5M0NCNDlCMDFEQzg3REU2M0NCRDUyQ0M5OUM3OERFQjIzNTFCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9x0lusQZOhsw8PWua3FNsjeCZ hOokqIbEC51jghrTZ0qA0comIKuH2MM2bl1DQ2znk/QmWle0v7dOVqrusmSl4+Cw folygINth9fXkC5y6x0QonAU4GVrUDH8XQTPJxi1pzVylUpxmOuOtFoLAdYp/4y+ UZXEPt+pMIYc8c+ZJlq7A+C9bjnu2VXTGNrqn4r+SOxzoXd6+dMKoNFt8urK6RT8 /PnfXNV1rGHVFvJC1coWQ4ENQFdyt7k7PDIdvzQnuL2ZBQOwzLo4ryy3077cIDXD 60f1HDE2O7vajQzRM+ixsk6YvtiDNP0nhN6b27TpM0C3C0Q70gfUBPErlZeFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTy0mwHch95jy9UsyZx43rI1GxswHwYDVR0j BBgwFoAUPLaDYcrHqAj3/cS66oYNpqrB7u8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiYzNmMjktNmY5ZC00N2QzLTllNzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFD QUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZBQUMxRUVFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0I2ODM2MUNBQzdBODA4RjdGREM0QkFFQTg2MERBNkFBQzFF RUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBE QTZBQUMxRUVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdYl1ONdvuqaOmaqETYNwABj20PCFXHcYJ5 o1waMJYRWP9VNg0aqj+Z05QMqNhOYoFcmJXZClFTwX/oOmORRoFmtOQXJyBToTWP 19mTPE3UBfPzPZBaFBoka9BMFLkgjaCBdN+oOdHaCdulfM06P/LrwnRHoKEri9T2 WQRWesPieGbjiyCE40nfyoLy1XGDjhjTr/D/eQhc3jq76svmmqVR0cWgGEOAz8n1 FuKlqGnbOmSMjS2eoC2isJmGpAKfljArRJQKrskqx/aP10jeMv3vPiKXUcLxru8q F1r4EYONyGlBRNoqycDu0w9c0J5wkFwpmrarPMLo0UOro6HDfVg= -----END CERTIFICATE-----Generated at Thu Sep 3 16:21:27 2026 by rpki-client