$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft File: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft (raw, json) Hash identifier: 0ibDhA5RvXQrwMvXfB6NRVuWjRyeEP11AGwunzEG5wQ= Subject key identifier: B6:CC:A2:14:C9:A1:B4:6C:D4:8D:48:87:8E:02:03:68:A1:DF:45:1C Authority key identifier: 3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 Certificate issuer: /CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Certificate serial: 4D96F48F482BD6189CA3D4455F27A3B2EF662C56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 08:07:36 +0000 Manifest this update: Mon 02 Nov 2026 08:02:36 +0000 Manifest next update: Tue 03 Nov 2026 10:54:36 +0000 Files and hashes: 1: 3135372e32302e3231382e302f32332d3233203d3e20313532343233.roa (hash: oN269PBRDnF940fO+bfI5PiA4IWS9ygfFhv4r3jDKlw=) 2: 3135372e32302e3231392e302f32342d3234203d3e20313532343233.roa (hash: VLaO/ySY+ntAKUzijWFb7J8NTbjb4cdGL70vMkZXXug=) 3: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (hash: nv2/DUQnze7FZdnWg8O1b8JOsCb1KZzG0d/PmRvY8wo=) 4: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl (hash: +25vkhQUzC9LoTaHnDmhLb2gJ7e8o4Wt0yAx4c/W57Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 10:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:96:f4:8f:48:2b:d6:18:9c:a3:d4:45:5f:27:a3:b2:ef:66:2c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Validity Not Before: Nov 2 08:02:36 2026 GMT Not After : Nov 3 10:54:36 2026 GMT Subject: CN=B6CCA214C9A1B46CD48D48878E020368A1DF451C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ab:c7:fc:d4:66:96:99:ad:0b:45:8b:70:ae: c7:1f:02:96:ba:6c:d3:60:ee:a5:fd:01:0b:41:c5: 10:f4:f0:13:e9:88:fe:1c:ee:ef:6a:ee:9d:3c:aa: 6e:2e:31:22:4f:c7:46:a7:a1:1f:e9:df:4f:da:ac: 47:24:b7:44:c8:62:04:96:57:a0:81:9f:ab:89:2f: 13:f2:aa:c8:98:89:70:16:37:58:41:34:ae:ef:7d: b3:42:d4:b4:a3:5c:2f:2b:ef:40:c4:c5:3a:a1:7a: 42:58:1b:f0:4c:c7:d1:8f:81:d0:07:86:80:70:44: 16:86:7d:4b:73:27:d8:fb:29:15:24:9c:5f:b6:73: 7b:ad:49:77:2d:4c:86:23:b3:d8:c4:d4:0c:ea:d7: de:2b:22:82:f0:63:14:75:78:43:69:20:83:ab:aa: af:46:05:04:75:1e:48:cb:24:5b:ba:a8:e0:04:32: e7:8f:f0:17:97:9b:f2:ef:58:f3:5d:bd:c2:6e:c9: 46:d9:7a:5f:d0:4a:de:40:70:cd:8b:e2:40:88:8e: 5f:2a:65:da:4d:95:35:ed:ca:35:89:59:f5:6d:7d: 84:a5:f0:e8:e2:11:f9:8e:2d:d9:2a:b0:f0:8c:e0: eb:1b:38:a6:30:54:cf:09:10:25:eb:b7:e5:80:d6: 11:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CC:A2:14:C9:A1:B4:6C:D4:8D:48:87:8E:02:03:68:A1:DF:45:1C X509v3 Authority Key Identifier: keyid:3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:30:b6:bb:8e:f7:ee:34:4c:55:1f:5f:15:f6:e9:b3:e9:2c: 74:ab:23:b3:46:20:83:9e:8b:03:64:04:1d:65:02:10:ec:e2: 9b:53:83:59:d6:7c:63:95:96:1e:91:74:46:34:cc:23:8d:3d: ef:2c:13:7d:ef:5f:9b:96:25:e9:22:4f:86:d4:0e:c3:06:52: 37:dc:3d:48:4a:a2:25:54:6e:fb:df:43:fd:19:ed:40:dc:18: 68:d0:66:61:30:32:d6:48:e7:a7:c5:7d:6f:9e:c8:a7:96:f4: 7f:a6:05:95:06:44:c9:70:da:77:7c:02:8d:0d:df:59:24:97: 00:33:e0:f9:f7:13:16:0e:c4:b7:71:ed:17:b9:6a:95:65:d5: 18:7f:61:68:c5:d0:5e:8d:54:0d:07:1a:79:40:10:9f:63:66: ff:9e:07:cd:b1:b4:3e:6c:ca:b5:fd:30:7d:ca:d8:7f:8c:09: d4:aa:ea:0c:a2:a4:32:3d:18:d2:6f:8a:e0:39:ee:59:77:90: ec:2e:51:57:40:ad:1c:66:2c:24:3c:87:ab:6b:9f:ec:0d:8d: 06:e0:21:d9:1b:23:bd:35:aa:87:9b:76:e2:b5:68:40:2e:da: b3:0f:4a:31:1d:c1:5a:dc:a5:f6:f2:16:ea:b0:08:c5:36:71: 96:c7:85:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZb0j0gr1hico9RFXyejsu9mLFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0 OUZFRkU1NDAeFw0yNjExMDIwODAyMzZaFw0yNjExMDMxMDU0MzZaMDMxMTAvBgNV BAMTKEI2Q0NBMjE0QzlBMUI0NkNENDhENDg4NzhFMDIwMzY4QTFERjQ1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdq8f81GaWma0LRYtwrscfApa6 bNNg7qX9AQtBxRD08BPpiP4c7u9q7p08qm4uMSJPx0anoR/p30/arEckt0TIYgSW V6CBn6uJLxPyqsiYiXAWN1hBNK7vfbNC1LSjXC8r70DExTqhekJYG/BMx9GPgdAH hoBwRBaGfUtzJ9j7KRUknF+2c3utSXctTIYjs9jE1Azq194rIoLwYxR1eENpIIOr qq9GBQR1HkjLJFu6qOAEMueP8BeXm/LvWPNdvcJuyUbZel/QSt5AcM2L4kCIjl8q ZdpNlTXtyjWJWfVtfYSl8OjiEfmOLdkqsPCM4OsbOKYwVM8JECXrt+WA1hE1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtsyiFMmhtGzUjUiHjgIDaKHfRRwwHwYDVR0j BBgwFoAUPAvWuxtMsH3Fj28wFrXsN0n+/lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlODNhZmUtM2JkYy00NGIyLWE3MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIx QjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0OUZFRkU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQzBCRDZCQjFCNENCMDdEQzU4RjZGMzAxNkI1RUMzNzQ5RkVG RTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJlODNhZmUtM2JkYy00NGIyLWE3 MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVD Mzc0OUZFRkU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0wtruO9+40TFUfXxX26bPpLHSrI7NGIIOe iwNkBB1lAhDs4ptTg1nWfGOVlh6RdEY0zCONPe8sE33vX5uWJekiT4bUDsMGUjfc PUhKoiVUbvvfQ/0Z7UDcGGjQZmEwMtZI56fFfW+eyKeW9H+mBZUGRMlw2nd8Ao0N 31kklwAz4Pn3ExYOxLdx7Re5apVl1Rh/YWjF0F6NVA0HGnlAEJ9jZv+eB82xtD5s yrX9MH3K2H+MCdSq6gyipDI9GNJviuA57ll3kOwuUVdArRxmLCQ8h6trn+wNjQbg IdkbI701qoebduK1aEAu2rMPSjEdwVrcpfbyFuqwCMU2cZbHhYA= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:50 2026 by rpki-client