$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft File: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft (raw, json) Hash identifier: uxpjq+GCjf/+nVsXGGZFksuuIosTigHKQUnffRP6d0w= Subject key identifier: DC:50:25:7C:E8:DD:12:7B:D8:DC:CF:BF:85:DB:45:A5:B7:90:D2:D9 Authority key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 Certificate issuer: /CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Certificate serial: 30AD54239555321051F6EC66FB880CA8B3A866B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft Manifest number: E0 Signing time: Sat 17 Oct 2026 17:15:37 +0000 Manifest this update: Sat 17 Oct 2026 17:10:37 +0000 Manifest next update: Sun 18 Oct 2026 20:47:37 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: pf1zgGEHpfn1H78lzdIyJ+7RwP4PRuY4T6Xp4PahUm8=) 2: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: 96ge8Etcm2V6UZTk31GX2s/Ds/fuLYPEHIz1Z0SJfzE=) 3: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: fotOvd+PWoydj7VIP8y6JU/MYhbVEjOQqbEDgYpaLFU=) 4: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl (hash: h1V6Du1YV8uCgHqzSj5mDZXZWbKn04cKGsJzPuxVrJY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 05:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ad:54:23:95:55:32:10:51:f6:ec:66:fb:88:0c:a8:b3:a8:66:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Validity Not Before: Oct 17 17:10:37 2026 GMT Not After : Oct 18 20:47:37 2026 GMT Subject: CN=DC50257CE8DD127BD8DCCFBF85DB45A5B790D2D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:cb:67:54:40:f7:80:59:1e:38:1b:b5:7e: 72:09:46:89:cc:67:8a:f1:11:b2:75:13:f9:40:fc: 95:6c:09:d6:76:8f:b4:ed:8c:de:1c:91:69:38:da: ea:b4:e6:2c:2f:97:4c:c5:54:84:80:b4:e2:c8:3d: 1b:5c:a4:9e:cb:16:a1:77:47:53:da:ae:c3:50:2c: 35:d7:42:79:7f:da:83:2e:cf:8b:c3:2f:94:dd:7a: bb:de:52:fb:fd:16:5f:1c:26:d6:26:04:d9:e4:41: 3e:f9:29:d4:1d:ed:24:08:6f:20:81:7e:2e:15:54: 6d:7c:59:ca:32:c1:b1:15:25:da:4f:b0:51:99:1b: 4d:ec:97:17:d4:5d:65:fa:11:8e:17:98:35:be:39: fe:e3:d9:2b:6b:90:b6:b8:5e:03:0d:bc:ed:a2:9f: 00:60:07:e7:c4:af:76:13:b4:cb:9d:c7:68:16:f2: 0d:34:7b:b9:2e:4d:38:a0:2f:00:8e:df:1d:4e:86: 1a:3d:75:15:54:55:32:6b:3a:8a:eb:a9:8b:76:ae: 4c:51:08:e6:e3:f3:7a:55:30:55:70:8f:e8:c3:d3: d8:a0:b6:17:f7:50:37:5d:a6:cd:2d:09:02:54:ac: 7a:9b:4e:38:2b:e7:bd:bb:43:cd:aa:dc:c4:18:43: 6c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:50:25:7C:E8:DD:12:7B:D8:DC:CF:BF:85:DB:45:A5:B7:90:D2:D9 X509v3 Authority Key Identifier: keyid:3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8f:70:23:52:26:30:45:82:68:b9:c3:f4:7f:d3:ef:20:5a: 9f:6a:fd:70:52:ea:1a:6e:bc:45:15:c9:c2:89:03:6a:b8:f8: 00:65:c5:d1:07:0c:67:c1:1a:eb:ff:e7:ad:85:a1:67:e5:19: bd:f4:79:0a:13:c0:fc:e3:9d:66:f9:c9:1a:7c:6b:16:e4:0b: 50:fc:fa:29:52:2d:9c:9d:b7:fa:d4:e8:f4:4d:4a:d1:55:ff: 71:e2:e7:f8:ac:27:7c:9d:ba:0b:5e:83:ac:cd:27:2b:48:d6: 2c:95:31:57:c2:a7:db:a2:92:3d:03:0a:d4:60:ff:98:23:9f: f3:1e:b9:4b:65:0c:86:28:0a:cc:85:1a:c5:5b:a3:3f:8f:c7: 74:12:e7:9b:d7:13:4d:ff:61:27:b3:0b:72:9a:ef:3c:0f:7c: 6a:ca:fe:29:10:64:f4:ea:44:f0:f8:81:fe:0a:fa:e1:f9:f7: 64:b1:02:4d:67:1d:a4:04:3b:fd:31:cf:1d:9e:be:33:b2:63: 81:3e:4d:9b:c9:ef:dd:84:91:15:67:4b:34:3a:44:a0:4a:ef: f4:b4:d8:7d:74:19:f1:54:e2:c7:a9:79:d4:28:fa:2a:ed:8e: 8c:23:81:1c:de:ca:cd:aa:6b:d6:14:2d:15:06:1d:14:dd:29: 59:47:d2:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMK1UI5VVMhBR9uxm+4gMqLOoZrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2 RDRGQURENDAeFw0yNjEwMTcxNzEwMzdaFw0yNjEwMTgyMDQ3MzdaMDMxMTAvBgNV BAMTKERDNTAyNTdDRThERDEyN0JEOERDQ0ZCRjg1REI0NUE1Qjc5MEQyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqY8tnVED3gFkeOBu1fnIJRonM Z4rxEbJ1E/lA/JVsCdZ2j7TtjN4ckWk42uq05iwvl0zFVISAtOLIPRtcpJ7LFqF3 R1ParsNQLDXXQnl/2oMuz4vDL5TderveUvv9Fl8cJtYmBNnkQT75KdQd7SQIbyCB fi4VVG18WcoywbEVJdpPsFGZG03slxfUXWX6EY4XmDW+Of7j2StrkLa4XgMNvO2i nwBgB+fEr3YTtMudx2gW8g00e7kuTTigLwCO3x1Ohho9dRVUVTJrOorrqYt2rkxR CObj83pVMFVwj+jD09igthf3UDddps0tCQJUrHqbTjgr5727Q82q3MQYQ2yrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FAlfOjdEnvY3M+/hdtFpbeQ0tkwHwYDVR0j BBgwFoAUOlKm70VzL4LZQ1k6EMf2Sm1PrdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk5YjYwNGYtMTU3OC00YTBiLThmN2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0 NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2RDRGQURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTUyQTZFRjQ1NzMyRjgyRDk0MzU5M0ExMEM3RjY0QTZENEZB REQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2 NEE2RDRGQURENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyPcCNSJjBFgmi5w/R/0+8gWp9q/XBS6hpu vEUVycKJA2q4+ABlxdEHDGfBGuv/562FoWflGb30eQoTwPzjnWb5yRp8axbkC1D8 +ilSLZydt/rU6PRNStFV/3Hi5/isJ3ydugteg6zNJytI1iyVMVfCp9uikj0DCtRg /5gjn/MeuUtlDIYoCsyFGsVboz+Px3QS55vXE03/YSezC3Ka7zwPfGrK/ikQZPTq RPD4gf4K+uH592SxAk1nHaQEO/0xzx2evjOyY4E+TZvJ792EkRVnSzQ6RKBK7/S0 2H10GfFU4sepedQo+irtjowjgRzeys2qa9YULRUGHRTdKVlH0kk= -----END CERTIFICATE-----Generated at Sat Oct 17 20:21:50 2026 by rpki-client