$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft File: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft (raw, json) Hash identifier: h0Pvg+8mqHmHk/sU/F9tVn0v/Moaq0VJbP6m4xkIk30= Subject key identifier: 43:86:7A:31:E3:E0:B7:13:3B:14:37:F4:EB:5F:C7:92:03:3F:5C:11 Authority key identifier: 3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 Certificate issuer: /CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Certificate serial: 14A789D7A7679E55765B38793E8410791BAA58EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 08:33:43 +0000 Manifest this update: Tue 03 Nov 2026 08:28:43 +0000 Manifest next update: Wed 04 Nov 2026 09:29:43 +0000 Files and hashes: 1: 3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl (hash: Uq5U/xhrUBMSyPqgiwCTOH46/5lGCDaWMpb8COybOVM=) 2: 3130332e3132372e3135342e302f32342d3234203d3e20313530353138.roa (hash: hWMY9RV6tjoaYaPOGZQpY6qftIWF9uA81eVJc//u+sM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 09:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a7:89:d7:a7:67:9e:55:76:5b:38:79:3e:84:10:79:1b:aa:58:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570 Validity Not Before: Nov 3 08:28:43 2026 GMT Not After : Nov 4 09:29:43 2026 GMT Subject: CN=43867A31E3E0B7133B1437F4EB5FC792033F5C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:05:9e:74:4f:fa:8c:e4:ee:2c:a6:f0:ad: c7:83:d8:22:8d:e9:e1:0e:0a:0a:36:55:7b:f6:bc: 0a:09:2f:4d:d2:a2:e2:0f:a4:1f:c8:c5:19:0f:97: 8c:cc:3d:d7:cd:1e:7c:85:b1:ab:60:7e:50:d0:5a: 4d:e2:32:89:1c:c5:b5:f2:98:c3:e4:f2:53:f2:4a: a6:0b:10:f3:16:12:d2:b8:f8:24:2e:ef:b4:2e:c1: ee:b1:23:5a:d7:7a:60:47:82:33:b2:99:1c:7a:c6: 91:c3:d8:f4:ae:9e:32:f7:1e:43:81:ed:26:ae:9a: 8c:a7:0a:c6:9c:59:ee:34:0e:32:96:9a:8b:35:67: 9d:09:28:6e:64:0d:1c:58:5d:c7:6f:c7:d0:e4:1f: 96:87:f3:c1:46:ca:b4:07:b5:f9:3b:06:c5:0b:9f: 75:c7:2b:de:ce:89:20:2f:94:70:3d:5f:26:64:3e: 20:75:e2:b1:ec:2e:64:15:92:23:7c:bf:67:0e:a2: 9d:bb:fa:2e:3f:65:46:7f:eb:87:22:77:51:5a:84: 49:77:2a:65:95:18:c6:e8:5b:7f:aa:b0:87:1a:47: 50:46:11:3e:39:bd:8e:94:a1:93:95:53:3d:d1:dc: 11:fc:45:b6:88:98:74:96:26:b5:77:17:a2:9d:b7: 12:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:86:7A:31:E3:E0:B7:13:3B:14:37:F4:EB:5F:C7:92:03:3F:5C:11 X509v3 Authority Key Identifier: keyid:3C:20:DF:EA:9E:4B:D8:CF:35:FA:02:E9:2C:C9:F5:A1:54:3B:B5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3C20DFEA9E4BD8CF35FA02E92CC9F5A1543BB570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:82:2f:c7:d9:6c:f4:49:49:1d:17:0b:01:a7:be:22:76:c3: 8e:6a:bf:f6:8f:9b:f5:62:ea:a8:b2:b9:3c:10:5a:78:24:a2: 6e:05:c2:ed:ed:11:29:71:9e:8c:ba:06:01:9b:84:f2:be:46: 1f:c5:de:48:61:3d:67:58:1d:e3:0a:5d:14:b1:8a:7d:0e:0f: e2:34:52:bd:eb:f7:7a:82:d9:23:18:21:e3:06:8c:db:9e:16: a9:7f:06:2a:68:09:72:18:b9:9c:63:27:c4:b6:ab:0a:11:5e: e5:bb:1b:78:8b:b8:0d:5f:7c:93:f8:22:73:62:52:62:66:4b: 4f:62:e1:e9:17:b6:3d:13:fc:32:96:8e:70:35:0a:20:3a:3a: 7a:4d:70:c6:d5:c6:4c:ae:26:61:d5:48:48:5f:83:a3:56:e6: ee:08:0f:fe:f4:59:e1:c7:91:a0:b7:76:d8:c8:15:c2:f8:c6: 5a:1a:fa:4e:ec:19:59:79:dd:b5:bc:60:a3:e0:f0:3e:5b:be: 00:d0:e4:2f:6a:c3:dd:1c:c7:14:d4:cd:94:70:dc:ea:dd:9d: dd:69:11:e2:ca:f4:04:11:b0:0e:15:1b:71:41:37:2e:84:ba: b6:78:81:19:c6:a9:3f:08:07:1e:f5:23:03:b3:71:9e:8b:7f: 30:6f:b1:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKeJ16dnnlV2Wzh5PoQQeRuqWOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1 NDNCQjU3MDAeFw0yNjExMDMwODI4NDNaFw0yNjExMDQwOTI5NDNaMDMxMTAvBgNV BAMTKDQzODY3QTMxRTNFMEI3MTMzQjE0MzdGNEVCNUZDNzkyMDMzRjVDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvgWedE/6jOTuLKbwrceD2CKN 6eEOCgo2VXv2vAoJL03SouIPpB/IxRkPl4zMPdfNHnyFsatgflDQWk3iMokcxbXy mMPk8lPySqYLEPMWEtK4+CQu77Quwe6xI1rXemBHgjOymRx6xpHD2PSunjL3HkOB 7SaumoynCsacWe40DjKWmos1Z50JKG5kDRxYXcdvx9DkH5aH88FGyrQHtfk7BsUL n3XHK97OiSAvlHA9XyZkPiB14rHsLmQVkiN8v2cOop27+i4/ZUZ/64cid1FahEl3 KmWVGMboW3+qsIcaR1BGET45vY6UoZOVUz3R3BH8RbaImHSWJrV3F6KdtxIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ4Z6MePgtxM7FDf061/HkgM/XBEwHwYDVR0j BBgwFoAUPCDf6p5L2M81+gLpLMn1oVQ7tXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNkZTFjZmQtY2JiYy00ZjA4LTg5Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5 RTRCRDhDRjM1RkEwMkU5MkNDOUY1QTE1NDNCQjU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzIwREZFQTlFNEJEOENGMzVGQTAyRTkyQ0M5RjVBMTU0M0JC NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNkZTFjZmQtY2JiYy00ZjA4LTg5 Y2ItNDM1YTU5MTFmMmMyLzAvM0MyMERGRUE5RTRCRDhDRjM1RkEwMkU5MkNDOUY1 QTE1NDNCQjU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGCL8fZbPRJSR0XCwGnviJ2w45qv/aPm/Vi 6qiyuTwQWngkom4Fwu3tESlxnoy6BgGbhPK+Rh/F3khhPWdYHeMKXRSxin0OD+I0 Ur3r93qC2SMYIeMGjNueFql/BipoCXIYuZxjJ8S2qwoRXuW7G3iLuA1ffJP4InNi UmJmS09i4ekXtj0T/DKWjnA1CiA6OnpNcMbVxkyuJmHVSEhfg6NW5u4ID/70WeHH kaC3dtjIFcL4xloa+k7sGVl53bW8YKPg8D5bvgDQ5C9qw90cxxTUzZRw3Ordnd1p EeLK9AQRsA4VG3FBNy6EurZ4gRnGqT8IBx71IwOzcZ6LfzBvscE= -----END CERTIFICATE-----Generated at Tue Nov 3 22:42:16 2026 by rpki-client