$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft File: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft (raw, json) Hash identifier: UsREB9Wk8YiRdlayPpK5OyuF5jdqi5rLDazPL1QDCuQ= Subject key identifier: 15:F4:EF:DB:12:30:B0:20:61:30:EF:50:B1:52:03:59:09:94:4A:0B Authority key identifier: 33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 Certificate issuer: /CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Certificate serial: 1EFCD665C15132D5FA6BE311080BA41EF4BA9D9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 11:07:59 +0000 Manifest this update: Wed 16 Sep 2026 11:02:59 +0000 Manifest next update: Thu 17 Sep 2026 14:20:59 +0000 Files and hashes: 1: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl (hash: RWGZ6itwbQztwPlw8jsycUIwlKGvuQYeXiJQPsf4fEg=) 2: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: rjOP/mlx+e05g5g9m1lNDsLBX8nXjBRagTVjyUCAwbI=) 3: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: qwCD6LMD3vcZUMJ0NyJQKQENdmqWnufrQ7c5rQMuFak=) 4: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: 3A+tKNYPDWO1jDhVDZUdC2NZs5B4MixvTHgsf4h9Xzc=) 5: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: R6gLAkDdw5uoEeHIF+BZTSI8Nmt3rpd6kFAoBJizRp0=) 6: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: T06sDsvRxE4yK7ECDWNomJNJ5HNU4tQJl/HnEtrv2wM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fc:d6:65:c1:51:32:d5:fa:6b:e3:11:08:0b:a4:1e:f4:ba:9d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Validity Not Before: Sep 16 11:02:59 2026 GMT Not After : Sep 17 14:20:59 2026 GMT Subject: CN=15F4EFDB1230B0206130EF50B152035909944A0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:8f:cb:ab:b1:82:ed:30:26:f9:ef:b4:2d: 92:74:54:02:44:a1:8d:93:ab:e5:7c:b0:41:71:0b: 9a:ea:f3:3d:b7:23:24:8d:0a:96:7d:b2:1c:d2:10: 0a:98:49:ca:92:5d:76:4f:bc:9b:f3:57:4f:36:a7: 5a:89:15:b1:e2:22:c4:2b:99:be:93:69:38:0a:4a: d0:2c:b5:f3:fd:c8:8e:02:09:c3:4a:62:31:a4:27: ba:33:45:78:41:9b:3a:73:18:fa:e9:e1:c2:9e:59: 9f:db:db:e6:e4:ec:61:b7:d7:e2:b2:8c:27:07:ef: c9:98:1e:40:30:7e:b5:57:d2:a3:1a:24:26:40:b1: ae:72:05:be:fb:e1:e5:69:cd:76:75:e8:87:cf:b4: 92:8f:b3:6c:a2:92:61:5a:d7:63:dc:90:93:ea:a4: ad:55:d1:ad:39:23:98:4a:6c:a3:23:17:18:e0:38: b0:96:e9:cf:32:4c:78:fb:b3:4e:a7:64:51:93:ad: 10:0e:1c:f6:b2:1c:47:00:9c:d6:77:75:3d:dd:f7: 35:8c:14:db:d3:d5:d3:50:74:e2:c9:55:9c:b7:d1: 59:f6:75:33:30:9e:4d:8e:fa:b6:d8:f9:27:e7:4e: 40:3c:a4:38:9a:6d:0f:66:82:37:75:8a:16:9a:99: fd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F4:EF:DB:12:30:B0:20:61:30:EF:50:B1:52:03:59:09:94:4A:0B X509v3 Authority Key Identifier: keyid:33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:15:e5:98:56:3c:53:7b:ab:c7:ee:09:1b:50:d0:73:2c:05: ef:cc:3f:27:d2:70:16:48:21:e0:bb:11:7e:a4:e1:0a:7a:2a: 66:a1:08:7c:a4:dd:84:21:07:26:41:42:91:6e:12:7e:84:cf: db:62:4a:34:19:9e:3c:d1:c2:aa:e0:98:22:d7:ea:ac:fd:82: ea:b6:82:b7:cd:ab:f5:d0:51:7a:1a:81:57:c4:2f:93:da:82: 74:8b:91:49:b8:18:75:f6:60:f4:0e:bd:dc:f7:08:1a:e4:04: 4e:e1:00:97:d9:28:6d:55:66:25:d6:4f:ab:68:b5:76:4b:f8: 95:12:36:06:38:5f:19:b0:74:0d:e2:b8:fe:48:cc:9a:c7:b8: 2a:8a:3d:89:a2:73:d4:16:69:73:65:98:94:94:3b:c2:b2:66: d8:5b:20:a2:c1:18:ec:76:cf:a8:f4:c6:50:2a:05:dc:ea:b6: dd:46:ff:48:1d:cb:8a:9d:ba:07:b5:00:9c:9b:63:b1:12:e7: 18:fc:fb:6b:09:2c:d3:e7:95:a8:df:23:52:c8:f1:39:1a:00: f6:8d:de:33:84:ca:0a:8d:b3:fb:a8:b6:ef:67:8c:fc:c7:bb: ef:4d:be:ba:4a:38:8d:06:03:d7:a8:a3:f0:01:72:19:ec:10: 65:4f:4c:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvzWZcFRMtX6a+MRCAukHvS6nZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlENDdG QjU2MUI2MjAeFw0yNjA5MTYxMTAyNTlaFw0yNjA5MTcxNDIwNTlaMDMxMTAvBgNV BAMTKDE1RjRFRkRCMTIzMEIwMjA2MTMwRUY1MEIxNTIwMzU5MDk5NDRBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlI/Lq7GC7TAm+e+0LZJ0VAJE oY2Tq+V8sEFxC5rq8z23IySNCpZ9shzSEAqYScqSXXZPvJvzV082p1qJFbHiIsQr mb6TaTgKStAstfP9yI4CCcNKYjGkJ7ozRXhBmzpzGPrp4cKeWZ/b2+bk7GG31+Ky jCcH78mYHkAwfrVX0qMaJCZAsa5yBb774eVpzXZ16IfPtJKPs2yikmFa12PckJPq pK1V0a05I5hKbKMjFxjgOLCW6c8yTHj7s06nZFGTrRAOHPayHEcAnNZ3dT3d9zWM FNvT1dNQdOLJVZy30Vn2dTMwnk2O+rbY+SfnTkA8pDiabQ9mgjd1ihaamf3bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFfTv2xIwsCBhMO9QsVIDWQmUSgswHwYDVR0j BBgwFoAUMxPigd82Tgv6MqQyKsydR/tWG2IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2MWQ3YTctYTExZS00MDBiLTkxNzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFE RjM2NEUwQkZBMzJBNDMyMkFDQzlENDdGQjU2MUI2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzEzRTI4MURGMzY0RTBCRkEzMkE0MzIyQUNDOUQ0N0ZCNTYx QjYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlE NDdGQjU2MUI2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4V5ZhWPFN7q8fuCRtQ0HMsBe/MPyfScBZI IeC7EX6k4Qp6KmahCHyk3YQhByZBQpFuEn6Ez9tiSjQZnjzRwqrgmCLX6qz9guq2 grfNq/XQUXoagVfEL5PagnSLkUm4GHX2YPQOvdz3CBrkBE7hAJfZKG1VZiXWT6to tXZL+JUSNgY4XxmwdA3iuP5IzJrHuCqKPYmic9QWaXNlmJSUO8KyZthbIKLBGOx2 z6j0xlAqBdzqtt1G/0gdy4qduge1AJybY7ES5xj8+2sJLNPnlajfI1LI8TkaAPaN 3jOEygqNs/uotu9njPzHu+9NvrpKOI0GA9eoo/ABchnsEGVPTBo= -----END CERTIFICATE-----Generated at Thu Sep 17 05:41:05 2026 by rpki-client