$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft File: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft (raw, json) Hash identifier: KGfYACqg3NIoGOcz31qAaunX43GxtAJhkFfxQ+ddmL4= Subject key identifier: 56:5B:B6:51:2E:55:58:D5:29:AB:23:D5:1A:DD:3F:49:73:3C:AB:E4 Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 4624042DAFEC7CE05B19A7E7DB0038E9AED619FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft Manifest number: DC Signing time: Wed 14 Oct 2026 22:17:33 +0000 Manifest this update: Wed 14 Oct 2026 22:12:33 +0000 Manifest next update: Fri 16 Oct 2026 01:44:33 +0000 Files and hashes: 1: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 0WLfS7aDlUOO8gGFrEIWmBmwKDx6lnGogb/aAhlDo0s=) 2: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: RYDFjSUq7+WTBKXlmjbV9d6C3LLSVr9xribVCYh4jog=) 3: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl (hash: SGgkV3D2d6Jd86wdjmuLPaIh24sAx0oiuW7SYiaqYwc=) 4: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 01:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:24:04:2d:af:ec:7c:e0:5b:19:a7:e7:db:00:38:e9:ae:d6:19:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: Oct 14 22:12:33 2026 GMT Not After : Oct 16 01:44:33 2026 GMT Subject: CN=565BB6512E5558D529AB23D51ADD3F49733CABE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:bb:55:b0:ba:82:69:8b:a8:44:dd:e4:8a: 06:5c:94:4a:2e:4a:b2:8f:09:83:96:0e:aa:de:26: 2b:c3:76:8f:8e:72:ad:21:bb:1c:f2:04:f3:a9:7c: 7f:c8:68:22:84:cb:d2:5c:9a:47:ee:c3:42:c8:93: c3:ea:fb:d4:ac:ea:55:30:36:93:a9:31:31:18:4d: 8a:db:58:bc:ed:53:ae:5d:e2:b2:b9:dd:d1:3c:c5: e0:e2:2a:df:c1:47:14:76:2f:85:dd:a7:03:7b:69: 7b:80:1e:58:95:22:27:9e:f1:55:a3:f7:ea:b9:0f: 11:2b:9f:d8:c7:5c:ea:b6:cf:a0:b4:7c:f1:0d:84: f9:ef:9f:d2:4b:5f:b7:05:f9:04:5b:8c:3a:e4:88: 48:dd:90:75:e3:c3:7b:4f:96:a5:89:b5:69:3f:19: 6e:36:a2:ce:2c:a1:ab:dc:64:a4:1d:ca:13:9b:39: da:f6:e1:ab:dd:42:f4:87:6b:db:55:0e:3b:5a:67: e8:c2:b5:df:5d:ac:f6:57:10:db:62:c5:a4:e9:26: b7:e2:3d:09:86:db:ab:7a:e7:ce:fc:f1:e9:b6:06: 1c:b1:64:13:51:60:34:57:c2:fd:c9:a4:36:f2:10: eb:c1:04:35:6c:cd:bf:56:d2:61:78:a4:c8:18:06: d1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5B:B6:51:2E:55:58:D5:29:AB:23:D5:1A:DD:3F:49:73:3C:AB:E4 X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:1e:d0:df:af:49:b4:bd:47:f8:d9:cd:0c:e4:17:3b:23:ed: 98:cc:65:0c:67:87:0e:c7:61:dd:84:85:b8:d6:d2:ab:62:b0: b7:54:fa:01:af:78:c9:8b:88:b5:c1:76:db:9b:0a:32:dd:69: 7c:c9:48:91:dc:e2:6a:34:97:46:dc:8e:2d:29:d5:0c:25:a5: 7e:9b:f0:c4:82:72:e3:f6:d3:bf:ef:85:1f:a7:0b:5c:a6:a9: be:1a:1c:f1:50:c5:5d:c0:24:65:13:59:3f:d3:69:de:91:8c: d9:41:e6:0a:49:90:4c:92:fd:ed:8c:f5:e0:14:47:02:10:2d: e3:7d:cd:7d:17:53:9d:60:ab:df:19:b1:e7:58:29:6e:f2:05: eb:41:cf:14:d5:b8:6a:86:f9:90:28:96:18:4a:16:6e:ff:9b: 95:9d:b1:4c:6e:2f:9a:ca:86:93:1a:fb:15:14:34:88:0b:12: 3b:3f:f4:3f:ed:f7:95:1c:03:ae:58:7e:00:e6:07:50:55:e2: 81:c6:52:74:08:de:0d:90:1a:f7:23:c2:17:27:f5:67:f0:d3: 1a:3b:8e:a0:7b:6b:09:fb:4b:9e:cc:55:3f:83:97:a6:a4:d9: 4e:b9:56:91:65:5d:7b:ff:f5:be:13:3b:6b:eb:19:b0:73:9e: 1e:7c:12:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURiQELa/sfOBbGafn2wA46a7WGfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjEwMTQyMjEyMzNaFw0yNjEwMTYwMTQ0MzNaMDMxMTAvBgNV BAMTKDU2NUJCNjUxMkU1NTU4RDUyOUFCMjNENTFBREQzRjQ5NzMzQ0FCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLErtVsLqCaYuoRN3kigZclEou SrKPCYOWDqreJivDdo+Ocq0huxzyBPOpfH/IaCKEy9Jcmkfuw0LIk8Pq+9Ss6lUw NpOpMTEYTYrbWLztU65d4rK53dE8xeDiKt/BRxR2L4XdpwN7aXuAHliVIiee8VWj 9+q5DxErn9jHXOq2z6C0fPENhPnvn9JLX7cF+QRbjDrkiEjdkHXjw3tPlqWJtWk/ GW42os4soavcZKQdyhObOdr24avdQvSHa9tVDjtaZ+jCtd9drPZXENtixaTpJrfi PQmG26t658788em2BhyxZBNRYDRXwv3JpDbyEOvBBDVszb9W0mF4pMgYBtGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVlu2US5VWNUpqyPVGt0/SXM8q+QwHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdD NjA0MTc2N0YyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIe0N+vSbS9R/jZzQzkFzsj7ZjMZQxnhw7H Yd2EhbjW0qtisLdU+gGveMmLiLXBdtubCjLdaXzJSJHc4mo0l0bcji0p1QwlpX6b 8MSCcuP207/vhR+nC1ymqb4aHPFQxV3AJGUTWT/Tad6RjNlB5gpJkEyS/e2M9eAU RwIQLeN9zX0XU51gq98ZsedYKW7yBetBzxTVuGqG+ZAolhhKFm7/m5WdsUxuL5rK hpMa+xUUNIgLEjs/9D/t95UcA65YfgDmB1BV4oHGUnQI3g2QGvcjwhcn9Wfw0xo7 jqB7awn7S57MVT+Dl6ak2U65VpFlXXv/9b4TO2vrGbBznh58ElQ= -----END CERTIFICATE-----Generated at Thu Oct 15 10:28:11 2026 by rpki-client