$ rpki-client -vvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft File: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft (raw, json) Hash identifier: U9Pu8f4WIvAHr5F9fIrEgGWO22agKc/WQzcWsKo9f9U= Subject key identifier: 10:A5:ED:6E:69:98:BE:9B:BE:06:39:CF:BC:08:1D:C3:14:F5:F3:F1 Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 4FC0BAF4078F807C4576ECE58489E20751806AB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft Manifest number: 92 Signing time: Wed 19 Aug 2026 11:12:27 +0000 Manifest this update: Wed 19 Aug 2026 11:07:27 +0000 Manifest next update: Thu 20 Aug 2026 15:00:27 +0000 Files and hashes: 1: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl (hash: PMJ9fcYnjF4Vlkn0WMKOeSXetsDn2vhnwiGbTfgOVqY=) 2: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: RYDFjSUq7+WTBKXlmjbV9d6C3LLSVr9xribVCYh4jog=) 3: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0=) 4: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 0WLfS7aDlUOO8gGFrEIWmBmwKDx6lnGogb/aAhlDo0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c0:ba:f4:07:8f:80:7c:45:76:ec:e5:84:89:e2:07:51:80:6a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: Aug 19 11:07:27 2026 GMT Not After : Aug 20 15:00:27 2026 GMT Subject: CN=10A5ED6E6998BE9BBE0639CFBC081DC314F5F3F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:77:84:1b:93:50:17:b0:ee:7c:dd:73:f8: 25:e8:c4:73:48:c3:7a:18:5c:94:d6:37:1d:80:fd: 49:17:25:b8:d8:30:fd:44:fb:29:18:9e:4b:85:87: dd:2a:d5:e7:f3:c8:bb:e5:a3:65:38:64:e2:81:4f: bf:31:eb:6b:c8:46:32:ee:19:22:76:dc:4e:2e:7e: 21:32:01:f2:17:9f:ac:32:f3:a9:b6:85:a2:4a:c4: f7:ba:73:83:a9:4b:78:f0:22:5e:c2:85:a0:9d:c4: 4c:03:79:f2:9c:78:cc:01:4d:f2:fb:97:a0:4a:72: e7:ec:3c:ce:31:02:c4:d7:9f:67:06:c4:82:d4:88: 7b:12:4d:ad:9c:1f:5b:14:c6:fe:0c:9d:f2:9d:2b: 38:b7:6f:96:d1:ba:2b:08:21:bb:f1:e1:61:57:8e: ed:09:e0:7b:eb:82:2f:4d:a1:49:e4:3b:66:94:f3: 1b:38:8c:c3:36:1f:d1:d8:66:c7:01:c6:94:32:86: 88:0d:a8:68:d1:ae:00:a3:45:d6:a5:ab:c2:4b:72: c2:00:6b:a4:94:74:43:dd:91:c4:08:66:04:93:48: 4d:02:1c:b5:28:c6:06:a0:fc:cc:fc:d3:e4:0b:8e: 33:d9:62:8c:b8:ce:78:d7:95:d7:3a:f5:21:ce:48: bc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A5:ED:6E:69:98:BE:9B:BE:06:39:CF:BC:08:1D:C3:14:F5:F3:F1 X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:bc:0a:80:f3:07:43:ff:b0:a1:ab:ac:c9:7e:4b:4f:02:6a: 45:c7:5c:09:29:20:10:8c:f8:2e:86:d0:df:59:0b:57:2e:2a: da:a9:5a:f2:cf:92:fb:6e:b0:45:44:f2:6a:25:b2:f1:7a:46: ca:e6:f5:79:0e:89:39:3f:1e:17:be:2d:22:5b:96:20:87:4e: bd:a2:8d:bb:ea:1e:6c:42:7c:f8:12:0d:a6:22:0b:86:fa:1d: 2a:78:eb:29:c5:3d:6b:79:f6:cf:2e:4b:46:5b:7b:0c:b9:bc: 3f:77:c6:0a:13:f0:e2:d4:a6:a7:23:55:34:9f:85:d6:28:d4: eb:ae:19:fb:f9:96:8e:c9:e1:b1:9b:ec:76:fc:41:36:ff:db: 15:62:0e:9b:2d:86:7d:4d:e0:ef:b9:c3:82:22:89:b2:50:5b: 2c:78:65:4f:80:8f:94:f6:47:47:4c:bd:ac:e8:d2:c1:5b:db: d5:6a:f2:10:cf:f8:02:59:c5:d3:63:a4:67:7f:6a:e2:93:91: 9b:44:83:13:b2:21:7e:08:b8:83:f9:b3:f6:16:a2:2d:e1:07: 2d:af:5f:0a:8e:88:1c:de:b1:a7:23:6f:5a:62:13:93:f2:ad: 5e:cc:63:46:4f:0d:07:56:4a:39:bf:33:04:39:ba:84:ab:7e: ac:33:35:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8C69AePgHxFduzlhIniB1GAarYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjA4MTkxMTA3MjdaFw0yNjA4MjAxNTAwMjdaMDMxMTAvBgNV BAMTKDEwQTVFRDZFNjk5OEJFOUJCRTA2MzlDRkJDMDgxREMzMTRGNUYzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvXeEG5NQF7DufN1z+CXoxHNI w3oYXJTWNx2A/UkXJbjYMP1E+ykYnkuFh90q1efzyLvlo2U4ZOKBT78x62vIRjLu GSJ23E4ufiEyAfIXn6wy86m2haJKxPe6c4OpS3jwIl7ChaCdxEwDefKceMwBTfL7 l6BKcufsPM4xAsTXn2cGxILUiHsSTa2cH1sUxv4MnfKdKzi3b5bRuisIIbvx4WFX ju0J4Hvrgi9NoUnkO2aU8xs4jMM2H9HYZscBxpQyhogNqGjRrgCjRdalq8JLcsIA a6SUdEPdkcQIZgSTSE0CHLUoxgag/Mz80+QLjjPZYoy4znjXldc69SHOSLzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEKXtbmmYvpu+BjnPvAgdwxT18/EwHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdD NjA0MTc2N0YyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIC8CoDzB0P/sKGrrMl+S08CakXHXAkpIBCM +C6G0N9ZC1cuKtqpWvLPkvtusEVE8molsvF6Rsrm9XkOiTk/Hhe+LSJbliCHTr2i jbvqHmxCfPgSDaYiC4b6HSp46ynFPWt59s8uS0Zbewy5vD93xgoT8OLUpqcjVTSf hdYo1OuuGfv5lo7J4bGb7Hb8QTb/2xViDpsthn1N4O+5w4IiibJQWyx4ZU+Aj5T2 R0dMvazo0sFb29Vq8hDP+AJZxdNjpGd/auKTkZtEgxOyIX4IuIP5s/YWoi3hBy2v XwqOiBzesacjb1piE5PyrV7MY0ZPDQdWSjm/MwQ5uoSrfqwzNXU= -----END CERTIFICATE-----Generated at Thu Aug 20 07:03:56 2026 by rpki-client