$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft File: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft (raw, json) Hash identifier: UkuirkQN32Z0ifT3Cm2zj79V8e/w+sVqg9KKdFYHoQw= Subject key identifier: 6B:D8:32:5A:11:58:4C:4B:C5:0A:76:CB:2E:DA:DC:49:71:06:48:4B Authority key identifier: C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 Certificate issuer: /CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Certificate serial: 13DDC97638BB59C67E032155249B97C891F3F537 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft Manifest number: BA Signing time: Wed 16 Sep 2026 12:24:25 +0000 Manifest this update: Wed 16 Sep 2026 12:19:25 +0000 Manifest next update: Thu 17 Sep 2026 15:07:25 +0000 Files and hashes: 1: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl (hash: 4GOfdslPhh+gw/bY/+VIwuQwKyiNbvtiSafeFEQlmZE=) 2: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: ax7Tz8igVzZFs/ShEmAUC7L5azN7xDE8dfSTDwz0nik=) 3: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: PA4mCIJ4WVxoHasll6BuHuPox/sleuIONJ29Vq08rHw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:dd:c9:76:38:bb:59:c6:7e:03:21:55:24:9b:97:c8:91:f3:f5:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Validity Not Before: Sep 16 12:19:25 2026 GMT Not After : Sep 17 15:07:25 2026 GMT Subject: CN=6BD8325A11584C4BC50A76CB2EDADC497106484B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:74:84:b1:3c:b4:e9:27:57:b3:04:c2:d8: 2d:4f:bc:21:af:72:17:b3:7d:78:26:a2:ad:08:4d: de:5c:9d:f2:e9:5c:6c:c7:3b:cc:c3:8e:73:cf:5f: 15:09:eb:02:7f:af:46:e9:3e:7e:d3:d9:cd:eb:dd: 79:2a:94:7b:bb:fb:06:17:d7:b7:44:2b:9d:03:45: a3:8c:ce:a2:d0:6d:bb:27:a8:f7:e8:ec:dc:fa:84: e4:df:99:c1:44:93:58:9f:18:a9:25:ad:44:fe:96: 81:5b:e8:4d:41:27:11:58:37:98:8b:a1:89:31:0d: 23:f9:48:68:c0:40:f1:f2:dd:88:47:af:3c:50:a8: 29:25:74:85:d1:77:f2:19:c4:c8:c0:c2:d9:f2:fd: 24:65:ef:a4:d1:19:b5:4d:d1:6c:36:76:1c:db:f4: c7:15:01:02:f9:cd:65:40:6c:00:14:b0:12:8b:e1: 1a:41:54:90:1e:fd:e8:f4:e0:9b:e1:13:04:73:27: b5:16:36:5e:1b:7e:c3:7c:2e:9d:5d:b2:30:f5:bd: af:52:eb:a7:0c:bb:8d:fc:75:e8:1b:cc:2a:a3:72: 69:7f:44:68:13:99:96:1a:82:a5:4b:6a:ac:ec:74: d2:36:a1:ae:78:a0:76:d0:84:7e:c1:09:5b:28:f5: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D8:32:5A:11:58:4C:4B:C5:0A:76:CB:2E:DA:DC:49:71:06:48:4B X509v3 Authority Key Identifier: keyid:C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:be:00:27:00:46:4e:ca:74:f5:21:d3:45:80:f6:bd:a8:e1: 37:0e:d6:31:f8:d1:58:5c:bd:f6:68:2a:de:7c:40:b7:df:ed: 08:1e:c9:e4:81:96:81:5d:0b:c5:c1:87:cb:40:5d:a5:9f:96: 20:b1:f1:2b:94:eb:bb:e7:05:86:3b:4d:9b:4f:da:93:1b:4d: 07:3e:e9:76:f4:fb:c8:f3:d7:28:b3:26:2c:07:48:48:8f:5f: 53:4e:5c:23:19:e9:aa:26:60:e1:19:58:ff:33:bb:a0:f1:92: 58:d6:11:1b:a5:1f:1a:5a:de:14:36:99:1a:b0:62:f5:31:46: 34:c0:b9:d4:c4:d9:63:a0:81:ac:3a:50:05:5f:e0:9c:91:ce: 15:87:10:66:a4:eb:6c:39:08:e7:de:90:12:91:2e:4b:ff:56: e3:c1:17:a3:c1:e6:a1:eb:3e:b3:f7:4d:59:cc:a8:e8:96:26: 08:b6:26:7a:87:cb:38:5c:5f:3d:43:da:aa:0e:48:8f:cb:14: 07:58:5f:a2:3b:bf:d2:44:9d:a1:d9:50:bc:80:1c:59:13:67: f3:de:69:05:ac:97:3f:7e:bd:00:78:2f:24:e2:d4:c2:16:9b: d0:8c:51:2c:e3:9d:5b:da:b8:dd:81:f2:1d:14:5d:39:9d:60: 57:16:c7:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE93Jdji7WcZ+AyFVJJuXyJHz9TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1 NUI5OUYyNTAeFw0yNjA5MTYxMjE5MjVaFw0yNjA5MTcxNTA3MjVaMDMxMTAvBgNV BAMTKDZCRDgzMjVBMTE1ODRDNEJDNTBBNzZDQjJFREFEQzQ5NzEwNjQ4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1nSEsTy06SdXswTC2C1PvCGv chezfXgmoq0ITd5cnfLpXGzHO8zDjnPPXxUJ6wJ/r0bpPn7T2c3r3XkqlHu7+wYX 17dEK50DRaOMzqLQbbsnqPfo7Nz6hOTfmcFEk1ifGKklrUT+loFb6E1BJxFYN5iL oYkxDSP5SGjAQPHy3YhHrzxQqCkldIXRd/IZxMjAwtny/SRl76TRGbVN0Ww2dhzb 9McVAQL5zWVAbAAUsBKL4RpBVJAe/ej04JvhEwRzJ7UWNl4bfsN8Lp1dsjD1va9S 66cMu438degbzCqjcml/RGgTmZYagqVLaqzsdNI2oa54oHbQhH7BCVso9V01AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa9gyWhFYTEvFCnbLLtrcSXEGSEswHwYDVR0j BBgwFoAUw9+0nNcOUuRFDPL+XnISqFW5nyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY2NTIwMDAtMWYyYy00NzkxLTgxYjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNE NzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1NUI5OUYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0RGQjQ5Q0Q3MEU1MkU0NDUwQ0YyRkU1RTcyMTJBODU1Qjk5 RjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY2NTIwMDAtMWYyYy00NzkxLTgx YjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEy QTg1NUI5OUYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ++ACcARk7KdPUh00WA9r2o4TcO1jH40Vhc vfZoKt58QLff7QgeyeSBloFdC8XBh8tAXaWfliCx8SuU67vnBYY7TZtP2pMbTQc+ 6Xb0+8jz1yizJiwHSEiPX1NOXCMZ6aomYOEZWP8zu6DxkljWERulHxpa3hQ2mRqw YvUxRjTAudTE2WOggaw6UAVf4JyRzhWHEGak62w5COfekBKRLkv/VuPBF6PB5qHr PrP3TVnMqOiWJgi2JnqHyzhcXz1D2qoOSI/LFAdYX6I7v9JEnaHZULyAHFkTZ/Pe aQWslz9+vQB4LyTi1MIWm9CMUSzjnVvauN2B8h0UXTmdYFcWx4E= -----END CERTIFICATE-----Generated at Thu Sep 17 09:20:47 2026 by rpki-client