$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft File: B3CEDD0459F32B7E856E38152E88C017667C44C5.mft (raw, json) Hash identifier: HEfG3u7+iLHmZxu7ynnebbiOy5mcat3enSLzMzH/k9k= Subject key identifier: 8B:9C:0E:07:19:2A:10:B2:64:6D:ED:3C:CB:59:48:DE:77:F4:2E:22 Authority key identifier: B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 Certificate issuer: /CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Certificate serial: 777B3502ECA8AC8F86E171288A2F8D2549273BD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft Manifest number: EC Signing time: Tue 27 Oct 2026 09:37:15 +0000 Manifest this update: Tue 27 Oct 2026 09:32:15 +0000 Manifest next update: Wed 28 Oct 2026 13:08:15 +0000 Files and hashes: 1: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: QGY4lzWj4Cp3rLIA8ZEjymdBTTpuyiO2y6++xao+5yg=) 2: B3CEDD0459F32B7E856E38152E88C017667C44C5.crl (hash: nSHb/GCNPMamT4WsSCE19hjS/2+1yP2ufmu93I4zcp8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 11:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7b:35:02:ec:a8:ac:8f:86:e1:71:28:8a:2f:8d:25:49:27:3b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Validity Not Before: Oct 27 09:32:15 2026 GMT Not After : Oct 28 13:08:15 2026 GMT Subject: CN=8B9C0E07192A10B2646DED3CCB5948DE77F42E22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2b:94:9d:42:23:0b:5c:2a:fc:4e:66:51:26: 5f:39:0f:43:11:12:82:44:81:83:80:6e:b8:98:33: 36:ea:ff:f4:ff:76:8b:24:0b:1a:32:77:02:e9:6e: 2a:c0:ce:fb:c7:c3:0c:0d:1d:47:2b:cd:85:8b:b7: c1:2b:14:b2:9c:6e:d4:21:6b:7b:64:6e:24:6b:80: f3:5c:cf:d7:88:17:ea:26:4c:18:ff:dc:5a:d8:70: 61:5c:8c:34:63:61:bb:03:38:8e:6c:27:c6:0f:a4: 51:c8:5c:21:83:ab:7f:95:ec:77:a2:60:76:e4:98: d2:2f:4c:a0:e1:b3:a7:22:b9:22:f3:b6:e9:7b:a7: cd:f9:3f:7a:ab:8b:37:dd:bd:1f:85:ff:a8:11:5d: 16:81:b9:c4:4d:ec:8c:79:62:44:18:9d:80:8b:62: 1b:0a:ac:f1:1f:0d:08:74:32:60:28:5b:31:53:fb: e8:cb:72:1e:3e:bc:f0:97:0b:ba:64:41:15:f9:8e: 5e:f4:79:f9:c6:98:4f:4b:c7:61:44:45:b3:9f:e5: 5c:b0:33:6f:1a:43:82:48:e0:2d:d6:23:08:21:31: aa:d5:a9:c9:18:fa:27:7b:f5:17:12:c9:49:6a:16: 7c:d0:f0:0e:18:52:55:8f:19:6b:1f:80:29:c4:cf: be:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9C:0E:07:19:2A:10:B2:64:6D:ED:3C:CB:59:48:DE:77:F4:2E:22 X509v3 Authority Key Identifier: keyid:B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3c:f8:7a:23:25:a7:9a:18:78:b6:1a:ef:55:56:c4:5b:b0: 6b:db:5d:53:cc:e4:2b:ab:65:94:20:86:9a:19:b1:ae:0a:cf: 5e:5a:a6:d5:ce:e7:1f:1b:81:b1:52:18:3c:06:03:43:24:84: 5d:e4:d0:f3:2a:10:18:a1:c6:cc:85:ec:e0:07:4d:a0:26:94: c0:5e:cd:ac:1d:cf:13:19:f0:16:df:15:29:9a:34:a1:22:67: 6d:e8:7d:ab:0c:fa:86:f0:ba:09:c4:46:f7:01:99:5f:e8:0a: cd:8f:ea:2c:4d:a7:03:3f:33:ba:31:1d:fc:dc:05:09:78:31: ed:a6:cb:c1:a2:a3:5a:7d:0f:a0:8a:e2:4f:63:df:1a:d2:34: 1d:54:ca:1a:fb:89:ec:d6:bd:ea:45:2d:51:2c:4e:0c:93:c4: 19:2c:9d:07:82:88:8d:1d:f5:2d:a1:df:8f:8f:f8:d0:c2:25: 3c:6c:1f:ca:56:5a:e8:3e:a8:9f:a2:65:8f:e9:2c:75:82:e7: a3:93:95:d5:cc:c7:1d:42:ab:2b:dd:05:35:c0:3d:7b:c2:b7: 9c:b7:8b:eb:4e:a1:f4:bc:f6:8a:8a:0f:a5:ce:aa:81:4f:46: 05:5b:93:08:37:c6:31:82:24:b1:15:c9:77:6a:f1:09:5e:3d: a5:46:d1:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3s1AuyorI+G4XEoii+NJUknO9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2 NjdDNDRDNTAeFw0yNjEwMjcwOTMyMTVaFw0yNjEwMjgxMzA4MTVaMDMxMTAvBgNV BAMTKDhCOUMwRTA3MTkyQTEwQjI2NDZERUQzQ0NCNTk0OERFNzdGNDJFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeK5SdQiMLXCr8TmZRJl85D0MR EoJEgYOAbriYMzbq//T/doskCxoydwLpbirAzvvHwwwNHUcrzYWLt8ErFLKcbtQh a3tkbiRrgPNcz9eIF+omTBj/3FrYcGFcjDRjYbsDOI5sJ8YPpFHIXCGDq3+V7Hei YHbkmNIvTKDhs6ciuSLztul7p835P3qrizfdvR+F/6gRXRaBucRN7Ix5YkQYnYCL YhsKrPEfDQh0MmAoWzFT++jLch4+vPCXC7pkQRX5jl70efnGmE9Lx2FERbOf5Vyw M28aQ4JI4C3WIwghMarVqckY+id79RcSyUlqFnzQ8A4YUlWPGWsfgCnEz74HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi5wOBxkqELJkbe08y1lI3nf0LiIwHwYDVR0j BBgwFoAUs87dBFnzK36FbjgVLojAF2Z8RMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiMWE3OTAtZGNlZC00NjRhLTg5NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1 OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2NjdDNDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0NFREQwNDU5RjMyQjdFODU2RTM4MTUyRTg4QzAxNzY2N0M0 NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMw MTc2NjdDNDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAk8+HojJaeaGHi2Gu9VVsRbsGvbXVPM5Cur ZZQghpoZsa4Kz15aptXO5x8bgbFSGDwGA0MkhF3k0PMqEBihxsyF7OAHTaAmlMBe zawdzxMZ8BbfFSmaNKEiZ23ofasM+obwugnERvcBmV/oCs2P6ixNpwM/M7oxHfzc BQl4Me2my8Gio1p9D6CK4k9j3xrSNB1Uyhr7iezWvepFLVEsTgyTxBksnQeCiI0d 9S2h34+P+NDCJTxsH8pWWug+qJ+iZY/pLHWC56OTldXMxx1CqyvdBTXAPXvCt5y3 i+tOofS89oqKD6XOqoFPRgVbkwg3xjGCJLEVyXdq8QlePaVG0es= -----END CERTIFICATE-----Generated at Tue Oct 27 23:01:10 2026 by rpki-client