$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft File: B3CEDD0459F32B7E856E38152E88C017667C44C5.mft (raw, json) Hash identifier: IPliU8CsbAoKwEoqqX5uvATuWgauuynoCOTcNUV7W+g= Subject key identifier: 1D:BD:F3:34:E3:28:4C:D7:47:41:2F:0A:8B:8E:1E:A3:84:AA:99:27 Authority key identifier: B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 Certificate issuer: /CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Certificate serial: 6A6268C110285C4AF1F48C0B65B2E0866881A9D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft Manifest number: AE Signing time: Thu 10 Sep 2026 10:24:51 +0000 Manifest this update: Thu 10 Sep 2026 10:19:51 +0000 Manifest next update: Fri 11 Sep 2026 11:42:51 +0000 Files and hashes: 1: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: QGY4lzWj4Cp3rLIA8ZEjymdBTTpuyiO2y6++xao+5yg=) 2: B3CEDD0459F32B7E856E38152E88C017667C44C5.crl (hash: M+ENy8xcUg9AWoQ+g0nIbegB2bgGvv/5eod6UFaAXQs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 11:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:62:68:c1:10:28:5c:4a:f1:f4:8c:0b:65:b2:e0:86:68:81:a9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Validity Not Before: Sep 10 10:19:51 2026 GMT Not After : Sep 11 11:42:51 2026 GMT Subject: CN=1DBDF334E3284CD747412F0A8B8E1EA384AA9927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:51:75:3f:a0:80:a2:d4:3f:e2:86:09:81: ee:71:81:7a:41:44:11:41:f0:3a:bb:e7:1e:1b:b4: 68:03:6b:20:bd:aa:20:9a:46:54:41:41:4b:87:33: 02:e8:65:f2:d4:2d:44:1b:41:43:a2:fc:78:38:0a: 53:ce:d9:c2:77:e8:21:92:b5:a8:66:03:28:b8:1c: 2e:61:bd:72:28:61:88:5e:2d:6e:60:5d:dc:f9:4d: 16:48:b1:07:d9:36:26:26:18:e3:2d:9c:a4:3b:8b: 67:d9:8a:0f:99:ce:7c:bd:43:ad:75:ac:e6:13:78: 53:d6:62:04:85:d8:15:56:93:5a:bd:25:11:55:62: 98:26:f5:5e:6c:2f:b6:15:7a:74:2c:c1:f5:2c:cc: 9e:eb:48:87:bc:8e:4d:6a:f7:16:f9:32:59:1d:81: de:45:9a:ab:20:ad:89:66:03:ad:80:83:35:1f:9d: f4:ea:91:05:04:ab:8f:99:e8:aa:45:cc:4a:28:f6: ad:84:4e:af:82:e1:b6:0f:83:54:bd:09:9a:cc:4d: 61:b4:9e:c0:81:e0:3a:01:88:cd:bb:e0:8f:a9:cc: d2:03:d0:1e:6f:05:37:56:fc:20:12:41:a3:50:14: af:8f:63:98:f6:72:13:f7:26:be:14:95:14:32:4b: aa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BD:F3:34:E3:28:4C:D7:47:41:2F:0A:8B:8E:1E:A3:84:AA:99:27 X509v3 Authority Key Identifier: keyid:B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:1d:ca:49:2d:d7:c6:14:ce:b4:9c:29:c0:6f:c0:3b:29:57: cf:fa:0e:e9:25:f9:55:f8:61:51:f6:8d:69:5e:ac:2d:9a:2d: 7d:81:06:eb:b1:c0:36:fb:81:06:80:7b:bb:44:42:5c:46:be: 24:93:69:89:5b:37:6e:a1:04:cb:28:7f:71:7d:0c:52:33:f0: a8:e3:b3:74:1b:af:b8:0d:ef:83:92:d7:6d:00:35:81:34:bb: 95:cb:72:6b:f7:ca:95:cc:96:fc:03:ac:24:27:52:a0:5b:da: a0:cf:a4:73:40:29:f5:35:96:bd:49:86:48:1c:7b:73:a8:1a: 95:9b:72:1d:1f:25:57:4f:b6:52:f7:62:20:a1:df:a2:ba:3e: 85:cc:04:67:76:43:db:8d:55:fe:ea:d9:4f:21:a4:e7:86:bd: cf:6c:1a:24:57:5d:44:72:a2:25:06:d1:0c:8f:f8:95:d0:10: 52:18:3c:48:f0:5e:3a:45:11:67:29:0c:f6:a7:bc:44:d5:99: 71:ed:a5:42:fd:83:bb:f6:9d:89:f1:66:ae:b5:7b:a6:7b:6f: 35:c3:43:bc:b4:c9:f2:f8:d4:9c:4c:5f:51:2c:f6:b2:d6:cd: 9a:c7:cc:08:8d:b7:19:d1:85:a2:69:56:f9:bd:62:e1:43:4b: a5:d6:75:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamJowRAoXErx9IwLZbLghmiBqdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2 NjdDNDRDNTAeFw0yNjA5MTAxMDE5NTFaFw0yNjA5MTExMTQyNTFaMDMxMTAvBgNV BAMTKDFEQkRGMzM0RTMyODRDRDc0NzQxMkYwQThCOEUxRUEzODRBQTk5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8T1F1P6CAotQ/4oYJge5xgXpB RBFB8Dq75x4btGgDayC9qiCaRlRBQUuHMwLoZfLULUQbQUOi/Hg4ClPO2cJ36CGS tahmAyi4HC5hvXIoYYheLW5gXdz5TRZIsQfZNiYmGOMtnKQ7i2fZig+Zzny9Q611 rOYTeFPWYgSF2BVWk1q9JRFVYpgm9V5sL7YVenQswfUszJ7rSIe8jk1q9xb5Mlkd gd5FmqsgrYlmA62AgzUfnfTqkQUEq4+Z6KpFzEoo9q2ETq+C4bYPg1S9CZrMTWG0 nsCB4DoBiM274I+pzNID0B5vBTdW/CASQaNQFK+PY5j2chP3Jr4UlRQyS6opAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHb3zNOMoTNdHQS8Ki44eo4SqmScwHwYDVR0j BBgwFoAUs87dBFnzK36FbjgVLojAF2Z8RMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiMWE3OTAtZGNlZC00NjRhLTg5NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1 OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2NjdDNDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0NFREQwNDU5RjMyQjdFODU2RTM4MTUyRTg4QzAxNzY2N0M0 NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMw MTc2NjdDNDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAdykkt18YUzrScKcBvwDspV8/6Dukl+VX4 YVH2jWlerC2aLX2BBuuxwDb7gQaAe7tEQlxGviSTaYlbN26hBMsof3F9DFIz8Kjj s3Qbr7gN74OS120ANYE0u5XLcmv3ypXMlvwDrCQnUqBb2qDPpHNAKfU1lr1Jhkgc e3OoGpWbch0fJVdPtlL3YiCh36K6PoXMBGd2Q9uNVf7q2U8hpOeGvc9sGiRXXURy oiUG0QyP+JXQEFIYPEjwXjpFEWcpDPanvETVmXHtpUL9g7v2nYnxZq61e6Z7bzXD Q7y0yfL41JxMX1Es9rLWzZrHzAiNtxnRhaJpVvm9YuFDS6XWdf4= -----END CERTIFICATE-----Generated at Fri Sep 11 03:30:56 2026 by rpki-client