$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft File: 3F5C3F8352410D0935346BFC981A5941F86DE152.mft (raw, json) Hash identifier: bA9M2ci65t7VwcC7SJDkQuROrMeYNyxTIJjkK9/i9ug= Subject key identifier: 00:CF:C7:80:AA:98:51:75:DB:CA:F0:EE:99:B5:CD:ED:A4:5D:AA:F7 Authority key identifier: 3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52 Certificate issuer: /CN=3F5C3F8352410D0935346BFC981A5941F86DE152 Certificate serial: 2938D1CA59FAE043801249E55177A92FD2EB4531 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft Manifest number: BA Signing time: Thu 17 Sep 2026 02:06:12 +0000 Manifest this update: Thu 17 Sep 2026 02:01:12 +0000 Manifest next update: Fri 18 Sep 2026 02:31:12 +0000 Files and hashes: 1: 3F5C3F8352410D0935346BFC981A5941F86DE152.crl (hash: V5pq4aMxtjjjhorqBDkB9z+D60WSAcP1MFQ/uNpVCOk=) 2: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 5KhdGAwFpBBISTY9aqPLqjFXwI/SAn/2iKibebTV35o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:38:d1:ca:59:fa:e0:43:80:12:49:e5:51:77:a9:2f:d2:eb:45:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F5C3F8352410D0935346BFC981A5941F86DE152 Validity Not Before: Sep 17 02:01:12 2026 GMT Not After : Sep 18 02:31:12 2026 GMT Subject: CN=00CFC780AA985175DBCAF0EE99B5CDEDA45DAAF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6a:c3:67:37:70:99:74:2c:ea:1c:ef:0e:a3: 26:c7:46:f9:6f:31:99:8f:f4:08:8a:fc:5a:78:58: 51:c3:b6:fd:37:03:36:2a:77:73:7d:64:47:e7:8b: 92:f8:4c:72:81:b1:16:b4:5d:e6:3d:cf:e5:99:29: c2:63:d6:f7:47:48:50:c2:90:25:3f:62:fa:05:dc: e7:17:42:4b:70:aa:61:b3:d3:6c:8e:e9:29:01:b6: ad:c9:81:9e:72:9f:97:b6:e1:48:63:36:a8:e8:eb: 5c:d5:bb:de:ec:71:37:1e:eb:a2:6e:5f:cd:e1:7e: c9:5a:ce:f7:38:c3:20:00:88:19:84:0c:8f:c8:70: 97:90:29:84:b2:70:5e:d7:2a:ae:32:13:9c:eb:66: b0:bb:d7:02:42:c7:11:a5:f4:28:5b:92:6b:5b:40: d6:d9:78:fb:ea:0f:29:29:ad:db:ec:e2:05:1e:18: 63:db:cc:16:96:3e:3f:2b:e2:ed:75:d3:8a:96:a9: bd:f9:74:0b:a5:fb:f6:40:52:8e:10:7b:d4:a5:a1: 5f:5c:5c:b2:96:c3:a5:65:5d:38:20:cd:78:01:ee: 62:38:63:8d:b4:6b:93:04:40:81:0b:86:7c:65:21: c1:b4:5e:d7:64:e7:20:6a:c8:b6:89:a9:da:fe:40: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CF:C7:80:AA:98:51:75:DB:CA:F0:EE:99:B5:CD:ED:A4:5D:AA:F7 X509v3 Authority Key Identifier: keyid:3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a0:c4:5d:74:40:ec:e7:84:d3:0b:be:21:e9:97:1a:e5:24: da:e4:08:1d:81:86:8a:d4:f4:1a:e1:60:39:9b:59:93:dd:87: bb:07:e6:8a:0f:0e:54:02:e1:25:b5:f4:3a:38:ba:a1:79:3a: 9b:ff:ee:e8:72:cf:06:2b:22:ca:f8:39:61:b5:00:15:96:16: c9:7d:b5:95:90:de:29:8d:c4:62:33:18:55:5c:dd:a6:9d:4f: 9e:ec:ab:cd:6d:dc:67:16:7a:b7:69:f7:f5:49:d9:15:75:3b: ed:7d:da:6f:f7:91:0e:a4:28:5b:06:54:42:fb:99:db:33:7d: fb:7d:4e:9c:ed:ae:0a:dd:8f:50:1e:e1:b2:98:56:6c:cb:7f: 5e:fd:d7:c2:f4:9d:a6:43:89:f0:10:fa:95:5d:2f:5b:f5:ea: 3f:a5:53:49:be:3a:79:2e:26:5b:ec:17:a7:d1:21:8b:d8:71: 75:b2:19:a2:b8:7e:ef:2b:b7:d8:96:68:a7:77:90:6e:65:12: 60:ad:97:12:8d:52:c3:42:42:3f:e0:d9:26:03:8d:00:8f:41: 06:79:63:14:99:3a:c6:94:19:a6:b6:72:9d:2f:c4:dd:21:b9: be:92:fb:fc:c9:d3:3a:3e:da:0b:12:39:c4:82:5f:95:aa:fc: 4b:26:07:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTjRyln64EOAEknlUXepL9LrRTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFG ODZERTE1MjAeFw0yNjA5MTcwMjAxMTJaFw0yNjA5MTgwMjMxMTJaMDMxMTAvBgNV BAMTKDAwQ0ZDNzgwQUE5ODUxNzVEQkNBRjBFRTk5QjVDREVEQTQ1REFBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDasNnN3CZdCzqHO8OoybHRvlv MZmP9AiK/Fp4WFHDtv03AzYqd3N9ZEfni5L4THKBsRa0XeY9z+WZKcJj1vdHSFDC kCU/YvoF3OcXQktwqmGz02yO6SkBtq3JgZ5yn5e24UhjNqjo61zVu97scTce66Ju X83hfslazvc4wyAAiBmEDI/IcJeQKYSycF7XKq4yE5zrZrC71wJCxxGl9Chbkmtb QNbZePvqDykprdvs4gUeGGPbzBaWPj8r4u1104qWqb35dAul+/ZAUo4Qe9SloV9c XLKWw6VlXTggzXgB7mI4Y420a5MEQIELhnxlIcG0Xtdk5yBqyLaJqdr+QFL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAM/HgKqYUXXbyvDumbXN7aRdqvcwHwYDVR0j BBgwFoAUP1w/g1JBDQk1NGv8mBpZQfht4VIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UxMjc0M2QtZDU2ZC00YTc3LTkwZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1 MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFGODZERTE1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjVDM0Y4MzUyNDEwRDA5MzUzNDZCRkM5ODFBNTk0MUY4NkRF MTUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5 NDFGODZERTE1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASgxF10QOznhNMLviHplxrlJNrkCB2BhorU 9BrhYDmbWZPdh7sH5ooPDlQC4SW19Do4uqF5Opv/7uhyzwYrIsr4OWG1ABWWFsl9 tZWQ3imNxGIzGFVc3aadT57sq81t3GcWerdp9/VJ2RV1O+192m/3kQ6kKFsGVEL7 mdszfft9Tpztrgrdj1Ae4bKYVmzLf17918L0naZDifAQ+pVdL1v16j+lU0m+Onku JlvsF6fRIYvYcXWyGaK4fu8rt9iWaKd3kG5lEmCtlxKNUsNCQj/g2SYDjQCPQQZ5 YxSZOsaUGaa2cp0vxN0hub6S+/zJ0zo+2gsSOcSCX5Wq/EsmB6o= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:21 2026 by rpki-client