$ rpki-client -vvvf rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft File: 3FCCB124CE6330827269179656BC9A7F04BCACF3.mft (raw, json) Hash identifier: H8MayDv62886Dt5a3SOBKBXD7wW/8eFdXAz9mW2sta4= Subject key identifier: 63:73:B2:BF:AD:50:04:60:93:42:17:1F:FB:56:A0:68:A5:25:48:3B Authority key identifier: 3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 Certificate issuer: /CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Certificate serial: 6B2656519279D0E929A1BBA74F6B3E434D33E520 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft Manifest number: EB Signing time: Sat 24 Oct 2026 22:57:50 +0000 Manifest this update: Sat 24 Oct 2026 22:52:50 +0000 Manifest next update: Mon 26 Oct 2026 00:14:50 +0000 Files and hashes: 1: 3FCCB124CE6330827269179656BC9A7F04BCACF3.crl (hash: +qV6cSveWJRPj4mASSTuWcW8Ojcy00+bn2D2YaH8Q6M=) 2: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: AQenx1dt+kU1dllLrJ4J77w2s2czEkS4jP/ajMi229M=) 3: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: vpj2Cz8QvcSUHt1I4ZpBnWfoJ+ZMnw91/FihIVwqKaA=) 4: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: SSEqRHV7zoEBGj203TATYpoeDOC/rqoDeoQ8cFsGA28=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:26:56:51:92:79:d0:e9:29:a1:bb:a7:4f:6b:3e:43:4d:33:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Validity Not Before: Oct 24 22:52:50 2026 GMT Not After : Oct 26 00:14:50 2026 GMT Subject: CN=6373B2BFAD5004609342171FFB56A068A525483B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:13:4d:be:ba:16:30:0f:b4:1b:08:e0:55: 52:f3:01:1a:61:0c:80:3b:0e:61:f2:cd:af:04:42: 6a:a8:37:ab:28:e5:fc:4f:3e:4e:e3:70:c7:2d:39: a6:5c:70:7e:87:87:08:91:20:41:b5:fd:e8:ce:4d: c5:33:a4:24:60:a0:e8:76:43:bc:2f:a2:2c:cb:ce: 40:ba:bb:f0:6d:a3:51:78:2e:e9:fc:af:5c:89:d0: 46:57:bb:96:b0:76:c1:8d:07:f6:22:7f:e9:c6:cd: 91:2d:0a:fd:5f:b7:17:71:68:5d:f6:93:43:10:5c: 83:ef:33:51:ee:8a:66:f2:44:92:13:19:6c:3a:20: dd:b0:24:9d:66:2b:92:c3:6c:83:ba:35:44:84:8c: 6e:ce:31:4d:e0:ee:c1:56:50:a8:68:18:76:b2:83: 45:d4:92:f6:94:9b:b1:6f:eb:6a:ef:71:ab:e4:63: ab:c5:36:38:2d:f8:23:16:5e:ce:be:b7:85:58:b9: 7e:e3:e2:c4:16:be:31:21:d8:d4:bb:84:4d:ea:6e: 97:bb:1f:8b:56:1a:91:7d:f9:c2:89:f5:5d:ac:99: 0d:02:bd:4c:5c:0e:ff:54:4d:38:e8:4a:3a:54:01: 38:67:e1:32:6d:64:05:fe:f4:0e:e1:9b:5c:ab:5b: c7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:73:B2:BF:AD:50:04:60:93:42:17:1F:FB:56:A0:68:A5:25:48:3B X509v3 Authority Key Identifier: keyid:3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:7e:6a:73:35:c2:1c:a8:e5:5a:2c:a5:76:c5:52:ec:c0:8b: e2:b8:72:2b:cc:bf:a7:97:f4:f8:ba:e1:8a:c6:a8:54:19:e3: c3:79:e3:49:9d:31:c7:8d:a3:a9:1c:4e:6f:b5:de:4f:d9:91: f7:fc:af:85:cb:67:ae:26:7f:b0:1c:e4:5a:7b:c5:92:4b:49: a2:19:fe:e2:f9:9d:50:b5:d5:5c:9d:85:d1:79:b0:b7:29:2a: fa:27:97:64:59:8a:c0:5d:40:bc:9a:e4:a1:06:bc:8c:e4:b2: b2:bf:85:8f:bd:5e:05:fc:61:11:b8:74:9d:96:df:45:d9:c5: 95:1a:75:4c:fd:38:5a:7d:e8:af:dc:19:86:2d:fa:c4:42:ba: fe:63:8a:6b:c9:1b:a4:a6:ae:e2:a2:a8:8b:06:b1:04:ff:dc: c8:7e:25:1a:dd:63:97:e4:5b:c2:cf:6f:f8:ed:6a:11:94:3c: 3a:bc:26:c6:0a:a3:e8:2c:ed:1e:15:e1:b6:8b:c1:1e:dd:ba: a1:2d:9f:58:4a:a2:72:16:a7:84:5d:56:73:df:74:3e:c7:38: dd:47:6b:8f:70:ff:b0:ac:c1:bf:59:f1:df:65:f2:c3:2e:27: a7:b3:99:99:7b:c5:49:c6:de:91:b3:fb:c2:ed:0a:ed:a1:f7: 63:cf:9f:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayZWUZJ50OkpobunT2s+Q00z5SAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlBN0Yw NEJDQUNGMzAeFw0yNjEwMjQyMjUyNTBaFw0yNjEwMjYwMDE0NTBaMDMxMTAvBgNV BAMTKDYzNzNCMkJGQUQ1MDA0NjA5MzQyMTcxRkZCNTZBMDY4QTUyNTQ4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwdBNNvroWMA+0GwjgVVLzARph DIA7DmHyza8EQmqoN6so5fxPPk7jcMctOaZccH6HhwiRIEG1/ejOTcUzpCRgoOh2 Q7wvoizLzkC6u/Bto1F4Lun8r1yJ0EZXu5awdsGNB/Yif+nGzZEtCv1ftxdxaF32 k0MQXIPvM1HuimbyRJITGWw6IN2wJJ1mK5LDbIO6NUSEjG7OMU3g7sFWUKhoGHay g0XUkvaUm7Fv62rvcavkY6vFNjgt+CMWXs6+t4VYuX7j4sQWvjEh2NS7hE3qbpe7 H4tWGpF9+cKJ9V2smQ0CvUxcDv9UTTjoSjpUAThn4TJtZAX+9A7hm1yrW8cjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY3Oyv61QBGCTQhcf+1agaKUlSDswHwYDVR0j BBgwFoAUP8yxJM5jMIJyaReWVryafwS8rPMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMzZjYwZTYtYWZkZC00ZTEwLTgzYjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRD RTYzMzA4MjcyNjkxNzk2NTZCQzlBN0YwNEJDQUNGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNDQjEyNENFNjMzMDgyNzI2OTE3OTY1NkJDOUE3RjA0QkNB Q0YzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlB N0YwNEJDQUNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV+anM1whyo5VospXbFUuzAi+K4civMv6eX 9Pi64YrGqFQZ48N540mdMceNo6kcTm+13k/Zkff8r4XLZ64mf7Ac5Fp7xZJLSaIZ /uL5nVC11VydhdF5sLcpKvonl2RZisBdQLya5KEGvIzksrK/hY+9XgX8YRG4dJ2W 30XZxZUadUz9OFp96K/cGYYt+sRCuv5jimvJG6SmruKiqIsGsQT/3Mh+JRrdY5fk W8LPb/jtahGUPDq8JsYKo+gs7R4V4baLwR7duqEtn1hKonIWp4RdVnPfdD7HON1H a49w/7Cswb9Z8d9l8sMuJ6ezmZl7xUnG3pGz+8LtCu2h92PPn6Y= -----END CERTIFICATE-----Generated at Sun Oct 25 09:25:12 2026 by rpki-client