$ rpki-client -vvvf rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft File: 3FCCB124CE6330827269179656BC9A7F04BCACF3.mft (raw, json) Hash identifier: ly8g78s/uGZaM12QVAL1Hz34nZn6koDNGSIyEEiwl1c= Subject key identifier: 1A:B9:BE:28:4F:06:FB:E3:EF:05:0F:28:95:04:B8:CC:24:0C:6F:FD Authority key identifier: 3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 Certificate issuer: /CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Certificate serial: 2380729A3C3DC8069BCF97D80E93AB7FE1D7C926 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft Manifest number: EC Signing time: Sun 25 Oct 2026 16:17:06 +0000 Manifest this update: Sun 25 Oct 2026 16:12:06 +0000 Manifest next update: Mon 26 Oct 2026 16:50:06 +0000 Files and hashes: 1: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: vpj2Cz8QvcSUHt1I4ZpBnWfoJ+ZMnw91/FihIVwqKaA=) 2: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: SSEqRHV7zoEBGj203TATYpoeDOC/rqoDeoQ8cFsGA28=) 3: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: AQenx1dt+kU1dllLrJ4J77w2s2czEkS4jP/ajMi229M=) 4: 3FCCB124CE6330827269179656BC9A7F04BCACF3.crl (hash: Z/2DaW+eSVb4vZTn/MchZS/7B36o1QyuaNrhb8eqqJY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:80:72:9a:3c:3d:c8:06:9b:cf:97:d8:0e:93:ab:7f:e1:d7:c9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCCB124CE6330827269179656BC9A7F04BCACF3 Validity Not Before: Oct 25 16:12:06 2026 GMT Not After : Oct 26 16:50:06 2026 GMT Subject: CN=1AB9BE284F06FBE3EF050F289504B8CC240C6FFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:9b:a0:9a:07:67:dd:79:08:36:e6:de:7d: ea:c7:5d:19:6a:58:d5:14:6c:7b:99:2d:e7:31:e8: 4d:77:85:95:38:5f:54:22:de:8a:6a:4c:f2:02:6e: 27:e6:78:c2:9b:17:8d:93:91:7b:f5:15:92:2a:c5: 88:63:b2:5e:b2:f4:cc:2c:5d:94:69:9c:4d:c0:3b: c9:21:ab:5c:1d:28:0f:aa:73:8b:e0:a0:9b:49:a8: fd:25:6a:70:ef:f8:4c:e7:8d:6a:ab:04:25:2c:0a: d7:e0:de:bb:a1:6b:97:4f:b3:ae:62:c2:53:71:44: 28:8f:1e:fa:9f:f3:f5:32:9f:71:13:7c:82:11:e0: 6f:ec:e5:69:ea:23:e8:29:f9:2c:7c:f5:8b:97:12: ea:72:c0:cb:fe:51:c5:30:91:fd:6a:97:79:89:97: db:f1:f9:3a:5e:f1:9c:dc:16:e6:28:34:0e:a6:e8: b5:11:1a:2e:a6:80:bc:0f:e4:19:e3:f9:c7:ce:f7: a9:5d:fb:61:70:03:f2:4f:05:aa:05:52:84:77:c4: df:fc:54:84:48:f7:d5:ef:65:c3:f3:52:a9:7d:f6: 08:21:7a:41:a2:7c:ff:b9:64:f7:59:ca:18:02:f5: 31:90:33:07:78:76:5c:b8:0f:77:fc:f8:9e:d9:12: f4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B9:BE:28:4F:06:FB:E3:EF:05:0F:28:95:04:B8:CC:24:0C:6F:FD X509v3 Authority Key Identifier: keyid:3F:CC:B1:24:CE:63:30:82:72:69:17:96:56:BC:9A:7F:04:BC:AC:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCCB124CE6330827269179656BC9A7F04BCACF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3FCCB124CE6330827269179656BC9A7F04BCACF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d2:93:a5:41:4f:f2:6b:11:a2:6b:ef:03:e8:af:44:98:7d: b5:01:8c:81:a8:ca:58:86:e6:cb:84:61:b3:a8:a4:f5:d3:40: 3f:83:1a:3d:ef:18:69:14:be:71:89:6a:a6:08:33:a4:83:10: 53:7a:ef:b1:20:3f:49:a4:08:de:2e:e3:a8:25:be:db:f1:58: 1f:29:87:7e:12:d1:ce:0d:c5:52:6a:d7:f5:6a:43:55:27:b0: 55:bb:48:2c:39:da:19:30:f4:b1:75:fe:08:42:d4:1b:58:f4: af:cc:dd:0b:0d:88:b6:e5:46:45:8f:95:9f:9e:a5:55:49:45: 68:03:e1:97:83:f3:8d:b6:72:04:7a:50:91:8f:27:a6:d3:68: 36:77:8d:08:7b:d0:47:23:f1:b8:bf:1f:d1:ba:48:92:c6:d1: de:f1:e9:c8:86:52:91:47:6b:4d:9a:98:12:78:b1:8f:e1:40: 7b:9a:ed:df:a0:81:3f:1d:e8:66:c7:af:4a:d1:de:1b:9f:72: 31:a6:d9:ba:5c:4b:52:97:ae:de:01:cc:b3:60:d2:03:e3:40: eb:c6:f1:4c:d7:99:14:d3:8b:98:dc:ad:4c:49:25:94:51:7d: cf:2b:36:32:3b:43:13:f1:ac:41:58:8c:61:95:72:5b:d5:b2: 66:61:88:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4Bymjw9yAabz5fYDpOrf+HXySYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlBN0Yw NEJDQUNGMzAeFw0yNjEwMjUxNjEyMDZaFw0yNjEwMjYxNjUwMDZaMDMxMTAvBgNV BAMTKDFBQjlCRTI4NEYwNkZCRTNFRjA1MEYyODk1MDRCOENDMjQwQzZGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb05ugmgdn3XkINubeferHXRlq WNUUbHuZLecx6E13hZU4X1Qi3opqTPICbifmeMKbF42TkXv1FZIqxYhjsl6y9Mws XZRpnE3AO8khq1wdKA+qc4vgoJtJqP0lanDv+EznjWqrBCUsCtfg3ruha5dPs65i wlNxRCiPHvqf8/Uyn3ETfIIR4G/s5WnqI+gp+Sx89YuXEupywMv+UcUwkf1ql3mJ l9vx+Tpe8ZzcFuYoNA6m6LURGi6mgLwP5Bnj+cfO96ld+2FwA/JPBaoFUoR3xN/8 VIRI99XvZcPzUql99gghekGifP+5ZPdZyhgC9TGQMwd4dly4D3f8+J7ZEvQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGrm+KE8G++PvBQ8olQS4zCQMb/0wHwYDVR0j BBgwFoAUP8yxJM5jMIJyaReWVryafwS8rPMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMzZjYwZTYtYWZkZC00ZTEwLTgzYjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRD RTYzMzA4MjcyNjkxNzk2NTZCQzlBN0YwNEJDQUNGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNDQjEyNENFNjMzMDgyNzI2OTE3OTY1NkJDOUE3RjA0QkNB Q0YzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvM0ZDQ0IxMjRDRTYzMzA4MjcyNjkxNzk2NTZCQzlB N0YwNEJDQUNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzSk6VBT/JrEaJr7wPor0SYfbUBjIGoyliG 5suEYbOopPXTQD+DGj3vGGkUvnGJaqYIM6SDEFN677EgP0mkCN4u46glvtvxWB8p h34S0c4NxVJq1/VqQ1UnsFW7SCw52hkw9LF1/ghC1BtY9K/M3QsNiLblRkWPlZ+e pVVJRWgD4ZeD8422cgR6UJGPJ6bTaDZ3jQh70Ecj8bi/H9G6SJLG0d7x6ciGUpFH a02amBJ4sY/hQHua7d+ggT8d6GbHr0rR3hufcjGm2bpcS1KXrt4BzLNg0gPjQOvG 8UzXmRTTi5jcrUxJJZRRfc8rNjI7QxPxrEFYjGGVclvVsmZhiBc= -----END CERTIFICATE-----Generated at Sun Oct 25 18:45:59 2026 by rpki-client