$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft File: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft (raw, json) Hash identifier: duJRYOBNLIABaKmX3vQ5mA+5XN8cLUO4W52IK37La10= Subject key identifier: ED:85:2B:41:6D:4E:52:75:C2:3D:95:1B:6E:38:A9:24:92:D5:DE:2F Authority key identifier: 3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 Certificate issuer: /CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Certificate serial: 1AE3EE7A60F1542B84C7B07672015B30A0E0C667 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:58:34 +0000 Manifest this update: Wed 16 Sep 2026 23:53:34 +0000 Manifest next update: Fri 18 Sep 2026 01:29:34 +0000 Files and hashes: 1: 3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl (hash: 7QzoSHMop8bfRNHqTg9XGa/6F6DViJDbTiyXdP8g/8k=) 2: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: 5BxZJ6/9J6eBwezWDHQK7gf8/iHFgfigBSsqY27prSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e3:ee:7a:60:f1:54:2b:84:c7:b0:76:72:01:5b:30:a0:e0:c6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0 Validity Not Before: Sep 16 23:53:34 2026 GMT Not After : Sep 18 01:29:34 2026 GMT Subject: CN=ED852B416D4E5275C23D951B6E38A92492D5DE2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:d7:1c:4c:3f:9b:d0:cf:78:b2:d8:4f:16: b4:c8:b5:d7:df:89:43:99:00:58:2e:59:a1:8a:b6: 0a:08:36:b2:4d:21:c1:b0:ef:2c:30:3a:0a:92:d3: cb:ad:f6:99:07:4c:64:a9:ab:b9:58:c8:c8:ae:76: b7:e9:25:70:05:a8:e7:19:f7:1b:ee:fc:8f:11:28: 5b:a6:25:f2:b4:e2:32:db:08:28:a5:d3:9c:bf:f6: 25:e7:f7:1b:96:46:6b:63:3c:6a:da:f7:7e:33:31: df:2c:2f:26:6c:bf:21:a9:0e:ef:9e:cb:9c:17:88: a2:c0:d5:69:fd:2a:d1:6b:80:94:87:3d:f2:eb:41: c2:35:7c:60:62:a1:ec:c3:f7:02:30:fa:c1:a3:03: 9c:f8:bb:63:56:e9:e8:49:2b:5b:21:cf:0a:40:3a: b6:59:44:78:ba:5b:a2:eb:7c:6b:5b:b8:33:ae:aa: e9:ba:0d:3d:31:a6:cd:4c:54:b2:cd:ce:7c:9f:4c: 95:e1:67:64:0e:77:50:fb:63:b2:ec:0d:d0:e6:8b: 34:cd:c9:78:d3:bd:e6:70:dd:c8:a9:18:10:16:f0: 24:44:e9:ee:70:48:79:0d:24:72:16:99:a7:4f:84: e2:d2:b4:aa:80:f9:f1:cf:0a:b4:ad:12:5d:d8:fe: 00:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:85:2B:41:6D:4E:52:75:C2:3D:95:1B:6E:38:A9:24:92:D5:DE:2F X509v3 Authority Key Identifier: keyid:3C:D1:AC:A3:D6:FF:CD:3B:D8:89:C6:24:5D:F0:17:01:72:80:5E:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3CD1ACA3D6FFCD3BD889C6245DF0170172805EC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d0:b0:86:93:af:00:df:b5:dd:02:35:9b:c9:65:50:f5:6f: 7e:a0:8c:2d:a0:69:44:f1:ca:2e:48:3a:df:16:96:b9:8e:e6: e3:6e:ca:fe:bc:b8:23:7c:df:b3:3c:21:91:de:5c:50:84:7a: a9:54:90:f4:cf:60:13:22:db:ec:44:60:95:b1:35:75:bb:ab: 82:29:0d:3d:0c:c8:0a:c0:9b:f7:08:4e:36:13:c8:d4:ff:9a: 4b:bb:d7:ec:05:7f:d5:0c:1c:3f:fd:95:77:dc:6f:59:8f:ad: ca:09:3e:33:4c:c2:04:08:4f:16:5f:1c:7d:cd:23:73:d4:c8: b4:58:19:19:59:82:6c:95:5b:3a:6a:c0:d6:58:e5:d1:4e:3c: 37:2c:20:d8:96:ce:3e:f5:63:c8:d8:b1:23:3b:25:f7:ea:cb: d4:41:a3:32:95:93:eb:49:53:9c:38:aa:16:9d:a2:01:56:86: b0:00:06:e0:87:28:e2:07:a3:76:b1:83:ba:6c:0d:3c:28:f4: 0b:f8:57:b4:05:ae:eb:55:e5:9f:a7:e7:87:46:7c:01:3f:92: 2d:87:96:e0:f6:e5:e1:87:51:c7:c0:de:67:50:c9:ea:77:27: 84:9a:a3:d8:b0:de:06:44:70:3b:01:47:c9:bc:78:71:67:e2: b4:61:c1:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuPuemDxVCuEx7B2cgFbMKDgxmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3 MjgwNUVDMDAeFw0yNjA5MTYyMzUzMzRaFw0yNjA5MTgwMTI5MzRaMDMxMTAvBgNV BAMTKEVEODUyQjQxNkQ0RTUyNzVDMjNEOTUxQjZFMzhBOTI0OTJENURFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK59ccTD+b0M94sthPFrTItdff iUOZAFguWaGKtgoINrJNIcGw7ywwOgqS08ut9pkHTGSpq7lYyMiudrfpJXAFqOcZ 9xvu/I8RKFumJfK04jLbCCil05y/9iXn9xuWRmtjPGra934zMd8sLyZsvyGpDu+e y5wXiKLA1Wn9KtFrgJSHPfLrQcI1fGBioezD9wIw+sGjA5z4u2NW6ehJK1shzwpA OrZZRHi6W6LrfGtbuDOuqum6DT0xps1MVLLNznyfTJXhZ2QOd1D7Y7LsDdDmizTN yXjTveZw3cipGBAW8CRE6e5wSHkNJHIWmadPhOLStKqA+fHPCrStEl3Y/gDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7YUrQW1OUnXCPZUbbjipJJLV3i8wHwYDVR0j BBgwFoAUPNGso9b/zTvYicYkXfAXAXKAXsAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjNjMTk3ZjgtNGUyZS00NmQ5LWJlMmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNE NkZGQ0QzQkQ4ODlDNjI0NURGMDE3MDE3MjgwNUVDMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0QxQUNBM0Q2RkZDRDNCRDg4OUM2MjQ1REYwMTcwMTcyODA1 RUMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvM0NEMUFDQTNENkZGQ0QzQkQ4ODlDNjI0NURGMDE3 MDE3MjgwNUVDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvQsIaTrwDftd0CNZvJZVD1b36gjC2gaUTx yi5IOt8WlrmO5uNuyv68uCN837M8IZHeXFCEeqlUkPTPYBMi2+xEYJWxNXW7q4Ip DT0MyArAm/cITjYTyNT/mku71+wFf9UMHD/9lXfcb1mPrcoJPjNMwgQITxZfHH3N I3PUyLRYGRlZgmyVWzpqwNZY5dFOPDcsINiWzj71Y8jYsSM7Jffqy9RBozKVk+tJ U5w4qhadogFWhrAABuCHKOIHo3axg7psDTwo9Av4V7QFrutV5Z+n54dGfAE/ki2H luD25eGHUcfA3mdQyep3J4Sao9iw3gZEcDsBR8m8eHFn4rRhwYk= -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:49 2026 by rpki-client