$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b290f50-d141-49c9-8ce6-746062bb5324/0/3C1BD676DB8C33BE2E681409A4EA9D74881A265B.mft File: 3C1BD676DB8C33BE2E681409A4EA9D74881A265B.mft (raw, json) Hash identifier: 37jucMNVA5msKvda2gHIj6RNGI4+2eSt77+pDCYCcoQ= Subject key identifier: 66:6A:0B:DC:A6:44:15:28:35:EE:31:68:D9:CD:33:32:7D:05:C8:9C Authority key identifier: 3C:1B:D6:76:DB:8C:33:BE:2E:68:14:09:A4:EA:9D:74:88:1A:26:5B Certificate issuer: /CN=3C1BD676DB8C33BE2E681409A4EA9D74881A265B Certificate serial: 071284714CA750640150FCB858C524CD6099C58A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C1BD676DB8C33BE2E681409A4EA9D74881A265B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b290f50-d141-49c9-8ce6-746062bb5324/0/3C1BD676DB8C33BE2E681409A4EA9D74881A265B.mft Manifest number: 2B Signing time: Sat 24 Oct 2026 03:54:02 +0000 Manifest this update: Sat 24 Oct 2026 03:49:02 +0000 Manifest next update: Sun 25 Oct 2026 05:42:02 +0000 Files and hashes: 1: 3136332e35322e3136302e302f32342d3234203d3e20313534393135.roa (hash: eXs4c2vg7cZHUhJsRIIF2xzFpp8iQNvYBDWDZ3OsnW0=) 2: 3136332e35322e3136312e302f32342d3234203d3e20313534393135.roa (hash: wSrpadUrlNGH6vGC1eR2HciWWOKkffViuufOkjPBhks=) 3: 323030313a6466373a376663303a3a2f34382d3438203d3e20313534393135.roa (hash: npRbhfOwjV82x0SmRml/T+iSJlmXaKAa44VIyoepZwE=) 4: 3136332e35322e3136302e302f32332d3233203d3e20313534393135.roa (hash: ZHwWvcepfHhZDMRebyty0myZi0Z8vhAiBO40OmuWVs0=) 5: 3C1BD676DB8C33BE2E681409A4EA9D74881A265B.crl (hash: ZLyGT0oP2/sMST5fnOrGbzbqY2UTLZhOc1Dvmzi3H24=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b290f50-d141-49c9-8ce6-746062bb5324/0/3C1BD676DB8C33BE2E681409A4EA9D74881A265B.crl rsync://rpki-rsync.idnic.net/repo/6b290f50-d141-49c9-8ce6-746062bb5324/0/3C1BD676DB8C33BE2E681409A4EA9D74881A265B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C1BD676DB8C33BE2E681409A4EA9D74881A265B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:12:84:71:4c:a7:50:64:01:50:fc:b8:58:c5:24:cd:60:99:c5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C1BD676DB8C33BE2E681409A4EA9D74881A265B Validity Not Before: Oct 24 03:49:02 2026 GMT Not After : Oct 25 05:42:02 2026 GMT Subject: CN=666A0BDCA644152835EE3168D9CD33327D05C89C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:48:04:4b:4d:de:a3:04:43:25:32:b5:d1: 8d:4a:f6:ce:a2:b3:b2:5f:5a:7e:fb:eb:cb:91:ea: 52:4a:c0:68:f9:44:99:e0:e6:c4:d3:b0:97:de:4e: 76:56:fb:4b:2e:6b:3c:2e:4e:b8:5a:8e:4b:1b:60: 48:0e:47:8d:6a:58:8b:2a:85:40:b0:4c:83:d0:14: 65:7a:fc:f9:8b:a4:20:54:91:46:c9:a5:51:7a:ed: 7e:20:68:de:01:f2:59:29:6f:c8:50:cd:e5:e6:17: c8:42:b0:7c:56:bb:f0:45:fd:21:88:a9:7d:6d:56: d2:8a:0d:4a:aa:6e:b3:ec:93:7e:86:3c:37:38:25: 7e:49:fa:f8:89:49:19:77:5d:56:63:f7:ef:b6:51: 28:4e:5e:a9:b6:d7:4c:52:18:08:b7:a2:eb:37:56: bf:9e:62:62:67:75:7f:6f:9e:85:d9:58:fe:1a:76: 2e:a4:9a:60:5e:c1:67:ad:ee:2e:1c:f7:aa:52:03: 5a:31:88:66:2b:0c:89:66:36:b0:6d:7e:d3:9e:16: 5f:55:05:38:86:2f:14:ab:0e:f5:80:ed:f6:55:ce: 3c:83:17:61:cb:61:22:be:b8:02:98:24:93:6b:8c: 98:12:c2:e2:04:b1:ff:62:2c:56:21:75:74:29:2f: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6A:0B:DC:A6:44:15:28:35:EE:31:68:D9:CD:33:32:7D:05:C8:9C X509v3 Authority Key Identifier: keyid:3C:1B:D6:76:DB:8C:33:BE:2E:68:14:09:A4:EA:9D:74:88:1A:26:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b290f50-d141-49c9-8ce6-746062bb5324/0/3C1BD676DB8C33BE2E681409A4EA9D74881A265B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C1BD676DB8C33BE2E681409A4EA9D74881A265B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b290f50-d141-49c9-8ce6-746062bb5324/0/3C1BD676DB8C33BE2E681409A4EA9D74881A265B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:60:cc:36:de:55:78:0d:e9:f2:10:65:67:01:da:ea:0f:4b: a2:4b:6b:d6:27:c1:d2:fc:ca:f1:0b:de:7b:0d:02:c7:13:8e: fb:ab:bd:e4:94:5f:7f:fc:3d:58:90:62:16:2b:13:70:82:6f: c2:7c:9d:fa:81:d9:23:0e:fa:af:fe:7a:60:ad:3f:fc:75:32: 84:cf:eb:44:8a:d3:20:54:18:71:97:f6:c5:23:13:36:62:67: db:c1:f9:68:89:e5:ab:91:64:97:0f:d4:69:d3:c4:18:67:f1: 44:24:77:32:35:d2:c2:54:08:7f:06:19:23:20:dd:4f:fa:ad: 88:8d:9d:4d:0e:7e:5c:f6:37:db:16:34:d0:18:e7:ef:b1:c5: dd:8b:0e:71:47:30:7a:46:47:dc:ae:9a:ae:74:a8:e3:c7:40: 8d:a8:f2:cc:ca:16:f5:a9:c9:5a:8d:44:88:97:a7:80:bf:4c: 57:37:52:42:4f:fc:d7:ad:27:a0:31:6e:7e:7c:00:78:5a:c0: 0c:bc:fa:c3:05:de:9d:87:5e:07:4f:29:7f:00:e2:9b:e7:0a: d9:e5:c1:5c:ec:ef:09:57:3f:aa:e0:e6:a4:ac:07:b9:c4:32: 57:c7:7d:be:f9:6f:fe:80:03:a0:5b:27:d7:e8:96:ea:f9:8d: be:0b:ca:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBxKEcUynUGQBUPy4WMUkzWCZxYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MxQkQ2NzZEQjhDMzNCRTJFNjgxNDA5QTRFQTlENzQ4 ODFBMjY1QjAeFw0yNjEwMjQwMzQ5MDJaFw0yNjEwMjUwNTQyMDJaMDMxMTAvBgNV BAMTKDY2NkEwQkRDQTY0NDE1MjgzNUVFMzE2OEQ5Q0QzMzMyN0QwNUM4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqEgES03eowRDJTK10Y1K9s6i s7JfWn7768uR6lJKwGj5RJng5sTTsJfeTnZW+0suazwuTrhajksbYEgOR41qWIsq hUCwTIPQFGV6/PmLpCBUkUbJpVF67X4gaN4B8lkpb8hQzeXmF8hCsHxWu/BF/SGI qX1tVtKKDUqqbrPsk36GPDc4JX5J+viJSRl3XVZj9++2UShOXqm210xSGAi3ous3 Vr+eYmJndX9vnoXZWP4adi6kmmBewWet7i4c96pSA1oxiGYrDIlmNrBtftOeFl9V BTiGLxSrDvWA7fZVzjyDF2HLYSK+uAKYJJNrjJgSwuIEsf9iLFYhdXQpLzGZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZmoL3KZEFSg17jFo2c0zMn0FyJwwHwYDVR0j BBgwFoAUPBvWdtuMM74uaBQJpOqddIgaJlswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmIyOTBmNTAtZDE0MS00OWM5LThjZTYtNzQ2MDYyYmI1MzI0LzAvM0MxQkQ2NzZE QjhDMzNCRTJFNjgxNDA5QTRFQTlENzQ4ODFBMjY1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzFCRDY3NkRCOEMzM0JFMkU2ODE0MDlBNEVBOUQ3NDg4MUEy NjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmIyOTBmNTAtZDE0MS00OWM5LThj ZTYtNzQ2MDYyYmI1MzI0LzAvM0MxQkQ2NzZEQjhDMzNCRTJFNjgxNDA5QTRFQTlE NzQ4ODFBMjY1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlgzDbeVXgN6fIQZWcB2uoPS6JLa9YnwdL8 yvEL3nsNAscTjvurveSUX3/8PViQYhYrE3CCb8J8nfqB2SMO+q/+emCtP/x1MoTP 60SK0yBUGHGX9sUjEzZiZ9vB+WiJ5auRZJcP1GnTxBhn8UQkdzI10sJUCH8GGSMg 3U/6rYiNnU0Oflz2N9sWNNAY5++xxd2LDnFHMHpGR9yumq50qOPHQI2o8szKFvWp yVqNRIiXp4C/TFc3UkJP/NetJ6Axbn58AHhawAy8+sMF3p2HXgdPKX8A4pvnCtnl wVzs7wlXP6rg5qSsB7nEMlfHfb75b/6AA6BbJ9folur5jb4Lyis= -----END CERTIFICATE-----Generated at Sat Oct 24 10:39:38 2026 by rpki-client