$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft File: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft (raw, json) Hash identifier: HEFCrDlv4Ch/yGreR0O80HGsu3NrX1wl4dBVt1xzjlQ= Subject key identifier: 2D:62:82:27:E5:1C:C4:5D:10:F1:12:07:B3:82:3A:BA:98:18:81:63 Authority key identifier: 3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C Certificate issuer: /CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Certificate serial: 791AEF0EB2159E4772C59A50DECA17FCA40A16A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft Manifest number: E7 Signing time: Sat 24 Oct 2026 05:05:25 +0000 Manifest this update: Sat 24 Oct 2026 05:00:25 +0000 Manifest next update: Sun 25 Oct 2026 06:23:25 +0000 Files and hashes: 1: 3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl (hash: 0w7jWKySQFaJv9bEhnO+rs7DDzs9hdyAy8kFL9rsWe4=) 2: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: uDDSqQJALKhSiJ8HMA/VUDQe5THFv4WrWGBluPCxcKI=) 3: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 1EALwremo0OuX0UpvCbf2flDFJadlkhYoy6Ddmmbmd0=) 4: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: 6kElF6lyRfaEOBJkx0qFZUv24i4o0ISe0pvRjTce7Do=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1a:ef:0e:b2:15:9e:47:72:c5:9a:50:de:ca:17:fc:a4:0a:16:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C Validity Not Before: Oct 24 05:00:25 2026 GMT Not After : Oct 25 06:23:25 2026 GMT Subject: CN=2D628227E51CC45D10F11207B3823ABA98188163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:51:fd:42:d8:59:87:83:5b:9c:8d:35:04:06: ba:04:64:5c:97:17:b4:53:cb:ba:7f:6b:13:a3:45: a4:75:3c:9a:09:88:7d:73:09:27:0e:0e:77:be:b2: 23:50:ef:84:b3:14:86:8e:15:8d:2e:a8:f1:3f:6a: 58:48:08:c9:fd:68:7a:84:b3:e1:aa:e5:12:2b:c9: 05:37:b5:ca:c2:fa:5b:73:e5:f1:97:93:59:d9:78: 65:fa:76:26:3d:06:54:50:fc:1d:c4:0a:59:7d:72: 63:b6:c5:08:4e:2a:52:a7:e9:f5:fc:0d:19:bb:71: 87:67:fb:b7:9c:e5:d3:a8:67:0c:14:8c:b2:c5:58: 00:80:1a:9d:b3:89:06:c6:ad:5e:9a:a0:66:99:3a: 5d:23:36:3c:a4:03:34:cf:69:1c:5b:a8:de:7f:6a: db:49:98:58:b5:67:ca:24:ad:a4:74:d5:5f:2b:73: 0c:f1:e2:10:79:f0:6a:da:1d:3c:05:45:43:16:61: 70:a9:d7:f7:f2:0b:1d:6f:e3:7a:11:fb:60:60:45: 72:cf:5d:44:c2:41:5c:56:f8:f9:e5:28:8e:d4:11: 20:e5:d8:c0:8f:e9:17:b2:21:f2:db:e3:a5:43:24: a7:b7:bf:68:d9:fb:6c:23:d4:95:4a:7a:2c:82:33: 94:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:62:82:27:E5:1C:C4:5D:10:F1:12:07:B3:82:3A:BA:98:18:81:63 X509v3 Authority Key Identifier: keyid:3D:F4:C4:A2:6A:65:14:EF:33:7E:24:D3:AE:F2:28:F7:F9:A6:25:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3DF4C4A26A6514EF337E24D3AEF228F7F9A6252C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e3:5b:f1:83:68:00:f9:a3:e3:c0:c6:cd:13:16:a2:6b:04: 08:75:94:ef:05:9e:bc:de:8d:ce:07:82:1c:63:a3:b2:dd:76: c2:74:36:ba:f3:72:5f:02:84:a6:72:cc:6b:b2:29:ed:97:56: a0:50:b1:a1:de:cf:33:2d:c3:58:2f:b0:15:38:73:6f:f3:04: 98:cb:53:f4:14:88:3b:a8:f0:ec:31:48:e2:d2:99:99:6f:d8: 48:9f:18:61:13:97:52:0c:e0:f7:70:58:22:4f:30:4c:e5:40: 27:bb:9d:a4:0a:f5:ba:9b:cb:f2:83:b1:98:44:01:43:c9:17: f8:84:3b:b7:12:43:41:a9:ed:87:d0:f0:71:ac:b4:c1:bf:cd: 71:b2:32:34:d1:b4:12:d2:6c:95:87:4b:a6:e6:f4:41:7c:bd: 1f:4d:4a:ff:7a:17:59:a6:49:1c:d8:75:38:cb:c3:02:df:05: 63:ad:19:0f:52:7a:bd:a6:c6:e3:a8:05:8f:36:2d:77:b8:01: cb:69:a9:b0:db:f5:93:85:e4:c2:90:97:ed:01:84:1d:1b:a7: 3e:4a:94:af:e8:f3:9c:9b:e3:1a:11:6d:fb:6b:c4:21:f5:04: 83:ac:22:69:13:83:7f:33:28:b8:91:a5:34:f2:8f:6a:ad:92: 97:b2:03:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeRrvDrIVnkdyxZpQ3soX/KQKFqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdG OUE2MjUyQzAeFw0yNjEwMjQwNTAwMjVaFw0yNjEwMjUwNjIzMjVaMDMxMTAvBgNV BAMTKDJENjI4MjI3RTUxQ0M0NUQxMEYxMTIwN0IzODIzQUJBOTgxODgxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbUf1C2FmHg1ucjTUEBroEZFyX F7RTy7p/axOjRaR1PJoJiH1zCScODne+siNQ74SzFIaOFY0uqPE/alhICMn9aHqE s+Gq5RIryQU3tcrC+ltz5fGXk1nZeGX6diY9BlRQ/B3ECll9cmO2xQhOKlKn6fX8 DRm7cYdn+7ec5dOoZwwUjLLFWACAGp2ziQbGrV6aoGaZOl0jNjykAzTPaRxbqN5/ attJmFi1Z8okraR01V8rcwzx4hB58GraHTwFRUMWYXCp1/fyCx1v43oR+2BgRXLP XUTCQVxW+PnlKI7UESDl2MCP6ReyIfLb46VDJKe3v2jZ+2wj1JVKeiyCM5R5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULWKCJ+UcxF0Q8RIHs4I6upgYgWMwHwYDVR0j BBgwFoAUPfTEomplFO8zfiTTrvIo9/mmJSwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2JlZDgzYmQtODk4Ni00NDI5LWEwMTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2 QTY1MTRFRjMzN0UyNEQzQUVGMjI4RjdGOUE2MjUyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREY0QzRBMjZBNjUxNEVGMzM3RTI0RDNBRUYyMjhGN0Y5QTYy NTJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvM0RGNEM0QTI2QTY1MTRFRjMzN0UyNEQzQUVGMjI4 RjdGOUE2MjUyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETjW/GDaAD5o+PAxs0TFqJrBAh1lO8Fnrze jc4Hghxjo7LddsJ0Nrrzcl8ChKZyzGuyKe2XVqBQsaHezzMtw1gvsBU4c2/zBJjL U/QUiDuo8OwxSOLSmZlv2EifGGETl1IM4PdwWCJPMEzlQCe7naQK9bqby/KDsZhE AUPJF/iEO7cSQ0Gp7YfQ8HGstMG/zXGyMjTRtBLSbJWHS6bm9EF8vR9NSv96F1mm SRzYdTjLwwLfBWOtGQ9Ser2mxuOoBY82LXe4ActpqbDb9ZOF5MKQl+0BhB0bpz5K lK/o85yb4xoRbftrxCH1BIOsImkTg38zKLiRpTTyj2qtkpeyAz8= -----END CERTIFICATE-----Generated at Sat Oct 24 10:18:39 2026 by rpki-client