$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft File: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft (raw, json) Hash identifier: EHMHi2I1bn2tcpWkFEk2F1AlQviDyePnu7g0uPfTy9s= Subject key identifier: BF:05:93:02:10:72:B9:74:F8:0B:FD:79:C5:6B:A9:04:A1:E0:6B:63 Authority key identifier: 3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B Certificate issuer: /CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Certificate serial: 1C47E76129AEB3CBFAF654C8933FF0CDB5998ECA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:21:15 +0000 Manifest this update: Thu 17 Sep 2026 06:16:15 +0000 Manifest next update: Fri 18 Sep 2026 07:55:15 +0000 Files and hashes: 1: 3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl (hash: Fhwm/2CVFMF9XFdrnb+8I9uUB7JX1WHq17Wnd9I/JGE=) 2: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: +e+HfMOZldBa/LpS7h6lb+TbzFgEj7Ip8GzPugbfqcc=) 3: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: TX/EOsfX6vX1OpTsTM5A3FXSv9I/LcPHoG5Z7q7voYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:47:e7:61:29:ae:b3:cb:fa:f6:54:c8:93:3f:f0:cd:b5:99:8e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B Validity Not Before: Sep 17 06:16:15 2026 GMT Not After : Sep 18 07:55:15 2026 GMT Subject: CN=BF0593021072B974F80BFD79C56BA904A1E06B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:da:de:47:be:a6:0a:7d:b3:f4:ad:a8:9d:4d: a0:7a:c0:b6:12:06:fa:5d:ba:81:6b:07:d5:48:76: e4:93:f6:61:94:7a:be:58:21:40:ce:07:f8:d7:50: 35:03:24:89:6f:05:26:d6:bc:27:4c:6d:0b:e5:82: ca:4c:d6:20:c3:ae:04:76:94:27:c2:4e:98:f0:57: 5e:0f:62:4c:84:65:00:07:53:97:c7:c0:2e:cd:d4: 5d:1e:ad:30:c9:46:ab:2a:1f:ab:2f:db:8b:d2:d9: 55:ee:ac:17:27:30:98:67:70:b0:cd:f1:43:bf:e2: 4a:58:f7:a7:95:00:09:6a:c6:c1:79:d4:40:c5:3b: 4f:77:20:d3:c1:4e:18:9d:4b:cb:3f:5b:cc:cd:e3: 41:54:f6:7f:a8:ce:55:14:ff:7a:98:27:23:29:39: 64:0a:f3:a4:cc:34:5a:27:48:a3:ae:46:bd:92:b5: ea:8d:54:34:71:62:d4:db:d8:3c:70:e0:3f:76:0e: bc:e7:79:c1:5d:a0:07:60:c1:e6:82:56:69:ba:db: da:ae:60:a8:6d:7a:3f:d2:d1:19:66:a9:76:20:8e: 70:0e:0f:7a:20:94:36:0f:f4:78:1f:92:c0:8a:e8: b2:b5:6f:90:7d:55:0e:47:90:ea:00:f8:e7:16:aa: f8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:05:93:02:10:72:B9:74:F8:0B:FD:79:C5:6B:A9:04:A1:E0:6B:63 X509v3 Authority Key Identifier: keyid:3D:C0:C4:48:BD:DF:D9:66:8A:E1:A0:D8:F1:5A:22:3F:0E:63:83:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3DC0C448BDDFD9668AE1A0D8F15A223F0E63838B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9e:1f:16:fc:75:55:67:8f:8d:f8:02:fd:45:e8:1b:3a:68: 11:cb:b4:1d:da:65:4d:36:db:6d:a2:1b:b0:6e:ea:33:0d:09: eb:d2:48:fd:46:7b:b8:e3:31:2d:02:76:b2:4d:8c:7e:fc:56: 6f:a9:29:0b:5b:a4:8b:0c:09:30:f7:b2:6d:35:2e:ae:64:14: 97:42:ca:58:2c:84:2d:78:ca:9d:8b:46:75:a8:92:df:77:a3: c4:1a:39:e9:ee:d0:f8:75:25:54:42:af:50:81:dd:d5:0b:71: 8b:d2:58:f8:d2:f5:fa:57:f1:48:98:cb:ba:36:f6:58:a0:7d: d4:45:0a:42:83:81:2f:4b:1a:fe:83:50:71:b7:99:cf:17:09: 84:c4:71:9b:01:50:eb:8e:95:a1:e5:20:55:a8:c3:b0:81:95: 8e:7e:58:64:d0:e7:7c:f6:02:80:0f:54:bb:ad:62:54:07:e6: 7c:8a:19:6f:ba:45:74:22:31:9d:ba:e9:be:23:82:7c:32:c1: 59:fc:71:d0:68:6d:53:b4:85:9c:f9:04:41:ab:87:97:f5:fd: 57:cb:e4:b5:5f:6d:43:f5:70:fe:ff:bf:fa:1b:67:24:d1:3e: 52:b5:02:3a:e4:e8:fa:60:3f:f8:c0:90:8d:c5:a9:9b:70:19: 35:eb:42:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHEfnYSmus8v69lTIkz/wzbWZjsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIyM0Yw RTYzODM4QjAeFw0yNjA5MTcwNjE2MTVaFw0yNjA5MTgwNzU1MTVaMDMxMTAvBgNV BAMTKEJGMDU5MzAyMTA3MkI5NzRGODBCRkQ3OUM1NkJBOTA0QTFFMDZCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv2t5HvqYKfbP0raidTaB6wLYS BvpduoFrB9VIduST9mGUer5YIUDOB/jXUDUDJIlvBSbWvCdMbQvlgspM1iDDrgR2 lCfCTpjwV14PYkyEZQAHU5fHwC7N1F0erTDJRqsqH6sv24vS2VXurBcnMJhncLDN 8UO/4kpY96eVAAlqxsF51EDFO093INPBThidS8s/W8zN40FU9n+ozlUU/3qYJyMp OWQK86TMNFonSKOuRr2SteqNVDRxYtTb2Dxw4D92DrznecFdoAdgweaCVmm629qu YKhtej/S0RlmqXYgjnAOD3oglDYP9HgfksCK6LK1b5B9VQ5HkOoA+OcWqvgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvwWTAhByuXT4C/15xWupBKHga2MwHwYDVR0j BBgwFoAUPcDESL3f2WaK4aDY8VoiPw5jg4swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M0OTM1ZDgtOTZhMi00NTY0LTg1YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhC RERGRDk2NjhBRTFBMEQ4RjE1QTIyM0YwRTYzODM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zREMwQzQ0OEJEREZEOTY2OEFFMUEwRDhGMTVBMjIzRjBFNjM4 MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvM0RDMEM0NDhCRERGRDk2NjhBRTFBMEQ4RjE1QTIy M0YwRTYzODM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2eHxb8dVVnj434Av1F6Bs6aBHLtB3aZU02 222iG7Bu6jMNCevSSP1Ge7jjMS0CdrJNjH78Vm+pKQtbpIsMCTD3sm01Lq5kFJdC ylgshC14yp2LRnWokt93o8QaOenu0Ph1JVRCr1CB3dULcYvSWPjS9fpX8UiYy7o2 9ligfdRFCkKDgS9LGv6DUHG3mc8XCYTEcZsBUOuOlaHlIFWow7CBlY5+WGTQ53z2 AoAPVLutYlQH5nyKGW+6RXQiMZ266b4jgnwywVn8cdBobVO0hZz5BEGrh5f1/VfL 5LVfbUP1cP7/v/obZyTRPlK1Ajrk6PpgP/jAkI3FqZtwGTXrQpU= -----END CERTIFICATE-----Generated at Thu Sep 17 15:23:12 2026 by rpki-client