$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft File: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft (raw, json) Hash identifier: ISGVcYHWQzowzqZ6klD0G1kQx2RxM2yhzcQIMA4WBdo= Subject key identifier: 91:C6:0C:EA:8C:AE:81:A0:C0:6A:67:50:ED:77:77:B6:4E:D1:3B:32 Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Certificate serial: 1CAD3DC8D2E7CF4C98685AA1764AF0DD96710FC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft Manifest number: B1 Signing time: Fri 11 Sep 2026 02:39:12 +0000 Manifest this update: Fri 11 Sep 2026 02:34:12 +0000 Manifest next update: Sat 12 Sep 2026 03:11:12 +0000 Files and hashes: 1: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: IrDevpHt2Ab23kGrasFiPh/xJfyvQGBWQhBHMroNBCE=) 2: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: s1284mAgTGH50deceslU106KOtM4knEtXWIuryUSU50=) 3: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: ecGK2uv0QOr0Ium9PEGE2jPN+opG6R8n6ZDZWs8qtW8=) 4: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl (hash: MBxWnerJmCW8HsHScnu920myxQ2tNWPtRFJl/2AKgDI=) 5: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: Z9jMWV3QBPuL76HRS4eEvm14hiKdvW3s+uuBGhhBiQI=) 6: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: S54fglHVGgOkdpOGlybfdLwbJlLyDvqF1bFNcWMY+6I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 03:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ad:3d:c8:d2:e7:cf:4c:98:68:5a:a1:76:4a:f0:dd:96:71:0f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Validity Not Before: Sep 11 02:34:12 2026 GMT Not After : Sep 12 03:11:12 2026 GMT Subject: CN=91C60CEA8CAE81A0C06A6750ED7777B64ED13B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bf:37:88:1a:c8:fa:fd:06:fb:4a:75:e3:a7: 50:be:ed:a9:ef:4a:e1:94:5b:5c:20:d0:5e:bb:37: ef:e3:91:7b:10:15:a3:ef:bc:e9:d8:a4:5f:e5:74: bd:34:d9:cd:91:22:1a:fd:ec:6d:07:c8:a2:73:b9: 00:c3:d2:d9:ac:22:90:a2:fc:de:e5:8d:37:1c:a2: d2:32:6a:e8:38:d6:05:47:6d:79:b5:83:1d:a2:6f: b4:42:47:f6:2e:d8:15:5a:5e:75:57:dd:aa:9b:85: 3a:e0:0a:ab:61:fa:2c:5a:cb:48:24:41:ea:e1:1d: b3:f6:7e:c9:de:c5:e1:ee:3f:9b:b5:85:93:3d:29: 5b:9a:2f:9c:95:db:43:b9:39:48:83:ad:11:5b:10: 68:23:e3:cb:e0:52:97:56:8f:06:23:cf:c7:5a:89: e5:0b:dc:05:33:6d:9a:67:6f:54:c3:1c:ee:0d:11: 37:91:d3:50:cc:33:6c:28:71:94:11:c0:89:13:07: 9d:d3:9f:ca:ff:b2:7b:d4:63:75:2c:c3:27:1c:86: 39:51:1b:e3:77:86:08:4b:ab:07:a4:ec:f8:b2:6e: 1e:9a:46:0b:bc:5e:74:2f:a2:97:96:14:05:f4:4a: d9:be:8c:70:0e:84:f9:7b:50:f4:a6:92:de:6c:5c: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C6:0C:EA:8C:AE:81:A0:C0:6A:67:50:ED:77:77:B6:4E:D1:3B:32 X509v3 Authority Key Identifier: keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8b:33:b2:38:02:b4:34:7d:e2:67:b3:1d:ab:c3:12:a7:e7: 1b:9f:f5:bd:17:66:c8:10:ec:c8:bf:8a:b8:65:98:a1:18:f7: 70:63:f1:50:c9:e6:4d:72:d7:d2:ce:0e:a8:04:31:9e:a7:70: 93:dc:26:de:42:d9:e5:c0:1f:f0:29:9f:93:6d:84:4d:eb:99: 79:94:09:e0:f7:2a:40:5e:b1:e5:b1:d8:10:5a:30:b0:fb:9b: ab:a2:7e:79:2c:7d:6f:8b:3f:01:02:4f:2f:05:b3:5a:85:86: ce:aa:c5:63:32:8a:8c:00:c4:59:4d:27:d5:3a:5a:ca:91:f5: 8d:1c:a6:f4:73:d6:e5:a6:d6:ca:4a:09:2b:81:cc:a7:3c:f0: 72:2e:57:95:de:a1:e1:97:eb:e7:df:c3:7c:ac:4d:28:12:61: 13:61:66:5d:b1:73:6e:6c:b1:5a:81:89:b6:20:47:44:3f:3e: 4d:09:3d:b4:a3:4c:ae:7c:7a:9e:b6:a9:a3:0b:f5:5a:fb:29: 0f:2e:4e:fa:1d:49:ea:0a:79:2a:cd:74:fb:a7:a5:eb:57:63: 28:93:13:4c:f6:80:60:79:34:97:ab:81:1d:5d:56:d7:5c:6d: 5c:e4:f2:9b:ed:c8:b2:f9:d0:e3:26:16:2c:cc:7e:17:b8:20: e0:79:73:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHK09yNLnz0yYaFqhdkrw3ZZxD8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEy NDhBMTUxOTAeFw0yNjA5MTEwMjM0MTJaFw0yNjA5MTIwMzExMTJaMDMxMTAvBgNV BAMTKDkxQzYwQ0VBOENBRTgxQTBDMDZBNjc1MEVENzc3N0I2NEVEMTNCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNvzeIGsj6/Qb7SnXjp1C+7anv SuGUW1wg0F67N+/jkXsQFaPvvOnYpF/ldL002c2RIhr97G0HyKJzuQDD0tmsIpCi /N7ljTccotIyaug41gVHbXm1gx2ib7RCR/Yu2BVaXnVX3aqbhTrgCqth+ixay0gk QerhHbP2fsnexeHuP5u1hZM9KVuaL5yV20O5OUiDrRFbEGgj48vgUpdWjwYjz8da ieUL3AUzbZpnb1TDHO4NETeR01DMM2wocZQRwIkTB53Tn8r/snvUY3UswycchjlR G+N3hghLqwek7Piybh6aRgu8XnQvopeWFAX0Stm+jHAOhPl7UPSmkt5sXNShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkcYM6oyugaDAamdQ7Xd3tk7ROzIwHwYDVR0j BBgwFoAUPVfLInHy50cPKsI1jByiKiSKFRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE5ZjgxY2ItNWE1OS00MGYzLTg2YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3 MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEyNDhBMTUxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDU3Q0IyMjcxRjJFNzQ3MEYyQUMyMzU4QzFDQTIyQTI0OEEx NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0Ey MkEyNDhBMTUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGLM7I4ArQ0feJnsx2rwxKn5xuf9b0XZsgQ 7Mi/irhlmKEY93Bj8VDJ5k1y19LODqgEMZ6ncJPcJt5C2eXAH/Apn5NthE3rmXmU CeD3KkBeseWx2BBaMLD7m6uifnksfW+LPwECTy8Fs1qFhs6qxWMyiowAxFlNJ9U6 WsqR9Y0cpvRz1uWm1spKCSuBzKc88HIuV5XeoeGX6+ffw3ysTSgSYRNhZl2xc25s sVqBibYgR0Q/Pk0JPbSjTK58ep62qaML9Vr7KQ8uTvodSeoKeSrNdPunpetXYyiT E0z2gGB5NJergR1dVtdcbVzk8pvtyLL50OMmFizMfhe4IOB5c9I= -----END CERTIFICATE-----Generated at Fri Sep 11 06:50:41 2026 by rpki-client