$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft File: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft (raw, json) Hash identifier: qQkwxPVMOs1bFmdMTVK3e8gGn2Y2I4a3JT9S+uqgPzE= Subject key identifier: F6:0A:00:22:01:28:0D:69:BB:75:19:91:8E:09:90:1C:0E:6B:5B:2D Authority key identifier: 3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 Certificate issuer: /CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Certificate serial: 62F37BDFA4BF13495FB2A62B0210D19C203759DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft Manifest number: F3 Signing time: Fri 30 Oct 2026 20:41:23 +0000 Manifest this update: Fri 30 Oct 2026 20:36:23 +0000 Manifest next update: Sat 31 Oct 2026 22:05:23 +0000 Files and hashes: 1: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: S54fglHVGgOkdpOGlybfdLwbJlLyDvqF1bFNcWMY+6I=) 2: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: Z9jMWV3QBPuL76HRS4eEvm14hiKdvW3s+uuBGhhBiQI=) 3: 3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl (hash: zgL5wK3GahtWc58OXhlzrcdiqY68RWvnGiObggtYb8A=) 4: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: ecGK2uv0QOr0Ium9PEGE2jPN+opG6R8n6ZDZWs8qtW8=) 5: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: s1284mAgTGH50deceslU106KOtM4knEtXWIuryUSU50=) 6: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: IrDevpHt2Ab23kGrasFiPh/xJfyvQGBWQhBHMroNBCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 11:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f3:7b:df:a4:bf:13:49:5f:b2:a6:2b:02:10:d1:9c:20:37:59:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D57CB2271F2E7470F2AC2358C1CA22A248A1519 Validity Not Before: Oct 30 20:36:23 2026 GMT Not After : Oct 31 22:05:23 2026 GMT Subject: CN=F60A002201280D69BB7519918E09901C0E6B5B2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:be:09:c3:ba:3e:68:05:a1:38:7b:3b:a3: e7:d1:e8:46:25:0e:0d:a4:c0:d3:44:02:1a:4f:0f: 41:08:1e:91:c1:b0:e3:b0:c7:1c:cd:b0:c0:dc:8c: f1:f2:e9:0f:d8:70:36:bf:ed:73:da:89:bd:15:e2: 7e:14:7a:58:b8:aa:e3:b6:6e:f5:d9:f0:73:68:2c: 83:c3:e9:d5:da:49:58:98:4a:bd:e2:af:f0:4d:6e: 10:f6:40:9e:c7:a6:99:0d:16:3d:41:15:82:1f:e6: b6:34:e5:25:ea:c0:de:0e:78:25:bc:cb:f4:5b:6d: 95:4c:c3:ff:c2:a5:ef:c8:76:e0:23:ba:56:25:30: 23:a4:af:4f:3c:cc:99:67:8b:9e:44:26:03:fd:09: 27:d3:76:50:e6:4b:87:18:ed:3d:80:e6:03:1d:7c: 12:7d:bb:2a:08:16:44:d4:4f:9d:61:eb:35:bb:5d: 8a:04:e3:82:f2:7d:c9:01:11:0c:b5:dd:70:01:2c: 62:97:1a:f9:ee:0d:7b:e8:b9:4e:df:27:f3:02:b7: b6:98:ae:99:81:78:da:9a:cd:9a:e4:fe:a0:14:57: b8:92:ee:cb:ea:c7:f1:ea:1a:3e:16:9e:b2:c5:ff: 6f:01:0d:b9:9d:9c:05:61:78:3f:6b:89:e1:25:ee: 56:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0A:00:22:01:28:0D:69:BB:75:19:91:8E:09:90:1C:0E:6B:5B:2D X509v3 Authority Key Identifier: keyid:3D:57:CB:22:71:F2:E7:47:0F:2A:C2:35:8C:1C:A2:2A:24:8A:15:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/3D57CB2271F2E7470F2AC2358C1CA22A248A1519.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:00:48:da:e1:17:68:2a:94:2b:50:44:45:50:81:2e:9e:5f: 50:91:3b:b1:0c:ac:d7:be:49:9e:62:d9:04:a2:79:46:3a:c0: 5f:02:bf:9e:b7:f2:77:7b:bd:d5:b3:62:13:39:46:38:5e:53: 7d:6b:7d:bb:08:b2:0e:dc:5a:81:1c:50:32:24:ac:3b:d6:d3: 5d:08:db:5d:6c:08:eb:76:f5:72:8c:06:28:c8:6a:f8:09:12: 72:d7:7a:68:52:f8:6c:91:06:40:1e:ee:21:8a:b9:66:12:6c: 7f:61:70:51:e6:4a:f2:14:c4:4a:e2:4c:ba:97:8e:6e:3e:58: 46:8a:29:33:88:81:08:3c:77:a6:f0:fc:ce:4a:3e:85:d0:06: b8:43:d7:c2:b7:42:40:b1:68:9d:a2:fd:ef:89:10:17:1c:a5: 9c:5b:c3:70:1a:68:3a:85:1d:78:d8:08:06:1b:6f:60:d6:8e: 44:92:5f:96:00:ef:0d:f0:e8:f7:c8:5e:0f:d6:fe:36:06:7e: d7:ee:9d:c9:23:86:89:49:50:fb:10:df:cc:0e:a5:a9:13:5e: 66:be:fb:60:52:6e:ef:b8:2c:15:bf:89:36:ae:5e:b1:6e:7b: f0:6c:2c:cd:f1:3a:08:20:00:49:5f:bd:ed:e7:a6:fd:fb:11: ef:13:c8:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvN736S/E0lfsqYrAhDRnCA3WdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEy NDhBMTUxOTAeFw0yNjEwMzAyMDM2MjNaFw0yNjEwMzEyMjA1MjNaMDMxMTAvBgNV BAMTKEY2MEEwMDIyMDEyODBENjlCQjc1MTk5MThFMDk5MDFDMEU2QjVCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYh74Jw7o+aAWhOHs7o+fR6EYl Dg2kwNNEAhpPD0EIHpHBsOOwxxzNsMDcjPHy6Q/YcDa/7XPaib0V4n4Ueli4quO2 bvXZ8HNoLIPD6dXaSViYSr3ir/BNbhD2QJ7HppkNFj1BFYIf5rY05SXqwN4OeCW8 y/RbbZVMw//Cpe/IduAjulYlMCOkr088zJlni55EJgP9CSfTdlDmS4cY7T2A5gMd fBJ9uyoIFkTUT51h6zW7XYoE44LyfckBEQy13XABLGKXGvnuDXvouU7fJ/MCt7aY rpmBeNqazZrk/qAUV7iS7svqx/HqGj4WnrLF/28BDbmdnAVheD9rieEl7lZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9goAIgEoDWm7dRmRjgmQHA5rWy0wHwYDVR0j BBgwFoAUPVfLInHy50cPKsI1jByiKiSKFRkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE5ZjgxY2ItNWE1OS00MGYzLTg2YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3 MUYyRTc0NzBGMkFDMjM1OEMxQ0EyMkEyNDhBMTUxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDU3Q0IyMjcxRjJFNzQ3MEYyQUMyMzU4QzFDQTIyQTI0OEEx NTE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvM0Q1N0NCMjI3MUYyRTc0NzBGMkFDMjM1OEMxQ0Ey MkEyNDhBMTUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8ASNrhF2gqlCtQREVQgS6eX1CRO7EMrNe+ SZ5i2QSieUY6wF8Cv5638nd7vdWzYhM5RjheU31rfbsIsg7cWoEcUDIkrDvW010I 211sCOt29XKMBijIavgJEnLXemhS+GyRBkAe7iGKuWYSbH9hcFHmSvIUxEriTLqX jm4+WEaKKTOIgQg8d6bw/M5KPoXQBrhD18K3QkCxaJ2i/e+JEBccpZxbw3AaaDqF HXjYCAYbb2DWjkSSX5YA7w3w6PfIXg/W/jYGftfunckjholJUPsQ38wOpakTXma+ +2BSbu+4LBW/iTauXrFue/BsLM3xOgggAElfve3npv37Ee8TyAg= -----END CERTIFICATE-----Generated at Sat Oct 31 03:42:55 2026 by rpki-client