$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft File: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft (raw, json) Hash identifier: czKiDPW7IXLd+d6TYqZHNhQeBO251fm6aVFBOsoNC1c= Subject key identifier: 2C:F1:E2:B5:90:03:9D:8C:E8:85:63:2E:D6:59:ED:8C:C9:C8:27:97 Authority key identifier: 3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC Certificate issuer: /CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Certificate serial: 7D766708B06A9D822E3A15BDD82511A47A95E998 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft Manifest number: EA Signing time: Sat 24 Oct 2026 21:56:31 +0000 Manifest this update: Sat 24 Oct 2026 21:51:31 +0000 Manifest next update: Sun 25 Oct 2026 22:06:31 +0000 Files and hashes: 1: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: NHpaZqHC4NTt91PhG1pzzVx+mpzKnTbfgFJI738LnKc=) 2: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: o6UES+tryYmpIwssyMXnmFCcFcBThAbWf6TdKlMd5ls=) 3: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: hCFV5sRxdzUQ0Ef1DHuXq2DMT11lGAzTPsRSkYtMfqM=) 4: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl (hash: FiPcOsXoH8iBqIlGljzfJmTOP8ehFYFvMPlwbxQ3dh8=) 5: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: u3QjwTKhA3xZ6qBaPve22SqHeKd1Tl3v9fzrQkdIYDM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:76:67:08:b0:6a:9d:82:2e:3a:15:bd:d8:25:11:a4:7a:95:e9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Validity Not Before: Oct 24 21:51:31 2026 GMT Not After : Oct 25 22:06:31 2026 GMT Subject: CN=2CF1E2B590039D8CE885632ED659ED8CC9C82797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:87:f7:3e:31:5f:fe:f4:fd:29:2d:18:c8: 7d:b2:3a:f2:4a:56:7b:bd:cb:e7:fa:8a:96:12:5d: a6:bd:fd:ef:82:fe:59:3e:6e:bf:cc:b1:db:65:e5: e3:40:5c:30:c6:2f:27:3b:ad:9a:b0:d0:26:57:f1: bf:36:5a:eb:90:80:4a:7b:a9:92:fb:d0:3c:a0:27: ac:29:31:2a:f4:b3:c8:17:e0:9c:20:fd:fa:a0:f3: 76:0f:ea:25:f5:89:e2:28:0a:11:5d:78:18:84:08: b7:b4:28:d6:d0:0f:20:2a:2d:80:54:32:28:5b:27: fa:6e:37:fb:26:0f:0f:ab:b8:51:2d:22:c2:00:89: 08:6b:05:24:b8:e8:9f:5f:51:e5:df:9d:7a:f9:1d: 21:08:74:5a:92:8c:d8:cf:63:8c:bb:71:83:17:72: 5d:e4:3c:e0:65:0b:bc:87:f4:e0:b0:c8:cf:1f:e3: b4:cf:2a:3a:af:54:1f:b9:0d:50:3e:77:0b:99:7f: 69:09:32:15:a3:57:db:51:ca:01:16:95:1f:61:d8: bd:f3:53:3d:25:75:70:c2:68:10:41:41:43:db:66: 03:fb:6b:74:c1:71:6c:7e:ce:fa:83:f8:7f:1b:44: ca:39:f9:aa:8c:22:bb:21:a5:14:fd:4a:e3:3a:f2: b3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F1:E2:B5:90:03:9D:8C:E8:85:63:2E:D6:59:ED:8C:C9:C8:27:97 X509v3 Authority Key Identifier: keyid:3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ff:ef:72:d1:a2:d8:a4:bc:ef:82:8e:c8:61:a3:2f:00:b3: 6e:1d:65:4c:2e:62:2c:a2:87:27:13:6e:ef:a0:1c:1e:c1:f0: a0:2f:b5:23:64:28:d5:d8:77:e6:60:ce:74:e5:ab:66:66:e6: 26:0c:76:3a:c5:e0:4d:f9:af:92:95:e3:bf:c1:30:01:02:c0: 16:d9:c8:18:0f:bc:c2:ed:cf:67:3e:23:64:89:8d:28:67:72: 6f:84:b7:33:64:4e:d4:af:15:d2:bb:df:6b:4c:50:e9:e7:52: b1:7b:33:a6:21:09:96:8f:f0:9e:73:06:7e:22:6e:a7:43:e9: d9:09:a8:57:66:d5:60:9b:fe:ba:8a:99:13:99:b3:11:49:de: 30:42:3e:ab:c4:a3:3c:59:a9:5b:4e:3f:50:83:38:cc:58:b1: 7a:dc:d1:bb:02:cc:ff:05:2e:74:f8:36:03:e7:03:cc:96:95: 17:2b:e2:38:4b:5a:b1:76:27:91:0d:8d:c5:06:13:61:90:be: 3e:14:68:2b:11:b1:72:ce:b6:da:65:8d:86:c5:86:0b:05:59: 64:37:02:dc:d4:b9:98:75:5b:18:4a:85:1e:a5:14:f5:fd:e0: 07:b5:6e:d4:68:d0:cd:82:de:a5:7e:84:3e:dc:6f:a6:b5:1a: 8d:0c:67:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXZnCLBqnYIuOhW92CURpHqV6ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdF M0U4OEZBQzAeFw0yNjEwMjQyMTUxMzFaFw0yNjEwMjUyMjA2MzFaMDMxMTAvBgNV BAMTKDJDRjFFMkI1OTAwMzlEOENFODg1NjMyRUQ2NTlFRDhDQzlDODI3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqoYf3PjFf/vT9KS0YyH2yOvJK Vnu9y+f6ipYSXaa9/e+C/lk+br/Msdtl5eNAXDDGLyc7rZqw0CZX8b82WuuQgEp7 qZL70DygJ6wpMSr0s8gX4Jwg/fqg83YP6iX1ieIoChFdeBiECLe0KNbQDyAqLYBU MihbJ/puN/smDw+ruFEtIsIAiQhrBSS46J9fUeXfnXr5HSEIdFqSjNjPY4y7cYMX cl3kPOBlC7yH9OCwyM8f47TPKjqvVB+5DVA+dwuZf2kJMhWjV9tRygEWlR9h2L3z Uz0ldXDCaBBBQUPbZgP7a3TBcWx+zvqD+H8bRMo5+aqMIrshpRT9SuM68rM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULPHitZADnYzohWMu1lntjMnIJ5cwHwYDVR0j BBgwFoAUP8/wkMeSATBAvhBnaIwst+Poj6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRhYmMwYmEtOTIyMi00YzQ1LTgzNDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBD NzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdFM0U4OEZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNGRjA5MEM3OTIwMTMwNDBCRTEwNjc2ODhDMkNCN0UzRTg4 RkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJD QjdFM0U4OEZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFf/73LRotikvO+Cjshhoy8As24dZUwuYiyi hycTbu+gHB7B8KAvtSNkKNXYd+ZgznTlq2Zm5iYMdjrF4E35r5KV47/BMAECwBbZ yBgPvMLtz2c+I2SJjShncm+EtzNkTtSvFdK732tMUOnnUrF7M6YhCZaP8J5zBn4i bqdD6dkJqFdm1WCb/rqKmROZsxFJ3jBCPqvEozxZqVtOP1CDOMxYsXrc0bsCzP8F LnT4NgPnA8yWlRcr4jhLWrF2J5ENjcUGE2GQvj4UaCsRsXLOttpljYbFhgsFWWQ3 AtzUuZh1WxhKhR6lFPX94Ae1btRo0M2C3qV+hD7cb6a1Go0MZ2Y= -----END CERTIFICATE-----Generated at Sun Oct 25 06:08:21 2026 by rpki-client