$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft File: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft (raw, json) Hash identifier: 0xY2zJWlkOzh6izOSsVWzTpQwunAq6AiPw6TVGTbz68= Subject key identifier: BD:E8:48:A1:27:7C:52:B7:78:98:7D:DA:52:EF:DF:D5:C6:6C:B3:46 Authority key identifier: 3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC Certificate issuer: /CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Certificate serial: 1FA06C557EBD0B223EF12D45F842309DD3DB4FC1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft Manifest number: EB Signing time: Sun 25 Oct 2026 14:09:17 +0000 Manifest this update: Sun 25 Oct 2026 14:04:17 +0000 Manifest next update: Mon 26 Oct 2026 16:30:17 +0000 Files and hashes: 1: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: hCFV5sRxdzUQ0Ef1DHuXq2DMT11lGAzTPsRSkYtMfqM=) 2: 3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl (hash: 2TN61nT2vDX1Eeyg9HdiSiOlRn16Guk0iFyFwqa44Rg=) 3: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: u3QjwTKhA3xZ6qBaPve22SqHeKd1Tl3v9fzrQkdIYDM=) 4: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: NHpaZqHC4NTt91PhG1pzzVx+mpzKnTbfgFJI738LnKc=) 5: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: o6UES+tryYmpIwssyMXnmFCcFcBThAbWf6TdKlMd5ls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 16:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a0:6c:55:7e:bd:0b:22:3e:f1:2d:45:f8:42:30:9d:d3:db:4f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCFF090C792013040BE1067688C2CB7E3E88FAC Validity Not Before: Oct 25 14:04:17 2026 GMT Not After : Oct 26 16:30:17 2026 GMT Subject: CN=BDE848A1277C52B778987DDA52EFDFD5C66CB346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:7b:41:da:08:74:43:a1:50:36:94:d5:58: 3a:90:ee:7a:3e:20:aa:34:f1:88:33:49:1f:77:2b: 45:aa:c7:67:fa:47:fc:af:d7:ed:74:43:be:81:57: b1:e5:ff:f6:52:17:3b:cf:3e:05:c2:ee:32:88:9d: f1:98:38:32:30:6d:1c:94:7f:cf:5b:c7:08:8f:70: d3:be:54:a4:1d:b8:79:e5:dc:a9:d2:c9:6b:92:2e: 32:6a:e0:28:7d:67:d5:e3:9e:6d:03:f1:97:02:03: 65:53:c8:38:26:fa:77:0b:61:de:4e:25:0e:02:80: 46:11:e8:37:b3:83:c0:5e:b4:a6:b3:a7:41:9a:42: ec:7c:eb:a3:67:97:83:1f:d3:be:5b:22:c4:ce:67: 3b:87:e4:6f:94:c7:4a:4b:a3:d7:5d:02:ea:18:19: 1a:f6:e3:ce:d6:77:43:5b:4e:4d:f7:84:e5:31:09: f2:55:17:95:04:0b:b3:53:28:ab:18:c4:be:d5:a1: fe:fc:43:95:6b:2e:03:cd:cd:0e:c8:d7:83:0b:e4: af:a8:c7:21:55:64:7d:86:10:7e:5c:03:45:df:b1: 30:7b:b8:4c:54:25:05:16:3b:95:2e:7a:4b:24:ee: 13:99:f5:66:40:30:b6:c8:31:a4:84:d1:a8:fb:42: fd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E8:48:A1:27:7C:52:B7:78:98:7D:DA:52:EF:DF:D5:C6:6C:B3:46 X509v3 Authority Key Identifier: keyid:3F:CF:F0:90:C7:92:01:30:40:BE:10:67:68:8C:2C:B7:E3:E8:8F:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FCFF090C792013040BE1067688C2CB7E3E88FAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/3FCFF090C792013040BE1067688C2CB7E3E88FAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c2:f9:23:21:aa:11:ef:c7:80:cd:f5:e9:2c:2a:59:89:11: 24:14:d3:0f:cf:9d:2b:f5:68:d9:2e:11:31:dd:e1:17:b9:9b: 6e:f3:c3:5a:bf:3b:ea:ee:55:65:e3:cd:86:d0:8c:7d:d9:fd: b1:d3:02:fb:10:33:ae:6e:52:fa:34:f2:bc:8c:b9:b7:6f:fd: d1:12:a1:15:43:e3:c7:bb:05:5f:89:a6:f6:9a:22:0e:f4:9b: 9b:d7:46:f4:16:d2:c7:b7:8c:7b:d8:c0:71:dc:e8:a4:65:97: 52:2b:13:30:f5:f8:14:9c:97:09:f6:79:e0:77:5b:29:ee:86: dc:fb:88:b8:ee:10:c7:98:37:08:42:fc:bf:00:01:e9:a6:cd: 9c:03:7d:78:39:e7:24:37:a9:32:8f:40:d5:63:0c:2e:14:88: 84:ed:17:ad:0d:57:3c:c3:5c:ba:04:4a:e7:3d:d0:e4:e1:50: d0:de:ba:06:d5:fa:ff:cc:00:6d:ad:63:b2:18:dc:64:c2:0e: 7f:5b:11:20:a5:99:ea:86:18:c8:87:f4:22:26:91:a4:51:e9: 7e:9c:ec:e3:1e:98:dc:65:d7:a4:c4:6a:05:8b:43:89:18:3f: 9c:15:98:91:f4:50:bd:7e:a8:97:d9:81:9b:55:7a:f5:2c:f3: ef:42:3f:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6BsVX69CyI+8S1F+EIwndPbT8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdF M0U4OEZBQzAeFw0yNjEwMjUxNDA0MTdaFw0yNjEwMjYxNjMwMTdaMDMxMTAvBgNV BAMTKEJERTg0OEExMjc3QzUyQjc3ODk4N0REQTUyRUZERkQ1QzY2Q0IzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gntB2gh0Q6FQNpTVWDqQ7no+ IKo08YgzSR93K0Wqx2f6R/yv1+10Q76BV7Hl//ZSFzvPPgXC7jKInfGYODIwbRyU f89bxwiPcNO+VKQduHnl3KnSyWuSLjJq4Ch9Z9Xjnm0D8ZcCA2VTyDgm+ncLYd5O JQ4CgEYR6Dezg8BetKazp0GaQux866Nnl4Mf075bIsTOZzuH5G+Ux0pLo9ddAuoY GRr2487Wd0NbTk33hOUxCfJVF5UEC7NTKKsYxL7Vof78Q5VrLgPNzQ7I14ML5K+o xyFVZH2GEH5cA0XfsTB7uExUJQUWO5Uueksk7hOZ9WZAMLbIMaSE0aj7Qv3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvehIoSd8Urd4mH3aUu/f1cZss0YwHwYDVR0j BBgwFoAUP8/wkMeSATBAvhBnaIwst+Poj6wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRhYmMwYmEtOTIyMi00YzQ1LTgzNDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBD NzkyMDEzMDQwQkUxMDY3Njg4QzJDQjdFM0U4OEZBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkNGRjA5MEM3OTIwMTMwNDBCRTEwNjc2ODhDMkNCN0UzRTg4 RkFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvM0ZDRkYwOTBDNzkyMDEzMDQwQkUxMDY3Njg4QzJD QjdFM0U4OEZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvC+SMhqhHvx4DN9eksKlmJESQU0w/PnSv1 aNkuETHd4Re5m27zw1q/O+ruVWXjzYbQjH3Z/bHTAvsQM65uUvo08ryMubdv/dES oRVD48e7BV+JpvaaIg70m5vXRvQW0se3jHvYwHHc6KRll1IrEzD1+BSclwn2eeB3 Wynuhtz7iLjuEMeYNwhC/L8AAemmzZwDfXg55yQ3qTKPQNVjDC4UiITtF60NVzzD XLoESuc90OThUNDeugbV+v/MAG2tY7IY3GTCDn9bESClmeqGGMiH9CImkaRR6X6c 7OMemNxl16TEagWLQ4kYP5wVmJH0UL1+qJfZgZtVevUs8+9CP1Y= -----END CERTIFICATE-----Generated at Mon Oct 26 08:28:42 2026 by rpki-client