$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft File: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft (raw, json) Hash identifier: kOP68ZzKxTK3R1M7ZjpwiswpiY4fx7WGidN5qtNU/rs= Subject key identifier: B8:55:07:03:42:8E:D8:E8:42:70:81:7F:EA:28:28:DD:9B:19:8A:9C Authority key identifier: 3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 Certificate issuer: /CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Certificate serial: 54059C129C1BB0FB8BD86740DDFD1A5455C230AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 19:53:42 +0000 Manifest this update: Wed 16 Sep 2026 19:48:42 +0000 Manifest next update: Thu 17 Sep 2026 20:44:42 +0000 Files and hashes: 1: 3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl (hash: PTNbW2kvy6t6s4BPol9Yl7r8THO0hA0I91FyI686PFI=) 2: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: XvoXxYyRseZ9WRVoAocJ9gpnu/or6v87QzxE4f486Ao=) 3: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: 99A+bJb86RNl0uIhsPESoN9F5vmyx2f3sELQT2/n36Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:05:9c:12:9c:1b:b0:fb:8b:d8:67:40:dd:fd:1a:54:55:c2:30:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9 Validity Not Before: Sep 16 19:48:42 2026 GMT Not After : Sep 17 20:44:42 2026 GMT Subject: CN=B8550703428ED8E84270817FEA2828DD9B198A9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:7c:24:82:89:80:de:36:16:4b:13:6a:80: b1:46:a9:b2:45:b9:3a:4c:82:f4:06:5c:16:69:53: dc:d3:57:63:90:c4:10:2b:d2:95:d5:b9:b1:51:9e: 9b:85:da:89:b2:2f:9a:d0:d6:77:6f:2b:88:11:9d: f6:01:44:1c:e4:69:a1:dd:ff:81:f3:3b:0d:4f:71: 58:d3:1f:6a:d3:4a:2f:23:f0:dc:b6:f8:a4:b9:ef: f7:db:f8:16:57:13:4a:d1:7f:50:9b:e7:a6:4a:bc: 12:f7:55:70:18:c5:5f:65:50:a7:96:21:db:25:7f: 20:dd:0d:b7:ca:fc:0e:01:3d:85:cc:c4:3a:30:64: fd:63:0b:03:52:84:a6:13:49:68:4a:e7:50:b4:33: 34:72:f0:ce:7b:36:df:de:26:64:a2:ff:23:74:a0: 05:5e:18:23:1a:3f:e7:e3:2e:5c:88:92:82:70:e1: 0c:98:28:36:8b:57:aa:87:f7:74:87:06:9c:e0:d9: 33:be:b7:ad:fe:67:15:5d:55:44:f0:33:eb:53:bb: d6:a8:69:63:01:34:72:c2:be:db:10:df:17:06:cb: 90:91:02:0b:7a:97:7e:3d:db:52:1f:59:30:4d:e6: c3:14:5f:a4:66:d7:1d:21:42:24:ef:74:da:36:ad: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:55:07:03:42:8E:D8:E8:42:70:81:7F:EA:28:28:DD:9B:19:8A:9C X509v3 Authority Key Identifier: keyid:3C:BD:DF:EA:4B:E6:B6:84:5F:8C:E8:97:63:AB:39:3A:61:D5:5A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3CBDDFEA4BE6B6845F8CE89763AB393A61D55AE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e3:72:86:e5:8d:30:e7:f9:00:1f:d3:e7:a2:07:73:38:b4: 7b:8e:61:2e:86:73:ed:00:96:02:ae:ea:d8:0b:4c:82:9a:73: a2:38:d6:3b:d8:d5:00:8e:39:fd:c7:ff:0c:31:13:6c:50:02: b1:73:92:94:2e:2f:0b:13:e4:a2:c1:85:69:c7:71:e8:a7:81: b3:7e:d8:81:a1:8f:65:32:45:0c:dc:23:da:b0:f4:96:49:4c: 7b:65:a9:e9:c5:94:b8:4d:75:ff:c5:25:bc:95:55:41:c7:98: 7b:67:05:a6:41:37:b1:d8:ea:ab:80:78:e3:ec:98:8a:66:8d: 0f:74:0d:a0:4b:cc:2e:a4:1f:67:ff:6f:10:d1:b0:01:87:e8: 46:01:ec:0f:97:26:b1:38:50:59:71:d8:ea:ff:27:db:f1:11: 2d:0f:a4:d7:80:85:d7:61:6c:2c:e7:f6:4b:94:24:85:af:fb: 76:09:28:90:a0:60:1d:44:4b:45:36:71:21:4c:e4:b8:89:49: ae:f3:60:60:a8:5e:67:c9:4d:fc:21:ca:21:37:7d:ef:41:7c: 50:b0:07:96:23:1a:fb:3b:dd:c7:13:03:e2:e8:cf:4a:b2:c8: fc:fe:7b:c5:91:a9:68:0e:d6:67:2b:25:5e:83:d5:0e:e6:78: bd:d4:63:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVAWcEpwbsPuL2GdA3f0aVFXCMK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2 MUQ1NUFFOTAeFw0yNjA5MTYxOTQ4NDJaFw0yNjA5MTcyMDQ0NDJaMDMxMTAvBgNV BAMTKEI4NTUwNzAzNDI4RUQ4RTg0MjcwODE3RkVBMjgyOEREOUIxOThBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf93wkgomA3jYWSxNqgLFGqbJF uTpMgvQGXBZpU9zTV2OQxBAr0pXVubFRnpuF2omyL5rQ1ndvK4gRnfYBRBzkaaHd /4HzOw1PcVjTH2rTSi8j8Ny2+KS57/fb+BZXE0rRf1Cb56ZKvBL3VXAYxV9lUKeW IdslfyDdDbfK/A4BPYXMxDowZP1jCwNShKYTSWhK51C0MzRy8M57Nt/eJmSi/yN0 oAVeGCMaP+fjLlyIkoJw4QyYKDaLV6qH93SHBpzg2TO+t63+ZxVdVUTwM+tTu9ao aWMBNHLCvtsQ3xcGy5CRAgt6l34921IfWTBN5sMUX6Rm1x0hQiTvdNo2rdoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuFUHA0KO2OhCcIF/6igo3ZsZipwwHwYDVR0j BBgwFoAUPL3f6kvmtoRfjOiXY6s5OmHVWukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRkMWVhY2QtYTA2Ny00OTI0LTkyODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0 QkU2QjY4NDVGOENFODk3NjNBQjM5M0E2MUQ1NUFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0JEREZFQTRCRTZCNjg0NUY4Q0U4OTc2M0FCMzkzQTYxRDU1 QUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvM0NCRERGRUE0QkU2QjY4NDVGOENFODk3NjNBQjM5 M0E2MUQ1NUFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbjcobljTDn+QAf0+eiB3M4tHuOYS6Gc+0A lgKu6tgLTIKac6I41jvY1QCOOf3H/wwxE2xQArFzkpQuLwsT5KLBhWnHceingbN+ 2IGhj2UyRQzcI9qw9JZJTHtlqenFlLhNdf/FJbyVVUHHmHtnBaZBN7HY6quAeOPs mIpmjQ90DaBLzC6kH2f/bxDRsAGH6EYB7A+XJrE4UFlx2Or/J9vxES0PpNeAhddh bCzn9kuUJIWv+3YJKJCgYB1ES0U2cSFM5LiJSa7zYGCoXmfJTfwhyiE3fe9BfFCw B5YjGvs73ccTA+Loz0qyyPz+e8WRqWgO1mcrJV6D1Q7meL3UY5o= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:31 2026 by rpki-client