$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft File: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft (raw, json) Hash identifier: Xjq510zXAE/oJ7YMsjmcsBWr/SfLo6E6JDlWjjmrc2U= Subject key identifier: 10:19:55:31:5E:64:BD:91:79:0C:68:08:82:1D:05:4B:9A:C9:F0:AE Authority key identifier: 3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF Certificate issuer: /CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Certificate serial: 6F24B2885B36FB45AB005942EB93EFB7A71605D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft Manifest number: EB Signing time: Sat 24 Oct 2026 00:24:32 +0000 Manifest this update: Sat 24 Oct 2026 00:19:32 +0000 Manifest next update: Sun 25 Oct 2026 01:03:32 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: +kmrv9UVKd6Gr+842CRBNPUYtLDCG179+fO5/CRRqOw=) 2: 3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl (hash: Q557BRsjrOm0algOE4meB8VR0nsg/Qukk5cMHcuFvhM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 01:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:24:b2:88:5b:36:fb:45:ab:00:59:42:eb:93:ef:b7:a7:16:05:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF Validity Not Before: Oct 24 00:19:32 2026 GMT Not After : Oct 25 01:03:32 2026 GMT Subject: CN=101955315E64BD91790C6808821D054B9AC9F0AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:34:2b:a0:80:bc:68:e5:13:6c:eb:9a:a5:fe: 1f:eb:fb:48:ad:90:6d:c6:ba:e3:12:8f:64:dd:cc: 14:11:13:bd:a0:32:b2:66:dd:dc:d3:42:2c:ed:0b: 7a:4e:bc:92:67:32:ab:b1:99:3b:9c:28:1f:a6:51: 7d:57:5c:95:f6:24:9f:5b:40:59:4f:4e:cf:0b:6c: 8f:41:55:39:fd:85:fd:a4:4d:13:76:72:2e:3d:7b: 46:32:a6:89:b5:f7:01:81:00:09:b6:c8:88:a6:c9: bc:c2:5e:8a:2e:63:47:aa:30:b3:c0:a2:88:1a:1e: 3b:53:e1:e9:2b:4e:4f:70:1a:cb:d6:e8:50:db:45: 0b:12:85:8c:5c:a9:57:86:45:de:77:63:e0:21:82: 1c:88:a1:5d:ae:c3:ef:94:e8:e2:ce:c7:f3:ad:11: d9:80:9c:96:78:2b:64:96:5f:42:c7:ce:f6:de:39: eb:4b:ba:44:07:3a:82:46:e7:47:a9:cb:29:3e:07: 48:9f:9a:29:c2:ba:b0:cc:66:cc:73:c1:81:79:97: ff:8c:59:56:a4:08:6b:31:ea:ed:ca:a9:c2:a4:46: ed:4d:12:e5:04:7a:59:0b:0f:4c:75:8f:20:c4:a6: e7:f0:0e:2b:ce:03:25:1c:c0:6d:d8:1a:b2:8d:94: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:19:55:31:5E:64:BD:91:79:0C:68:08:82:1D:05:4B:9A:C9:F0:AE X509v3 Authority Key Identifier: keyid:3C:B6:83:61:CA:C7:A8:08:F7:FD:C4:BA:EA:86:0D:A6:AA:C1:EE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3CB68361CAC7A808F7FDC4BAEA860DA6AAC1EEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:db:f0:2c:dc:75:00:a8:89:88:2d:59:67:01:33:66:03:06: 2f:60:1b:24:90:41:e6:bd:e3:bd:4c:1a:f1:be:a0:bc:61:cf: 30:f6:cd:b9:d0:fc:84:3a:59:d3:b5:32:81:dc:d7:18:5d:cb: 1a:ae:d3:bd:2b:b0:01:bb:c7:94:e8:37:69:8f:bf:4f:d5:75: 9d:e7:1e:bf:98:45:fe:ae:a3:89:7c:7a:ad:5c:e4:20:77:56: d3:bb:8f:41:18:2a:9c:a3:45:44:b0:56:d5:c7:64:6f:fc:41: 65:a8:fa:0d:57:1c:42:5f:af:dd:76:a0:3a:99:05:38:ce:4a: a4:38:6e:1c:94:89:28:b5:f3:9f:a9:de:eb:1d:66:d7:b5:05: 40:79:9b:39:2a:09:1d:ef:2c:08:44:7a:77:1f:98:92:56:9c: 99:12:40:ac:41:66:11:70:7b:56:80:28:6b:cf:73:3b:4e:ba: 14:cf:7a:6c:4c:ae:ef:80:1d:a2:3f:52:ac:00:56:f6:94:7d: 8b:1e:3d:04:9a:d0:2f:7c:ab:0f:81:58:05:3f:e6:ad:3c:a2: 27:16:e3:f5:52:d3:18:c5:3b:97:cd:5c:c2:db:ec:43:92:b2: 33:c9:f4:68:a5:df:c6:f4:56:72:0d:78:6e:12:3a:3f:c3:51: 0a:e9:6c:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbySyiFs2+0WrAFlC65Pvt6cWBdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZB QUMxRUVFRjAeFw0yNjEwMjQwMDE5MzJaFw0yNjEwMjUwMTAzMzJaMDMxMTAvBgNV BAMTKDEwMTk1NTMxNUU2NEJEOTE3OTBDNjgwODgyMUQwNTRCOUFDOUYwQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwNCuggLxo5RNs65ql/h/r+0it kG3GuuMSj2TdzBQRE72gMrJm3dzTQiztC3pOvJJnMquxmTucKB+mUX1XXJX2JJ9b QFlPTs8LbI9BVTn9hf2kTRN2ci49e0Yypom19wGBAAm2yIimybzCXoouY0eqMLPA oogaHjtT4ekrTk9wGsvW6FDbRQsShYxcqVeGRd53Y+AhghyIoV2uw++U6OLOx/Ot EdmAnJZ4K2SWX0LHzvbeOetLukQHOoJG50epyyk+B0ifminCurDMZsxzwYF5l/+M WVakCGsx6u3KqcKkRu1NEuUEelkLD0x1jyDEpufwDivOAyUcwG3YGrKNlC6PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEBlVMV5kvZF5DGgIgh0FS5rJ8K4wHwYDVR0j BBgwFoAUPLaDYcrHqAj3/cS66oYNpqrB7u8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiYzNmMjktNmY5ZC00N2QzLTllNzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFD QUM3QTgwOEY3RkRDNEJBRUE4NjBEQTZBQUMxRUVFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQ0I2ODM2MUNBQzdBODA4RjdGREM0QkFFQTg2MERBNkFBQzFF RUVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvM0NCNjgzNjFDQUM3QTgwOEY3RkRDNEJBRUE4NjBE QTZBQUMxRUVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzb8CzcdQCoiYgtWWcBM2YDBi9gGySQQea9 471MGvG+oLxhzzD2zbnQ/IQ6WdO1MoHc1xhdyxqu070rsAG7x5ToN2mPv0/VdZ3n Hr+YRf6uo4l8eq1c5CB3VtO7j0EYKpyjRUSwVtXHZG/8QWWo+g1XHEJfr912oDqZ BTjOSqQ4bhyUiSi185+p3usdZte1BUB5mzkqCR3vLAhEencfmJJWnJkSQKxBZhFw e1aAKGvPcztOuhTPemxMru+AHaI/UqwAVvaUfYsePQSa0C98qw+BWAU/5q08oicW 4/VS0xjFO5fNXMLb7EOSsjPJ9Gil38b0VnINeG4SOj/DUQrpbOg= -----END CERTIFICATE-----Generated at Sat Oct 24 07:22:22 2026 by rpki-client