$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft File: 3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft (raw, json) Hash identifier: FHtMS4gLVmpg/sphus/VtayK8vyyoRZaz5RGwLZzwiQ= Subject key identifier: DD:FC:B3:FA:D8:B6:66:8B:CE:DC:79:C5:3D:B1:AE:C5:D3:B1:1B:32 Authority key identifier: 3A:F8:4E:5F:2C:C0:FA:70:13:2F:88:67:3D:C1:AD:1B:AE:46:0E:24 Certificate issuer: /CN=3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24 Certificate serial: 6964A5D8AB650055700CC8D3DE1B0A5992978B75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft Manifest number: 1C Signing time: Sat 24 Oct 2026 04:55:19 +0000 Manifest this update: Sat 24 Oct 2026 04:50:19 +0000 Manifest next update: Sun 25 Oct 2026 08:15:19 +0000 Files and hashes: 1: 3136302e3233362e36322e302f32342d3234203d3e20313534373435.roa (hash: sBta1ZtrzGRbaLwSoeX1uvQEgqYL3vog2PFLChcmUOA=) 2: 3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.crl (hash: /eXE+ZbAUE7wwd2g6Ls4RRxO7gq8nQ/z16Gcf+J2wzs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.crl rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:64:a5:d8:ab:65:00:55:70:0c:c8:d3:de:1b:0a:59:92:97:8b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24 Validity Not Before: Oct 24 04:50:19 2026 GMT Not After : Oct 25 08:15:19 2026 GMT Subject: CN=DDFCB3FAD8B6668BCEDC79C53DB1AEC5D3B11B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:88:cc:6a:36:f0:22:af:a8:c2:a2:0e:4f:d9: 68:85:03:8c:5e:79:51:2d:52:b7:51:bb:b4:f8:1d: 8c:4e:1b:c7:9a:a4:b5:c9:1a:6c:f7:a3:1e:cb:e4: 14:ab:01:59:d1:f3:7d:4c:88:db:53:bb:65:9a:60: 60:24:61:9a:93:55:d0:02:03:34:f7:fd:f6:cc:37: 20:ba:fd:75:45:ed:14:56:79:72:57:14:11:b1:ad: 2c:45:28:82:e2:ba:93:7d:50:02:f1:12:7c:92:8b: 0f:e8:37:70:ad:94:59:1c:bf:dc:55:c3:f7:69:90: ab:81:61:f9:ae:b4:9a:13:33:aa:eb:01:36:8f:17: 8b:38:fe:7d:02:44:e7:05:35:b7:4e:2a:68:2f:4f: 2f:c3:8a:86:51:34:9c:06:b7:82:b8:72:47:53:7c: 30:20:63:ad:b1:b5:fe:37:52:b7:a4:82:d6:42:aa: b1:a3:99:35:41:68:eb:28:f8:c9:0f:ba:55:de:a4: 50:8e:99:54:f7:44:e6:e4:e2:55:34:07:6b:e4:66: 3a:19:6e:da:35:e2:c5:a4:9a:71:01:81:cc:d3:4b: c3:d6:14:ea:d2:40:38:29:56:43:6a:1d:bb:2e:c2: cf:0d:49:c1:8a:18:e6:67:ce:91:c8:0c:44:b5:0a: 16:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:B3:FA:D8:B6:66:8B:CE:DC:79:C5:3D:B1:AE:C5:D3:B1:1B:32 X509v3 Authority Key Identifier: keyid:3A:F8:4E:5F:2C:C0:FA:70:13:2F:88:67:3D:C1:AD:1B:AE:46:0E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:5e:55:f1:3b:9b:6e:14:48:21:b6:11:b1:4c:c5:43:32:1e: c0:c7:e8:1e:5e:c8:43:5b:f2:ba:ea:d5:71:fb:11:f2:fc:ac: e7:20:a6:4f:ee:76:32:83:6f:0e:ec:aa:27:ae:69:10:b8:64: f7:30:2a:95:83:03:82:81:49:62:47:90:04:c7:d6:7a:fc:5d: fd:42:2e:1e:ed:0a:c9:c0:21:4c:4f:d8:ad:8c:79:48:84:d5: af:03:59:85:85:89:8a:87:d2:3c:ea:15:7d:da:bf:47:b4:5a: d0:f7:16:55:7a:5b:8f:bc:9a:63:d8:55:fc:67:8c:45:0c:90: d8:ae:75:4d:90:62:17:d5:a6:d2:56:8f:1b:bb:c8:b2:ba:f1: 0d:d6:2c:2e:6b:cb:0c:b4:28:e2:97:a2:21:ad:8c:62:30:2a: 8a:d6:34:76:71:ff:57:fc:4e:e0:d5:eb:06:04:d6:03:6d:7d: c2:ca:25:b0:40:77:78:50:8e:7a:15:89:27:7d:88:f5:ad:37: e1:3f:ad:94:b9:eb:59:6d:51:41:49:7c:91:b9:5f:c9:f6:ca: 38:e5:41:20:4e:69:fe:74:d4:04:0f:f8:4d:2b:9c:e6:50:2a: 84:03:2f:80:d2:14:51:a6:bc:2d:f4:e4:21:39:9f:1b:c7:3d: 72:7b:b8:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWSl2KtlAFVwDMjT3hsKWZKXi3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGODRFNUYyQ0MwRkE3MDEzMkY4ODY3M0RDMUFEMUJB RTQ2MEUyNDAeFw0yNjEwMjQwNDUwMTlaFw0yNjEwMjUwODE1MTlaMDMxMTAvBgNV BAMTKERERkNCM0ZBRDhCNjY2OEJDRURDNzlDNTNEQjFBRUM1RDNCMTFCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDiMxqNvAir6jCog5P2WiFA4xe eVEtUrdRu7T4HYxOG8eapLXJGmz3ox7L5BSrAVnR831MiNtTu2WaYGAkYZqTVdAC AzT3/fbMNyC6/XVF7RRWeXJXFBGxrSxFKILiupN9UALxEnySiw/oN3CtlFkcv9xV w/dpkKuBYfmutJoTM6rrATaPF4s4/n0CROcFNbdOKmgvTy/DioZRNJwGt4K4ckdT fDAgY62xtf43UrekgtZCqrGjmTVBaOso+MkPulXepFCOmVT3RObk4lU0B2vkZjoZ bto14sWkmnEBgczTS8PWFOrSQDgpVkNqHbsuws8NScGKGOZnzpHIDES1ChbTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3fyz+ti2ZovO3HnFPbGuxdOxGzIwHwYDVR0j BBgwFoAUOvhOXyzA+nATL4hnPcGtG65GDiQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg1Mjk0NWUtZmEzNS00MTY5LTg4NWQtZGZiN2NiMTM5MzY0LzEvM0FGODRFNUYy Q0MwRkE3MDEzMkY4ODY3M0RDMUFEMUJBRTQ2MEUyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQUY4NEU1RjJDQzBGQTcwMTMyRjg4NjczREMxQUQxQkFFNDYw RTI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg1Mjk0NWUtZmEzNS00MTY5LTg4 NWQtZGZiN2NiMTM5MzY0LzEvM0FGODRFNUYyQ0MwRkE3MDEzMkY4ODY3M0RDMUFE MUJBRTQ2MEUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINeVfE7m24USCG2EbFMxUMyHsDH6B5eyENb 8rrq1XH7EfL8rOcgpk/udjKDbw7sqieuaRC4ZPcwKpWDA4KBSWJHkATH1nr8Xf1C Lh7tCsnAIUxP2K2MeUiE1a8DWYWFiYqH0jzqFX3av0e0WtD3FlV6W4+8mmPYVfxn jEUMkNiudU2QYhfVptJWjxu7yLK68Q3WLC5rywy0KOKXoiGtjGIwKorWNHZx/1f8 TuDV6wYE1gNtfcLKJbBAd3hQjnoViSd9iPWtN+E/rZS561ltUUFJfJG5X8n2yjjl QSBOaf501AQP+E0rnOZQKoQDL4DSFFGmvC305CE5nxvHPXJ7uDE= -----END CERTIFICATE-----Generated at Sat Oct 24 10:11:03 2026 by rpki-client