$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft File: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft (raw, json) Hash identifier: TkRO47WzC7avzmS+nVGak5iwS4f615o66vCH0BfCtR0= Subject key identifier: 50:D6:3E:12:15:2C:98:1F:57:C1:96:1A:6C:E8:BC:77:D5:25:47:D4 Authority key identifier: 3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 Certificate issuer: /CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Certificate serial: 7445637C435225513717CCCB4EE5C5A9A188C926 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:03:40 +0000 Manifest this update: Wed 16 Sep 2026 23:58:40 +0000 Manifest next update: Fri 18 Sep 2026 00:47:40 +0000 Files and hashes: 1: 3135372e32302e3231382e302f32332d3233203d3e20313532343233.roa (hash: oN269PBRDnF940fO+bfI5PiA4IWS9ygfFhv4r3jDKlw=) 2: 3135372e32302e3231392e302f32342d3234203d3e20313532343233.roa (hash: VLaO/ySY+ntAKUzijWFb7J8NTbjb4cdGL70vMkZXXug=) 3: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (hash: nv2/DUQnze7FZdnWg8O1b8JOsCb1KZzG0d/PmRvY8wo=) 4: 3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl (hash: eq+bvwbpTkxt9XZWvlIaffxvLdbmDBBl/Mu4IrlF6mw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:45:63:7c:43:52:25:51:37:17:cc:cb:4e:e5:c5:a9:a1:88:c9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Validity Not Before: Sep 16 23:58:40 2026 GMT Not After : Sep 18 00:47:40 2026 GMT Subject: CN=50D63E12152C981F57C1961A6CE8BC77D52547D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:b9:55:cc:5b:a2:b0:0a:35:f1:46:e5:23: 17:a8:a3:77:30:a4:1b:35:65:46:1f:2b:8c:4f:e0: 0e:2d:5e:b8:75:8a:24:f4:01:84:69:62:7c:89:da: a3:e1:eb:16:16:d6:42:5e:a0:98:a0:6c:94:55:03: cb:cb:0c:87:f7:78:da:94:2f:8b:55:a1:e7:74:92: 53:d5:7f:66:2c:6c:a9:0f:07:99:b3:26:a5:0b:38: 80:7c:02:e4:50:db:ad:78:dc:b2:18:d1:28:98:41: 45:bf:51:a4:78:fc:53:1e:a8:72:6b:b2:f2:2c:79: 12:c2:8d:8d:9f:d1:96:c2:16:7c:b0:1b:a0:89:c6: 52:0c:ef:cd:9e:19:62:b9:cd:3a:be:42:3d:3d:e1: d7:73:9a:a5:4e:fe:e0:cb:9d:67:e6:dd:6e:b7:cb: 7e:f1:98:32:f9:fe:db:14:09:a7:3d:b7:c8:11:cb: f7:38:0d:dc:36:d6:48:57:94:bd:f4:2f:d7:47:6e: a8:ca:3d:74:5b:c0:0d:b8:5f:1b:b4:03:da:da:3b: 5e:f6:cf:f5:56:d4:62:14:ff:da:16:22:2a:36:95: 6b:ba:d5:b2:53:ff:30:5f:21:0e:c7:c5:4c:9c:52: af:26:8d:56:84:3b:99:02:eb:22:90:c4:0e:3a:15: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D6:3E:12:15:2C:98:1F:57:C1:96:1A:6C:E8:BC:77:D5:25:47:D4 X509v3 Authority Key Identifier: keyid:3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d1:0b:e1:fa:a0:75:d4:42:14:55:0b:48:4d:e5:ba:66:09: 0c:6e:11:c6:d7:52:50:76:1d:d8:b1:56:70:4d:04:63:2f:86: 43:e9:60:20:82:15:5d:4d:33:6e:77:cd:54:44:ac:91:07:4d: 5d:3e:d1:ed:d8:55:5d:f7:69:4f:8d:11:fe:56:4c:d6:03:ac: 58:02:6e:90:71:15:01:5c:e1:3b:63:33:1f:a1:42:c4:41:fc: 79:24:61:fa:99:74:24:ed:22:a5:ce:cc:a1:99:c0:53:96:83: 9c:cb:c8:48:56:1e:c5:c4:3a:4f:78:90:b6:3c:66:f3:3e:b8: 1e:a6:cb:f9:b9:49:ec:98:b4:79:3f:da:8b:9b:54:43:f9:14: 98:e5:72:e0:a0:46:33:ec:d3:55:98:f2:01:52:fe:86:df:0b: d3:22:fb:86:ce:72:28:29:bd:81:c5:33:7c:5e:f6:a7:b0:18: eb:a4:66:b5:00:ad:75:0e:0f:3d:46:69:e6:15:3e:f2:43:5e: 19:8d:3b:bb:88:e3:43:af:a6:c9:dc:5c:60:36:28:3f:95:52: e8:a0:ac:b2:bf:bc:85:e3:8d:11:93:a4:41:0e:ac:18:a3:3b: 21:50:15:dc:64:15:3c:75:6c:b3:92:5c:6d:40:b5:2d:56:90: 85:98:f7:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdEVjfENSJVE3F8zLTuXFqaGIySYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0 OUZFRkU1NDAeFw0yNjA5MTYyMzU4NDBaFw0yNjA5MTgwMDQ3NDBaMDMxMTAvBgNV BAMTKDUwRDYzRTEyMTUyQzk4MUY1N0MxOTYxQTZDRThCQzc3RDUyNTQ3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/uLlVzFuisAo18UblIxeoo3cw pBs1ZUYfK4xP4A4tXrh1iiT0AYRpYnyJ2qPh6xYW1kJeoJigbJRVA8vLDIf3eNqU L4tVoed0klPVf2YsbKkPB5mzJqULOIB8AuRQ26143LIY0SiYQUW/UaR4/FMeqHJr svIseRLCjY2f0ZbCFnywG6CJxlIM782eGWK5zTq+Qj094ddzmqVO/uDLnWfm3W63 y37xmDL5/tsUCac9t8gRy/c4Ddw21khXlL30L9dHbqjKPXRbwA24Xxu0A9raO172 z/VW1GIU/9oWIio2lWu61bJT/zBfIQ7HxUycUq8mjVaEO5kC6yKQxA46FRppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUNY+EhUsmB9XwZYabOi8d9UlR9QwHwYDVR0j BBgwFoAUPAvWuxtMsH3Fj28wFrXsN0n+/lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlODNhZmUtM2JkYy00NGIyLWE3MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIx QjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0OUZFRkU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQzBCRDZCQjFCNENCMDdEQzU4RjZGMzAxNkI1RUMzNzQ5RkVG RTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTJlODNhZmUtM2JkYy00NGIyLWE3 MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVD Mzc0OUZFRkU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/RC+H6oHXUQhRVC0hN5bpmCQxuEcbXUlB2 HdixVnBNBGMvhkPpYCCCFV1NM253zVRErJEHTV0+0e3YVV33aU+NEf5WTNYDrFgC bpBxFQFc4TtjMx+hQsRB/HkkYfqZdCTtIqXOzKGZwFOWg5zLyEhWHsXEOk94kLY8 ZvM+uB6my/m5SeyYtHk/2oubVEP5FJjlcuCgRjPs01WY8gFS/obfC9Mi+4bOcigp vYHFM3xe9qewGOukZrUArXUODz1GaeYVPvJDXhmNO7uI40OvpsncXGA2KD+VUuig rLK/vIXjjRGTpEEOrBijOyFQFdxkFTx1bLOSXG1AtS1WkIWY9/o= -----END CERTIFICATE-----Generated at Thu Sep 17 15:07:39 2026 by rpki-client