$ rpki-client -vvvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft File: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft (raw, json) Hash identifier: JG+V/ZaoIdiok850lswoQ3QgIZghMOQepBMUUpnm7IM= Subject key identifier: 0C:6F:8C:D0:84:48:77:1D:58:F9:FA:39:E1:66:CE:D7:CB:AC:F8:36 Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 Certificate issuer: /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Certificate serial: 411FC5E1FC57EE734D4E3507F9980F22CEA9CDA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 13:37:44 +0000 Manifest this update: Thu 24 Sep 2026 13:32:44 +0000 Manifest next update: Fri 25 Sep 2026 13:55:44 +0000 Files and hashes: 1: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: lz98VZByNVjP88hEyC/FArLpyfqt3UkStR89LwAjmAE=) 2: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: c4wYihjNVRnxptUGtDAxVDHluIjX7/1xYD6gvJUxJM8=) 3: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: 4DtXaRxKzA2NgphfITj3rvmS/5Zg3IKyMFd8f9pE1pU=) 4: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: eaitOk5B7Jr1jxdZCm0AVOvl4hgE6wJsB8PnaacOno4=) 5: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl (hash: vmgqU/oLzG0sMYymRWHO5dIWE+8mR8vg5GM+1xbahDM=) 6: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: lpwKH/1rt1O8n37PkqiZ5Fo1jTQNKkwVgQuRatXBn2c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1f:c5:e1:fc:57:ee:73:4d:4e:35:07:f9:98:0f:22:ce:a9:cd:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Validity Not Before: Sep 24 13:32:44 2026 GMT Not After : Sep 25 13:55:44 2026 GMT Subject: CN=0C6F8CD08448771D58F9FA39E166CED7CBACF836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:6a:61:b9:eb:89:fc:29:17:2e:84:1d:1d: 27:3e:ab:f0:4b:1c:62:24:82:b7:13:b0:64:26:8c: 1e:da:90:c1:30:06:f4:65:98:eb:88:80:a0:2a:0f: ed:3a:23:5e:de:e6:10:48:e5:ea:48:73:41:0d:fb: fb:dc:af:72:d7:e9:93:f3:3c:8a:a2:e6:20:f8:60: 78:9f:a9:f5:f5:f3:c7:47:ae:18:4a:b8:43:ab:8b: 95:ae:2a:71:46:02:44:52:56:27:97:f3:c5:5a:49: b4:9a:36:f2:ff:a9:b0:2b:8a:f7:47:ef:d9:46:49: 56:ed:a8:9d:52:03:e1:29:dc:1b:0e:77:ec:19:59: 03:14:6f:4d:a1:05:95:1f:72:f7:6e:cf:c6:e9:d9: 00:84:09:b5:36:e8:05:3c:3b:6c:b4:d5:18:8d:f1: b7:43:1c:2d:a2:47:e2:c6:0e:de:5d:1b:6d:bb:43: 5d:bb:72:f2:4e:48:a8:18:6c:9c:a2:87:5a:fb:86: 4c:26:e8:1f:8c:ae:ef:c3:22:d4:46:72:e4:74:93: 08:48:33:86:13:2f:e2:34:db:a0:ae:ed:f5:b0:9e: 00:6d:35:27:70:be:37:6d:79:25:62:d8:91:4c:e7: ce:44:6b:87:19:8b:08:4d:2d:44:53:03:8a:fc:12: 84:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6F:8C:D0:84:48:77:1D:58:F9:FA:39:E1:66:CE:D7:CB:AC:F8:36 X509v3 Authority Key Identifier: keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:4b:b8:4b:91:a2:2a:b3:b8:46:1a:b1:f1:ad:33:eb:22:0b: 07:f7:75:4c:88:a9:6e:37:2a:a1:99:b2:c8:a5:dc:f7:b9:b5: 38:84:f1:53:37:b8:f1:89:2b:77:23:59:ee:3e:f0:e2:2d:c0: 57:d3:4b:6d:ac:78:8f:17:35:a9:23:49:f1:ca:57:f6:1e:18: 99:0e:bf:bc:57:93:24:e6:34:ff:6b:04:c8:4c:be:fa:dc:8f: 1d:4b:2c:f3:68:e3:59:4a:7a:1c:ae:3b:8c:34:4b:ee:82:31: 22:bf:ee:24:1f:0f:88:34:76:eb:6d:30:cc:a8:6d:48:05:21: 30:e9:4d:2f:1c:70:ec:7d:4b:bc:a8:c0:db:dd:44:f2:ec:3a: a5:fd:9e:24:e9:0b:fc:b9:c9:cf:1a:b8:9e:98:26:78:2a:0f: 89:db:5e:39:a9:53:5c:8e:0e:fb:32:da:3a:37:df:21:8f:cc: ea:1f:89:fb:a7:f2:92:07:9d:c7:77:f8:ed:ff:66:d7:d0:23: 94:5c:4f:8c:0c:e6:5d:ba:ba:ba:ed:08:1e:ef:64:70:02:fb: 28:5d:d9:ba:9d:ca:13:ac:f9:8d:cd:b2:75:27:76:35:7e:fd: 33:b9:16:cd:2d:36:c4:2c:42:e0:ce:13:79:4a:ae:2e:cc:71: cf:72:9c:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQR/F4fxX7nNNTjUH+ZgPIs6pzaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RCOUEy NEE4Qjg3NzAeFw0yNjA5MjQxMzMyNDRaFw0yNjA5MjUxMzU1NDRaMDMxMTAvBgNV BAMTKDBDNkY4Q0QwODQ0ODc3MUQ1OEY5RkEzOUUxNjZDRUQ3Q0JBQ0Y4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsGphueuJ/CkXLoQdHSc+q/BL HGIkgrcTsGQmjB7akMEwBvRlmOuIgKAqD+06I17e5hBI5epIc0EN+/vcr3LX6ZPz PIqi5iD4YHifqfX188dHrhhKuEOri5WuKnFGAkRSVieX88VaSbSaNvL/qbArivdH 79lGSVbtqJ1SA+Ep3BsOd+wZWQMUb02hBZUfcvduz8bp2QCECbU26AU8O2y01RiN 8bdDHC2iR+LGDt5dG227Q127cvJOSKgYbJyih1r7hkwm6B+Mru/DItRGcuR0kwhI M4YTL+I026Cu7fWwngBtNSdwvjdteSVi2JFM585Ea4cZiwhNLURTA4r8EoRtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDG+M0IRIdx1Y+fo54WbO18us+DYwHwYDVR0j BBgwFoAUNpnt1x2mCrxQs8gYenfbmiSouHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZjM3YzAtMzgwYy00MDUzLWIzYmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcx REE2MEFCQzUwQjNDODE4N0E3N0RCOUEyNEE4Qjg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk5RURENzFEQTYwQUJDNTBCM0M4MTg3QTc3REI5QTI0QThC ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RC OUEyNEE4Qjg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFLuEuRoiqzuEYasfGtM+siCwf3dUyIqW43 KqGZssil3Pe5tTiE8VM3uPGJK3cjWe4+8OItwFfTS22seI8XNakjSfHKV/YeGJkO v7xXkyTmNP9rBMhMvvrcjx1LLPNo41lKehyuO4w0S+6CMSK/7iQfD4g0duttMMyo bUgFITDpTS8ccOx9S7yowNvdRPLsOqX9niTpC/y5yc8auJ6YJngqD4nbXjmpU1yO Dvsy2jo33yGPzOofifun8pIHncd3+O3/ZtfQI5RcT4wM5l26urrtCB7vZHAC+yhd 2bqdyhOs+Y3NsnUndjV+/TO5Fs0tNsQsQuDOE3lKri7Mcc9ynGU= -----END CERTIFICATE-----Generated at Thu Sep 24 17:06:25 2026 by rpki-client