$ rpki-client -vvvf rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft File: 3EBE2E74F0EE59A6395F325E6928084B763824A1.mft (raw, json) Hash identifier: TP55LHCz4zm8sBE6fOZvjJjLXcHTYSdbKPz3Cy8Ac8s= Subject key identifier: DA:00:91:1F:51:EF:4C:DE:45:EF:7D:D0:3E:61:E7:40:48:6E:E8:29 Authority key identifier: 3E:BE:2E:74:F0:EE:59:A6:39:5F:32:5E:69:28:08:4B:76:38:24:A1 Certificate issuer: /CN=3EBE2E74F0EE59A6395F325E6928084B763824A1 Certificate serial: 7E4C0FC2DCBE290031AEF049006375DB00DD7830 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 15:45:12 +0000 Manifest this update: Thu 24 Sep 2026 15:40:12 +0000 Manifest next update: Fri 25 Sep 2026 16:41:12 +0000 Files and hashes: 1: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: Vv6wC/28GD4ZoyK7hWQWrNGkv38OB4xq7yXYGqatH3E=) 2: 3EBE2E74F0EE59A6395F325E6928084B763824A1.crl (hash: nVor1LS7qoLAi/oRobVOWj0Gd0m0TB52kRjJCscXzok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.crl rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 16:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4c:0f:c2:dc:be:29:00:31:ae:f0:49:00:63:75:db:00:dd:78:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EBE2E74F0EE59A6395F325E6928084B763824A1 Validity Not Before: Sep 24 15:40:12 2026 GMT Not After : Sep 25 16:41:12 2026 GMT Subject: CN=DA00911F51EF4CDE45EF7DD03E61E740486EE829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:9b:65:2b:c7:30:b1:aa:0a:92:60:08:dd: 47:8a:e7:e4:96:ac:86:1b:4a:ef:de:c8:8c:c8:3e: c8:c4:2d:f4:69:5a:eb:c4:9c:ac:e8:f3:37:9e:10: 00:46:c3:fd:9c:4c:f2:ae:4a:84:fa:be:c7:1c:6d: 37:79:bd:1b:91:64:07:28:00:0d:b5:be:c2:9e:02: 36:c1:22:f7:26:e8:08:14:30:2c:51:b1:40:b3:eb: d8:25:b5:bd:6a:56:d0:26:df:6a:8e:ff:60:5a:26: 39:ae:37:98:66:d0:53:04:7b:30:dc:1a:d4:01:db: 10:c8:60:4c:40:6b:77:9d:1f:c1:24:b8:38:44:7f: 27:de:47:4e:0d:b4:a6:07:8f:38:0a:ee:7a:89:f9: 26:63:25:d5:a3:2b:f4:6e:b8:e7:65:79:dc:d7:30: 06:6d:79:15:ae:5d:c6:ed:83:6e:69:78:cb:f4:7f: 73:ad:2f:59:4e:02:de:c2:ba:7f:f0:22:b0:9b:91: d0:7d:c7:91:15:5d:34:b7:7e:b6:3d:75:03:03:f5: ba:50:06:18:dd:19:08:6f:5e:8b:80:4d:ca:0e:a3: 96:53:a1:a8:96:5d:46:b7:67:2e:8c:0c:86:62:63: 76:4e:66:43:3c:b3:bf:af:d9:9d:49:61:2e:cc:71: 59:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:00:91:1F:51:EF:4C:DE:45:EF:7D:D0:3E:61:E7:40:48:6E:E8:29 X509v3 Authority Key Identifier: keyid:3E:BE:2E:74:F0:EE:59:A6:39:5F:32:5E:69:28:08:4B:76:38:24:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5c:c2:6e:fa:58:35:38:9d:47:2e:1d:5b:59:f8:0c:10:8b: 7e:41:09:1a:78:b5:de:25:65:a4:d0:27:27:27:24:82:4d:36: 18:56:c4:2b:d0:b6:87:97:3d:56:16:af:fe:b0:a0:6d:41:fe: 84:f5:3a:42:d2:9c:e5:5b:bf:dd:11:6a:4b:4b:48:21:69:5f: 81:c6:d8:1a:0e:a6:b6:92:ed:2a:9d:db:54:1d:30:30:d9:3f: 16:16:ea:d3:b0:63:b7:9d:89:3a:b6:e2:95:89:c9:7b:fa:18: bf:f7:33:02:57:07:dd:94:a8:5c:25:0a:e4:7e:69:2e:0b:2d: 2b:86:6b:8e:3f:af:b8:52:42:28:59:98:0d:6f:2e:46:c6:bc: 85:e6:5f:60:5f:4b:0d:8c:4c:5f:92:75:22:8b:d2:1c:0c:de: be:3b:74:f5:86:23:77:0e:c5:4d:88:ae:3b:47:fd:db:d9:cd: 89:1b:f9:2c:e2:4d:f1:77:81:40:be:f3:60:31:e9:f9:01:2f: 70:fe:ac:a0:0a:36:c9:8f:b6:dd:02:43:dd:7e:2b:d1:d0:84: 7a:71:96:ed:e6:65:76:6a:13:48:9b:d1:66:e8:a0:2f:2e:ca: 23:e0:ee:87:3c:62:6a:c4:ea:7b:ff:42:f4:7a:19:01:b3:41: 4e:71:5f:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkwPwty+KQAxrvBJAGN12wDdeDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VCRTJFNzRGMEVFNTlBNjM5NUYzMjVFNjkyODA4NEI3 NjM4MjRBMTAeFw0yNjA5MjQxNTQwMTJaFw0yNjA5MjUxNjQxMTJaMDMxMTAvBgNV BAMTKERBMDA5MTFGNTFFRjRDREU0NUVGN0REMDNFNjFFNzQwNDg2RUU4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFB5tlK8cwsaoKkmAI3UeK5+SW rIYbSu/eyIzIPsjELfRpWuvEnKzo8zeeEABGw/2cTPKuSoT6vsccbTd5vRuRZAco AA21vsKeAjbBIvcm6AgUMCxRsUCz69gltb1qVtAm32qO/2BaJjmuN5hm0FMEezDc GtQB2xDIYExAa3edH8EkuDhEfyfeR04NtKYHjzgK7nqJ+SZjJdWjK/RuuOdledzX MAZteRWuXcbtg25peMv0f3OtL1lOAt7Cun/wIrCbkdB9x5EVXTS3frY9dQMD9bpQ BhjdGQhvXouATcoOo5ZToaiWXUa3Zy6MDIZiY3ZOZkM8s7+v2Z1JYS7McVmjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2gCRH1HvTN5F733QPmHnQEhu6CkwHwYDVR0j BBgwFoAUPr4udPDuWaY5XzJeaSgIS3Y4JKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MThiNDI0MjAtNTZkMC00NTFhLWEyOWQtNWY5ZDYyMzBlMjI3LzAvM0VCRTJFNzRG MEVFNTlBNjM5NUYzMjVFNjkyODA4NEI3NjM4MjRBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRUJFMkU3NEYwRUU1OUE2Mzk1RjMyNUU2OTI4MDg0Qjc2Mzgy NEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMThiNDI0MjAtNTZkMC00NTFhLWEy OWQtNWY5ZDYyMzBlMjI3LzAvM0VCRTJFNzRGMEVFNTlBNjM5NUYzMjVFNjkyODA4 NEI3NjM4MjRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpcwm76WDU4nUcuHVtZ+AwQi35BCRp4td4l ZaTQJycnJIJNNhhWxCvQtoeXPVYWr/6woG1B/oT1OkLSnOVbv90RaktLSCFpX4HG 2BoOpraS7Sqd21QdMDDZPxYW6tOwY7ediTq24pWJyXv6GL/3MwJXB92UqFwlCuR+ aS4LLSuGa44/r7hSQihZmA1vLkbGvIXmX2BfSw2MTF+SdSKL0hwM3r47dPWGI3cO xU2IrjtH/dvZzYkb+SziTfF3gUC+82Ax6fkBL3D+rKAKNsmPtt0CQ91+K9HQhHpx lu3mZXZqE0ib0WbooC8uyiPg7oc8YmrE6nv/QvR6GQGzQU5xX30= -----END CERTIFICATE-----Generated at Fri Sep 25 05:49:56 2026 by rpki-client