$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft File: 3790F06CA970C551E1C9D51C4794B87804967AF1.mft (raw, json) Hash identifier: 0+JzPJl9PA8fO9eJ6y90CIPAx+87G6FgQlTdjkRb/i4= Subject key identifier: 50:91:B5:9B:EB:2B:33:65:C4:D1:35:AE:4A:2B:7C:C5:57:59:3D:97 Authority key identifier: 37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1 Certificate issuer: /CN=3790F06CA970C551E1C9D51C4794B87804967AF1 Certificate serial: 077A48FAA9874D4F3386B9D11589EFD17E19354F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 02:11:56 +0000 Manifest this update: Sun 15 Nov 2026 02:06:56 +0000 Manifest next update: Mon 16 Nov 2026 03:28:56 +0000 Files and hashes: 1: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: SPxSgg7v93g2zKDq6VJY7JIwATBMTBJuqljMQUmTbgY=) 2: 3790F06CA970C551E1C9D51C4794B87804967AF1.crl (hash: 9JCNugMXETyT20UAFgkWeZtveMyRkIK/qvipm4GBR8I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:7a:48:fa:a9:87:4d:4f:33:86:b9:d1:15:89:ef:d1:7e:19:35:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3790F06CA970C551E1C9D51C4794B87804967AF1 Validity Not Before: Nov 15 02:06:56 2026 GMT Not After : Nov 16 03:28:56 2026 GMT Subject: CN=5091B59BEB2B3365C4D135AE4A2B7CC557593D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:58:fd:67:6d:12:87:0b:c1:44:04:1e:c0: 3f:f2:c5:ef:b2:37:43:7a:3b:a1:2d:61:23:8a:cb: 07:42:5d:f9:67:19:08:39:0b:c2:67:ab:3c:2a:e6: 8f:13:52:3e:7f:62:c2:93:3f:cc:be:e4:e9:d6:b7: ae:8a:f0:82:4a:63:2d:d6:f6:e4:a2:36:33:cd:30: cf:89:d1:e8:1a:e1:5a:be:5e:5c:9e:88:34:ec:94: f6:64:8d:3b:2f:a0:04:7d:8f:b3:70:93:75:75:56: 70:a4:34:14:00:0d:72:06:19:7b:23:77:9c:77:4d: 47:11:c7:91:9c:68:a8:b3:7e:c3:26:0b:e6:2c:0c: 5d:52:fa:ff:13:08:16:17:f7:a1:ad:2a:5f:4b:e5: b5:e5:00:46:a2:66:1a:63:38:1c:fe:52:77:30:97: 23:1c:2e:83:04:b5:2e:a1:8f:49:60:2f:34:d6:c6: 5c:2b:c8:87:75:ee:56:a3:52:0f:c8:12:54:9c:99: cb:27:e7:ea:74:df:ff:eb:b2:7f:2e:9d:44:dc:57: 84:7f:3a:b5:70:a0:31:b0:aa:57:af:43:13:34:45: fa:81:0b:b1:63:ec:89:ba:e5:9c:70:3d:8b:53:18: 7c:12:13:7d:77:f5:c6:1e:2a:1d:32:35:33:e3:b3: 24:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:91:B5:9B:EB:2B:33:65:C4:D1:35:AE:4A:2B:7C:C5:57:59:3D:97 X509v3 Authority Key Identifier: keyid:37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:aa:b7:76:27:3f:a2:ab:16:9d:16:5e:48:53:9a:37:1e:b1: 2d:f5:1a:ab:b0:fb:66:d6:4f:cd:8c:cc:9f:66:32:3d:c9:cb: 2b:6b:98:dd:10:97:dc:d8:d9:84:2f:29:c9:12:06:3f:f0:33: c1:ff:7f:a1:66:89:d7:aa:51:83:29:73:91:20:7c:07:09:32: da:af:2f:20:72:93:14:22:6d:e2:1c:d9:77:c7:b6:1d:c9:cf: 0d:61:3d:ea:36:f3:b3:00:46:d5:3f:82:45:ae:95:09:57:f1: 25:9b:f8:87:7f:ec:e5:c6:88:be:fb:b3:45:f0:62:11:b5:7f: c9:6d:09:08:19:1a:d7:41:52:52:17:27:9d:ff:f1:de:2a:b3: e6:a7:a4:82:4c:f1:c2:0b:60:33:59:95:29:67:c9:e7:5b:a3: 53:27:c8:27:ea:b0:30:61:e0:0a:bb:36:9a:7a:ad:eb:98:28: 31:60:5a:f9:65:19:a9:fb:d6:18:53:b0:6a:40:1d:c4:6a:4c: fc:67:ae:ed:c3:33:48:c5:b7:fe:9a:7b:6a:85:85:f6:8c:a0: e3:54:c8:ea:9d:7b:08:b5:1c:65:c3:45:2c:d9:b5:62:f0:76: db:e8:74:97:91:bd:88:0e:47:ce:e7:bf:ca:e5:28:b0:a2:df: 00:2f:bc:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB3pI+qmHTU8zhrnRFYnv0X4ZNU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5MEYwNkNBOTcwQzU1MUUxQzlENTFDNDc5NEI4Nzgw NDk2N0FGMTAeFw0yNjExMTUwMjA2NTZaFw0yNjExMTYwMzI4NTZaMDMxMTAvBgNV BAMTKDUwOTFCNTlCRUIyQjMzNjVDNEQxMzVBRTRBMkI3Q0M1NTc1OTNEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8C1j9Z20ShwvBRAQewD/yxe+y N0N6O6EtYSOKywdCXflnGQg5C8Jnqzwq5o8TUj5/YsKTP8y+5OnWt66K8IJKYy3W 9uSiNjPNMM+J0ega4Vq+XlyeiDTslPZkjTsvoAR9j7Nwk3V1VnCkNBQADXIGGXsj d5x3TUcRx5GcaKizfsMmC+YsDF1S+v8TCBYX96GtKl9L5bXlAEaiZhpjOBz+Uncw lyMcLoMEtS6hj0lgLzTWxlwryId17lajUg/IElScmcsn5+p03//rsn8unUTcV4R/ OrVwoDGwqlevQxM0RfqBC7Fj7Im65ZxwPYtTGHwSE3139cYeKh0yNTPjsyRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUJG1m+srM2XE0TWuSit8xVdZPZcwHwYDVR0j BBgwFoAUN5DwbKlwxVHhydUcR5S4eASWevEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWMwNGRlZDgtYjBmNS00NTk0LThlMGUtOTExZWNiNzdlZTczLzAvMzc5MEYwNkNB OTcwQzU1MUUxQzlENTFDNDc5NEI4NzgwNDk2N0FGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzkwRjA2Q0E5NzBDNTUxRTFDOUQ1MUM0Nzk0Qjg3ODA0OTY3 QUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvMzc5MEYwNkNBOTcwQzU1MUUxQzlENTFDNDc5NEI4 NzgwNDk2N0FGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6qt3YnP6KrFp0WXkhTmjcesS31Gquw+2bW T82MzJ9mMj3JyytrmN0Ql9zY2YQvKckSBj/wM8H/f6FmideqUYMpc5EgfAcJMtqv LyBykxQibeIc2XfHth3Jzw1hPeo287MARtU/gkWulQlX8SWb+Id/7OXGiL77s0Xw YhG1f8ltCQgZGtdBUlIXJ53/8d4qs+anpIJM8cILYDNZlSlnyedbo1MnyCfqsDBh 4Aq7Npp6reuYKDFgWvllGan71hhTsGpAHcRqTPxnru3DM0jFt/6ae2qFhfaMoONU yOqdewi1HGXDRSzZtWLwdtvodJeRvYgOR87nv8rlKLCi3wAvvM4= -----END CERTIFICATE-----Generated at Sun Nov 15 11:23:53 2026 by rpki-client