$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft File: 3790F06CA970C551E1C9D51C4794B87804967AF1.mft (raw, json) Hash identifier: VHXs1KT4WT7DzTi4llL2PIBdr0SA+1AoS+7ZZ0Z5djQ= Subject key identifier: A4:E6:5A:58:DF:15:CF:77:78:6D:22:75:F0:16:5C:FE:69:F7:16:AE Authority key identifier: 37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1 Certificate issuer: /CN=3790F06CA970C551E1C9D51C4794B87804967AF1 Certificate serial: 28C2C673B8851A3F1B2A462FBC3672C0211B96B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 10:18:26 +0000 Manifest this update: Thu 24 Sep 2026 10:13:26 +0000 Manifest next update: Fri 25 Sep 2026 12:24:26 +0000 Files and hashes: 1: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: SPxSgg7v93g2zKDq6VJY7JIwATBMTBJuqljMQUmTbgY=) 2: 3790F06CA970C551E1C9D51C4794B87804967AF1.crl (hash: gbxju7PP1Rd9dOWzd80hClPAqU9YA0wRrVEnkD3crJ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c2:c6:73:b8:85:1a:3f:1b:2a:46:2f:bc:36:72:c0:21:1b:96:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3790F06CA970C551E1C9D51C4794B87804967AF1 Validity Not Before: Sep 24 10:13:26 2026 GMT Not After : Sep 25 12:24:26 2026 GMT Subject: CN=A4E65A58DF15CF77786D2275F0165CFE69F716AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:e5:e8:43:f2:12:1a:64:85:31:cb:ce:3a: a6:65:1c:ff:45:73:91:46:53:1a:73:86:0e:ac:0a: 35:a1:c1:da:50:45:cf:f0:fa:ab:05:c2:aa:91:79: 9c:5e:f6:ee:e3:f8:30:29:7c:bf:93:6a:69:eb:99: ed:39:8f:51:4e:3d:f8:86:11:67:0a:5d:f5:5d:b8: 3c:a0:41:b4:19:94:46:1f:be:19:0b:48:13:62:96: 53:44:50:a6:ad:89:f1:f9:e8:8d:8b:a2:45:70:da: 54:36:ad:37:33:26:32:a3:d1:3b:eb:90:51:a1:70: 66:43:a0:87:ae:73:e0:41:7c:75:b6:b2:90:ba:2e: 3d:16:e1:21:85:36:2d:ee:41:fd:8d:d2:17:d0:f9: e0:17:65:c3:6c:4a:7b:35:5e:db:66:92:1e:a1:63: 01:b9:93:5d:56:67:9b:4f:a2:e1:15:50:ac:f4:b9: 28:f4:0d:80:28:d2:9b:e6:96:6a:84:26:25:01:20: 76:c9:1a:58:56:9b:43:7f:7b:97:a5:c1:5a:4c:17: 14:bd:93:29:0a:f0:48:72:e4:fe:0e:e0:f7:9b:45: 4e:ec:06:11:c8:42:02:34:71:d2:52:13:61:e8:30: 1d:d5:a6:09:e5:dc:bc:ab:43:a7:eb:6d:c6:4e:69: 7d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E6:5A:58:DF:15:CF:77:78:6D:22:75:F0:16:5C:FE:69:F7:16:AE X509v3 Authority Key Identifier: keyid:37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:57:6c:19:43:32:8a:7e:c9:fc:1f:1e:50:a3:03:e9:94:e3: 32:47:0c:15:80:39:3b:a1:82:a9:d1:a7:95:42:24:43:b4:b2: 23:3c:c0:e0:0a:51:4f:48:be:b0:ed:73:79:86:31:69:ef:94: c2:8f:29:55:e8:97:a1:a2:be:ed:c8:b6:29:1d:67:cc:6a:72: b2:30:69:98:b4:68:c2:3d:5a:6d:14:53:1f:94:2d:47:30:10: 94:11:40:7d:54:b1:11:bf:13:4e:0c:28:77:42:54:5c:60:a8: 9c:e2:1b:7a:ac:98:79:7b:dc:33:b1:12:3c:63:59:53:56:4f: 0f:19:39:58:e4:33:e4:fd:cd:70:7e:33:58:ca:9b:1a:28:14: 3a:29:56:37:2d:4d:b6:71:3d:e0:09:05:a9:84:5e:d2:f4:9c: 79:24:2e:d4:64:ee:a0:0b:2c:0a:19:ac:39:73:22:c4:69:64: 9b:c7:2b:30:46:c5:f6:5d:ae:be:74:89:0c:73:e6:c8:12:92: 9f:76:6e:98:5a:24:d5:48:f6:73:03:83:b3:82:10:71:c3:60: 39:6b:c2:1a:54:ee:62:68:63:cd:7a:07:5d:9e:29:18:e8:ed: 0f:40:3e:4a:cd:29:75:e6:57:dc:28:cd:ce:5c:80:5d:66:e9: 97:3f:24:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMLGc7iFGj8bKkYvvDZywCEblrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5MEYwNkNBOTcwQzU1MUUxQzlENTFDNDc5NEI4Nzgw NDk2N0FGMTAeFw0yNjA5MjQxMDEzMjZaFw0yNjA5MjUxMjI0MjZaMDMxMTAvBgNV BAMTKEE0RTY1QTU4REYxNUNGNzc3ODZEMjI3NUYwMTY1Q0ZFNjlGNzE2QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYneXoQ/ISGmSFMcvOOqZlHP9F c5FGUxpzhg6sCjWhwdpQRc/w+qsFwqqReZxe9u7j+DApfL+Tamnrme05j1FOPfiG EWcKXfVduDygQbQZlEYfvhkLSBNillNEUKatifH56I2LokVw2lQ2rTczJjKj0Tvr kFGhcGZDoIeuc+BBfHW2spC6Lj0W4SGFNi3uQf2N0hfQ+eAXZcNsSns1Xttmkh6h YwG5k11WZ5tPouEVUKz0uSj0DYAo0pvmlmqEJiUBIHbJGlhWm0N/e5elwVpMFxS9 kykK8Ehy5P4O4PebRU7sBhHIQgI0cdJSE2HoMB3Vpgnl3LyrQ6frbcZOaX1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpOZaWN8Vz3d4bSJ18BZc/mn3Fq4wHwYDVR0j BBgwFoAUN5DwbKlwxVHhydUcR5S4eASWevEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWMwNGRlZDgtYjBmNS00NTk0LThlMGUtOTExZWNiNzdlZTczLzAvMzc5MEYwNkNB OTcwQzU1MUUxQzlENTFDNDc5NEI4NzgwNDk2N0FGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzkwRjA2Q0E5NzBDNTUxRTFDOUQ1MUM0Nzk0Qjg3ODA0OTY3 QUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvMzc5MEYwNkNBOTcwQzU1MUUxQzlENTFDNDc5NEI4 NzgwNDk2N0FGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVXbBlDMop+yfwfHlCjA+mU4zJHDBWAOTuh gqnRp5VCJEO0siM8wOAKUU9IvrDtc3mGMWnvlMKPKVXol6Givu3ItikdZ8xqcrIw aZi0aMI9Wm0UUx+ULUcwEJQRQH1UsRG/E04MKHdCVFxgqJziG3qsmHl73DOxEjxj WVNWTw8ZOVjkM+T9zXB+M1jKmxooFDopVjctTbZxPeAJBamEXtL0nHkkLtRk7qAL LAoZrDlzIsRpZJvHKzBGxfZdrr50iQxz5sgSkp92bphaJNVI9nMDg7OCEHHDYDlr whpU7mJoY816B12eKRjo7Q9APkrNKXXmV9wozc5cgF1m6Zc/JDc= -----END CERTIFICATE-----Generated at Thu Sep 24 20:10:19 2026 by rpki-client