$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft File: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft (raw, json) Hash identifier: FrHE3IGowuY7RE9t1yks17uzRb3BwqlRdU1MsAc+RGw= Subject key identifier: FD:B2:43:8C:F4:E0:0B:B6:02:74:E5:32:B3:2E:6E:FD:F9:9F:91:28 Authority key identifier: 3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B Certificate issuer: /CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Certificate serial: 0E6C9979E6C4925A25F278C60538285E89F91864 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 18:39:03 +0000 Manifest this update: Wed 23 Sep 2026 18:34:03 +0000 Manifest next update: Thu 24 Sep 2026 18:59:03 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: lJ60QC6hkGeg/VLRUN+YScgOEnnAlSVZ9ySMXaFKus8=) 2: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl (hash: 9WWfuuZeNMCgaRUVmLWamGsvsNdtyFC2/JC1pvih9JM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6c:99:79:e6:c4:92:5a:25:f2:78:c6:05:38:28:5e:89:f9:18:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Validity Not Before: Sep 23 18:34:03 2026 GMT Not After : Sep 24 18:59:03 2026 GMT Subject: CN=FDB2438CF4E00BB60274E532B32E6EFDF99F9128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:48:0f:67:5a:c7:58:b0:a3:0e:a6:3f:23: a3:95:ed:7b:07:68:28:ad:5c:d3:21:ad:9b:a4:88: 7f:92:65:63:6d:b6:d1:63:3d:62:59:e1:ec:75:80: d3:21:0b:9c:9f:26:bc:22:5b:00:a4:70:e2:13:27: b0:7d:90:4e:02:a6:43:cc:6d:03:b3:fa:47:c8:53: 46:54:c9:37:6f:a7:d4:ff:ff:70:32:09:c1:e2:07: 80:ba:07:9d:3a:2f:b6:3b:4b:9b:d3:68:86:af:d6: 83:56:8e:39:ad:3c:cd:54:ac:ad:8a:fd:2f:9d:2a: 8c:72:52:c1:39:6b:c1:39:d5:d4:0e:5b:b4:e5:5f: 15:db:28:1a:76:a7:ac:fa:bd:ed:41:5a:ac:07:58: 97:36:50:56:90:09:60:0c:fa:02:3f:ef:d8:f6:70: 99:1b:b2:42:92:fe:db:4b:44:45:02:86:28:c1:ea: c1:d6:12:6e:cf:99:e0:39:f0:2c:56:62:03:0a:11: 4b:27:18:1f:b3:54:ec:94:03:e0:ae:8a:a7:67:83: fd:a4:e5:09:9d:b8:0d:bf:39:dd:99:44:77:33:5c: 6e:3f:c5:5e:fe:75:51:60:3c:ea:99:05:1a:6a:4e: da:52:3f:ba:bb:54:e8:27:ea:3e:36:ff:82:44:f7: 52:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B2:43:8C:F4:E0:0B:B6:02:74:E5:32:B3:2E:6E:FD:F9:9F:91:28 X509v3 Authority Key Identifier: keyid:3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:68:07:d0:53:e0:df:44:5c:59:3b:49:0c:f0:17:2a:be:e4: fb:1a:5d:61:f4:84:17:ee:54:03:85:99:e0:95:db:0d:02:81: 26:fa:47:c2:a2:fb:62:84:90:4f:91:36:83:65:07:09:e6:1e: 24:f1:0d:d9:ef:ad:cb:71:be:db:74:7e:1a:ed:21:bc:4a:b2: 4f:e3:32:01:30:ee:0f:7e:09:23:3d:08:b0:38:93:4c:95:b8: f7:7d:94:1c:ed:c8:95:4c:f7:59:7e:1e:61:e8:28:c4:b5:43: de:d2:5c:71:f6:55:a3:48:16:dc:e5:77:7f:9c:11:b0:26:ae: ac:61:e4:5c:36:fc:ec:83:ab:6a:5f:16:d5:68:a3:45:b9:c5: 33:13:9d:dd:46:b2:0f:3c:b7:44:3a:d6:dd:ae:a9:c5:9b:31: 99:70:67:c1:46:b9:20:4b:80:31:82:79:69:fa:40:e1:f6:52: 35:66:2e:48:56:14:c1:b6:11:39:4b:c3:41:a7:42:3d:8d:d7: b8:94:cc:ef:4f:41:07:82:00:3f:a8:5a:ae:c0:fc:5a:d6:67: 13:44:d6:82:83:4e:85:d8:1e:eb:ab:c5:dd:f8:e5:28:98:74: 02:06:0b:ac:c5:1d:2d:88:09:a3:b3:ca:0b:49:8c:47:99:0c: 30:7b:93:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDmyZeebEklol8njGBTgoXon5GGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgx N0Y3REIwQjAeFw0yNjA5MjMxODM0MDNaFw0yNjA5MjQxODU5MDNaMDMxMTAvBgNV BAMTKEZEQjI0MzhDRjRFMDBCQjYwMjc0RTUzMkIzMkU2RUZERjk5RjkxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qkgPZ1rHWLCjDqY/I6OV7XsH aCitXNMhrZukiH+SZWNtttFjPWJZ4ex1gNMhC5yfJrwiWwCkcOITJ7B9kE4CpkPM bQOz+kfIU0ZUyTdvp9T//3AyCcHiB4C6B506L7Y7S5vTaIav1oNWjjmtPM1UrK2K /S+dKoxyUsE5a8E51dQOW7TlXxXbKBp2p6z6ve1BWqwHWJc2UFaQCWAM+gI/79j2 cJkbskKS/ttLREUChijB6sHWEm7PmeA58CxWYgMKEUsnGB+zVOyUA+Cuiqdng/2k 5QmduA2/Od2ZRHczXG4/xV7+dVFgPOqZBRpqTtpSP7q7VOgn6j42/4JE91KRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/bJDjPTgC7YCdOUysy5u/fmfkSgwHwYDVR0j BBgwFoAUO2hsvHlDyw7pcUGNsvQcOBf32wswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3 OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgxN0Y3REIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjY4NkNCQzc5NDNDQjBFRTk3MTQxOERCMkY0MUMzODE3RjdE QjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFD MzgxN0Y3REIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRoB9BT4N9EXFk7SQzwFyq+5PsaXWH0hBfu VAOFmeCV2w0CgSb6R8Ki+2KEkE+RNoNlBwnmHiTxDdnvrctxvtt0fhrtIbxKsk/j MgEw7g9+CSM9CLA4k0yVuPd9lBztyJVM91l+HmHoKMS1Q97SXHH2VaNIFtzld3+c EbAmrqxh5Fw2/OyDq2pfFtVoo0W5xTMTnd1Gsg88t0Q61t2uqcWbMZlwZ8FGuSBL gDGCeWn6QOH2UjVmLkhWFMG2ETlLw0GnQj2N17iUzO9PQQeCAD+oWq7A/FrWZxNE 1oKDToXYHuurxd345SiYdAIGC6zFHS2ICaOzygtJjEeZDDB7k1Y= -----END CERTIFICATE-----Generated at Thu Sep 24 06:59:41 2026 by rpki-client