$ rpki-client -vvvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft File: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft (raw, json) Hash identifier: W9b0lIeu8ytmUycqVD4D9KQOC3mbpBg6GIl/gpEJW/s= Subject key identifier: 1F:7B:F0:5B:6C:C8:62:F1:0E:76:EB:54:13:F4:10:68:81:60:2F:2F Authority key identifier: 3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E Certificate issuer: /CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Certificate serial: 3F3A1C47C37504AEF3CFBB9ED9003825342CA569 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 01:10:36 +0000 Manifest this update: Sun 15 Nov 2026 01:05:36 +0000 Manifest next update: Mon 16 Nov 2026 04:24:36 +0000 Files and hashes: 1: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl (hash: ue/Ly50QZXJJkbMdUpm9tdYg3WnVFsHnxhWSGUaO98c=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: RmMN8NhmM0RZ6Enalsn3xwEVvbhkE3C1i1JWeXv+gOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3a:1c:47:c3:75:04:ae:f3:cf:bb:9e:d9:00:38:25:34:2c:a5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Validity Not Before: Nov 15 01:05:36 2026 GMT Not After : Nov 16 04:24:36 2026 GMT Subject: CN=1F7BF05B6CC862F10E76EB5413F4106881602F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:36:22:db:5c:9b:a9:c4:5b:06:cc:a8:3f: d4:08:53:43:d9:aa:e7:71:78:02:a5:96:41:4a:4b: 1c:42:d6:f3:88:0d:ba:b2:72:2f:d8:cf:58:99:4b: 8f:12:75:3a:47:b3:a2:cc:b4:8d:b8:e6:12:c0:12: cd:4c:86:82:ad:f9:45:67:7d:e1:19:f2:78:10:2e: ed:36:e2:8f:0c:f7:43:05:70:1e:87:d4:8f:a0:d6: d7:b9:f9:1f:0b:66:30:09:db:55:5b:85:36:59:b6: ee:08:42:15:5e:5d:04:6b:f1:6a:a6:fe:a9:d0:a5: bf:35:be:4d:85:16:ee:38:9b:c6:82:2d:72:81:a7: 50:a2:f0:53:6e:89:cf:75:f7:b5:e5:7c:1a:a3:88: 1a:3b:26:4f:1c:7b:5e:c3:84:f2:7f:ed:4b:e8:88: bf:49:f4:30:84:57:cd:ee:89:08:60:fa:84:2f:6c: 30:7e:42:f3:f1:04:51:86:13:42:9f:ff:a9:d7:a8: 2d:da:c7:26:d5:4b:ef:48:8c:fd:28:24:16:e6:9d: 8a:9b:4e:49:c2:7a:10:90:d8:ca:fd:8f:3a:92:d4: 72:d7:9b:06:48:fa:28:45:62:40:f2:a3:27:69:cb: b1:ea:30:29:1f:63:cc:e6:a8:af:71:3b:7b:2b:76: d9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7B:F0:5B:6C:C8:62:F1:0E:76:EB:54:13:F4:10:68:81:60:2F:2F X509v3 Authority Key Identifier: keyid:3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3e:35:75:16:54:a6:ee:13:a2:25:01:08:18:d1:7f:c3:38: d8:62:29:d7:7a:c3:8e:31:94:66:08:e3:c5:93:c5:bf:85:a2: de:3d:2c:4f:4e:02:72:57:d4:6a:7b:86:39:48:8c:68:bc:2d: 5c:35:ca:8f:68:4a:ad:5b:19:f3:13:72:82:ea:25:c5:34:3f: 8f:d5:4b:9c:bb:42:4d:47:88:b6:47:20:c3:26:f3:35:34:60: 87:3d:13:25:c3:1c:ed:36:f3:73:c1:95:98:46:b9:51:c3:73: fd:3b:7d:74:2f:3d:e5:71:02:86:98:d2:1f:a6:2f:21:b1:b8: 61:1c:fe:08:a7:90:72:e9:03:17:c4:c1:d1:e0:d7:31:41:57: 89:c8:8a:4d:3e:19:aa:a6:9a:a8:e4:84:d1:94:f1:19:d9:5c: 32:66:61:b1:be:2c:3b:59:7b:9c:4c:8a:f7:1d:3c:13:9e:51: 6f:0a:59:31:05:4f:7d:7e:c8:84:6b:81:66:06:82:a6:66:89: 0e:a5:22:ba:f8:54:02:bc:b9:1e:3a:6a:80:52:17:df:21:ef: f0:7c:57:ff:9f:68:89:6a:77:2b:08:97:49:7a:5f:00:a7:3c: 1f:64:a2:b6:c3:69:66:a6:82:6a:b6:f2:65:91:03:7e:1e:37: 36:98:53:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPzocR8N1BK7zz7ue2QA4JTQspWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYx QzdGNjUxRTAeFw0yNjExMTUwMTA1MzZaFw0yNjExMTYwNDI0MzZaMDMxMTAvBgNV BAMTKDFGN0JGMDVCNkNDODYyRjEwRTc2RUI1NDEzRjQxMDY4ODE2MDJGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtjYi21ybqcRbBsyoP9QIU0PZ qudxeAKllkFKSxxC1vOIDbqyci/Yz1iZS48SdTpHs6LMtI245hLAEs1MhoKt+UVn feEZ8ngQLu024o8M90MFcB6H1I+g1te5+R8LZjAJ21VbhTZZtu4IQhVeXQRr8Wqm /qnQpb81vk2FFu44m8aCLXKBp1Ci8FNuic9197XlfBqjiBo7Jk8ce17DhPJ/7Uvo iL9J9DCEV83uiQhg+oQvbDB+QvPxBFGGE0Kf/6nXqC3axybVS+9IjP0oJBbmnYqb TknCehCQ2Mr9jzqS1HLXmwZI+ihFYkDyoydpy7HqMCkfY8zmqK9xO3srdtlLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH3vwW2zIYvEOdutUE/QQaIFgLy8wHwYDVR0j BBgwFoAUPxotHUtFNjAqUFl3t49fnxx/ZR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0 QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYxQzdGNjUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRjFBMkQxRDRCNDUzNjMwMkE1MDU5NzdCNzhGNUY5RjFDN0Y2 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVG OUYxQzdGNjUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM+NXUWVKbuE6IlAQgY0X/DONhiKdd6w44x lGYI48WTxb+Fot49LE9OAnJX1Gp7hjlIjGi8LVw1yo9oSq1bGfMTcoLqJcU0P4/V S5y7Qk1HiLZHIMMm8zU0YIc9EyXDHO0283PBlZhGuVHDc/07fXQvPeVxAoaY0h+m LyGxuGEc/ginkHLpAxfEwdHg1zFBV4nIik0+GaqmmqjkhNGU8RnZXDJmYbG+LDtZ e5xMivcdPBOeUW8KWTEFT31+yIRrgWYGgqZmiQ6lIrr4VAK8uR46aoBSF98h7/B8 V/+faIlqdysIl0l6XwCnPB9korbDaWamgmq28mWRA34eNzaYU2g= -----END CERTIFICATE-----Generated at Sun Nov 15 08:03:50 2026 by rpki-client