$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft File: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft (raw, json) Hash identifier: eQ2KkN2EIUETM3cqqtgCKK1GQu0QhL7Gyg/P3se0bGo= Subject key identifier: 7B:25:6E:29:05:CA:EC:BA:89:A4:6E:96:95:5D:64:DD:B5:A4:71:39 Authority key identifier: F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 Certificate issuer: /CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Certificate serial: 3875A81593A9610FA7CF75DDDBE2031C331FE3DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 09:26:08 +0000 Manifest this update: Sat 14 Nov 2026 09:21:08 +0000 Manifest next update: Sun 15 Nov 2026 09:51:08 +0000 Files and hashes: 1: F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl (hash: 4MQHWFYSL/BAntgv0rc3zx4vokNxDXqwGO1C1HnXIec=) 2: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: pKqoxMsSkditfNdNVlJUD8CXoWKgYLrnWsbXljXhF2g=) 3: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: ZARDKeLuUjv0/uwtpRdqxRMtS+4kniX7e0CY2G2q/tM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 09:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:75:a8:15:93:a9:61:0f:a7:cf:75:dd:db:e2:03:1c:33:1f:e3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3A2B23476858A2F21FC9182BBA92DC354DFD1E9 Validity Not Before: Nov 14 09:21:08 2026 GMT Not After : Nov 15 09:51:08 2026 GMT Subject: CN=7B256E2905CAECBA89A46E96955D64DDB5A47139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:3c:26:d7:eb:6e:e3:39:91:4f:b5:fb:53: 53:e4:20:fe:bf:0c:58:6b:9a:b6:0f:73:d0:72:9f: 5f:8b:fd:2c:6f:12:e5:4e:fd:d1:a2:9a:20:fc:1e: b0:17:0a:84:2a:a3:12:b8:49:40:a0:86:84:43:51: 30:ae:11:81:48:86:59:31:3e:02:ea:0d:f9:21:85: 5b:bc:2e:ec:d8:b5:64:18:b9:3b:34:9b:0e:fd:b3: b9:7a:66:44:56:bf:42:02:58:28:1c:93:57:96:e5: 10:8d:ed:a9:d2:9b:2b:90:a8:5f:90:4c:3e:48:67: c8:c9:4c:92:eb:4d:5d:6d:ad:a5:27:24:df:98:df: 95:4d:3d:93:cf:2b:d8:88:b1:d7:64:38:15:15:19: fb:80:02:f6:54:0c:4c:74:0c:9b:6b:5a:bc:bd:e1: 87:8d:79:c0:26:44:ea:5e:c1:b3:a7:04:1a:e7:ae: 1c:cb:fa:c2:a8:ca:93:32:7a:27:ed:22:3a:83:65: 6c:9a:78:04:17:50:e7:47:1a:93:32:05:80:db:04: ef:28:25:c2:e0:dd:56:c9:2f:1e:c4:38:a2:5b:4e: 85:71:cc:28:e5:f3:01:70:89:88:54:42:38:31:43: 56:2f:a1:f6:cf:30:fd:e8:e5:07:5d:d9:eb:c8:49: 42:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:25:6E:29:05:CA:EC:BA:89:A4:6E:96:95:5D:64:DD:B5:A4:71:39 X509v3 Authority Key Identifier: keyid:F3:A2:B2:34:76:85:8A:2F:21:FC:91:82:BB:A9:2D:C3:54:DF:D1:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/F3A2B23476858A2F21FC9182BBA92DC354DFD1E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7f:e5:6e:ef:27:d7:2f:59:19:71:90:6e:3e:12:e1:5f:85: 00:6d:3b:58:60:7d:22:89:15:56:e4:ea:0a:dc:07:69:59:46: c4:fe:73:aa:17:7d:6e:28:9f:12:ee:31:29:e9:58:2d:1c:d8: f7:da:bf:17:ba:cc:7b:0c:7f:d6:36:28:13:b5:7a:a7:d5:3e: 82:8d:52:15:41:0d:f6:76:c1:6d:72:fc:61:8b:ad:07:3b:d4: 67:b4:61:cd:49:c1:e6:5a:09:cf:47:8f:d0:44:e5:5f:de:30: 32:a1:44:47:fc:36:99:59:bc:7e:f1:85:8d:72:bc:c6:a4:10: 2e:de:e5:4f:1d:d2:3f:90:89:89:85:f0:8a:67:36:bc:30:90: 29:57:e1:3b:7b:5d:09:b7:ac:9b:42:80:be:c2:80:8a:ef:39: e9:eb:0f:60:7f:0b:c5:76:15:d9:bd:64:8a:66:c1:b8:df:e3: e4:09:66:52:af:82:ae:3d:5b:f2:ce:38:e3:b8:8f:71:b6:9b: 1b:f0:91:f6:1c:2b:e5:e5:40:9e:cb:59:00:2b:7e:06:30:38: ad:05:fc:1e:57:49:d9:52:c2:ab:8d:99:33:b1:0e:6e:df:7d: 10:67:3b:30:ac:a1:6d:f1:d2:8c:00:b7:d0:d2:ec:a7:17:bf: 6d:be:21:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOHWoFZOpYQ+nz3Xd2+IDHDMf498wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1 NERGRDFFOTAeFw0yNjExMTQwOTIxMDhaFw0yNjExMTUwOTUxMDhaMDMxMTAvBgNV BAMTKDdCMjU2RTI5MDVDQUVDQkE4OUE0NkU5Njk1NUQ2NEREQjVBNDcxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwpDwm1+tu4zmRT7X7U1PkIP6/ DFhrmrYPc9Byn1+L/SxvEuVO/dGimiD8HrAXCoQqoxK4SUCghoRDUTCuEYFIhlkx PgLqDfkhhVu8LuzYtWQYuTs0mw79s7l6ZkRWv0ICWCgck1eW5RCN7anSmyuQqF+Q TD5IZ8jJTJLrTV1traUnJN+Y35VNPZPPK9iIsddkOBUVGfuAAvZUDEx0DJtrWry9 4YeNecAmROpewbOnBBrnrhzL+sKoypMyeiftIjqDZWyaeAQXUOdHGpMyBYDbBO8o JcLg3VbJLx7EOKJbToVxzCjl8wFwiYhUQjgxQ1YvofbPMP3o5Qdd2evISUL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeyVuKQXK7LqJpG6WlV1k3bWkcTkwHwYDVR0j BBgwFoAU86KyNHaFii8h/JGCu6ktw1Tf0ekwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2E5MjMzOTctOGNmOC00Y2VmLTg4NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3 Njg1OEEyRjIxRkM5MTgyQkJBOTJEQzM1NERGRDFFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GM0EyQjIzNDc2ODU4QTJGMjFGQzkxODJCQkE5MkRDMzU0REZE MUU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvRjNBMkIyMzQ3Njg1OEEyRjIxRkM5MTgyQkJBOTJE QzM1NERGRDFFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJ/5W7vJ9cvWRlxkG4+EuFfhQBtO1hgfSKJ FVbk6grcB2lZRsT+c6oXfW4onxLuMSnpWC0c2Pfavxe6zHsMf9Y2KBO1eqfVPoKN UhVBDfZ2wW1y/GGLrQc71Ge0Yc1JweZaCc9Hj9BE5V/eMDKhREf8NplZvH7xhY1y vMakEC7e5U8d0j+QiYmF8IpnNrwwkClX4Tt7XQm3rJtCgL7CgIrvOenrD2B/C8V2 Fdm9ZIpmwbjf4+QJZlKvgq49W/LOOOO4j3G2mxvwkfYcK+XlQJ7LWQArfgYwOK0F /B5XSdlSwquNmTOxDm7ffRBnOzCsoW3x0owAt9DS7KcXv22+IRM= -----END CERTIFICATE-----Generated at Sun Nov 15 00:07:58 2026 by rpki-client