$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft File: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft (raw, json) Hash identifier: u9cmxvsVswniSDQHfiORpEif2rcWjoZE8d16IE5NTvg= Subject key identifier: D1:46:9A:21:DA:7D:ED:23:DC:D5:49:61:A1:71:3D:E3:49:EB:93:8E Authority key identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D Certificate issuer: /CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D Certificate serial: 2997C64A6FFDBBD0A53E4C67B03B02292B585DEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft Manifest number: D7 Signing time: Sat 10 Oct 2026 17:24:04 +0000 Manifest this update: Sat 10 Oct 2026 17:19:04 +0000 Manifest next update: Sun 11 Oct 2026 19:20:04 +0000 Files and hashes: 1: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: 4li3z+1Nz7s7JXRdhlc3Toes26Qk6yqpS9NDKdxbXYI=) 2: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: PJcKYesMwsoF3t1uQUrpRAB8K4UX64Wx2m7xs9OF5uY=) 3: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: YWDM5o3/WMhrqrpYBvqU/uZX5ctd+ZM/94NEqhufB2Q=) 4: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: AyqdvAdVLSSaoB+ENJ4KljHubj5AC8SdrarQGU9jQBo=) 5: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl (hash: r84bM+NC57TZWJ153AoOweqmHugpahlbc+cfASR+hbU=) 6: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: 7hDfzZUDYcz0q+XX/NuJ1o0svHceTvT04wKk+Ux25W4=) 7: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: XYuoDJC5s96e5yusTqZBcVmhuNZ72wM2dZW3ZEAAa7k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 19:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:97:c6:4a:6f:fd:bb:d0:a5:3e:4c:67:b0:3b:02:29:2b:58:5d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D Validity Not Before: Oct 10 17:19:04 2026 GMT Not After : Oct 11 19:20:04 2026 GMT Subject: CN=D1469A21DA7DED23DCD54961A1713DE349EB938E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:28:3c:ff:42:1d:53:1d:8f:d9:78:f9:62: ac:40:b5:48:da:86:5a:2f:7b:a3:34:4b:32:f1:e5: 80:c0:2a:cc:68:c1:14:15:0e:b9:2c:b3:cb:5e:ea: 76:fc:d4:4f:bf:9f:49:b2:d6:07:0a:7a:3a:8f:59: 50:a3:8b:4a:05:46:da:06:04:19:f8:d8:63:9b:70: a5:d8:af:23:0e:a0:63:35:b1:84:c9:32:37:91:4b: 6a:23:4e:cf:2e:0d:f4:fe:ee:c4:b0:23:91:65:43: d0:c6:51:79:21:19:68:7a:98:66:a1:b4:ce:25:a7: 8a:aa:7e:67:84:ac:6f:d1:99:97:4c:71:97:9b:4b: 75:ea:c6:03:33:fd:27:dc:f6:4f:d5:56:54:7a:83: c7:ff:c2:55:42:f4:4e:26:70:b3:d4:9b:31:de:e5: b7:77:c4:9a:5e:cf:88:5e:68:bb:da:4a:60:12:5e: dc:e3:3a:62:f6:23:fb:aa:39:8b:7b:1c:d4:67:a5: 97:fe:7e:97:95:ee:35:d6:0c:37:03:90:8a:e6:28: 43:e5:98:b7:2a:d0:61:a3:7e:cd:07:c7:ee:1a:4e: e7:9f:13:bc:cb:47:86:69:0e:59:3d:0f:ea:df:60: 1c:ef:f0:fe:55:8a:00:e0:ac:8c:07:8b:44:d8:34: 15:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:46:9A:21:DA:7D:ED:23:DC:D5:49:61:A1:71:3D:E3:49:EB:93:8E X509v3 Authority Key Identifier: keyid:B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:05:f6:61:0e:fb:e7:c8:41:37:3d:2a:f1:fa:20:84:fd:42: bc:e5:c7:77:69:e2:a9:5c:7f:d0:35:f3:69:d4:89:12:ad:4e: f2:a0:14:df:72:3a:c5:7b:9e:6c:32:52:4d:8e:de:58:87:e3: 58:ec:04:96:ae:14:af:00:92:c6:7b:34:05:8e:3e:da:48:b1: 7c:ab:5d:08:3e:b9:87:ef:87:e8:b8:3a:ed:55:56:97:a9:69: 7a:68:a9:47:c0:d3:aa:2a:59:8e:32:8c:57:50:cc:96:d0:c7: a3:e3:37:a9:0f:47:90:8e:16:67:d3:bb:f0:c9:69:50:e2:8f: db:75:90:a9:45:83:96:4e:57:b2:1e:70:f2:9c:3b:04:26:16: ee:6c:bd:94:4c:6d:46:37:5d:c7:1b:43:87:42:ac:af:3f:5e: bd:c4:da:7e:c2:e4:fb:0a:21:0f:9b:6c:fd:ec:15:79:f9:f1: 39:99:c6:a0:5a:af:ab:54:d2:6f:d0:c5:a5:88:d4:4c:2c:a5: 81:49:9a:a3:8f:c5:a3:5b:72:4b:f7:d0:97:4d:91:36:9c:22: bd:d5:33:b9:93:67:c4:77:fc:b9:0d:55:4d:21:34:64:ee:92: 7f:56:ed:2c:a7:71:42:b8:a0:6c:1f:d1:e7:5e:b0:7f:48:b1: d2:e9:9e:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZfGSm/9u9ClPkxnsDsCKStYXe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNFOEZEM0QxNzNCRDE4OUY4MDgwQzRDMURFOUQxOTAw MTFFNDYzRDAeFw0yNjEwMTAxNzE5MDRaFw0yNjEwMTExOTIwMDRaMDMxMTAvBgNV BAMTKEQxNDY5QTIxREE3REVEMjNEQ0Q1NDk2MUExNzEzREUzNDlFQjkzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb+ig8/0IdUx2P2Xj5YqxAtUja hlove6M0SzLx5YDAKsxowRQVDrkss8te6nb81E+/n0my1gcKejqPWVCji0oFRtoG BBn42GObcKXYryMOoGM1sYTJMjeRS2ojTs8uDfT+7sSwI5FlQ9DGUXkhGWh6mGah tM4lp4qqfmeErG/RmZdMcZebS3XqxgMz/Sfc9k/VVlR6g8f/wlVC9E4mcLPUmzHe 5bd3xJpez4heaLvaSmASXtzjOmL2I/uqOYt7HNRnpZf+fpeV7jXWDDcDkIrmKEPl mLcq0GGjfs0Hx+4aTuefE7zLR4ZpDlk9D+rfYBzv8P5VigDgrIwHi0TYNBXNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0UaaIdp97SPc1UlhoXE940nrk44wHwYDVR0j BBgwFoAUs+j9PRc70Yn4CAxMHenRkAEeRj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcyODA0MDAtOTY1NC00ZDQ1LTg4OGItOTA2N2JhZGExOTBiLzAvQjNFOEZEM0Qx NzNCRDE4OUY4MDgwQzRDMURFOUQxOTAwMTFFNDYzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0U4RkQzRDE3M0JEMTg5RjgwODBDNEMxREU5RDE5MDAxMUU0 NjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQjNFOEZEM0QxNzNCRDE4OUY4MDgwQzRDMURFOUQx OTAwMTFFNDYzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsF9mEO++fIQTc9KvH6IIT9Qrzlx3dp4qlc f9A182nUiRKtTvKgFN9yOsV7nmwyUk2O3liH41jsBJauFK8AksZ7NAWOPtpIsXyr XQg+uYfvh+i4Ou1VVpepaXpoqUfA06oqWY4yjFdQzJbQx6PjN6kPR5COFmfTu/DJ aVDij9t1kKlFg5ZOV7IecPKcOwQmFu5svZRMbUY3XccbQ4dCrK8/Xr3E2n7C5PsK IQ+bbP3sFXn58TmZxqBar6tU0m/QxaWI1EwspYFJmqOPxaNbckv30JdNkTacIr3V M7mTZ8R3/LkNVU0hNGTukn9W7SyncUK4oGwf0edesH9IsdLpno0= -----END CERTIFICATE-----Generated at Sun Oct 11 06:44:12 2026 by rpki-client