$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft File: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft (raw, json) Hash identifier: YE0VW6vh+Hq05lLsfvSMxjoYEY0S8wJdVXMXfM6dP/4= Subject key identifier: 83:F6:43:C1:45:4E:9D:E7:CA:84:47:ED:74:72:51:83:3A:97:14:3E Authority key identifier: 3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 Certificate issuer: /CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Certificate serial: 54A10F19BCA5F66466CFF3564D6A155CD9A760B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:25:13 +0000 Manifest this update: Wed 23 Sep 2026 11:20:13 +0000 Manifest next update: Thu 24 Sep 2026 14:30:13 +0000 Files and hashes: 1: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tCaJ2zwdgsb4+fHqF/Tm3Uoxd1Qn9nKNIXa1bnIvzy4=) 2: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl (hash: AbBCPI0yh0t7+Dii+gKFkeYIYoVn5RxLumjcuJJgCAQ=) 3: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: UuNBQfu/W2xG5QH9528nkcryc9rKbacdNqSPH3ls1PA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a1:0f:19:bc:a5:f6:64:66:cf:f3:56:4d:6a:15:5c:d9:a7:60:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Validity Not Before: Sep 23 11:20:13 2026 GMT Not After : Sep 24 14:30:13 2026 GMT Subject: CN=83F643C1454E9DE7CA8447ED747251833A97143E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:8a:50:0a:07:12:db:89:31:39:53:b9:c9: 2c:03:5a:8a:99:cb:06:ef:92:4a:83:59:b8:fd:42: ce:8a:a0:7d:b0:35:3e:15:c0:3c:48:70:6b:a7:f6: 88:6d:a2:75:d1:cf:6f:c2:69:d7:c4:3b:76:eb:9e: 88:53:ed:78:02:05:a6:2f:36:a3:7e:ae:51:34:2e: 87:32:7c:a7:0e:ee:54:56:c5:45:e2:f3:a0:9b:55: 73:27:ec:fd:90:51:8f:61:9e:eb:1e:88:c6:d9:2c: 49:28:47:a7:e1:54:8e:e2:95:cc:4b:57:a6:e0:21: e0:fb:b8:70:b3:87:cb:82:c6:ac:18:c2:0b:5c:e9: 9a:b5:4e:6e:40:2e:df:a1:fd:29:f0:50:69:f8:3f: a0:ee:ed:0a:2a:d0:39:14:89:f0:1d:59:58:d8:8b: c7:9d:28:3b:03:b2:37:bc:24:1a:84:c8:f9:b4:42: c6:23:6b:7c:c1:19:86:6a:09:a8:c3:f8:84:33:11: 05:37:d0:99:15:39:41:0d:5a:91:c5:f8:a3:98:d1: cb:1e:20:6d:34:77:03:f0:39:af:aa:41:a6:eb:ea: c0:fe:cc:0e:c6:19:a5:28:c6:da:d9:9d:e1:60:ec: 1b:f1:86:27:73:1c:97:ca:9d:1b:0c:51:9b:49:89: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F6:43:C1:45:4E:9D:E7:CA:84:47:ED:74:72:51:83:3A:97:14:3E X509v3 Authority Key Identifier: keyid:3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:02:c1:e1:b0:16:ce:d5:71:78:aa:26:6e:25:02:95:b9:e4: e0:69:8e:88:b8:1d:a1:fe:55:4c:8d:5f:19:75:af:d0:db:9a: b9:26:bd:fd:66:e2:b4:7b:43:ff:88:68:83:ca:6c:57:07:9e: 3e:4b:2f:67:32:22:f2:3d:66:3d:84:60:04:2b:e2:d8:5e:03: 41:d6:18:7d:af:ec:b6:18:01:2d:8d:29:e4:f5:73:01:b4:ce: ce:1a:6c:1b:d0:62:0e:ed:77:1c:d4:cd:96:53:e8:cb:a9:ca: 84:3d:d2:92:11:bd:3a:1a:14:15:4a:a5:1e:17:65:bd:41:87: fb:2e:67:9f:f6:2d:3d:45:42:25:18:75:93:b7:89:f6:94:a4: fa:d0:fd:57:2a:62:7b:61:e3:e7:e8:4b:ae:02:d6:19:d7:f4: 1a:bb:56:c4:e5:a8:7e:1f:4a:6c:c5:5e:07:73:1b:11:02:5f: 9f:00:12:01:12:74:82:59:83:c8:be:bf:ea:46:db:87:e0:d4: 4b:36:7b:86:36:93:02:e8:81:e2:30:dd:16:38:e4:f5:a5:c3: e1:5e:e4:b6:dc:e1:71:d2:6a:bc:35:c1:1f:25:6f:3d:a7:3f: 26:51:51:fa:05:3d:51:e5:47:ae:7d:7b:11:8c:63:f1:83:0f: 72:9e:9b:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKEPGbyl9mRmz/NWTWoVXNmnYLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhC RTc3NzdGOTAeFw0yNjA5MjMxMTIwMTNaFw0yNjA5MjQxNDMwMTNaMDMxMTAvBgNV BAMTKDgzRjY0M0MxNDU0RTlERTdDQTg0NDdFRDc0NzI1MTgzM0E5NzE0M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zopQCgcS24kxOVO5ySwDWoqZ ywbvkkqDWbj9Qs6KoH2wNT4VwDxIcGun9ohtonXRz2/CadfEO3brnohT7XgCBaYv NqN+rlE0LocyfKcO7lRWxUXi86CbVXMn7P2QUY9hnuseiMbZLEkoR6fhVI7ilcxL V6bgIeD7uHCzh8uCxqwYwgtc6Zq1Tm5ALt+h/SnwUGn4P6Du7Qoq0DkUifAdWVjY i8edKDsDsje8JBqEyPm0QsYja3zBGYZqCajD+IQzEQU30JkVOUENWpHF+KOY0cse IG00dwPwOa+qQabr6sD+zA7GGaUoxtrZneFg7BvxhidzHJfKnRsMUZtJiUhfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg/ZDwUVOnefKhEftdHJRgzqXFD4wHwYDVR0j BBgwFoAUP+Wgn4DCLATXfzDe3ya5CL53d/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkxNTdjZWQtZTgyYy00MzM0LTkwM2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4 MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhCRTc3NzdGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU1QTA5RjgwQzIyQzA0RDc3RjMwREVERjI2QjkwOEJFNzc3 N0Y5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5 MDhCRTc3NzdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGACweGwFs7VcXiqJm4lApW55OBpjoi4HaH+ VUyNXxl1r9Dbmrkmvf1m4rR7Q/+IaIPKbFcHnj5LL2cyIvI9Zj2EYAQr4theA0HW GH2v7LYYAS2NKeT1cwG0zs4abBvQYg7tdxzUzZZT6MupyoQ90pIRvToaFBVKpR4X Zb1Bh/suZ5/2LT1FQiUYdZO3ifaUpPrQ/VcqYnth4+foS64C1hnX9Bq7VsTlqH4f SmzFXgdzGxECX58AEgESdIJZg8i+v+pG24fg1Es2e4Y2kwLogeIw3RY45PWlw+Fe 5Lbc4XHSarw1wR8lbz2nPyZRUfoFPVHlR659exGMY/GDD3Kemxc= -----END CERTIFICATE-----Generated at Wed Sep 23 23:05:23 2026 by rpki-client