$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a3e47a6-5a7a-4771-aa46-1d8ad543b97e/1/3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A.mft File: 3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A.mft (raw, json) Hash identifier: dFi/6+9e7y2SrBfggD7YSVB4DpVXvq2cgfLoqkO2TrA= Subject key identifier: 7E:66:8E:DD:9D:2D:91:93:F7:74:36:8C:47:1D:06:FF:EE:8E:D7:34 Authority key identifier: 3E:1A:70:96:B7:94:FA:DE:7C:2D:EC:00:1C:7D:EC:10:B6:AC:3D:2A Certificate issuer: /CN=3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A Certificate serial: 5AA2EBB50511F43AC21C1E1BFA0807DFE6D69703 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a3e47a6-5a7a-4771-aa46-1d8ad543b97e/1/3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A.mft Manifest number: 05 Signing time: Sat 14 Nov 2026 11:08:28 +0000 Manifest this update: Sat 14 Nov 2026 11:03:28 +0000 Manifest next update: Sun 15 Nov 2026 13:17:28 +0000 Files and hashes: 1: 3134342e37392e3235312e302f32342d3234203d3e20313534313433.roa (hash: 7xT3AyAS82oC5EdtNPd+DD9BacXf0jJLE2Ns6fTQnHY=) 2: 3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A.crl (hash: Dq5S1HjhNSm2BVEUmkSZxpwzBO47XA2wi4YUC8+HylI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a3e47a6-5a7a-4771-aa46-1d8ad543b97e/1/3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A.crl rsync://rpki-rsync.idnic.net/repo/6a3e47a6-5a7a-4771-aa46-1d8ad543b97e/1/3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 13:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a2:eb:b5:05:11:f4:3a:c2:1c:1e:1b:fa:08:07:df:e6:d6:97:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A Validity Not Before: Nov 14 11:03:28 2026 GMT Not After : Nov 15 13:17:28 2026 GMT Subject: CN=7E668EDD9D2D9193F774368C471D06FFEE8ED734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:70:d7:42:9a:1a:75:49:b3:7c:67:c3:62:5e: 3a:c3:9d:9e:6f:f5:54:41:05:28:ec:33:f5:36:2c: fb:99:90:e2:dd:72:53:31:04:75:95:ae:56:3e:40: 5d:f2:ba:23:77:20:37:1c:2e:03:33:43:f1:f0:23: ea:ce:58:9b:6d:03:dd:45:68:6d:0f:c5:f9:30:4e: 18:25:e8:75:a5:f9:6f:f9:0c:9a:4b:d9:2f:ce:cf: c6:45:e9:89:60:85:5a:2a:70:b4:bc:ba:ab:05:c6: bc:c0:4a:0c:d4:6c:dc:44:aa:5d:fc:07:33:36:e1: 56:50:36:a2:13:12:54:86:72:79:eb:b5:88:7b:85: 6f:88:71:c3:f2:13:6f:10:70:9b:37:7a:b0:c5:ab: ca:b1:93:2f:cb:9a:8e:cc:b0:46:f8:f7:8e:ee:fe: 42:34:b6:fb:26:d6:85:cb:4c:3b:80:54:71:a8:b9: 98:98:e9:67:68:f7:ed:ed:c0:51:f6:ab:bf:2b:9a: fa:9a:97:0e:5d:be:27:79:ef:5d:c3:1e:2e:27:79: c0:02:77:ad:52:6d:70:f9:aa:40:3f:84:74:9a:34: 5b:af:42:51:62:5d:f1:e5:bb:32:d3:ef:90:75:af: 37:de:37:06:6b:f4:13:6a:59:d6:fc:5f:50:e2:4e: 45:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:66:8E:DD:9D:2D:91:93:F7:74:36:8C:47:1D:06:FF:EE:8E:D7:34 X509v3 Authority Key Identifier: keyid:3E:1A:70:96:B7:94:FA:DE:7C:2D:EC:00:1C:7D:EC:10:B6:AC:3D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a3e47a6-5a7a-4771-aa46-1d8ad543b97e/1/3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a3e47a6-5a7a-4771-aa46-1d8ad543b97e/1/3E1A7096B794FADE7C2DEC001C7DEC10B6AC3D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:cd:6b:b9:29:21:27:7b:63:60:3c:09:1a:36:ca:e5:b0:3a: 90:a4:fc:7a:f4:39:72:2a:7b:6c:ea:d0:8d:35:30:6d:65:dc: 76:79:13:0d:1d:82:55:68:dd:98:47:5b:c7:62:8a:6e:38:61: fd:46:3f:85:dc:b8:77:ad:3f:26:f9:0d:66:16:87:38:93:3e: 58:f0:1b:a6:45:6e:2c:83:1e:8a:e3:28:cf:50:b3:cf:d4:59: 87:85:81:9b:d9:ec:b5:ed:10:9a:4b:37:55:32:c8:7e:bd:76: 67:75:0f:84:93:bf:35:fd:f5:86:5c:18:10:be:0b:d7:44:96: be:95:96:09:63:03:d9:f0:ec:fe:6f:19:8b:6d:de:78:11:e4: 17:d5:3c:c0:9d:91:30:16:9a:6e:5b:29:81:90:9b:96:ad:74: b9:6d:8a:07:6b:8b:ea:9c:74:97:f7:f9:17:08:0d:a9:a0:30: 44:1c:a7:10:5f:89:ff:c4:4f:fd:16:85:6a:b9:1e:22:93:75: aa:2f:a8:19:16:30:67:7d:7f:5d:f9:75:d2:ac:05:ac:34:cf: 71:23:9c:5b:80:9a:8c:5a:91:c9:e1:fd:2c:a0:5d:ab:b4:7d: 32:9f:44:83:29:b5:85:1f:f2:22:7b:13:b3:04:18:68:ea:9c: e6:f6:c6:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqLrtQUR9DrCHB4b+ggH3+bWlwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UxQTcwOTZCNzk0RkFERTdDMkRFQzAwMUM3REVDMTBC NkFDM0QyQTAeFw0yNjExMTQxMTAzMjhaFw0yNjExMTUxMzE3MjhaMDMxMTAvBgNV BAMTKDdFNjY4RUREOUQyRDkxOTNGNzc0MzY4QzQ3MUQwNkZGRUU4RUQ3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLcNdCmhp1SbN8Z8NiXjrDnZ5v 9VRBBSjsM/U2LPuZkOLdclMxBHWVrlY+QF3yuiN3IDccLgMzQ/HwI+rOWJttA91F aG0PxfkwThgl6HWl+W/5DJpL2S/Oz8ZF6YlghVoqcLS8uqsFxrzASgzUbNxEql38 BzM24VZQNqITElSGcnnrtYh7hW+IccPyE28QcJs3erDFq8qxky/Lmo7MsEb4947u /kI0tvsm1oXLTDuAVHGouZiY6Wdo9+3twFH2q78rmvqalw5dvid5713DHi4necAC d61SbXD5qkA/hHSaNFuvQlFiXfHluzLT75B1rzfeNwZr9BNqWdb8X1DiTkVDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfmaO3Z0tkZP3dDaMRx0G/+6O1zQwHwYDVR0j BBgwFoAUPhpwlreU+t58LewAHH3sELasPSowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmEzZTQ3YTYtNWE3YS00NzcxLWFhNDYtMWQ4YWQ1NDNiOTdlLzEvM0UxQTcwOTZC Nzk0RkFERTdDMkRFQzAwMUM3REVDMTBCNkFDM0QyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRTFBNzA5NkI3OTRGQURFN0MyREVDMDAxQzdERUMxMEI2QUMz RDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmEzZTQ3YTYtNWE3YS00NzcxLWFh NDYtMWQ4YWQ1NDNiOTdlLzEvM0UxQTcwOTZCNzk0RkFERTdDMkRFQzAwMUM3REVD MTBCNkFDM0QyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDNa7kpISd7Y2A8CRo2yuWwOpCk/Hr0OXIq e2zq0I01MG1l3HZ5Ew0dglVo3ZhHW8diim44Yf1GP4XcuHetPyb5DWYWhziTPljw G6ZFbiyDHorjKM9Qs8/UWYeFgZvZ7LXtEJpLN1UyyH69dmd1D4STvzX99YZcGBC+ C9dElr6VlgljA9nw7P5vGYtt3ngR5BfVPMCdkTAWmm5bKYGQm5atdLltigdri+qc dJf3+RcIDamgMEQcpxBfif/ET/0WhWq5HiKTdaovqBkWMGd9f135ddKsBaw0z3Ej nFuAmoxakcnh/SygXau0fTKfRIMptYUf8iJ7E7MEGGjqnOb2xps= -----END CERTIFICATE-----Generated at Sat Nov 14 22:19:57 2026 by rpki-client