$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft File: 3B610B6D52EFC83BEC0E681395E172E5584CB922.mft (raw, json) Hash identifier: s/Pu6eVfsQrkl9g83+VzyT4HbpCdDvLqJVOK5C+TqaM= Subject key identifier: DF:16:A2:D3:E6:CF:44:F8:12:7E:7F:3D:8A:5B:4F:7E:2E:90:94:63 Authority key identifier: 3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22 Certificate issuer: /CN=3B610B6D52EFC83BEC0E681395E172E5584CB922 Certificate serial: 16A4F831259A93ED92B5B7BC20D79A40092A2370 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:11:09 +0000 Manifest this update: Wed 23 Sep 2026 12:06:09 +0000 Manifest next update: Thu 24 Sep 2026 14:52:09 +0000 Files and hashes: 1: 3B610B6D52EFC83BEC0E681395E172E5584CB922.crl (hash: GVdKabmc0f20duGySWGE/K1oq37xnCcKYc8tv2SRuD4=) 2: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: JeBWxU2nKUoJd4mmQd29lF3qX2yOUpENL2Ej8COjW7k=) 3: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: rS+TB49YP+YKxVsyAwTK2Y9kOM5qpa1/Sqk+oSuWw+E=) 4: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: +4k5B1hiZNKTDNmRtO1UucDd1K3kJOf9PkAdB1Yr6bU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a4:f8:31:25:9a:93:ed:92:b5:b7:bc:20:d7:9a:40:09:2a:23:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B610B6D52EFC83BEC0E681395E172E5584CB922 Validity Not Before: Sep 23 12:06:09 2026 GMT Not After : Sep 24 14:52:09 2026 GMT Subject: CN=DF16A2D3E6CF44F8127E7F3D8A5B4F7E2E909463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:37:84:61:d6:dc:13:a9:7b:96:c8:f0:1b:9f: ae:ac:d0:1c:c2:69:d6:48:3b:87:8e:de:22:20:cb: 74:78:b6:e8:a3:2b:cb:03:88:fb:07:a5:0a:db:cf: 50:65:31:7c:99:c6:a1:8f:49:1e:4c:47:fe:6b:01: b7:b8:69:b3:9d:c9:4b:d6:21:76:4e:84:50:7a:0e: e8:60:0a:46:94:40:00:fe:51:4b:e0:91:56:86:61: 53:37:25:c0:b7:2f:ee:2d:c9:11:62:d1:d8:bd:6a: b4:fc:54:16:64:21:2a:04:88:cf:6f:9d:14:8a:1b: da:59:4b:9a:6f:4c:9c:49:68:12:a6:de:9f:2a:1a: 4d:e7:2e:59:af:4b:1a:9a:17:e7:5c:4a:d1:1b:66: 82:d5:49:ee:60:d5:fc:9f:7a:b8:ed:aa:43:d6:43: b4:82:90:e8:26:63:24:51:7b:18:7d:f1:46:39:7f: dc:17:6f:08:89:b1:8a:69:db:b0:c9:ad:ab:9c:12: ee:c5:32:c5:4b:39:2d:ab:29:0e:cd:29:04:db:fb: f7:9b:5e:43:83:d6:5f:1f:02:a2:65:6b:a8:bd:c6: b7:e9:cd:56:b0:36:da:57:6a:7c:f9:38:52:ea:64: 50:6d:c6:bf:5e:d6:1f:92:99:77:ca:e8:19:c1:df: e1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:16:A2:D3:E6:CF:44:F8:12:7E:7F:3D:8A:5B:4F:7E:2E:90:94:63 X509v3 Authority Key Identifier: keyid:3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:1e:e1:06:0f:16:30:af:a6:76:7d:d4:93:3b:77:67:71:71: e3:a0:9e:51:8f:1c:e9:cb:6b:c3:27:21:27:95:75:e0:10:63: 78:c3:6f:28:04:ef:3e:98:1d:c6:de:fa:8a:eb:c7:d8:70:e3: 10:a7:d1:e1:01:96:53:ae:62:9b:8c:cf:9e:91:e8:6b:6a:6d: d9:d2:de:16:44:7c:93:8b:86:79:3e:b2:85:02:42:51:0a:20: bc:8f:17:08:19:26:97:4c:03:88:d9:63:78:ce:63:5e:e8:9f: b6:be:84:07:c5:c3:0e:a8:01:9c:bb:53:48:62:01:b5:c8:c6: 48:13:aa:10:bd:e3:32:4f:f1:4d:bd:55:3a:df:41:f2:cf:67: 00:58:00:c9:60:e8:9b:59:70:c8:1e:23:49:f1:28:9f:58:83: 23:3e:67:79:b4:cd:f7:df:a1:70:be:dd:77:1c:4c:ca:93:0d: c1:9f:f7:0f:33:97:0b:50:99:82:a9:d1:3a:b7:d6:20:d1:22: a0:2c:52:a7:7c:b5:9c:80:3a:c3:34:61:72:bb:21:51:34:00: 3b:5f:ea:29:18:26:35:9b:55:5f:2b:a7:d8:10:97:4f:62:ef: 12:f7:df:bb:ae:ce:bf:3d:34:9a:09:28:b7:0c:99:98:4d:7b: ef:a5:72:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqT4MSWak+2Stbe8INeaQAkqI3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1 ODRDQjkyMjAeFw0yNjA5MjMxMjA2MDlaFw0yNjA5MjQxNDUyMDlaMDMxMTAvBgNV BAMTKERGMTZBMkQzRTZDRjQ0RjgxMjdFN0YzRDhBNUI0RjdFMkU5MDk0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnN4Rh1twTqXuWyPAbn66s0BzC adZIO4eO3iIgy3R4tuijK8sDiPsHpQrbz1BlMXyZxqGPSR5MR/5rAbe4abOdyUvW IXZOhFB6DuhgCkaUQAD+UUvgkVaGYVM3JcC3L+4tyRFi0di9arT8VBZkISoEiM9v nRSKG9pZS5pvTJxJaBKm3p8qGk3nLlmvSxqaF+dcStEbZoLVSe5g1fyferjtqkPW Q7SCkOgmYyRRexh98UY5f9wXbwiJsYpp27DJraucEu7FMsVLOS2rKQ7NKQTb+/eb XkOD1l8fAqJla6i9xrfpzVawNtpXanz5OFLqZFBtxr9e1h+SmXfK6BnB3+F5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3xai0+bPRPgSfn89iltPfi6QlGMwHwYDVR0j BBgwFoAUO2ELbVLvyDvsDmgTleFy5VhMuSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmE4OTZmZGMtNTYzOC00MWQyLThhOTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1 MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1ODRDQjkyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjYxMEI2RDUyRUZDODNCRUMwRTY4MTM5NUUxNzJFNTU4NENC OTIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcy RTU1ODRDQjkyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQe4QYPFjCvpnZ91JM7d2dxceOgnlGPHOnL a8MnISeVdeAQY3jDbygE7z6YHcbe+orrx9hw4xCn0eEBllOuYpuMz56R6GtqbdnS 3hZEfJOLhnk+soUCQlEKILyPFwgZJpdMA4jZY3jOY17on7a+hAfFww6oAZy7U0hi AbXIxkgTqhC94zJP8U29VTrfQfLPZwBYAMlg6JtZcMgeI0nxKJ9YgyM+Z3m0zfff oXC+3XccTMqTDcGf9w8zlwtQmYKp0Tq31iDRIqAsUqd8tZyAOsM0YXK7IVE0ADtf 6ikYJjWbVV8rp9gQl09i7xL337uuzr89NJoJKLcMmZhNe++lciQ= -----END CERTIFICATE-----Generated at Wed Sep 23 19:08:30 2026 by rpki-client