$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft File: 3B610B6D52EFC83BEC0E681395E172E5584CB922.mft (raw, json) Hash identifier: MTpOUdnMruieJhKZR80BRE1ILGIa8xYq8AQ7w0PNTaY= Subject key identifier: E2:70:7E:E6:B6:C8:FF:86:E1:80:2E:43:0A:44:93:39:B3:56:88:BD Authority key identifier: 3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22 Certificate issuer: /CN=3B610B6D52EFC83BEC0E681395E172E5584CB922 Certificate serial: 77217A01EDEEED25383217488FB67BD8C0E111E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 04:14:21 +0000 Manifest this update: Sun 15 Nov 2026 04:09:21 +0000 Manifest next update: Mon 16 Nov 2026 06:19:21 +0000 Files and hashes: 1: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: +4k5B1hiZNKTDNmRtO1UucDd1K3kJOf9PkAdB1Yr6bU=) 2: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: JeBWxU2nKUoJd4mmQd29lF3qX2yOUpENL2Ej8COjW7k=) 3: 3B610B6D52EFC83BEC0E681395E172E5584CB922.crl (hash: XJWsPzZ2BSqud9grgaIVOHHXJDOBw8VnYpFvhRrWLPk=) 4: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: rS+TB49YP+YKxVsyAwTK2Y9kOM5qpa1/Sqk+oSuWw+E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:21:7a:01:ed:ee:ed:25:38:32:17:48:8f:b6:7b:d8:c0:e1:11:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B610B6D52EFC83BEC0E681395E172E5584CB922 Validity Not Before: Nov 15 04:09:21 2026 GMT Not After : Nov 16 06:19:21 2026 GMT Subject: CN=E2707EE6B6C8FF86E1802E430A449339B35688BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d5:6a:5f:09:eb:44:32:11:a1:ac:7a:38:2c: df:10:73:ea:3c:8c:0d:10:2d:8a:9f:b8:47:81:18: c8:a9:58:0f:9e:40:41:4f:fc:f8:f2:2f:0e:ec:ab: 58:25:9e:cd:cb:b9:4a:3b:64:0b:e9:b8:87:22:88: 46:dd:09:f0:e9:1a:19:44:ef:5a:76:95:ca:45:fc: cf:84:48:10:6a:8b:e9:6b:dd:93:1d:ff:95:b1:0f: 0b:e7:af:77:20:dc:46:83:d7:14:87:8a:c8:9a:bc: a4:dd:97:40:93:a4:54:9b:15:9b:ee:de:bf:0c:2f: 3b:8e:01:6f:56:62:77:64:e6:e9:e8:96:fa:d5:43: 49:17:fe:33:43:01:d3:e2:6f:56:6d:12:dc:80:07: b0:a3:52:ca:b5:8d:7c:6f:1e:a0:66:86:57:77:57: 32:d0:5e:35:06:a0:f9:38:26:43:4d:64:6c:f7:50: c7:9d:61:ef:c5:2d:40:49:25:d3:3c:07:8c:38:20: b3:c6:aa:d8:9a:c6:67:f9:67:2f:90:f4:ac:a7:ec: 3d:94:30:93:8d:aa:72:af:47:2f:cb:5a:63:47:32: 9a:2c:7d:5f:a3:11:b1:6b:e9:da:a8:8c:af:a5:32: 86:1e:ca:45:cd:e1:e8:25:56:c0:fb:e5:2b:c1:e7: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:70:7E:E6:B6:C8:FF:86:E1:80:2E:43:0A:44:93:39:B3:56:88:BD X509v3 Authority Key Identifier: keyid:3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:3d:2b:46:f5:69:0f:d5:7f:64:76:60:8e:85:0d:da:16:d7: 20:7d:37:91:c1:42:97:cf:02:05:5e:77:43:64:f9:62:f8:11: 08:d1:42:62:f7:92:07:b8:ea:cf:a6:69:2a:35:49:dd:2c:7a: 4c:b1:88:4a:18:e2:a8:a4:49:e8:0f:2e:54:c3:0f:1a:dc:96: ef:b6:37:11:e3:0e:78:d3:67:e3:58:91:5a:8a:e7:81:a1:6f: 13:14:08:27:17:ff:36:78:2e:7a:a6:e2:c2:7e:fe:8b:59:b7: 14:f9:3f:91:b3:3c:53:2c:79:eb:89:41:b7:2e:df:ba:d8:b4: 8c:6f:de:77:e0:8e:a6:05:c9:1c:f2:24:6a:57:93:58:41:ec: d4:86:0b:fb:5c:81:41:c4:20:61:f3:60:73:9d:de:fe:87:2b: 1b:33:6e:60:eb:25:80:44:71:d7:bb:c0:19:94:2c:b7:47:dc: 17:87:2b:4e:f6:d8:9b:c2:03:ca:b4:db:b9:03:80:c1:15:b7: 2a:96:47:4a:56:d9:1f:f3:78:79:76:c7:dc:66:f2:29:0f:fb: 3d:08:a2:7f:f0:d3:12:ba:ea:54:2b:eb:62:b6:4b:b2:18:16: 36:8f:9e:1b:19:62:09:23:0f:55:81:6d:85:a4:76:59:2e:c1: 45:a7:45:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyF6Ae3u7SU4MhdIj7Z72MDhEeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1 ODRDQjkyMjAeFw0yNjExMTUwNDA5MjFaFw0yNjExMTYwNjE5MjFaMDMxMTAvBgNV BAMTKEUyNzA3RUU2QjZDOEZGODZFMTgwMkU0MzBBNDQ5MzM5QjM1Njg4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT1WpfCetEMhGhrHo4LN8Qc+o8 jA0QLYqfuEeBGMipWA+eQEFP/PjyLw7sq1glns3LuUo7ZAvpuIciiEbdCfDpGhlE 71p2lcpF/M+ESBBqi+lr3ZMd/5WxDwvnr3cg3EaD1xSHisiavKTdl0CTpFSbFZvu 3r8MLzuOAW9WYndk5unolvrVQ0kX/jNDAdPib1ZtEtyAB7CjUsq1jXxvHqBmhld3 VzLQXjUGoPk4JkNNZGz3UMedYe/FLUBJJdM8B4w4ILPGqtiaxmf5Zy+Q9Kyn7D2U MJONqnKvRy/LWmNHMposfV+jEbFr6dqojK+lMoYeykXN4eglVsD75SvB51IpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4nB+5rbI/4bhgC5DCkSTObNWiL0wHwYDVR0j BBgwFoAUO2ELbVLvyDvsDmgTleFy5VhMuSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmE4OTZmZGMtNTYzOC00MWQyLThhOTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1 MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1ODRDQjkyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjYxMEI2RDUyRUZDODNCRUMwRTY4MTM5NUUxNzJFNTU4NENC OTIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcy RTU1ODRDQjkyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQ9K0b1aQ/Vf2R2YI6FDdoW1yB9N5HBQpfP AgVed0Nk+WL4EQjRQmL3kge46s+maSo1Sd0sekyxiEoY4qikSegPLlTDDxrclu+2 NxHjDnjTZ+NYkVqK54GhbxMUCCcX/zZ4Lnqm4sJ+/otZtxT5P5GzPFMseeuJQbcu 37rYtIxv3nfgjqYFyRzyJGpXk1hB7NSGC/tcgUHEIGHzYHOd3v6HKxszbmDrJYBE cde7wBmULLdH3BeHK0722JvCA8q027kDgMEVtyqWR0pW2R/zeHl2x9xm8ikP+z0I on/w0xK66lQr62K2S7IYFjaPnhsZYgkjD1WBbYWkdlkuwUWnRdE= -----END CERTIFICATE-----Generated at Sun Nov 15 06:36:42 2026 by rpki-client