$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft File: 3B7FE3B2042531E0B36242D947F82DF031754FD3.mft (raw, json) Hash identifier: PksaBbTy/X0DK8syNBeOMuuqByajO9FhdWAJvJMPU0o= Subject key identifier: F3:7F:02:B3:26:0A:8B:32:A4:1C:04:FF:20:45:23:68:8F:D8:96:76 Authority key identifier: 3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 Certificate issuer: /CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Certificate serial: 66951062F9369443A4585E2747113ED79C15A1F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:24:54 +0000 Manifest this update: Thu 24 Sep 2026 07:19:54 +0000 Manifest next update: Fri 25 Sep 2026 09:55:54 +0000 Files and hashes: 1: 3B7FE3B2042531E0B36242D947F82DF031754FD3.crl (hash: d/xSrWOL8UThPXlSLcBD6XEHx+AEtCBMi9/95TXo/us=) 2: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: nG1oS5kPYmQFB9gUVJnLfk54lZwsWyYkdNpEIO9gT/M=) 3: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: NeiRD0Vhv/h8RWipDP6Q873ht3qdQPfYf3BUMU4aFVw=) 4: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: 137GCdmWkDay1INFZoJTq4DPdPLmTUTYDzr+pVTMq4w=) 5: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: pTAxtDqCoq1lZ0weKvW5ktevS+0YSpgq+YtzT/tKQzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:95:10:62:f9:36:94:43:a4:58:5e:27:47:11:3e:d7:9c:15:a1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Validity Not Before: Sep 24 07:19:54 2026 GMT Not After : Sep 25 09:55:54 2026 GMT Subject: CN=F37F02B3260A8B32A41C04FF204523688FD89676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:85:39:70:d2:00:9d:cf:5c:43:8c:23:4e: 6b:ed:46:0b:33:22:09:78:c8:cd:ca:d8:52:11:89: 95:bf:33:79:88:09:b4:fe:fb:35:5f:fb:cf:0b:3b: 21:6b:0d:15:3c:a2:ed:fe:44:60:78:52:17:da:d8: 68:87:63:c6:c2:d3:70:c2:2c:d4:60:ac:65:15:2f: 4b:da:ef:91:23:f6:d7:8d:c9:15:f4:05:73:88:6f: cb:4b:bf:40:12:17:fe:e7:cc:5e:ef:f0:64:53:d9: c0:b7:4c:b7:cf:97:e8:32:6b:46:60:64:24:54:42: e6:b3:83:14:a3:5f:26:73:ca:af:e1:a9:94:0e:fe: 3b:a4:a6:e6:b5:22:ce:af:37:3e:e0:18:3d:dd:2f: d0:7c:5c:2a:f9:bb:ce:d9:15:cf:48:6c:e9:e0:ef: 2b:fa:96:de:64:dc:bf:87:3e:a9:d8:a1:66:62:e5: d2:ea:2f:f3:c8:d6:16:d6:b3:58:e4:1a:a6:99:de: b5:d1:69:56:34:32:6d:2a:e2:e9:1d:87:a3:9a:7b: de:dc:eb:a5:fe:51:8f:20:a0:92:55:7e:f4:f8:d3: 18:ca:b3:54:f4:fa:4a:01:a7:19:cb:08:81:a2:7b: d0:c0:47:cb:98:b2:84:c7:73:b7:9a:e6:0a:64:11: 44:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7F:02:B3:26:0A:8B:32:A4:1C:04:FF:20:45:23:68:8F:D8:96:76 X509v3 Authority Key Identifier: keyid:3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0b:6e:e8:18:ff:93:9c:cb:f8:5e:35:f3:da:1c:75:bc:c9: 92:48:49:7e:34:a8:f4:78:21:28:c7:d0:d7:ee:ad:bb:2d:62: cd:74:44:bd:d1:51:bb:ea:05:73:c4:0d:be:c5:70:d3:e8:17: d3:88:a5:fa:be:13:24:f9:6b:bb:07:5d:e6:15:d3:fa:45:9c: 21:91:9f:f5:c5:cc:81:af:14:1c:28:8d:10:30:72:42:ca:d3: 43:7f:ed:d4:8a:32:65:ac:f7:c3:5a:f8:8e:e5:19:96:1e:a3: 19:bd:9e:ba:1e:69:68:3a:18:fa:cc:3f:b2:97:e1:c4:45:cf: 70:88:4d:75:39:bf:8c:45:56:92:7d:15:44:fa:a9:bf:53:5f: 6e:80:e8:e8:0c:71:c8:a8:24:64:72:52:fc:89:c1:a4:99:f0: 80:27:78:2a:45:f7:07:d5:bc:1a:6a:2b:90:3e:cd:8c:d4:cb: 9a:93:ee:d5:36:7b:44:29:2e:60:7a:df:b9:77:58:75:9b:57: 40:0b:e8:70:b7:b7:b5:29:da:18:ce:3b:9f:2d:2e:a2:f9:b0: a7:5c:b3:4a:da:97:a9:12:75:d5:03:25:e8:5a:cd:36:7a:78: d6:ab:ec:24:3a:d7:1f:1a:3c:bc:5b:ce:e9:7c:60:9c:18:c8: 03:69:7d:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpUQYvk2lEOkWF4nRxE+15wVofUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJERjAz MTc1NEZEMzAeFw0yNjA5MjQwNzE5NTRaFw0yNjA5MjUwOTU1NTRaMDMxMTAvBgNV BAMTKEYzN0YwMkIzMjYwQThCMzJBNDFDMDRGRjIwNDUyMzY4OEZEODk2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2IU5cNIAnc9cQ4wjTmvtRgsz Igl4yM3K2FIRiZW/M3mICbT++zVf+88LOyFrDRU8ou3+RGB4Uhfa2GiHY8bC03DC LNRgrGUVL0va75Ej9teNyRX0BXOIb8tLv0ASF/7nzF7v8GRT2cC3TLfPl+gya0Zg ZCRUQuazgxSjXyZzyq/hqZQO/jukpua1Is6vNz7gGD3dL9B8XCr5u87ZFc9IbOng 7yv6lt5k3L+HPqnYoWZi5dLqL/PI1hbWs1jkGqaZ3rXRaVY0Mm0q4ukdh6Oae97c 66X+UY8goJJVfvT40xjKs1T0+koBpxnLCIGie9DAR8uYsoTHc7ea5gpkEURlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU838CsyYKizKkHAT/IEUjaI/YlnYwHwYDVR0j BBgwFoAUO3/jsgQlMeCzYkLZR/gt8DF1T9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTE0MWY4ODQtZDVjOS00MzM2LTlhNWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIw NDI1MzFFMEIzNjI0MkQ5NDdGODJERjAzMTc1NEZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjdGRTNCMjA0MjUzMUUwQjM2MjQyRDk0N0Y4MkRGMDMxNzU0 RkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJE RjAzMTc1NEZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQLbugY/5Ocy/heNfPaHHW8yZJISX40qPR4 ISjH0NfurbstYs10RL3RUbvqBXPEDb7FcNPoF9OIpfq+EyT5a7sHXeYV0/pFnCGR n/XFzIGvFBwojRAwckLK00N/7dSKMmWs98Na+I7lGZYeoxm9nroeaWg6GPrMP7KX 4cRFz3CITXU5v4xFVpJ9FUT6qb9TX26A6OgMccioJGRyUvyJwaSZ8IAneCpF9wfV vBpqK5A+zYzUy5qT7tU2e0QpLmB637l3WHWbV0AL6HC3t7Up2hjOO58tLqL5sKdc s0ral6kSddUDJehazTZ6eNar7CQ61x8aPLxbzul8YJwYyANpfYI= -----END CERTIFICATE-----Generated at Fri Sep 25 02:22:19 2026 by rpki-client