$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft File: 3B905656ECAB5F25C747565B1F6158A544607342.mft (raw, json) Hash identifier: SncA9lksetmXrpMPUwugnXlD3c+6odIpTx/R5ZoKF9c= Subject key identifier: 7D:E4:94:6E:D4:2B:CE:F9:32:46:49:E4:8D:1E:4C:B1:85:17:21:F1 Authority key identifier: 3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 Certificate issuer: /CN=3B905656ECAB5F25C747565B1F6158A544607342 Certificate serial: 39DD773144E5CD36D9522955A1EAB9DEAB5CCB75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 06:13:45 +0000 Manifest this update: Wed 23 Sep 2026 06:08:45 +0000 Manifest next update: Thu 24 Sep 2026 07:47:45 +0000 Files and hashes: 1: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: SZMiP70bobuD5/c0OLg4Km31ztDYKaW8prAjAv3Nm8M=) 2: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: 96TgCS7ETcD0HP72sHWel8um1ZSywlXykltIHFwAFDk=) 3: 3B905656ECAB5F25C747565B1F6158A544607342.crl (hash: D2dj8wpeRWbBFZDmhoKlWs/4+1bCN4oxku7UjbpIYxY=) 4: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: qR5fJsbozBhXPJh8WuiE5z4yLvoKQfTANugzq/ELLiU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.crl rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:dd:77:31:44:e5:cd:36:d9:52:29:55:a1:ea:b9:de:ab:5c:cb:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B905656ECAB5F25C747565B1F6158A544607342 Validity Not Before: Sep 23 06:08:45 2026 GMT Not After : Sep 24 07:47:45 2026 GMT Subject: CN=7DE4946ED42BCEF9324649E48D1E4CB1851721F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:63:87:9d:d3:39:1a:72:8f:e6:39:c6:1b: 00:b0:20:d7:6a:39:09:0d:00:4e:1a:e1:6c:39:b7: b3:68:4b:e2:70:6e:07:ee:92:d0:51:84:39:36:ea: b4:d3:ce:c8:dc:68:a1:15:75:f9:fe:2c:55:42:d5: 8b:b7:c1:16:46:86:34:59:62:49:b0:63:04:c9:18: 1a:b9:10:c5:21:c9:1c:16:4d:45:c7:7d:2d:4b:75: b5:82:b4:20:97:9c:6b:79:aa:9a:32:d5:ff:9d:d6: 8b:5e:f0:f0:74:e1:bf:ef:aa:4d:d9:88:24:37:2e: 0a:a5:96:1c:22:9c:eb:42:c1:b3:5d:7d:d4:e5:d0: c2:98:86:b1:0f:7a:69:39:bd:5c:15:19:a4:ef:af: 27:27:88:04:9e:3f:64:b8:4c:a2:a9:2d:b9:86:6e: 45:df:28:fb:df:ab:e3:f1:18:4d:bc:d8:ba:86:a7: 41:cb:aa:af:72:73:c0:b9:7d:08:bb:54:e9:b5:bf: 9d:88:fc:37:f9:4a:c6:89:1a:81:c3:5f:64:53:ad: c7:b9:e4:f9:32:9c:fb:d0:24:3a:33:cf:a2:7f:d4: 03:fb:7e:83:35:4b:53:fe:64:ca:fa:4e:45:18:d0: f3:d9:d2:17:df:f7:75:a3:21:20:bd:85:62:e3:a9: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E4:94:6E:D4:2B:CE:F9:32:46:49:E4:8D:1E:4C:B1:85:17:21:F1 X509v3 Authority Key Identifier: keyid:3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:9e:a4:76:64:b8:dc:ca:4f:b4:86:d3:9a:99:7d:da:28:77: ca:04:64:dc:15:e4:11:9e:c3:3d:af:0e:c7:90:ec:dd:4b:8c: dc:ba:61:06:91:46:2c:75:99:37:6a:78:e1:d5:e5:fe:3e:f0: c6:2c:41:b9:5b:d9:ef:30:df:44:21:6e:d8:c4:29:54:f9:16: ec:68:59:8f:0d:f2:dd:de:e8:3d:89:31:b8:e8:c7:68:f9:e2: 29:95:49:79:1b:68:d3:3e:7d:3c:2a:29:4f:0f:4e:86:d3:11: b8:42:54:7a:a5:7e:56:ac:59:59:5c:27:b7:0e:24:8c:c9:19: 1b:89:f7:9b:86:3a:87:f0:82:78:97:55:97:42:51:d1:09:6e: b6:b9:79:80:a9:b2:19:f1:b8:25:8a:02:d8:62:2a:b2:aa:6f: 4d:ac:c4:0e:0b:28:05:5c:92:2f:d3:69:22:d5:67:ac:7b:31: 24:9a:2f:2c:e7:36:02:87:0b:cd:e5:f1:c3:8d:26:de:7b:d9: 4b:d3:cb:39:e2:e7:b3:74:59:49:e9:a4:7b:2e:ef:1f:57:e9: 98:4b:6a:91:6b:7b:1b:d5:79:20:f1:9b:5e:b0:61:ca:e9:d7: 58:7e:54:a3:55:41:1d:7f:d8:68:6a:73:31:7b:43:ed:ae:66: b5:a2:51:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOd13MUTlzTbZUilVoeq53qtcy3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I5MDU2NTZFQ0FCNUYyNUM3NDc1NjVCMUY2MTU4QTU0 NDYwNzM0MjAeFw0yNjA5MjMwNjA4NDVaFw0yNjA5MjQwNzQ3NDVaMDMxMTAvBgNV BAMTKDdERTQ5NDZFRDQyQkNFRjkzMjQ2NDlFNDhEMUU0Q0IxODUxNzIxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/WOHndM5GnKP5jnGGwCwINdq OQkNAE4a4Ww5t7NoS+JwbgfuktBRhDk26rTTzsjcaKEVdfn+LFVC1Yu3wRZGhjRZ YkmwYwTJGBq5EMUhyRwWTUXHfS1LdbWCtCCXnGt5qpoy1f+d1ote8PB04b/vqk3Z iCQ3LgqllhwinOtCwbNdfdTl0MKYhrEPemk5vVwVGaTvrycniASeP2S4TKKpLbmG bkXfKPvfq+PxGE282LqGp0HLqq9yc8C5fQi7VOm1v52I/Df5SsaJGoHDX2RTrce5 5PkynPvQJDozz6J/1AP7foM1S1P+ZMr6TkUY0PPZ0hff93WjISC9hWLjqaBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfeSUbtQrzvkyRknkjR5MsYUXIfEwHwYDVR0j BBgwFoAUO5BWVuyrXyXHR1ZbH2FYpURgc0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA5MTc5M2UtYmQ2OS00NWE0LTk3YTgtYzY4YWEzZGQ0N2EzLzAvM0I5MDU2NTZF Q0FCNUYyNUM3NDc1NjVCMUY2MTU4QTU0NDYwNzM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjkwNTY1NkVDQUI1RjI1Qzc0NzU2NUIxRjYxNThBNTQ0NjA3 MzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvM0I5MDU2NTZFQ0FCNUYyNUM3NDc1NjVCMUY2MTU4 QTU0NDYwNzM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCepHZkuNzKT7SG05qZfdood8oEZNwV5BGe wz2vDseQ7N1LjNy6YQaRRix1mTdqeOHV5f4+8MYsQblb2e8w30QhbtjEKVT5Fuxo WY8N8t3e6D2JMbjox2j54imVSXkbaNM+fTwqKU8PTobTEbhCVHqlflasWVlcJ7cO JIzJGRuJ95uGOofwgniXVZdCUdEJbra5eYCpshnxuCWKAthiKrKqb02sxA4LKAVc ki/TaSLVZ6x7MSSaLyznNgKHC83l8cONJt572UvTyzni57N0WUnppHsu7x9X6ZhL apFrexvVeSDxm16wYcrp11h+VKNVQR1/2GhqczF7Q+2uZrWiUTQ= -----END CERTIFICATE-----Generated at Wed Sep 23 20:21:47 2026 by rpki-client