$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft File: 3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft (raw, json) Hash identifier: OmYAvX6i9cV/RVNbhKhXy9StG3Qcf4+BEf4B++KEh8Y= Subject key identifier: 95:61:66:9E:5C:BC:99:34:5A:C9:A2:23:38:51:14:51:F1:C3:B1:B9 Authority key identifier: 3B:23:9D:64:43:F9:FF:34:F9:3D:5A:A3:9D:F2:8D:7E:DE:E8:06:89 Certificate issuer: /CN=3B239D6443F9FF34F93D5AA39DF28D7EDEE80689 Certificate serial: 25374B440E76C31EB313AC707119D9731AE0E026 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 23:14:51 +0000 Manifest this update: Wed 23 Sep 2026 23:09:51 +0000 Manifest next update: Fri 25 Sep 2026 03:09:51 +0000 Files and hashes: 1: 3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl (hash: qA9PSkZsOevFlRNQzIzHTUBkWJPbS/EQkiO0NJvKUKU=) 2: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: KJK22WdEptN4Z5tJMclzFpxJ7XT8hQKbX5zWOGXbC6s=) 3: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: 4WWBK+Xqi+9dfO6ReYcexqiP6BjY/M7vdE8KEBcG6ss=) 4: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: b6jqSGzO23ax7FGySYAB/IT1h4HAm4Nn/5ElYlZlniI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:37:4b:44:0e:76:c3:1e:b3:13:ac:70:71:19:d9:73:1a:e0:e0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B239D6443F9FF34F93D5AA39DF28D7EDEE80689 Validity Not Before: Sep 23 23:09:51 2026 GMT Not After : Sep 25 03:09:51 2026 GMT Subject: CN=9561669E5CBC99345AC9A22338511451F1C3B1B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:ff:c3:b2:ae:de:51:3b:f0:74:5f:04:f1: ab:a5:d9:56:ed:1c:c3:d5:85:7e:58:90:5e:c4:9f: 4d:66:23:0b:c0:05:a3:62:e0:ac:fa:3c:1f:69:a6: df:09:3b:b7:87:ff:0b:86:54:a8:bd:72:01:37:11: ef:e5:37:76:25:69:4e:82:a2:69:ea:75:86:24:0d: 52:6f:cc:99:60:51:c6:df:f2:74:89:29:7c:ba:33: 5b:f7:95:80:97:9a:b6:91:ce:3a:ec:3a:51:77:42: f3:bc:a1:0c:dd:66:a0:3e:46:90:0c:47:8d:f7:50: 51:6c:fb:cf:bb:2a:2f:60:ab:4a:22:9c:ad:06:ee: 8f:82:e8:b2:2c:2a:fd:59:91:fa:dd:ef:31:2f:11: 7b:92:73:00:67:be:13:b5:0f:14:42:d9:82:d6:15: 50:a2:ee:62:9a:db:1b:1f:89:b0:2f:9d:1b:b0:a0: 5e:34:a7:bf:74:6e:d1:8e:82:f2:3f:a2:e0:2d:e1: 4b:d1:ea:c9:23:68:3e:c4:fc:7a:3f:ee:4a:68:e8: 81:f9:e3:7b:b7:74:76:4a:b2:ef:66:12:af:4f:8d: ea:c7:93:57:09:27:f4:22:0c:63:62:0c:1b:0c:ea: 10:fa:91:4a:7a:d9:80:2d:2f:fe:d4:77:61:4d:f3: cb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:61:66:9E:5C:BC:99:34:5A:C9:A2:23:38:51:14:51:F1:C3:B1:B9 X509v3 Authority Key Identifier: keyid:3B:23:9D:64:43:F9:FF:34:F9:3D:5A:A3:9D:F2:8D:7E:DE:E8:06:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:4f:ed:0e:16:16:f3:03:f1:5c:77:51:bb:85:82:c8:f0:db: 12:03:62:b7:e1:38:5f:90:43:e8:5a:9c:e4:ca:50:58:22:d7: 01:89:7a:42:61:87:30:66:56:bd:ca:b2:44:5c:51:4f:73:4f: 1c:8b:28:fd:a1:ac:76:88:18:55:6e:7a:bc:3f:1f:df:d9:b6: 71:ec:96:e3:3a:8c:e0:9f:da:af:d4:b5:6a:6d:12:8a:92:d9: 8f:54:4f:08:5b:e8:93:1e:43:6f:c9:44:76:88:9b:15:28:8d: e5:d4:41:10:fb:74:af:bd:ee:be:47:57:ae:2e:f6:97:39:01: e1:fc:ea:2a:01:32:a2:07:c2:f8:54:1f:f4:2d:dc:f8:9b:14: 56:c7:1a:4a:fe:08:58:72:f4:42:f7:dc:d8:44:f9:11:01:99: 86:04:8d:7b:05:d2:fb:e1:f7:33:a6:ee:07:d2:8d:ea:47:18: 92:94:ea:38:46:b9:c2:24:a2:4e:6f:3a:4c:3e:1e:8c:26:6c: c1:31:9b:c8:ec:ba:cc:7b:c7:18:80:6f:a3:b9:f0:b4:f2:3f: af:93:24:0d:48:39:56:c4:9f:9e:56:87:80:ec:43:b7:40:9b: b6:fb:46:96:3b:38:51:1a:62:32:13:48:ce:79:36:fa:e0:c0: 69:e1:da:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJTdLRA52wx6zE6xwcRnZcxrg4CYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyMzlENjQ0M0Y5RkYzNEY5M0Q1QUEzOURGMjhEN0VE RUU4MDY4OTAeFw0yNjA5MjMyMzA5NTFaFw0yNjA5MjUwMzA5NTFaMDMxMTAvBgNV BAMTKDk1NjE2NjlFNUNCQzk5MzQ1QUM5QTIyMzM4NTExNDUxRjFDM0IxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gP/Dsq7eUTvwdF8E8aul2Vbt HMPVhX5YkF7En01mIwvABaNi4Kz6PB9ppt8JO7eH/wuGVKi9cgE3Ee/lN3YlaU6C omnqdYYkDVJvzJlgUcbf8nSJKXy6M1v3lYCXmraRzjrsOlF3QvO8oQzdZqA+RpAM R433UFFs+8+7Ki9gq0oinK0G7o+C6LIsKv1Zkfrd7zEvEXuScwBnvhO1DxRC2YLW FVCi7mKa2xsfibAvnRuwoF40p790btGOgvI/ouAt4UvR6skjaD7E/Ho/7kpo6IH5 43u3dHZKsu9mEq9PjerHk1cJJ/QiDGNiDBsM6hD6kUp62YAtL/7Ud2FN88tdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlWFmnly8mTRayaIjOFEUUfHDsbkwHwYDVR0j BBgwFoAUOyOdZEP5/zT5PVqjnfKNft7oBokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ5NTY1MDUtZDZiMy00M2RjLTkwNzAtZDRkYmRiN2NmOTYzLzAvM0IyMzlENjQ0 M0Y5RkYzNEY5M0Q1QUEzOURGMjhEN0VERUU4MDY4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjIzOUQ2NDQzRjlGRjM0RjkzRDVBQTM5REYyOEQ3RURFRTgw Njg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ5NTY1MDUtZDZiMy00M2RjLTkw NzAtZDRkYmRiN2NmOTYzLzAvM0IyMzlENjQ0M0Y5RkYzNEY5M0Q1QUEzOURGMjhE N0VERUU4MDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZP7Q4WFvMD8Vx3UbuFgsjw2xIDYrfhOF+Q Q+hanOTKUFgi1wGJekJhhzBmVr3KskRcUU9zTxyLKP2hrHaIGFVuerw/H9/ZtnHs luM6jOCf2q/UtWptEoqS2Y9UTwhb6JMeQ2/JRHaImxUojeXUQRD7dK+97r5HV64u 9pc5AeH86ioBMqIHwvhUH/Qt3PibFFbHGkr+CFhy9EL33NhE+REBmYYEjXsF0vvh 9zOm7gfSjepHGJKU6jhGucIkok5vOkw+HowmbMExm8jsusx7xxiAb6O58LTyP6+T JA1IOVbEn55Wh4DsQ7dAm7b7RpY7OFEaYjITSM55NvrgwGnh2t8= -----END CERTIFICATE-----Generated at Thu Sep 24 04:27:27 2026 by rpki-client