$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft File: 3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft (raw, json) Hash identifier: MmUX5HL/30zQ5FnK2BPspu0gyFAslLfzKveyfnLlqeg= Subject key identifier: E2:7D:80:51:2E:62:59:E1:C0:2D:E0:12:3C:6C:F1:A0:0F:26:16:16 Authority key identifier: 3A:F8:4E:5F:2C:C0:FA:70:13:2F:88:67:3D:C1:AD:1B:AE:46:0E:24 Certificate issuer: /CN=3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24 Certificate serial: 12E7283E610E1CF354BC49A39C06F789000FCD47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft Manifest number: 38 Signing time: Sat 14 Nov 2026 06:27:14 +0000 Manifest this update: Sat 14 Nov 2026 06:22:14 +0000 Manifest next update: Sun 15 Nov 2026 06:28:14 +0000 Files and hashes: 1: 3136302e3233362e36322e302f32342d3234203d3e20313534373435.roa (hash: sBta1ZtrzGRbaLwSoeX1uvQEgqYL3vog2PFLChcmUOA=) 2: 3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.crl (hash: mZp31x+s3s1s0a0WuuwIVSx32gR6doKtwJ+37U15tcw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.crl rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 06:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e7:28:3e:61:0e:1c:f3:54:bc:49:a3:9c:06:f7:89:00:0f:cd:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24 Validity Not Before: Nov 14 06:22:14 2026 GMT Not After : Nov 15 06:28:14 2026 GMT Subject: CN=E27D80512E6259E1C02DE0123C6CF1A00F261616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:0a:24:5f:6b:35:aa:8f:0b:e1:65:b8:c6: 4e:72:38:43:ef:0e:23:cd:6b:74:aa:9f:66:d8:06: a8:1f:43:1a:ba:e2:71:2e:07:ce:4a:51:8e:18:04: f4:2d:fb:ea:ba:ca:61:4b:5f:3d:fa:10:6f:d2:18: 40:5f:d6:ad:0c:91:8b:f0:70:1f:ef:04:c3:14:df: e2:80:29:97:7d:20:66:39:13:a4:80:b1:d3:1e:22: 20:ad:2d:33:7b:44:40:c0:6f:bf:7c:2f:e7:e4:c1: cd:26:96:90:9a:68:22:d3:79:d8:30:fb:61:3f:0a: 7e:8c:e3:ca:a2:1c:74:9b:66:c9:3d:aa:ad:d1:f9: 03:18:46:77:9e:aa:22:78:35:2f:f1:b7:1e:2e:e8: 32:57:08:6f:e1:62:62:9a:ee:24:c7:0a:15:70:45: 9a:b4:f6:9a:4e:2f:a3:5b:60:cd:62:ce:75:dc:8b: 85:b4:bb:38:69:22:a2:07:10:64:4f:cc:b2:6a:55: 44:03:09:32:c9:3c:6a:30:f4:ce:a3:46:13:fa:5a: 31:d6:26:33:8a:8a:fd:df:62:dd:18:30:91:36:34: 47:f4:ab:ad:84:d7:53:1e:fd:ad:62:ae:2d:a3:2d: 84:a9:fb:4f:3b:13:a8:0f:ec:31:bf:21:e1:ed:ca: e2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7D:80:51:2E:62:59:E1:C0:2D:E0:12:3C:6C:F1:A0:0F:26:16:16 X509v3 Authority Key Identifier: keyid:3A:F8:4E:5F:2C:C0:FA:70:13:2F:88:67:3D:C1:AD:1B:AE:46:0E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6e:a2:9e:e9:75:1e:69:54:5e:0d:d1:6f:4b:e2:a2:65:83: 98:63:28:70:30:15:89:b6:28:04:86:1b:95:73:67:e6:e5:4f: f7:f7:74:b8:ab:ff:ec:f5:fb:ef:a7:99:3b:8f:56:1c:3b:d5: 42:83:c0:55:a2:f2:f8:6f:74:83:a9:27:77:d7:f7:85:75:16: 7f:f1:88:2e:b2:14:02:7f:eb:1e:23:5c:28:ac:7d:1a:93:d1: 2c:f8:6a:f1:3e:22:e2:22:32:a9:c4:3d:ca:c3:5b:59:fc:da: 32:95:72:27:b8:86:1f:26:f3:4c:ed:b8:34:ec:8e:32:02:40: 71:b9:86:4e:43:05:bd:3f:8d:f4:a4:b2:bd:28:b0:3e:ba:2e: 4b:45:d7:30:94:52:ad:84:3c:b3:e1:d9:d6:25:e3:92:bc:8e: 62:06:69:6d:2e:da:c0:f3:09:62:e7:a8:60:51:3b:16:b6:81: 6c:ac:14:97:fe:ec:be:33:2c:00:ce:f7:7c:2c:1b:f1:75:d9: 3d:ba:b2:37:06:64:d2:19:0d:3c:45:3c:d5:ee:5a:0b:81:48: b5:66:f5:a8:0c:a9:47:03:38:b7:f5:44:75:56:3f:eb:69:d8: 53:e6:4a:27:ef:eb:cd:58:9b:20:25:dc:07:0b:6a:15:ce:70: 16:7d:cd:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEucoPmEOHPNUvEmjnAb3iQAPzUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGODRFNUYyQ0MwRkE3MDEzMkY4ODY3M0RDMUFEMUJB RTQ2MEUyNDAeFw0yNjExMTQwNjIyMTRaFw0yNjExMTUwNjI4MTRaMDMxMTAvBgNV BAMTKEUyN0Q4MDUxMkU2MjU5RTFDMDJERTAxMjNDNkNGMUEwMEYyNjE2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpwokX2s1qo8L4WW4xk5yOEPv DiPNa3Sqn2bYBqgfQxq64nEuB85KUY4YBPQt++q6ymFLXz36EG/SGEBf1q0MkYvw cB/vBMMU3+KAKZd9IGY5E6SAsdMeIiCtLTN7REDAb798L+fkwc0mlpCaaCLTedgw +2E/Cn6M48qiHHSbZsk9qq3R+QMYRneeqiJ4NS/xtx4u6DJXCG/hYmKa7iTHChVw RZq09ppOL6NbYM1iznXci4W0uzhpIqIHEGRPzLJqVUQDCTLJPGow9M6jRhP6WjHW JjOKiv3fYt0YMJE2NEf0q62E11Me/a1iri2jLYSp+087E6gP7DG/IeHtyuKtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4n2AUS5iWeHALeASPGzxoA8mFhYwHwYDVR0j BBgwFoAUOvhOXyzA+nATL4hnPcGtG65GDiQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg1Mjk0NWUtZmEzNS00MTY5LTg4NWQtZGZiN2NiMTM5MzY0LzEvM0FGODRFNUYy Q0MwRkE3MDEzMkY4ODY3M0RDMUFEMUJBRTQ2MEUyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQUY4NEU1RjJDQzBGQTcwMTMyRjg4NjczREMxQUQxQkFFNDYw RTI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg1Mjk0NWUtZmEzNS00MTY5LTg4 NWQtZGZiN2NiMTM5MzY0LzEvM0FGODRFNUYyQ0MwRkE3MDEzMkY4ODY3M0RDMUFE MUJBRTQ2MEUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZuop7pdR5pVF4N0W9L4qJlg5hjKHAwFYm2 KASGG5VzZ+blT/f3dLir/+z1+++nmTuPVhw71UKDwFWi8vhvdIOpJ3fX94V1Fn/x iC6yFAJ/6x4jXCisfRqT0Sz4avE+IuIiMqnEPcrDW1n82jKVcie4hh8m80ztuDTs jjICQHG5hk5DBb0/jfSksr0osD66LktF1zCUUq2EPLPh2dYl45K8jmIGaW0u2sDz CWLnqGBROxa2gWysFJf+7L4zLADO93wsG/F12T26sjcGZNIZDTxFPNXuWguBSLVm 9agMqUcDOLf1RHVWP+tp2FPmSifv681YmyAl3AcLahXOcBZ9zVY= -----END CERTIFICATE-----Generated at Sat Nov 14 22:19:52 2026 by rpki-client