$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft File: 3B5092CF38247651A4F776617E70229749D4DF27.mft (raw, json) Hash identifier: e2y8gK+khLp4u/XkA9vNhV0EKaUk18jcWaif5iC+gHU= Subject key identifier: D3:15:22:B5:15:6B:F1:35:4A:0C:1B:83:78:8D:2B:A9:C9:DF:46:DF Authority key identifier: 3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 Certificate issuer: /CN=3B5092CF38247651A4F776617E70229749D4DF27 Certificate serial: 0FA0C8980610105B63ACBEB909F95D3C64A162CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 05:07:00 +0000 Manifest this update: Thu 24 Sep 2026 05:02:00 +0000 Manifest next update: Fri 25 Sep 2026 05:52:00 +0000 Files and hashes: 1: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: NJ/ZuXg3IzseC0419KTO2YbQ/VOZZfzQExIZsLUwy0I=) 2: 34332e3234302e3232362e302f32342d3234203d3e203633343933.roa (hash: J0FfR9JSKls+f1CuVbHQ5JPg6SCAprcR1QwuMf2ba6c=) 3: 3B5092CF38247651A4F776617E70229749D4DF27.crl (hash: 8mVY4Kj3B3n1oAIA6VpXTiG6O3yThZK6yinKL11MO20=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a0:c8:98:06:10:10:5b:63:ac:be:b9:09:f9:5d:3c:64:a1:62:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B5092CF38247651A4F776617E70229749D4DF27 Validity Not Before: Sep 24 05:02:00 2026 GMT Not After : Sep 25 05:52:00 2026 GMT Subject: CN=D31522B5156BF1354A0C1B83788D2BA9C9DF46DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:9d:02:b3:fc:b4:14:1f:db:32:68:df:2e: 3c:c9:65:8e:5e:ee:95:4b:93:dd:8d:bf:12:e7:65: 25:70:bf:d2:6b:f9:a1:b5:0c:3b:62:1c:40:b0:80: 53:37:06:13:95:d4:5c:6f:44:29:a3:55:6a:80:3e: 5e:7c:3a:c6:8a:53:80:37:42:ce:4e:1c:e6:99:b0: 68:b6:3a:86:44:92:8d:60:db:fa:76:8e:45:ac:3f: 24:39:6c:f5:dc:c5:75:4e:0b:3d:3b:7d:b8:89:9b: 45:90:a5:9c:84:a1:c0:7d:0d:7a:ad:6a:e6:2c:49: a7:80:50:6d:60:81:7f:fb:7a:ea:0c:bf:23:b1:92: 2b:db:98:ca:65:c6:02:5e:34:d8:17:b6:c8:36:5a: fa:9f:8c:f3:ec:de:59:a6:0f:73:59:24:5f:c1:f0: c5:d1:cd:65:69:75:4b:04:b4:60:b6:02:4b:42:4a: 2e:7d:70:f9:2f:10:66:16:bf:11:75:71:0c:5f:4a: 3e:1e:ac:ef:21:7c:a8:11:99:38:39:18:fe:50:72: 0c:e3:1b:c8:e7:72:9d:18:39:e2:d9:92:6d:3d:89: cb:fc:0a:4b:c8:48:83:1d:d1:c3:42:1d:5e:71:56: 4e:bd:67:6d:38:f1:e8:1c:fc:fc:ca:ef:25:6d:a7: 18:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:15:22:B5:15:6B:F1:35:4A:0C:1B:83:78:8D:2B:A9:C9:DF:46:DF X509v3 Authority Key Identifier: keyid:3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d0:4d:4f:b9:69:20:a6:4c:3e:3b:21:89:13:2f:cb:14:1a: 49:51:89:9d:05:47:8e:5d:e7:4a:7d:37:fa:96:fa:8e:ce:28: b2:e9:66:3c:8d:78:28:46:d2:96:f7:49:66:0d:96:f1:4c:33: 3c:d6:9c:38:5f:69:9f:8a:01:e9:af:50:a3:06:19:d5:ae:8c: ec:76:4f:88:1a:7d:6c:f4:0b:58:c8:2c:fe:bc:aa:13:bd:69: 92:90:64:4b:54:42:fa:89:a8:cb:99:7a:9b:22:9e:23:6c:d8: 63:79:d3:fe:74:06:d5:b8:12:4c:8d:8f:54:10:ab:33:00:2d: 19:a6:3e:4a:59:3e:0f:9e:31:68:af:ab:99:20:e3:e4:c8:67: 97:44:c9:81:09:7f:d8:5b:a7:27:f2:81:74:df:33:47:d5:83: f9:ba:5d:b4:51:01:f4:0d:b8:18:08:4c:40:5e:f9:c2:88:12: 1e:0b:de:ee:e7:a4:5c:ab:42:bb:c4:a0:cf:d3:cd:2b:8e:8c: 0e:8e:f3:13:a3:57:f8:66:23:6b:e1:db:eb:b6:03:e9:a8:6b: 28:ba:29:2b:06:50:a3:ba:b7:ed:e4:3d:1c:23:65:10:d0:3c: b9:0d:9d:28:24:3c:43:d7:3f:67:bd:56:ab:51:fc:c0:be:2d: 64:fd:f1:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD6DImAYQEFtjrL65CfldPGShYswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MDkyQ0YzODI0NzY1MUE0Rjc3NjYxN0U3MDIyOTc0 OUQ0REYyNzAeFw0yNjA5MjQwNTAyMDBaFw0yNjA5MjUwNTUyMDBaMDMxMTAvBgNV BAMTKEQzMTUyMkI1MTU2QkYxMzU0QTBDMUI4Mzc4OEQyQkE5QzlERjQ2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50Z0Cs/y0FB/bMmjfLjzJZY5e 7pVLk92NvxLnZSVwv9Jr+aG1DDtiHECwgFM3BhOV1FxvRCmjVWqAPl58OsaKU4A3 Qs5OHOaZsGi2OoZEko1g2/p2jkWsPyQ5bPXcxXVOCz07fbiJm0WQpZyEocB9DXqt auYsSaeAUG1ggX/7euoMvyOxkivbmMplxgJeNNgXtsg2WvqfjPPs3lmmD3NZJF/B 8MXRzWVpdUsEtGC2AktCSi59cPkvEGYWvxF1cQxfSj4erO8hfKgRmTg5GP5Qcgzj G8jncp0YOeLZkm09icv8CkvISIMd0cNCHV5xVk69Z2048egc/PzK7yVtpxi3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0xUitRVr8TVKDBuDeI0rqcnfRt8wHwYDVR0j BBgwFoAUO1CSzzgkdlGk93ZhfnAil0nU3ycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZhYmVjNzEtN2VjYi00ZGJkLWE0MjEtOTliOWNkMjA5MDNhLzAvM0I1MDkyQ0Yz ODI0NzY1MUE0Rjc3NjYxN0U3MDIyOTc0OUQ0REYyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjUwOTJDRjM4MjQ3NjUxQTRGNzc2NjE3RTcwMjI5NzQ5RDRE RjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvM0I1MDkyQ0YzODI0NzY1MUE0Rjc3NjYxN0U3MDIy OTc0OUQ0REYyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3QTU+5aSCmTD47IYkTL8sUGklRiZ0FR45d 50p9N/qW+o7OKLLpZjyNeChG0pb3SWYNlvFMMzzWnDhfaZ+KAemvUKMGGdWujOx2 T4gafWz0C1jILP68qhO9aZKQZEtUQvqJqMuZepsiniNs2GN50/50BtW4EkyNj1QQ qzMALRmmPkpZPg+eMWivq5kg4+TIZ5dEyYEJf9hbpyfygXTfM0fVg/m6XbRRAfQN uBgITEBe+cKIEh4L3u7npFyrQrvEoM/TzSuOjA6O8xOjV/hmI2vh2+u2A+moayi6 KSsGUKO6t+3kPRwjZRDQPLkNnSgkPEPXP2e9VqtR/MC+LWT98Qg= -----END CERTIFICATE-----Generated at Thu Sep 24 13:20:39 2026 by rpki-client