$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft File: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft (raw, json) Hash identifier: 5VFQ5DHOAdT/yrqTMMLkyBpXFxSJoUmCw/Kwfu/4Rxw= Subject key identifier: 20:DE:59:69:6A:FC:12:78:AD:A4:F9:86:C7:B5:F3:65:85:90:BE:B5 Authority key identifier: 3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 Certificate issuer: /CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Certificate serial: 60AB60A01350DD6FE944E8C7BED1E7B4E177080D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 05:42:26 +0000 Manifest this update: Fri 25 Sep 2026 05:37:26 +0000 Manifest next update: Sat 26 Sep 2026 06:10:26 +0000 Files and hashes: 1: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: InPNxYRaf3FwNMQXVehetQN/Y6CMxZDL5d0U1h33pOA=) 2: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl (hash: /j3+FKNxFCm30Di/YSXf1iunYZUVcJbj68abaNcjr7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 06:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ab:60:a0:13:50:dd:6f:e9:44:e8:c7:be:d1:e7:b4:e1:77:08:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Validity Not Before: Sep 25 05:37:26 2026 GMT Not After : Sep 26 06:10:26 2026 GMT Subject: CN=20DE59696AFC1278ADA4F986C7B5F3658590BEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:99:35:ff:1c:85:2a:de:9e:f1:d2:af:c4:06: 8c:43:9d:c8:3f:15:a6:6b:8f:be:63:73:39:f9:f2: 71:f1:ce:09:10:c7:3b:29:b1:0c:b9:4b:3b:a8:af: 6a:9d:20:75:0b:98:62:d3:cc:cb:f8:7e:cb:f6:9b: 2b:64:3f:1a:65:3b:b8:c2:dc:0a:2d:fd:e7:d2:69: ab:97:05:bc:4e:3a:57:a3:7b:5a:1b:33:b5:b3:64: 59:48:f2:b1:34:24:e8:a3:8a:ad:0b:b6:e9:c2:f9: ca:ae:8a:63:50:4b:f2:f3:1a:c8:a7:e4:e4:b0:10: 57:0d:89:6c:94:89:db:a5:fc:53:d3:52:1d:4c:e7: fc:79:d3:ab:ee:a5:08:fb:cc:6e:97:9d:39:7d:b9: ed:d7:32:86:09:a5:c7:a9:55:4a:87:da:6c:b5:c0: 53:ee:10:44:9f:e2:29:91:98:9c:28:3c:91:79:80: 4d:84:fb:ef:08:e7:ba:ed:fb:3a:03:f5:13:49:b0: 0f:69:fa:2e:b9:7f:23:42:62:36:04:b7:56:0b:23: 9b:27:eb:42:0d:5c:39:0d:40:20:c5:a4:1b:28:2e: 2c:4d:40:14:50:52:91:e5:59:2f:fa:a6:5a:28:df: 48:4e:9d:87:7d:a2:90:70:31:d5:9e:e5:ce:8f:02: 63:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DE:59:69:6A:FC:12:78:AD:A4:F9:86:C7:B5:F3:65:85:90:BE:B5 X509v3 Authority Key Identifier: keyid:3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e3:67:2e:5c:38:01:dc:92:6b:87:5a:45:a0:eb:c7:35:c3: 10:c7:6d:65:97:b7:e0:52:b4:8b:e0:e9:95:9e:5e:93:08:de: 69:9d:1b:aa:61:9b:82:91:ab:ef:ce:3f:75:83:0e:d0:55:5c: 2e:d4:da:ec:92:5d:30:4c:c0:cf:a2:83:bb:6c:54:84:35:7b: 8d:13:c1:04:7c:46:27:b1:d4:1f:61:d3:5f:6b:9c:2e:fd:1e: e3:6a:5e:7a:2a:a3:e3:d9:fb:eb:26:cc:b4:8e:74:21:19:d6: 59:c2:97:ba:82:cf:0c:10:54:36:84:aa:df:d9:8e:6e:36:49: dc:73:a1:2c:60:20:e6:95:e5:67:c8:e4:3c:62:6f:66:a8:c6: 7f:a6:de:de:ae:95:df:2f:e6:d4:91:08:b1:e7:a8:87:08:3f: 75:0f:eb:b0:0b:66:66:91:8d:a7:4a:51:ff:c0:d7:10:c1:d0: e8:66:5f:ce:cd:65:42:da:3f:08:72:c0:c4:3a:96:b9:bf:61: 93:40:2b:e8:b8:ba:d7:e0:ea:9e:51:b3:db:fe:e1:7e:df:5b: 86:88:6c:97:17:71:9f:b4:5c:72:fd:ff:04:16:58:f0:10:8e: c2:2a:38:7d:88:a5:df:cf:7a:a1:8b:5a:66:6f:c9:bf:54:a5: 07:95:ac:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKtgoBNQ3W/pROjHvtHntOF3CA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNE MEU5M0Y0MDAeFw0yNjA5MjUwNTM3MjZaFw0yNjA5MjYwNjEwMjZaMDMxMTAvBgNV BAMTKDIwREU1OTY5NkFGQzEyNzhBREE0Rjk4NkM3QjVGMzY1ODU5MEJFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgmTX/HIUq3p7x0q/EBoxDncg/ FaZrj75jczn58nHxzgkQxzspsQy5Szuor2qdIHULmGLTzMv4fsv2mytkPxplO7jC 3Aot/efSaauXBbxOOleje1obM7WzZFlI8rE0JOijiq0LtunC+cquimNQS/LzGsin 5OSwEFcNiWyUidul/FPTUh1M5/x506vupQj7zG6XnTl9ue3XMoYJpcepVUqH2my1 wFPuEESf4imRmJwoPJF5gE2E++8I57rt+zoD9RNJsA9p+i65fyNCYjYEt1YLI5sn 60INXDkNQCDFpBsoLixNQBRQUpHlWS/6ploo30hOnYd9opBwMdWe5c6PAmO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIN5ZaWr8EnitpPmGx7XzZYWQvrUwHwYDVR0j BBgwFoAUO3bVmj8Wj2EQ5Spi7XZJo9DpP0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc0YTE1MjctNWM4ZS00YmQzLWExYzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEz RjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNEMEU5M0Y0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjc2RDU5QTNGMTY4RjYxMTBFNTJBNjJFRDc2NDlBM0QwRTkz RjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5 QTNEMEU5M0Y0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTjZy5cOAHckmuHWkWg68c1wxDHbWWXt+BS tIvg6ZWeXpMI3mmdG6phm4KRq+/OP3WDDtBVXC7U2uySXTBMwM+ig7tsVIQ1e40T wQR8Riex1B9h019rnC79HuNqXnoqo+PZ++smzLSOdCEZ1lnCl7qCzwwQVDaEqt/Z jm42SdxzoSxgIOaV5WfI5Dxib2aoxn+m3t6uld8v5tSRCLHnqIcIP3UP67ALZmaR jadKUf/A1xDB0OhmX87NZULaPwhywMQ6lrm/YZNAK+i4utfg6p5Rs9v+4X7fW4aI bJcXcZ+0XHL9/wQWWPAQjsIqOH2Ipd/PeqGLWmZvyb9UpQeVrJg= -----END CERTIFICATE-----Generated at Fri Sep 25 21:01:02 2026 by rpki-client