$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft File: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft (raw, json) Hash identifier: lnSVDTyzKQOnBFu1wFvnJqLikhzfqI7PT56AxCrqm0E= Subject key identifier: 3A:52:E8:F1:22:B0:5B:7E:53:A3:54:2E:7C:77:CA:9A:B9:26:AD:B1 Authority key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 Certificate issuer: /CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Certificate serial: 629796E02AB805B4005229D94B4803933CDDFFB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft Manifest number: 0108 Signing time: Sat 14 Nov 2026 05:10:39 +0000 Manifest this update: Sat 14 Nov 2026 05:05:39 +0000 Manifest next update: Sun 15 Nov 2026 06:32:39 +0000 Files and hashes: 1: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: C4nE65Bmt4vsoADCvXJtdLeHcH0r1PmaQ5qo7rMWJUM=) 2: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl (hash: 19FSrOYGx6p3VQEeZUshR7bwMnxco76w2DI/LwHfOtQ=) 3: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: CjlIt4MYvo7XEt2sGyJogAmUB68TdPA5ouLe//ZK0KM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 06:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:97:96:e0:2a:b8:05:b4:00:52:29:d9:4b:48:03:93:3c:dd:ff:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Validity Not Before: Nov 14 05:05:39 2026 GMT Not After : Nov 15 06:32:39 2026 GMT Subject: CN=3A52E8F122B05B7E53A3542E7C77CA9AB926ADB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:5b:b0:93:33:82:f6:86:7e:ea:04:c2:09: d6:1b:12:25:b0:13:83:01:09:dc:62:7d:c5:2b:4e: 99:65:10:20:5b:a5:1b:b0:39:8e:5f:a7:14:2d:0f: 99:65:cd:65:99:15:48:5a:6f:14:d2:8e:fe:16:92: 9e:2f:24:c4:0f:36:8d:6e:26:3e:54:5f:98:1f:c8: 51:cd:6d:3e:3f:01:d0:1b:e9:f5:c9:79:73:5a:b9: f5:bf:68:84:9b:93:e4:e9:27:cf:4c:7a:13:2d:3b: d2:83:ae:fc:96:31:49:1b:82:78:b3:31:95:31:c6: 28:ca:b2:66:a6:94:e4:7e:d8:05:09:31:ad:59:79: 77:76:2e:10:8b:ae:c3:d8:59:e5:71:02:e6:06:a1: de:35:25:b0:af:66:2a:94:7f:4c:0d:a5:14:2c:5d: 7a:92:e3:bd:38:e6:72:64:7b:07:e9:ea:49:cc:c4: 9d:90:2c:eb:ea:fa:bd:7a:be:df:e7:16:80:8b:1f: 0a:ea:03:5b:58:1f:cb:a2:76:44:92:56:04:6c:a5: c6:4e:e7:3b:a0:12:21:2d:4c:20:3e:d8:48:03:c7: 74:9a:9b:21:6f:ce:d0:2f:fd:fb:1a:08:18:f5:c9: 6c:63:b8:c6:ec:35:17:6f:30:ce:d1:af:46:3e:f3: 29:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:52:E8:F1:22:B0:5B:7E:53:A3:54:2E:7C:77:CA:9A:B9:26:AD:B1 X509v3 Authority Key Identifier: keyid:37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:db:3c:c0:1b:3a:50:77:f9:ff:3e:5c:99:17:00:5f:3b:98: fc:f6:1f:ce:54:cc:21:14:61:65:d7:31:d3:49:1a:36:1a:c5: e4:fc:6c:21:57:2e:56:7b:d2:b0:2e:be:13:62:80:5c:c9:98: 5d:8f:64:f1:86:b0:9a:7e:4c:9a:f5:f2:ee:b8:0c:00:1b:40: 1e:15:ee:ec:91:bf:ec:00:fb:d6:1f:2a:dd:b8:16:71:d1:e0: a7:c8:65:0f:a0:b2:9c:86:71:ec:80:b1:55:17:00:c3:7a:40: 1d:ec:b3:2e:50:51:c7:91:44:4e:9f:83:b0:9f:cd:3e:02:ee: 3b:7a:9c:83:c2:bf:4a:a0:36:3e:71:11:e5:43:96:e8:bc:a0: e8:1d:9f:1b:71:0e:0a:ac:42:e9:f9:df:2c:ce:0d:1f:7d:71: e8:e4:79:3b:ae:b6:2d:1f:aa:8d:9e:c7:91:13:9c:2c:41:16: c4:86:95:f0:50:38:38:4c:e5:5d:1c:26:57:9d:0d:4d:14:c0: 45:ba:a5:e6:52:ff:15:73:c2:4a:29:90:49:1c:16:51:e0:19: 7c:a3:62:33:be:34:c6:4f:67:cf:d8:33:07:8c:1a:ed:bc:68: db:5c:1a:f4:43:98:c4:42:2b:f3:82:5e:9c:1a:d5:54:97:7c: ad:fc:c6:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpeW4Cq4BbQAUinZS0gDkzzd/7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1 RTUzQTYxMTAeFw0yNjExMTQwNTA1MzlaFw0yNjExMTUwNjMyMzlaMDMxMTAvBgNV BAMTKDNBNTJFOEYxMjJCMDVCN0U1M0EzNTQyRTdDNzdDQTlBQjkyNkFEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8luwkzOC9oZ+6gTCCdYbEiWw E4MBCdxifcUrTpllECBbpRuwOY5fpxQtD5llzWWZFUhabxTSjv4Wkp4vJMQPNo1u Jj5UX5gfyFHNbT4/AdAb6fXJeXNaufW/aISbk+TpJ89MehMtO9KDrvyWMUkbgniz MZUxxijKsmamlOR+2AUJMa1ZeXd2LhCLrsPYWeVxAuYGod41JbCvZiqUf0wNpRQs XXqS47045nJkewfp6knMxJ2QLOvq+r16vt/nFoCLHwrqA1tYH8uidkSSVgRspcZO 5zugEiEtTCA+2EgDx3SamyFvztAv/fsaCBj1yWxjuMbsNRdvMM7Rr0Y+8ykXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOlLo8SKwW35To1QufHfKmrkmrbEwHwYDVR0j BBgwFoAUNyL1fzb8bfZPD2Y4yJzys15TphEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJhOWY0ZTItYzczYi00NDI3LTk4MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0Yz NkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1RTUzQTYxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzIyRjU3RjM2RkM2REY2NEYwRjY2MzhDODlDRjJCMzVFNTNB NjExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0Yy QjM1RTUzQTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXbPMAbOlB3+f8+XJkXAF87mPz2H85UzCEU YWXXMdNJGjYaxeT8bCFXLlZ70rAuvhNigFzJmF2PZPGGsJp+TJr18u64DAAbQB4V 7uyRv+wA+9YfKt24FnHR4KfIZQ+gspyGceyAsVUXAMN6QB3ssy5QUceRRE6fg7Cf zT4C7jt6nIPCv0qgNj5xEeVDlui8oOgdnxtxDgqsQun53yzODR99cejkeTuuti0f qo2ex5ETnCxBFsSGlfBQODhM5V0cJledDU0UwEW6peZS/xVzwkopkEkcFlHgGXyj YjO+NMZPZ8/YMweMGu28aNtcGvRDmMRCK/OCXpwa1VSXfK38xjQ= -----END CERTIFICATE-----Generated at Sat Nov 14 22:23:58 2026 by rpki-client