$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft File: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft (raw, json) Hash identifier: fJ1HNlPEhc8adEzMmXHs5OSzvlBq0GfsYlMJMaEllb4= Subject key identifier: 77:2B:9D:45:BD:72:E9:27:48:30:53:BB:C7:FE:FC:B4:41:B3:C8:46 Authority key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 Certificate issuer: /CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Certificate serial: 5D3D4DC608F7C89BB9A3EADF52C43E91E22BA72D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 11:50:41 +0000 Manifest this update: Wed 23 Sep 2026 11:45:41 +0000 Manifest next update: Thu 24 Sep 2026 12:25:41 +0000 Files and hashes: 1: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: CjlIt4MYvo7XEt2sGyJogAmUB68TdPA5ouLe//ZK0KM=) 2: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: C4nE65Bmt4vsoADCvXJtdLeHcH0r1PmaQ5qo7rMWJUM=) 3: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl (hash: ZxwyFEfOIqMJH7KWv3cMuPlBE1jv4j3HVNE1mUMFO6A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3d:4d:c6:08:f7:c8:9b:b9:a3:ea:df:52:c4:3e:91:e2:2b:a7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Validity Not Before: Sep 23 11:45:41 2026 GMT Not After : Sep 24 12:25:41 2026 GMT Subject: CN=772B9D45BD72E927483053BBC7FEFCB441B3C846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:36:d5:43:62:e1:bd:49:57:93:7e:6a:3a:18: da:2f:6d:ef:9c:f5:55:69:ab:f5:af:5e:0d:49:d3: e9:4c:85:7c:bc:bd:fd:e5:a9:42:4f:a1:25:07:aa: b0:ca:93:d7:26:7d:43:13:3f:c6:56:2f:1e:8b:8a: b7:f1:c7:6e:c5:84:4e:c0:ab:c2:b1:0a:1a:0e:64: ae:91:6a:a0:51:2c:9f:a5:6b:0f:3d:52:1c:ed:b4: a4:49:88:98:6e:80:c6:b5:f4:bb:58:6b:f9:04:f0: 68:df:17:86:c7:46:a7:23:bd:7e:a1:17:6b:5b:af: 3e:fb:f1:e6:e8:ff:ee:59:31:53:36:e0:bb:a2:82: 3b:7c:59:c7:b6:38:07:48:1b:50:74:75:d2:06:3a: ab:43:26:63:aa:08:c7:33:f2:68:a1:50:a8:cb:13: 31:05:cb:20:87:dc:26:f2:f4:01:71:f6:10:d0:23: 69:2b:02:1c:da:1a:73:f8:b6:74:69:8d:34:86:17: 92:de:88:f7:3f:d5:9d:03:39:ae:20:91:d1:4b:a3: a0:8e:c3:b3:45:fa:59:61:b0:d8:db:4c:b2:77:84: c8:23:86:88:d7:ee:ac:c9:55:87:46:b5:46:94:4d: 69:27:64:d5:34:53:db:1b:0e:f0:b5:66:b3:fd:a6: a2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2B:9D:45:BD:72:E9:27:48:30:53:BB:C7:FE:FC:B4:41:B3:C8:46 X509v3 Authority Key Identifier: keyid:37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1d:34:6c:da:58:e7:e6:b6:0e:42:83:dd:32:3e:f8:c3:96: 09:5b:73:8d:0c:95:dc:22:e3:13:06:b3:7a:55:53:a8:47:58: e7:76:f2:e2:5e:d1:91:03:b4:e4:3a:23:99:ec:16:ee:2e:bd: 99:96:61:51:97:15:91:49:6d:8e:48:2d:78:1f:99:c9:f8:b8: b5:06:a7:ab:a0:f1:d6:1a:cf:88:aa:2b:25:49:49:93:7c:35: 16:62:d7:7c:da:4b:67:4b:56:54:b1:72:16:bd:59:26:0d:b5: dc:94:80:ae:0e:43:ef:bb:10:93:ad:ff:30:58:ae:0b:9b:de: aa:bc:c9:d3:22:0e:0a:1e:c7:50:3e:a5:9d:8e:5d:77:d1:68: 25:59:16:2f:88:bb:7a:5d:c8:bd:e5:f7:15:b2:f5:c4:eb:ef: 34:fe:0e:5c:4a:42:c4:7a:6c:fe:b6:47:12:6b:23:60:c1:fb: e6:4d:f3:af:45:74:72:4f:d2:30:76:f2:a3:46:8d:b1:62:ea: 1f:a3:f7:de:28:a1:3f:48:e6:ce:67:37:01:58:3a:49:a1:4b: 49:39:54:4a:cf:ee:05:ec:3c:a2:5f:78:4e:80:99:40:ee:61: 6b:d5:e9:82:cb:c5:81:58:63:65:d2:7b:6b:a8:08:ff:c5:ec: e6:2f:9b:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXT1Nxgj3yJu5o+rfUsQ+keIrpy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1 RTUzQTYxMTAeFw0yNjA5MjMxMTQ1NDFaFw0yNjA5MjQxMjI1NDFaMDMxMTAvBgNV BAMTKDc3MkI5RDQ1QkQ3MkU5Mjc0ODMwNTNCQkM3RkVGQ0I0NDFCM0M4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLNtVDYuG9SVeTfmo6GNovbe+c 9VVpq/WvXg1J0+lMhXy8vf3lqUJPoSUHqrDKk9cmfUMTP8ZWLx6Lirfxx27FhE7A q8KxChoOZK6RaqBRLJ+law89UhzttKRJiJhugMa19LtYa/kE8GjfF4bHRqcjvX6h F2tbrz778ebo/+5ZMVM24Luigjt8Wce2OAdIG1B0ddIGOqtDJmOqCMcz8mihUKjL EzEFyyCH3Cby9AFx9hDQI2krAhzaGnP4tnRpjTSGF5LeiPc/1Z0DOa4gkdFLo6CO w7NF+llhsNjbTLJ3hMgjhojX7qzJVYdGtUaUTWknZNU0U9sbDvC1ZrP9pqIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdyudRb1y6SdIMFO7x/78tEGzyEYwHwYDVR0j BBgwFoAUNyL1fzb8bfZPD2Y4yJzys15TphEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJhOWY0ZTItYzczYi00NDI3LTk4MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0Yz NkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1RTUzQTYxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzIyRjU3RjM2RkM2REY2NEYwRjY2MzhDODlDRjJCMzVFNTNB NjExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0Yy QjM1RTUzQTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUdNGzaWOfmtg5Cg90yPvjDlglbc40Mldwi 4xMGs3pVU6hHWOd28uJe0ZEDtOQ6I5nsFu4uvZmWYVGXFZFJbY5ILXgfmcn4uLUG p6ug8dYaz4iqKyVJSZN8NRZi13zaS2dLVlSxcha9WSYNtdyUgK4OQ++7EJOt/zBY rgub3qq8ydMiDgoex1A+pZ2OXXfRaCVZFi+Iu3pdyL3l9xWy9cTr7zT+DlxKQsR6 bP62RxJrI2DB++ZN869FdHJP0jB28qNGjbFi6h+j994ooT9I5s5nNwFYOkmhS0k5 VErP7gXsPKJfeE6AmUDuYWvV6YLLxYFYY2XSe2uoCP/F7OYvmwg= -----END CERTIFICATE-----Generated at Wed Sep 23 23:48:23 2026 by rpki-client