$ rpki-client -vvvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft File: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft (raw, json) Hash identifier: stAqpnLuZX6Wa5T8wXMY7vsrtd4kGhm2w8W76G+cejc= Subject key identifier: 55:92:DE:00:C0:5E:C6:50:A9:42:58:30:A0:F0:7E:65:6E:8B:04:E6 Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 Certificate issuer: /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Certificate serial: 5DC45CF0B4A9B9517BA481E857244F5F8FB74084 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft Manifest number: BC Signing time: Sun 20 Sep 2026 00:22:27 +0000 Manifest this update: Sun 20 Sep 2026 00:17:27 +0000 Manifest next update: Mon 21 Sep 2026 03:09:27 +0000 Files and hashes: 1: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl (hash: Y3Ve/MRnmiSKXnqbbpJ4Skoo5f1dZn6xx+Y0E+nM+Wo=) 2: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: 4DtXaRxKzA2NgphfITj3rvmS/5Zg3IKyMFd8f9pE1pU=) 3: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: lpwKH/1rt1O8n37PkqiZ5Fo1jTQNKkwVgQuRatXBn2c=) 4: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: c4wYihjNVRnxptUGtDAxVDHluIjX7/1xYD6gvJUxJM8=) 5: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: lz98VZByNVjP88hEyC/FArLpyfqt3UkStR89LwAjmAE=) 6: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: eaitOk5B7Jr1jxdZCm0AVOvl4hgE6wJsB8PnaacOno4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 03:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c4:5c:f0:b4:a9:b9:51:7b:a4:81:e8:57:24:4f:5f:8f:b7:40:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Validity Not Before: Sep 20 00:17:27 2026 GMT Not After : Sep 21 03:09:27 2026 GMT Subject: CN=5592DE00C05EC650A9425830A0F07E656E8B04E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:68:66:d7:24:8b:bf:a4:4b:a5:ec:30:45:1b: 08:aa:34:d9:67:24:19:ba:f3:cc:06:36:b7:2c:53: 64:e5:5c:6a:41:13:63:01:07:7e:63:ed:46:0e:42: 3c:e3:70:00:d7:92:40:b1:0f:f7:c4:ca:d6:87:b5: 4f:29:f1:b7:46:b9:81:e2:da:37:60:22:6b:f4:56: 78:14:dc:51:ce:28:25:d3:d3:d3:1b:f7:b7:40:7e: 8f:00:cd:cc:21:d3:47:7b:da:54:e1:c6:a1:99:8b: 4e:78:76:d4:04:b7:f8:ed:e9:40:cd:24:71:8f:67: aa:17:23:2f:9a:00:d4:49:4f:b9:5a:cd:4c:07:84: 36:26:8a:b3:ec:8e:ba:39:fb:20:b0:cc:5d:8a:99: 92:91:74:e7:64:e2:78:21:31:ff:d8:dc:3b:4f:70: d6:d2:27:7f:cf:cc:2f:e3:1a:61:ee:8c:cb:a3:04: c1:98:1e:84:e7:46:49:d3:69:3a:36:ba:f6:ca:5c: e3:fd:6c:a3:61:47:df:5e:dd:13:bd:87:b8:d9:4b: d9:1d:94:88:3e:9c:9a:e5:fb:4a:0c:f8:f4:83:13: 82:07:04:d8:9c:55:22:28:c3:07:12:b2:6d:85:e7: 16:75:14:48:47:e4:82:1d:be:72:dd:e4:8a:7b:64: 0e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:92:DE:00:C0:5E:C6:50:A9:42:58:30:A0:F0:7E:65:6E:8B:04:E6 X509v3 Authority Key Identifier: keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b2:8c:7d:2b:28:7d:9c:7f:e1:ba:aa:8d:36:99:4e:04:26: 95:41:8c:2c:d1:b2:67:06:9d:fa:72:e5:85:27:56:93:04:52: c2:91:c0:82:39:70:30:55:fe:bc:c0:d5:c6:49:25:47:f0:ba: e0:55:ce:bd:7b:5c:c0:e9:e2:16:a8:72:ff:90:fb:8c:31:75: ce:96:6c:8e:eb:be:58:43:9f:34:0d:5e:0b:b2:b6:45:d2:1b: 59:68:1b:b5:18:5d:cf:09:c3:42:e7:04:fa:93:1c:2b:a3:04: 29:60:26:00:bd:e0:ed:50:39:50:04:3f:c6:0c:68:12:59:30: 63:5a:a0:4f:c5:95:9a:e8:16:f8:71:b6:09:4d:91:89:09:f3: 0d:fe:6e:b6:a4:1c:fc:51:0e:98:ff:b5:67:34:56:1b:cf:77: f2:43:48:1e:b9:49:e3:ea:0a:4d:1e:7e:bd:e0:f2:b6:8f:3b: bb:cf:04:3b:9f:25:d1:ec:e1:c5:97:49:af:1c:a9:66:62:b4: f2:45:3c:19:4e:c0:be:5a:4a:9f:56:2d:ff:22:3e:b9:7c:06: f7:02:42:db:fa:a8:79:ce:97:7d:37:48:17:fb:b6:4f:80:41: f6:25:0c:64:6a:4b:49:45:3a:f4:85:ea:6a:ff:98:02:df:19: 86:86:49:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXcRc8LSpuVF7pIHoVyRPX4+3QIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RCOUEy NEE4Qjg3NzAeFw0yNjA5MjAwMDE3MjdaFw0yNjA5MjEwMzA5MjdaMDMxMTAvBgNV BAMTKDU1OTJERTAwQzA1RUM2NTBBOTQyNTgzMEEwRjA3RTY1NkU4QjA0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8aGbXJIu/pEul7DBFGwiqNNln JBm688wGNrcsU2TlXGpBE2MBB35j7UYOQjzjcADXkkCxD/fEytaHtU8p8bdGuYHi 2jdgImv0VngU3FHOKCXT09Mb97dAfo8Azcwh00d72lThxqGZi054dtQEt/jt6UDN JHGPZ6oXIy+aANRJT7lazUwHhDYmirPsjro5+yCwzF2KmZKRdOdk4nghMf/Y3DtP cNbSJ3/PzC/jGmHujMujBMGYHoTnRknTaTo2uvbKXOP9bKNhR99e3RO9h7jZS9kd lIg+nJrl+0oM+PSDE4IHBNicVSIowwcSsm2F5xZ1FEhH5IIdvnLd5Ip7ZA7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVZLeAMBexlCpQlgwoPB+ZW6LBOYwHwYDVR0j BBgwFoAUNpnt1x2mCrxQs8gYenfbmiSouHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZjM3YzAtMzgwYy00MDUzLWIzYmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcx REE2MEFCQzUwQjNDODE4N0E3N0RCOUEyNEE4Qjg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk5RURENzFEQTYwQUJDNTBCM0M4MTg3QTc3REI5QTI0QThC ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RC OUEyNEE4Qjg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiyjH0rKH2cf+G6qo02mU4EJpVBjCzRsmcG nfpy5YUnVpMEUsKRwII5cDBV/rzA1cZJJUfwuuBVzr17XMDp4haocv+Q+4wxdc6W bI7rvlhDnzQNXguytkXSG1loG7UYXc8Jw0LnBPqTHCujBClgJgC94O1QOVAEP8YM aBJZMGNaoE/FlZroFvhxtglNkYkJ8w3+brakHPxRDpj/tWc0VhvPd/JDSB65SePq Ck0efr3g8raPO7vPBDufJdHs4cWXSa8cqWZitPJFPBlOwL5aSp9WLf8iPrl8BvcC Qtv6qHnOl303SBf7tk+AQfYlDGRqS0lFOvSF6mr/mALfGYaGSc0= -----END CERTIFICATE-----Generated at Sun Sep 20 21:11:14 2026 by rpki-client