$ rpki-client -vvvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft File: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft (raw, json) Hash identifier: aEEe84UnP7J3ohaHwWmrXMJLut4UUhVh3tynQiCy9o8= Subject key identifier: 50:91:65:63:45:49:EB:34:23:8E:B2:C7:55:25:64:ED:99:76:9A:4F Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 Certificate issuer: /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Certificate serial: 2A8790D83530868BE8778822500950D5D8F63CE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 00:14:31 +0000 Manifest this update: Sun 15 Nov 2026 00:09:31 +0000 Manifest next update: Mon 16 Nov 2026 01:16:31 +0000 Files and hashes: 1: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: c4wYihjNVRnxptUGtDAxVDHluIjX7/1xYD6gvJUxJM8=) 2: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: lz98VZByNVjP88hEyC/FArLpyfqt3UkStR89LwAjmAE=) 3: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: eaitOk5B7Jr1jxdZCm0AVOvl4hgE6wJsB8PnaacOno4=) 4: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl (hash: 86FzXKV74Bzv+YXEMyOdYwUWGvcze2AxFPLUdXwhhgs=) 5: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: lpwKH/1rt1O8n37PkqiZ5Fo1jTQNKkwVgQuRatXBn2c=) 6: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: 4DtXaRxKzA2NgphfITj3rvmS/5Zg3IKyMFd8f9pE1pU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 01:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:87:90:d8:35:30:86:8b:e8:77:88:22:50:09:50:d5:d8:f6:3c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Validity Not Before: Nov 15 00:09:31 2026 GMT Not After : Nov 16 01:16:31 2026 GMT Subject: CN=509165634549EB34238EB2C7552564ED99769A4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b5:ff:77:13:12:aa:3e:53:a6:50:f4:60:31: 11:76:dc:59:50:13:0e:18:7a:44:c5:72:89:80:e8: b6:1c:dc:df:20:a2:2a:ba:db:af:fb:07:1b:ee:9a: b4:19:11:83:9c:00:cc:75:02:92:bf:e3:84:b2:60: e3:23:6d:e5:c7:46:b3:07:1e:f2:04:ae:b8:78:fa: 68:e4:ed:0a:3a:97:94:ff:fb:b3:58:22:a7:fe:34: 78:52:3a:5d:ad:fd:92:a7:26:1f:92:4d:88:f3:e5: 4e:73:3f:93:51:9a:23:6e:b0:57:b6:7c:44:b0:91: 63:7a:11:35:79:fa:2e:96:ac:f7:96:70:39:2e:21: fe:39:1d:a4:3f:62:92:cf:20:9d:b8:42:61:77:e9: f8:28:96:0d:c1:88:76:d0:72:7c:a3:26:76:80:9e: 15:b6:dd:eb:f6:9f:c8:2f:0a:b4:d0:54:62:2d:48: fc:44:7a:bb:67:dc:a1:20:8f:15:79:aa:2b:a2:27: a7:2f:74:8f:8f:24:5a:47:0d:fe:6b:51:33:8c:4e: e4:66:ab:1a:35:bb:c3:e4:28:ee:02:89:a3:26:53: c5:a0:48:73:10:3e:3c:92:86:d8:98:98:b1:42:5f: 89:8a:81:c9:c6:a2:a1:53:1d:3f:99:03:44:07:0c: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:91:65:63:45:49:EB:34:23:8E:B2:C7:55:25:64:ED:99:76:9A:4F X509v3 Authority Key Identifier: keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:cc:d5:31:d9:b1:8a:9e:39:e7:db:28:1e:c8:af:89:d6:bd: 5c:5b:90:76:de:45:77:67:ac:c5:af:de:3b:60:c0:89:7f:9b: 2b:4b:a9:fd:5c:29:f5:e6:38:dd:c9:4b:f5:53:66:cf:17:4b: 40:44:e7:ee:36:d1:f0:37:fb:9b:e5:ab:3e:ad:da:c2:c4:ad: 7c:46:8c:43:8c:45:88:b0:cc:34:65:bf:db:1f:4c:71:67:77: 91:71:01:71:2e:4e:b1:0f:11:55:10:d4:a6:f2:fd:87:e5:b3: 8c:4f:5a:84:24:bd:a9:49:67:ea:46:6e:06:99:f1:d9:be:ee: bc:90:e8:5c:77:8e:24:eb:8d:f3:55:58:76:b5:26:db:86:f3: d7:c4:02:90:49:8b:4b:9c:a8:60:bc:12:3f:4d:dc:e0:db:15: 59:dc:34:4b:74:54:c5:73:06:bb:8e:8c:77:bb:a2:32:5a:47: fb:bc:aa:72:c4:44:9e:00:2c:6c:90:71:cf:b0:59:f4:12:02: df:89:7e:35:77:0f:fd:90:09:d6:2c:16:05:d2:7b:99:62:40: b3:f4:8d:3b:e8:bc:36:c4:8b:c0:9b:ca:1a:8f:ce:d3:14:e8: 43:5e:52:91:dc:58:e5:60:26:cb:2a:8a:42:35:8d:86:4e:c1: 1f:06:59:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKoeQ2DUwhovod4giUAlQ1dj2POIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RCOUEy NEE4Qjg3NzAeFw0yNjExMTUwMDA5MzFaFw0yNjExMTYwMTE2MzFaMDMxMTAvBgNV BAMTKDUwOTE2NTYzNDU0OUVCMzQyMzhFQjJDNzU1MjU2NEVEOTk3NjlBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChtf93ExKqPlOmUPRgMRF23FlQ Ew4YekTFcomA6LYc3N8goiq626/7BxvumrQZEYOcAMx1ApK/44SyYOMjbeXHRrMH HvIErrh4+mjk7Qo6l5T/+7NYIqf+NHhSOl2t/ZKnJh+STYjz5U5zP5NRmiNusFe2 fESwkWN6ETV5+i6WrPeWcDkuIf45HaQ/YpLPIJ24QmF36fgolg3BiHbQcnyjJnaA nhW23ev2n8gvCrTQVGItSPxEertn3KEgjxV5qiuiJ6cvdI+PJFpHDf5rUTOMTuRm qxo1u8PkKO4CiaMmU8WgSHMQPjyShtiYmLFCX4mKgcnGoqFTHT+ZA0QHDLXBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUJFlY0VJ6zQjjrLHVSVk7Zl2mk8wHwYDVR0j BBgwFoAUNpnt1x2mCrxQs8gYenfbmiSouHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZjM3YzAtMzgwYy00MDUzLWIzYmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcx REE2MEFCQzUwQjNDODE4N0E3N0RCOUEyNEE4Qjg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk5RURENzFEQTYwQUJDNTBCM0M4MTg3QTc3REI5QTI0QThC ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RC OUEyNEE4Qjg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnM1THZsYqeOefbKB7Ir4nWvVxbkHbeRXdn rMWv3jtgwIl/mytLqf1cKfXmON3JS/VTZs8XS0BE5+420fA3+5vlqz6t2sLErXxG jEOMRYiwzDRlv9sfTHFnd5FxAXEuTrEPEVUQ1Kby/Yfls4xPWoQkvalJZ+pGbgaZ 8dm+7ryQ6Fx3jiTrjfNVWHa1JtuG89fEApBJi0ucqGC8Ej9N3ODbFVncNEt0VMVz BruOjHe7ojJaR/u8qnLERJ4ALGyQcc+wWfQSAt+JfjV3D/2QCdYsFgXSe5liQLP0 jTvovDbEi8CbyhqPztMU6ENeUpHcWOVgJssqikI1jYZOwR8GWTI= -----END CERTIFICATE-----Generated at Sun Nov 15 15:20:59 2026 by rpki-client