$ rpki-client -vvvf rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft File: 3EBE2E74F0EE59A6395F325E6928084B763824A1.mft (raw, json) Hash identifier: P8JNs+6bBdRtv/VwSqxcGrPM+mNagfD3g4DoWPW/3ss= Subject key identifier: 03:0B:60:3C:E5:2E:46:BF:E4:E3:A6:07:F9:B0:70:FF:D0:BD:B7:4B Authority key identifier: 3E:BE:2E:74:F0:EE:59:A6:39:5F:32:5E:69:28:08:4B:76:38:24:A1 Certificate issuer: /CN=3EBE2E74F0EE59A6395F325E6928084B763824A1 Certificate serial: 3FED3776FC832F2FE263D295528EBA85C7DFC91F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 08:01:32 +0000 Manifest this update: Tue 22 Sep 2026 07:56:32 +0000 Manifest next update: Wed 23 Sep 2026 10:16:32 +0000 Files and hashes: 1: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: Vv6wC/28GD4ZoyK7hWQWrNGkv38OB4xq7yXYGqatH3E=) 2: 3EBE2E74F0EE59A6395F325E6928084B763824A1.crl (hash: gnzxTlkXIRjFduxCaFGNl/twT6foL02MluTETLEd6RQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.crl rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 10:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ed:37:76:fc:83:2f:2f:e2:63:d2:95:52:8e:ba:85:c7:df:c9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EBE2E74F0EE59A6395F325E6928084B763824A1 Validity Not Before: Sep 22 07:56:32 2026 GMT Not After : Sep 23 10:16:32 2026 GMT Subject: CN=030B603CE52E46BFE4E3A607F9B070FFD0BDB74B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:a7:6d:e6:fe:1f:5b:c9:cf:5d:c7:05:d4: 4b:01:17:ed:0d:56:ea:1c:bd:a1:6c:80:52:70:7d: d1:24:d0:61:c1:66:82:cd:74:a0:47:bb:77:5f:0d: 31:b2:74:10:ff:ba:1f:82:19:aa:f7:5d:24:ee:7a: 56:55:8c:07:0a:90:3e:72:bf:cc:21:8c:9b:91:9a: b9:29:b5:d5:e5:9e:ef:d3:f6:f8:39:f0:4d:1b:eb: b6:94:4b:01:f3:ee:03:b3:ac:23:a0:7f:28:af:85: 54:f1:8a:a7:9d:23:c7:3f:cf:66:c4:8b:be:d4:e1: 17:f5:90:ae:c9:ac:c7:62:fa:00:e4:82:63:ad:fb: d1:c6:ec:b6:6a:ba:3b:f3:92:db:a7:75:33:85:a9: fc:f4:f8:72:c2:5c:73:1e:95:66:05:69:41:a0:25: 27:55:70:7e:d7:fd:9a:65:7e:b4:78:9b:ab:a0:fc: b8:16:62:d2:7b:cf:07:82:91:24:21:21:6e:42:56: 9c:dc:5f:5f:14:a0:36:f4:78:4c:0c:d1:72:27:5a: 40:15:6e:5a:a2:6c:b6:a9:0d:a5:35:03:b9:5b:40: 8f:07:46:20:ee:d8:b7:ea:17:d6:45:55:2f:85:ca: b1:cf:42:d8:a1:97:77:7a:13:62:58:ab:54:78:7f: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0B:60:3C:E5:2E:46:BF:E4:E3:A6:07:F9:B0:70:FF:D0:BD:B7:4B X509v3 Authority Key Identifier: keyid:3E:BE:2E:74:F0:EE:59:A6:39:5F:32:5E:69:28:08:4B:76:38:24:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f2:36:9a:ca:db:f8:9b:b5:4d:82:1c:ee:13:59:a0:34:49: dd:3a:0b:b3:19:6d:91:92:69:f3:c7:f6:ad:70:ea:12:a3:76: 25:3b:5a:66:9e:b1:a0:88:3b:74:46:91:e4:ac:5b:ef:3e:73: cf:2b:2f:9d:6b:fb:06:9a:fb:40:79:60:b3:8f:d3:64:ce:02: 9a:a7:31:f3:b9:7f:15:b4:49:db:83:6b:bc:8e:6d:5e:c6:ad: ea:48:fc:6a:cc:ab:be:1e:c8:1d:56:e1:2a:df:70:c3:cf:80: dd:b0:e6:30:01:94:06:de:ac:fa:d4:18:17:f9:e8:66:c2:b2: 71:fd:b6:c8:57:dd:9d:fa:c5:fc:4f:3d:f9:2a:ed:b3:e9:e9: 37:56:fa:95:eb:21:d6:f2:9f:dd:ee:d9:0b:a3:43:55:3a:6d: a3:4e:b2:68:d2:8d:e1:24:bf:21:41:57:1a:a2:dd:af:7e:90: 64:6f:de:9f:a5:ef:26:37:68:88:9b:28:c5:36:c2:e0:25:ff: f7:d0:bb:1c:5c:b9:5b:26:65:49:ac:35:c9:50:66:ae:bb:40: 6c:26:6c:28:e9:54:26:59:86:cf:67:d2:ce:66:f5:15:59:a3: 94:fd:05:c3:2e:b5:70:66:a0:fb:e4:ba:c9:19:18:5f:42:0a: bd:33:74:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+03dvyDLy/iY9KVUo66hcffyR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VCRTJFNzRGMEVFNTlBNjM5NUYzMjVFNjkyODA4NEI3 NjM4MjRBMTAeFw0yNjA5MjIwNzU2MzJaFw0yNjA5MjMxMDE2MzJaMDMxMTAvBgNV BAMTKDAzMEI2MDNDRTUyRTQ2QkZFNEUzQTYwN0Y5QjA3MEZGRDBCREI3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0I6dt5v4fW8nPXccF1EsBF+0N VuocvaFsgFJwfdEk0GHBZoLNdKBHu3dfDTGydBD/uh+CGar3XSTuelZVjAcKkD5y v8whjJuRmrkptdXlnu/T9vg58E0b67aUSwHz7gOzrCOgfyivhVTxiqedI8c/z2bE i77U4Rf1kK7JrMdi+gDkgmOt+9HG7LZqujvzktundTOFqfz0+HLCXHMelWYFaUGg JSdVcH7X/ZplfrR4m6ug/LgWYtJ7zweCkSQhIW5CVpzcX18UoDb0eEwM0XInWkAV blqibLapDaU1A7lbQI8HRiDu2LfqF9ZFVS+FyrHPQtihl3d6E2JYq1R4f8mPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAwtgPOUuRr/k46YH+bBw/9C9t0swHwYDVR0j BBgwFoAUPr4udPDuWaY5XzJeaSgIS3Y4JKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MThiNDI0MjAtNTZkMC00NTFhLWEyOWQtNWY5ZDYyMzBlMjI3LzAvM0VCRTJFNzRG MEVFNTlBNjM5NUYzMjVFNjkyODA4NEI3NjM4MjRBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRUJFMkU3NEYwRUU1OUE2Mzk1RjMyNUU2OTI4MDg0Qjc2Mzgy NEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMThiNDI0MjAtNTZkMC00NTFhLWEy OWQtNWY5ZDYyMzBlMjI3LzAvM0VCRTJFNzRGMEVFNTlBNjM5NUYzMjVFNjkyODA4 NEI3NjM4MjRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXyNprK2/ibtU2CHO4TWaA0Sd06C7MZbZGS afPH9q1w6hKjdiU7WmaesaCIO3RGkeSsW+8+c88rL51r+waa+0B5YLOP02TOApqn MfO5fxW0SduDa7yObV7GrepI/GrMq74eyB1W4SrfcMPPgN2w5jABlAberPrUGBf5 6GbCsnH9tshX3Z36xfxPPfkq7bPp6TdW+pXrIdbyn93u2QujQ1U6baNOsmjSjeEk vyFBVxqi3a9+kGRv3p+l7yY3aIibKMU2wuAl//fQuxxcuVsmZUmsNclQZq67QGwm bCjpVCZZhs9n0s5m9RVZo5T9BcMutXBmoPvkuskZGF9CCr0zdCc= -----END CERTIFICATE-----Generated at Tue Sep 22 13:07:28 2026 by rpki-client