$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft File: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft (raw, json) Hash identifier: JxX08FC3TzKkfuuHQE5GcJ91b1rI6zJJhokpTGlnlI0= Subject key identifier: B1:21:0B:DD:3E:D7:38:2B:8C:D4:D4:5E:02:15:7C:B7:6E:26:77:80 Authority key identifier: 3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B Certificate issuer: /CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Certificate serial: 63B60CDEFB438AA694F36B9CE6868422955C1B59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft Manifest number: FF Signing time: Mon 09 Nov 2026 11:04:29 +0000 Manifest this update: Mon 09 Nov 2026 10:59:29 +0000 Manifest next update: Tue 10 Nov 2026 13:32:29 +0000 Files and hashes: 1: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl (hash: sYqmUZZ/1tAQFQyMB1Env44zRrteWGCEgt/AN/Pwvj4=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: lJ60QC6hkGeg/VLRUN+YScgOEnnAlSVZ9ySMXaFKus8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b6:0c:de:fb:43:8a:a6:94:f3:6b:9c:e6:86:84:22:95:5c:1b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Validity Not Before: Nov 9 10:59:29 2026 GMT Not After : Nov 10 13:32:29 2026 GMT Subject: CN=B1210BDD3ED7382B8CD4D45E02157CB76E267780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:ec:55:c0:b6:d4:88:fb:c4:48:64:fb:19: 4b:9f:ec:3b:12:bb:2e:55:c5:0c:eb:f5:e3:06:80: aa:83:d9:c5:d3:23:d7:b7:ee:40:41:52:21:f3:08: 40:b1:d9:1f:05:96:ff:20:cc:11:09:b2:dd:69:c6: 39:40:20:ad:88:19:19:c7:bd:83:86:4d:0e:bc:71: ea:cc:86:9e:75:20:b1:32:8f:e4:b2:27:f5:42:bb: fb:23:aa:34:40:93:55:45:52:07:ac:26:c1:47:75: fb:4d:dc:96:2f:5c:87:95:6d:c6:d4:df:3f:a0:c3: ec:4a:be:70:08:84:2a:8d:cb:88:85:ec:e1:da:34: 80:59:fc:09:99:c2:43:2d:99:bc:47:b6:2f:df:98: 23:e2:a1:86:88:db:db:01:f9:2d:f6:6f:2c:f1:ee: dd:09:fa:29:1d:2e:ef:4e:4b:78:03:82:0a:38:c3: 83:ec:ce:8e:74:b2:bc:72:7f:5f:ab:79:7f:23:1c: 47:7b:ff:90:cd:39:f9:a0:7e:e8:c1:a0:ca:ff:59: fd:b4:85:f6:17:08:58:db:fd:e9:48:12:bd:d0:ae: 96:05:c9:2a:c0:95:f8:5c:96:3b:31:d6:ab:9d:29: e2:e8:1d:20:8b:8e:03:65:50:49:db:83:85:e7:7c: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:21:0B:DD:3E:D7:38:2B:8C:D4:D4:5E:02:15:7C:B7:6E:26:77:80 X509v3 Authority Key Identifier: keyid:3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a5:26:d6:19:ca:0e:fc:ee:d9:f1:1c:75:f5:ab:12:b8:37: 74:fa:5e:50:a1:0e:4e:12:23:f9:ae:f7:a8:07:15:5d:bc:25: 21:b2:d1:4c:87:c1:94:ad:dc:72:3b:c8:42:b9:a0:7c:da:aa: 98:ab:fc:a6:06:c1:e0:d4:f1:9c:53:e8:03:94:68:e4:37:56: 51:f8:c9:d6:4b:3d:89:8d:de:f9:f6:91:56:60:e1:76:7d:6c: 6d:5e:c7:df:73:ec:75:f8:17:c2:10:04:f5:4e:3f:b4:1c:70: 97:c2:3c:98:1f:34:36:6b:f1:ae:8a:d9:02:8a:ff:92:bc:1c: a1:0f:0e:2b:82:1c:f1:0d:b8:9b:b9:24:85:4d:38:90:a2:1f: de:a3:55:12:85:62:38:4d:1c:fa:d6:70:fa:d2:d6:09:c1:30: 01:4d:1a:8c:39:57:bd:e0:f5:69:6d:d6:67:a3:c7:c3:e5:46: cf:dc:c8:82:36:f9:bb:ea:56:b5:12:0d:53:a7:be:f8:88:e1: c0:9a:14:f7:07:5a:83:a7:df:2c:ba:44:13:41:fe:63:e5:3a: 10:24:ec:cb:b8:b6:fa:5e:e0:f5:d9:36:41:37:44:e9:91:b0: fb:ae:40:8d:c8:e5:c6:22:44:ed:ac:f8:fc:62:32:39:00:c8: 86:0a:53:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7YM3vtDiqaU82uc5oaEIpVcG1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgx N0Y3REIwQjAeFw0yNjExMDkxMDU5MjlaFw0yNjExMTAxMzMyMjlaMDMxMTAvBgNV BAMTKEIxMjEwQkREM0VENzM4MkI4Q0Q0RDQ1RTAyMTU3Q0I3NkUyNjc3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwD+xVwLbUiPvESGT7GUuf7DsS uy5VxQzr9eMGgKqD2cXTI9e37kBBUiHzCECx2R8Flv8gzBEJst1pxjlAIK2IGRnH vYOGTQ68cerMhp51ILEyj+SyJ/VCu/sjqjRAk1VFUgesJsFHdftN3JYvXIeVbcbU 3z+gw+xKvnAIhCqNy4iF7OHaNIBZ/AmZwkMtmbxHti/fmCPioYaI29sB+S32byzx 7t0J+ikdLu9OS3gDggo4w4Pszo50srxyf1+reX8jHEd7/5DNOfmgfujBoMr/Wf20 hfYXCFjb/elIEr3QrpYFySrAlfhcljsx1qudKeLoHSCLjgNlUEnbg4XnfIqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsSEL3T7XOCuM1NReAhV8t24md4AwHwYDVR0j BBgwFoAUO2hsvHlDyw7pcUGNsvQcOBf32wswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3 OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgxN0Y3REIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjY4NkNCQzc5NDNDQjBFRTk3MTQxOERCMkY0MUMzODE3RjdE QjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFD MzgxN0Y3REIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6lJtYZyg787tnxHHX1qxK4N3T6XlChDk4S I/mu96gHFV28JSGy0UyHwZSt3HI7yEK5oHzaqpir/KYGweDU8ZxT6AOUaOQ3VlH4 ydZLPYmN3vn2kVZg4XZ9bG1ex99z7HX4F8IQBPVOP7QccJfCPJgfNDZr8a6K2QKK /5K8HKEPDiuCHPENuJu5JIVNOJCiH96jVRKFYjhNHPrWcPrS1gnBMAFNGow5V73g 9Wlt1mejx8PlRs/cyII2+bvqVrUSDVOnvviI4cCaFPcHWoOn3yy6RBNB/mPlOhAk 7Mu4tvpe4PXZNkE3ROmRsPuuQI3I5cYiRO2s+PxiMjkAyIYKUxs= -----END CERTIFICATE-----Generated at Mon Nov 9 17:21:08 2026 by rpki-client