$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft File: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft (raw, json) Hash identifier: Lxl83siy40uxNysq9f4Bg2id0o+iYfpQb9uRu09KxGY= Subject key identifier: B1:F3:CA:93:A6:B8:F5:E4:DB:D8:7D:DE:D5:79:36:B7:7B:1C:6E:CE Authority key identifier: 3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B Certificate issuer: /CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Certificate serial: 61D94619F76CF13AC62AE39BF4C083547268F055 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft Manifest number: BC Signing time: Sun 20 Sep 2026 18:24:35 +0000 Manifest this update: Sun 20 Sep 2026 18:19:35 +0000 Manifest next update: Mon 21 Sep 2026 19:02:35 +0000 Files and hashes: 1: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: lJ60QC6hkGeg/VLRUN+YScgOEnnAlSVZ9ySMXaFKus8=) 2: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl (hash: 5ED7MArYnw2RNh7574JxTerruM+wlYj8OPVuzxp2ZYs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d9:46:19:f7:6c:f1:3a:c6:2a:e3:9b:f4:c0:83:54:72:68:f0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Validity Not Before: Sep 20 18:19:35 2026 GMT Not After : Sep 21 19:02:35 2026 GMT Subject: CN=B1F3CA93A6B8F5E4DBD87DDED57936B77B1C6ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6e:a9:54:2e:8c:50:26:03:d6:a0:7d:b8:9f: fb:91:67:87:e8:db:83:85:d4:3f:a1:7e:a6:81:98: 83:c8:37:da:17:c7:76:09:37:cb:a1:25:a8:46:59: 46:bb:7d:ae:c0:11:6d:ef:8a:c3:e2:a4:bc:32:e9: b5:4c:fe:45:4f:30:ee:3d:9d:88:9b:02:d8:42:95: 6c:9b:98:5e:bd:0f:6e:d5:4c:6f:9b:44:64:44:55: d2:ce:29:bf:35:6e:fc:46:28:fb:0d:fc:d4:7f:3c: 2c:59:b0:a7:1e:f2:59:78:ee:a5:5c:21:f9:d8:7c: 20:43:63:56:82:8f:33:51:b1:b4:fa:8f:b8:b2:39: f0:2d:19:4f:b1:c3:75:52:f9:eb:57:20:d0:9e:61: 81:82:74:f9:d7:f3:26:18:4c:d1:7e:2f:6d:ef:bd: 55:a1:b2:f0:f1:e2:e6:31:3b:0a:08:38:02:30:ab: cd:3c:72:2d:9c:b6:38:6e:af:b7:d3:33:f0:04:e5: b6:92:f9:75:95:b7:ad:d7:ff:dd:a6:a9:c9:4c:55: 5f:45:6d:20:30:c7:73:d9:8f:9d:8e:4f:3e:64:18: b2:ed:63:81:d1:7a:26:fe:7c:ea:a5:5d:3b:17:ce: 1e:6d:20:fd:08:c7:64:ea:d2:c9:5f:bd:79:44:eb: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F3:CA:93:A6:B8:F5:E4:DB:D8:7D:DE:D5:79:36:B7:7B:1C:6E:CE X509v3 Authority Key Identifier: keyid:3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:47:27:79:bc:47:52:f0:22:55:ab:a5:e9:80:fa:e3:2d:9a: 35:6f:b0:de:83:e4:4b:61:61:54:a5:8d:42:dc:9b:b5:fb:bc: 4c:ef:02:32:8f:6d:89:4d:03:96:2a:09:df:f7:ed:58:00:f6: 21:71:33:67:a6:e8:7e:9a:68:c3:4c:e8:82:5c:35:11:40:38: 80:c1:b8:b8:68:c3:0b:35:fd:98:08:bb:bf:7c:da:ac:15:af: c7:b1:25:4a:6a:fa:89:47:f4:8a:13:76:85:8b:8b:00:c6:62: 59:3c:d2:b6:aa:55:30:5d:87:34:c4:ae:31:10:c4:40:64:92: fb:d0:3d:7b:4a:80:72:1f:67:49:b8:76:bf:8d:3d:f1:f7:9b: 77:17:b6:53:4d:79:08:ce:50:f1:2f:10:a0:77:b1:2b:f8:ea: 85:fd:ba:bb:77:8d:bd:4c:b6:a3:51:da:e1:15:a0:0e:50:21: 9b:3b:2d:d4:dc:5c:6f:12:46:c4:a7:72:a6:6a:84:06:75:14: c0:3b:95:05:0c:31:71:36:fd:d3:7c:89:0d:56:52:c2:49:a9: 31:77:2f:26:dd:00:63:08:d7:fe:90:a0:be:3a:e8:ca:3c:aa: da:71:6d:d7:f8:e6:34:d2:de:98:e9:6b:ac:92:d8:33:9c:1d: 41:ad:89:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdlGGfds8TrGKuOb9MCDVHJo8FUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgx N0Y3REIwQjAeFw0yNjA5MjAxODE5MzVaFw0yNjA5MjExOTAyMzVaMDMxMTAvBgNV BAMTKEIxRjNDQTkzQTZCOEY1RTREQkQ4N0RERUQ1NzkzNkI3N0IxQzZFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWbqlULoxQJgPWoH24n/uRZ4fo 24OF1D+hfqaBmIPIN9oXx3YJN8uhJahGWUa7fa7AEW3visPipLwy6bVM/kVPMO49 nYibAthClWybmF69D27VTG+bRGREVdLOKb81bvxGKPsN/NR/PCxZsKce8ll47qVc IfnYfCBDY1aCjzNRsbT6j7iyOfAtGU+xw3VS+etXINCeYYGCdPnX8yYYTNF+L23v vVWhsvDx4uYxOwoIOAIwq808ci2ctjhur7fTM/AE5baS+XWVt63X/92mqclMVV9F bSAwx3PZj52OTz5kGLLtY4HReib+fOqlXTsXzh5tIP0Ix2Tq0slfvXlE62RTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsfPKk6a49eTb2H3e1Xk2t3scbs4wHwYDVR0j BBgwFoAUO2hsvHlDyw7pcUGNsvQcOBf32wswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3 OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgxN0Y3REIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjY4NkNCQzc5NDNDQjBFRTk3MTQxOERCMkY0MUMzODE3RjdE QjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFD MzgxN0Y3REIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlHJ3m8R1LwIlWrpemA+uMtmjVvsN6D5Eth YVSljULcm7X7vEzvAjKPbYlNA5YqCd/37VgA9iFxM2em6H6aaMNM6IJcNRFAOIDB uLhowws1/ZgIu7982qwVr8exJUpq+olH9IoTdoWLiwDGYlk80raqVTBdhzTErjEQ xEBkkvvQPXtKgHIfZ0m4dr+NPfH3m3cXtlNNeQjOUPEvEKB3sSv46oX9urt3jb1M tqNR2uEVoA5QIZs7LdTcXG8SRsSncqZqhAZ1FMA7lQUMMXE2/dN8iQ1WUsJJqTF3 LybdAGMI1/6QoL466Mo8qtpxbdf45jTS3pjpa6yS2DOcHUGtiXI= -----END CERTIFICATE-----Generated at Mon Sep 21 12:02:29 2026 by rpki-client