$ rpki-client -vvvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft File: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft (raw, json) Hash identifier: Fqf0pn+RhO222zRJwSPEB3rB3gQB7F82vHICreqyTIY= Subject key identifier: 95:B7:85:BF:A0:25:FE:50:EE:0A:61:99:A2:13:F0:79:49:63:AD:9A Authority key identifier: 3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E Certificate issuer: /CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Certificate serial: 0A704BAC55C8A665413CDD6B115C3F1B289E07EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft Manifest number: BF Signing time: Mon 21 Sep 2026 04:42:24 +0000 Manifest this update: Mon 21 Sep 2026 04:37:24 +0000 Manifest next update: Tue 22 Sep 2026 05:37:24 +0000 Files and hashes: 1: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl (hash: 13GozohSX2GOM9vNGIua+tV6KLa5PC7Khd2+xUnFtQE=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: RmMN8NhmM0RZ6Enalsn3xwEVvbhkE3C1i1JWeXv+gOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:70:4b:ac:55:c8:a6:65:41:3c:dd:6b:11:5c:3f:1b:28:9e:07:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Validity Not Before: Sep 21 04:37:24 2026 GMT Not After : Sep 22 05:37:24 2026 GMT Subject: CN=95B785BFA025FE50EE0A6199A213F0794963AD9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:3d:ac:06:8b:97:ae:15:37:db:75:c6:fc: 9b:96:00:57:02:7f:6f:a5:ad:38:52:94:75:0f:91: ed:f3:48:bf:69:30:6d:32:e9:ce:d7:40:7f:16:28: 5e:e1:54:fd:3c:31:81:de:a0:57:ba:9b:88:33:b2: 79:67:15:db:a4:ac:4a:1c:20:bf:1d:aa:f4:7d:a1: 78:66:3a:3c:8e:97:1e:06:8e:1e:08:3b:b3:e8:15: 76:25:44:9a:6a:11:e9:f4:ad:14:0c:af:82:5f:cb: 8d:60:5a:cb:9e:4b:09:a4:d1:62:b3:7b:48:e9:25: 57:60:9f:af:c2:ea:c8:6d:24:94:d3:e7:13:ae:39: d1:de:4c:b8:45:81:aa:99:38:0d:56:54:ea:8b:53: 3a:3f:7a:87:b3:fc:1a:22:49:66:97:3f:1d:68:b9: a6:ea:06:25:0e:1d:3c:4a:8d:89:32:29:e8:b2:66: dd:2c:f5:bb:40:81:a1:2e:35:8f:3e:10:d0:f0:75: cf:6a:34:5e:b8:db:f8:a5:30:98:62:c4:5f:e1:12: c3:fd:c1:95:26:03:56:be:9e:1c:08:ef:4a:81:7b: 74:99:11:48:2c:61:57:d7:f7:19:c3:d2:43:5d:e7: a0:bd:7d:d9:24:03:e7:44:5b:c9:ac:64:f7:40:f3: 12:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B7:85:BF:A0:25:FE:50:EE:0A:61:99:A2:13:F0:79:49:63:AD:9A X509v3 Authority Key Identifier: keyid:3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:3e:e1:db:13:c4:25:cd:03:7e:bf:0a:c5:c8:2c:23:83:05: 2a:5d:9c:6c:40:48:65:6e:cb:29:71:6a:ee:e5:e0:93:bb:67: 54:e8:e2:ca:4c:15:3b:b6:7a:cf:26:75:73:03:93:03:8e:87: de:fe:06:54:3d:ac:c4:4a:a2:98:f4:fe:c2:d8:b4:93:f0:97: a0:00:0d:71:e1:7a:e1:b6:6c:30:6d:4e:ca:f5:b0:dc:08:51: 9d:66:1f:08:19:58:0b:75:2e:4a:98:12:c5:38:10:c1:d1:c3: a3:5d:1c:2b:5e:6d:d0:4c:0f:0a:1b:58:a1:58:34:32:43:57: 78:87:a8:0a:3f:0f:68:3a:9d:73:33:6e:15:ad:0c:9d:e6:a4: 0b:ee:d7:8b:57:4d:34:f4:51:0d:06:6e:1a:a1:ea:1f:80:e4: d1:9d:e5:98:aa:af:f8:22:65:e0:b1:8d:eb:80:d9:da:b8:c9: f4:64:f4:63:88:ff:c2:1d:0d:60:a0:4f:20:df:78:68:f3:9b: ee:34:30:c4:6a:ae:85:b1:20:cf:b9:af:e9:66:68:01:85:7b: f3:06:96:11:b4:de:ec:03:00:4b:b6:01:ae:2c:e6:bb:0f:70: b2:31:c6:50:fe:f0:3a:6c:42:28:a8:a6:89:d2:77:8d:db:63: 78:2f:9b:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnBLrFXIpmVBPN1rEVw/GyieB+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYx QzdGNjUxRTAeFw0yNjA5MjEwNDM3MjRaFw0yNjA5MjIwNTM3MjRaMDMxMTAvBgNV BAMTKDk1Qjc4NUJGQTAyNUZFNTBFRTBBNjE5OUEyMTNGMDc5NDk2M0FEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89z2sBouXrhU323XG/JuWAFcC f2+lrThSlHUPke3zSL9pMG0y6c7XQH8WKF7hVP08MYHeoFe6m4gzsnlnFdukrEoc IL8dqvR9oXhmOjyOlx4Gjh4IO7PoFXYlRJpqEen0rRQMr4Jfy41gWsueSwmk0WKz e0jpJVdgn6/C6shtJJTT5xOuOdHeTLhFgaqZOA1WVOqLUzo/eoez/BoiSWaXPx1o uabqBiUOHTxKjYkyKeiyZt0s9btAgaEuNY8+ENDwdc9qNF642/ilMJhixF/hEsP9 wZUmA1a+nhwI70qBe3SZEUgsYVfX9xnD0kNd56C9fdkkA+dEW8msZPdA8xJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlbeFv6Al/lDuCmGZohPweUljrZowHwYDVR0j BBgwFoAUPxotHUtFNjAqUFl3t49fnxx/ZR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0 QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYxQzdGNjUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRjFBMkQxRDRCNDUzNjMwMkE1MDU5NzdCNzhGNUY5RjFDN0Y2 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVG OUYxQzdGNjUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0+4dsTxCXNA36/CsXILCODBSpdnGxASGVu yylxau7l4JO7Z1To4spMFTu2es8mdXMDkwOOh97+BlQ9rMRKopj0/sLYtJPwl6AA DXHheuG2bDBtTsr1sNwIUZ1mHwgZWAt1LkqYEsU4EMHRw6NdHCtebdBMDwobWKFY NDJDV3iHqAo/D2g6nXMzbhWtDJ3mpAvu14tXTTT0UQ0Gbhqh6h+A5NGd5Ziqr/gi ZeCxjeuA2dq4yfRk9GOI/8IdDWCgTyDfeGjzm+40MMRqroWxIM+5r+lmaAGFe/MG lhG03uwDAEu2Aa4s5rsPcLIxxlD+8DpsQiioponSd43bY3gvm1E= -----END CERTIFICATE-----Generated at Mon Sep 21 16:37:28 2026 by rpki-client