$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft File: 3B49013F73B5A7AF137F414DE362E405F31D32DC.mft (raw, json) Hash identifier: ZWWHss5rvNC9yyHjUsVB0P2EFLOncESljNhxCE24sOU= Subject key identifier: 09:82:B2:E6:2F:19:9E:4A:69:CA:81:E4:41:2E:56:B9:9D:74:52:D5 Authority key identifier: 3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC Certificate issuer: /CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Certificate serial: 3F4E8C0809EFF15A38E9265C7A4B3A7094C64231 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 18:08:59 +0000 Manifest this update: Mon 21 Sep 2026 18:03:59 +0000 Manifest next update: Tue 22 Sep 2026 19:57:59 +0000 Files and hashes: 1: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: ahm/HoRAolOxtaIWGqQ0MLjBkp/CWv9tH60t0eSWQkU=) 2: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: KAa2YP9GlXrFj15zwBpksmX3bAfUKyYMHaAYDuzpQWY=) 3: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: 8mVUx2m6cehmTjXBEOh2fhiknIQmwcR5DCPv3UxdfA4=) 4: 3B49013F73B5A7AF137F414DE362E405F31D32DC.crl (hash: DTrDZsbVk6WrvwrO2aP2h8SW9v/Uya8670S+q5XTOYU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4e:8c:08:09:ef:f1:5a:38:e9:26:5c:7a:4b:3a:70:94:c6:42:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Validity Not Before: Sep 21 18:03:59 2026 GMT Not After : Sep 22 19:57:59 2026 GMT Subject: CN=0982B2E62F199E4A69CA81E4412E56B99D7452D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c8:b8:69:a4:a9:8b:1c:56:08:51:aa:59:01: 82:13:4c:dd:9f:f2:77:6f:c5:d4:2a:e8:11:83:87: 52:8b:1b:1e:3f:df:53:9b:9b:43:29:23:8b:48:7f: c1:3e:6e:1e:34:a8:1d:3a:09:4c:53:0f:72:6f:aa: 16:23:64:66:2c:ae:8c:08:6b:31:c5:cd:2e:b7:35: 45:8f:23:b0:aa:2d:c8:a7:65:77:72:03:63:7e:57: 6c:a2:bc:02:9d:13:e2:dd:e0:77:27:47:bc:8a:d0: c5:07:66:02:e0:fc:b5:db:63:e6:9a:ba:dc:62:43: 63:d6:e4:a6:08:30:7b:5f:ef:ea:a9:10:c1:ec:04: 31:8a:d9:07:e9:52:58:64:bb:7a:9a:3b:51:5c:84: 17:5e:fb:3c:01:b4:8b:91:fc:15:bc:18:74:fe:8a: c3:a5:04:69:16:cd:9e:28:c3:45:ef:7e:8b:a0:e6: cc:33:d6:49:df:0d:f3:f9:a5:e5:5b:fb:70:ee:2b: 54:7e:17:e2:1f:d4:b6:cc:a0:b6:23:7c:cc:40:29: f9:9c:db:09:2f:fd:2a:a0:b8:4c:90:a8:2d:14:aa: cf:92:5a:f3:35:25:56:db:d1:4f:8d:55:ec:f4:cf: 41:05:91:b7:61:03:d6:9a:28:df:eb:f2:28:52:76: 0e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:82:B2:E6:2F:19:9E:4A:69:CA:81:E4:41:2E:56:B9:9D:74:52:D5 X509v3 Authority Key Identifier: keyid:3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:fa:3b:0d:21:49:1b:96:1e:1d:e0:d5:22:4b:96:e5:f0:a6: 69:69:14:cc:7e:9d:86:82:00:7b:d0:af:c8:ce:b3:99:d0:d5: e7:73:87:f4:5d:8c:9a:97:d9:6a:a7:94:19:52:5d:d3:05:42: 8d:90:ce:d5:8e:46:d9:53:34:75:c4:08:da:8a:32:a7:eb:05: d8:5f:d5:ed:66:ab:44:fe:3c:60:71:4f:ba:0d:d5:ae:31:e2: 8e:02:88:5e:ba:02:77:bd:b1:be:26:5b:d0:a9:6e:dd:e5:2e: 06:62:27:96:e0:ca:32:30:81:b2:cb:50:91:6d:47:6b:fe:3a: df:28:74:0f:0e:da:a8:73:00:18:7a:1d:1a:43:1c:2a:a5:e7: 0d:21:e0:0f:ad:c4:f1:95:f4:95:57:6f:9c:3d:a7:1f:d7:39: 27:8e:0c:2f:83:f1:e2:07:e0:07:20:38:9f:22:b6:43:8d:2c: 44:06:11:93:fa:9e:ef:d8:6d:5a:b5:e7:a6:b6:92:2e:8b:a7: a9:d1:de:75:81:a0:70:ec:ad:44:60:8b:de:40:2d:f2:ea:af: 6d:7b:02:4f:89:5c:d5:d9:a5:32:13:1d:96:d6:03:14:5f:5b: 48:42:6c:bc:41:ef:4c:ff:89:d9:25:d5:5d:af:2e:fe:c2:19: 45:ca:ed:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP06MCAnv8Vo46SZceks6cJTGQjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVG MzFEMzJEQzAeFw0yNjA5MjExODAzNTlaFw0yNjA5MjIxOTU3NTlaMDMxMTAvBgNV BAMTKDA5ODJCMkU2MkYxOTlFNEE2OUNBODFFNDQxMkU1NkI5OUQ3NDUyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpyLhppKmLHFYIUapZAYITTN2f 8ndvxdQq6BGDh1KLGx4/31Obm0MpI4tIf8E+bh40qB06CUxTD3JvqhYjZGYsrowI azHFzS63NUWPI7CqLcinZXdyA2N+V2yivAKdE+Ld4HcnR7yK0MUHZgLg/LXbY+aa utxiQ2PW5KYIMHtf7+qpEMHsBDGK2QfpUlhku3qaO1FchBde+zwBtIuR/BW8GHT+ isOlBGkWzZ4ow0Xvfoug5swz1knfDfP5peVb+3DuK1R+F+If1LbMoLYjfMxAKfmc 2wkv/SqguEyQqC0Uqs+SWvM1JVbb0U+NVez0z0EFkbdhA9aaKN/r8ihSdg5HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCYKy5i8ZnkppyoHkQS5WuZ10UtUwHwYDVR0j BBgwFoAUO0kBP3O1p68Tf0FN42LkBfMdMtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJmM2Y1ZDktY2ZiOC00MTIzLWEyYjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3 M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVGMzFEMzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjQ5MDEzRjczQjVBN0FGMTM3RjQxNERFMzYyRTQwNUYzMUQz MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0 MDVGMzFEMzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACD6Ow0hSRuWHh3g1SJLluXwpmlpFMx+nYaC AHvQr8jOs5nQ1edzh/RdjJqX2WqnlBlSXdMFQo2QztWORtlTNHXECNqKMqfrBdhf 1e1mq0T+PGBxT7oN1a4x4o4CiF66Ane9sb4mW9Cpbt3lLgZiJ5bgyjIwgbLLUJFt R2v+Ot8odA8O2qhzABh6HRpDHCql5w0h4A+txPGV9JVXb5w9px/XOSeODC+D8eIH 4AcgOJ8itkONLEQGEZP6nu/YbVq156a2ki6Lp6nR3nWBoHDsrURgi95ALfLqr217 Ak+JXNXZpTITHZbWAxRfW0hCbLxB70z/idkl1V2vLv7CGUXK7Z4= -----END CERTIFICATE-----Generated at Tue Sep 22 01:12:31 2026 by rpki-client