$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft File: B3CEDD0459F32B7E856E38152E88C017667C44C5.mft (raw, json) Hash identifier: +UMZyeZVkpdMw747gyNZfAfS7cOlSmSPz6viJ5JeBB8= Subject key identifier: E0:89:F8:8D:85:44:AD:B3:86:D9:C7:1F:D8:07:FE:B2:5A:8A:38:F4 Authority key identifier: B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 Certificate issuer: /CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Certificate serial: 735B0418FE52891125748F03B804BE5BBE3E7D33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft Manifest number: 0105 Signing time: Sun 15 Nov 2026 06:22:02 +0000 Manifest this update: Sun 15 Nov 2026 06:17:02 +0000 Manifest next update: Mon 16 Nov 2026 09:35:02 +0000 Files and hashes: 1: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: QGY4lzWj4Cp3rLIA8ZEjymdBTTpuyiO2y6++xao+5yg=) 2: B3CEDD0459F32B7E856E38152E88C017667C44C5.crl (hash: bYwBYDRIE5AxzoGroXTR4GnCAZLDZ7UhF6VbwoIqunI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5b:04:18:fe:52:89:11:25:74:8f:03:b8:04:be:5b:be:3e:7d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Validity Not Before: Nov 15 06:17:02 2026 GMT Not After : Nov 16 09:35:02 2026 GMT Subject: CN=E089F88D8544ADB386D9C71FD807FEB25A8A38F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:c1:4d:b8:4a:73:87:07:21:0e:8d:26:ac: e1:71:f5:b9:06:19:01:33:ba:22:87:90:db:f4:7c: 32:05:7f:cf:bc:8f:b7:3b:d4:54:7c:57:e1:87:c2: 53:bd:78:04:5b:75:ab:05:75:f5:fc:5b:58:e7:17: 08:2b:97:2b:4e:a6:b7:d6:7a:35:4c:38:ae:81:55: 03:f0:de:b0:f5:8e:62:bb:e8:8a:b2:80:56:2b:e0: f1:3a:74:ae:1e:0b:6b:22:22:06:12:cc:7d:84:c3: b1:ac:9c:36:67:2a:12:0b:25:a8:94:5e:69:47:b6: 49:63:fd:67:f1:8d:b8:48:fd:eb:be:6e:3d:6f:96: 82:8e:c1:e3:29:cc:62:c6:8c:c7:65:39:f6:23:d8: 1c:9e:36:1e:db:bc:a6:d0:e7:a9:c8:1a:55:4a:93: b3:96:60:c6:5b:c3:b9:79:db:29:7d:7a:f5:bc:f0: 03:44:d0:c2:b4:0c:da:a3:ac:fd:de:17:bd:0a:2d: 94:9c:31:44:b1:bc:c5:13:8a:bc:1e:40:2f:69:7c: ed:8c:6b:5c:df:d3:e2:8d:cb:cd:5e:71:fc:7e:63: c9:3f:cc:bd:31:67:83:a6:2d:b5:34:32:a7:32:ae: e5:1a:67:5b:db:10:69:70:fe:81:e0:1c:5e:21:46: eb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:89:F8:8D:85:44:AD:B3:86:D9:C7:1F:D8:07:FE:B2:5A:8A:38:F4 X509v3 Authority Key Identifier: keyid:B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:bb:0a:5e:8a:eb:e9:c0:20:a2:64:f8:3c:71:f7:cc:7f:86: 6a:35:60:2e:11:86:ff:4f:22:59:bd:6e:c7:1b:df:ac:4a:a6: 0f:fc:3c:1f:b7:11:b8:07:54:a5:64:a4:7c:b3:48:81:84:44: 0a:56:82:40:0e:01:76:6f:1d:6b:3a:70:68:97:c0:a2:61:b9: e0:e5:70:98:e3:ad:36:51:d8:73:26:f6:67:5a:84:53:1c:b9: 18:99:fe:3b:60:9c:d9:25:4e:8b:a2:9e:f4:84:53:8e:00:66: c7:da:05:a1:cf:ab:49:91:b1:0f:a3:a3:11:14:4e:d7:be:85: 4b:8e:7f:47:7b:f9:1c:96:94:0f:ee:5a:31:15:c5:27:03:ee: 70:19:8c:52:d0:de:e7:25:e9:85:b1:37:00:06:c4:40:e3:aa: db:ce:9e:e0:ba:da:7d:a9:5b:1d:92:4c:f8:18:c7:56:bc:70: 87:a3:06:f5:4e:88:5f:d5:aa:d0:6a:c9:05:fc:cf:d1:a2:ef: 66:9b:7a:5d:bb:10:ee:69:71:a4:14:8c:97:9c:ee:65:d1:b4: 54:51:04:96:55:6a:79:9e:d9:68:01:b8:61:15:17:f6:e7:75: 1b:06:a6:b5:1d:77:7c:e8:b2:67:04:49:ab:98:94:20:e5:f5: 5c:51:dc:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1sEGP5SiREldI8DuAS+W74+fTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2 NjdDNDRDNTAeFw0yNjExMTUwNjE3MDJaFw0yNjExMTYwOTM1MDJaMDMxMTAvBgNV BAMTKEUwODlGODhEODU0NEFEQjM4NkQ5QzcxRkQ4MDdGRUIyNUE4QTM4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUOcFNuEpzhwchDo0mrOFx9bkG GQEzuiKHkNv0fDIFf8+8j7c71FR8V+GHwlO9eARbdasFdfX8W1jnFwgrlytOprfW ejVMOK6BVQPw3rD1jmK76IqygFYr4PE6dK4eC2siIgYSzH2Ew7GsnDZnKhILJaiU XmlHtklj/WfxjbhI/eu+bj1vloKOweMpzGLGjMdlOfYj2ByeNh7bvKbQ56nIGlVK k7OWYMZbw7l52yl9evW88ANE0MK0DNqjrP3eF70KLZScMUSxvMUTirweQC9pfO2M a1zf0+KNy81ecfx+Y8k/zL0xZ4OmLbU0MqcyruUaZ1vbEGlw/oHgHF4hRuslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4In4jYVErbOG2ccf2Af+slqKOPQwHwYDVR0j BBgwFoAUs87dBFnzK36FbjgVLojAF2Z8RMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiMWE3OTAtZGNlZC00NjRhLTg5NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1 OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2NjdDNDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0NFREQwNDU5RjMyQjdFODU2RTM4MTUyRTg4QzAxNzY2N0M0 NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMw MTc2NjdDNDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKi7Cl6K6+nAIKJk+Dxx98x/hmo1YC4Rhv9P Ilm9bscb36xKpg/8PB+3EbgHVKVkpHyzSIGERApWgkAOAXZvHWs6cGiXwKJhueDl cJjjrTZR2HMm9mdahFMcuRiZ/jtgnNklTouinvSEU44AZsfaBaHPq0mRsQ+joxEU Tte+hUuOf0d7+RyWlA/uWjEVxScD7nAZjFLQ3ucl6YWxNwAGxEDjqtvOnuC62n2p Wx2STPgYx1a8cIejBvVOiF/VqtBqyQX8z9Gi72abel27EO5pcaQUjJec7mXRtFRR BJZVanme2WgBuGEVF/bndRsGprUdd3zosmcESauYlCDl9VxR3Cc= -----END CERTIFICATE-----Generated at Sun Nov 15 20:32:25 2026 by rpki-client