$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft File: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft (raw, json) Hash identifier: yl4yBE0pJzRQ1qKmvJSQiDb1W5ZH6vr+sjeMmuW0g7s= Subject key identifier: C8:1A:A2:F3:26:DA:23:C3:55:21:2F:0D:60:58:61:EA:A3:60:BC:90 Authority key identifier: B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D Certificate issuer: /CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D Certificate serial: 778812C2D7F29FA21D4156DFEAC580A2426C9BEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft Manifest number: CE Signing time: Sun 04 Oct 2026 00:05:08 +0000 Manifest this update: Sun 04 Oct 2026 00:00:08 +0000 Manifest next update: Mon 05 Oct 2026 02:07:08 +0000 Files and hashes: 1: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: 7hDfzZUDYcz0q+XX/NuJ1o0svHceTvT04wKk+Ux25W4=) 2: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: XYuoDJC5s96e5yusTqZBcVmhuNZ72wM2dZW3ZEAAa7k=) 3: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: 4li3z+1Nz7s7JXRdhlc3Toes26Qk6yqpS9NDKdxbXYI=) 4: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: YWDM5o3/WMhrqrpYBvqU/uZX5ctd+ZM/94NEqhufB2Q=) 5: B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl (hash: MPhaBovJEmnv7+u8PL0Yo26PcdUWQEYMSXj+hizRSGM=) 6: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: AyqdvAdVLSSaoB+ENJ4KljHubj5AC8SdrarQGU9jQBo=) 7: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: PJcKYesMwsoF3t1uQUrpRAB8K4UX64Wx2m7xs9OF5uY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 02:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:88:12:c2:d7:f2:9f:a2:1d:41:56:df:ea:c5:80:a2:42:6c:9b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3E8FD3D173BD189F8080C4C1DE9D190011E463D Validity Not Before: Oct 4 00:00:08 2026 GMT Not After : Oct 5 02:07:08 2026 GMT Subject: CN=C81AA2F326DA23C355212F0D605861EAA360BC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:a4:1c:f5:e2:79:b3:b8:df:d9:8f:6f:03: 62:ee:8f:a2:a1:2f:6b:a4:c3:41:5a:9d:41:c9:cd: f5:dc:03:bc:49:6b:ea:da:f1:50:8e:30:7f:66:12: b0:19:ef:23:02:01:87:24:a2:bc:9f:98:f8:46:d7: 9c:0c:97:16:bf:ad:6b:4b:41:e3:a6:05:5f:5a:85: 19:da:76:bc:d0:a6:4c:e2:23:e8:ed:15:87:17:a6: cc:1b:0d:ae:99:14:82:4c:99:9b:0d:7a:40:88:cc: a1:a7:6b:79:88:34:92:12:07:af:d4:26:9b:c7:29: 9e:e2:fe:f5:0c:51:fd:9a:19:e7:4a:43:c2:32:90: c9:95:9b:e9:6c:f3:28:0f:49:33:38:d7:86:72:ae: cc:c5:e4:f9:b8:9e:ae:b8:a0:8f:09:28:db:4e:ac: 86:50:6a:63:a2:77:2d:cb:66:d9:f9:0f:5e:04:ff: 44:e1:94:a1:cc:47:4b:98:37:fa:71:19:73:b0:6e: 3b:fa:bb:4f:a2:14:cd:1c:43:0c:4b:c8:f7:88:a6: 7e:65:f1:9c:50:09:c8:92:76:81:a7:d7:22:b4:94: 7f:80:4d:bc:87:e8:c4:73:19:28:11:07:18:e2:6f: a7:5d:76:46:62:9b:cc:a8:a0:91:98:0e:73:88:e1: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1A:A2:F3:26:DA:23:C3:55:21:2F:0D:60:58:61:EA:A3:60:BC:90 X509v3 Authority Key Identifier: keyid:B3:E8:FD:3D:17:3B:D1:89:F8:08:0C:4C:1D:E9:D1:90:01:1E:46:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/B3E8FD3D173BD189F8080C4C1DE9D190011E463D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:85:4e:89:91:43:29:40:6b:bc:1a:32:a0:6a:77:da:83:3b: 53:db:0f:08:51:44:10:1d:56:d8:83:48:0c:81:a3:7d:cb:3e: e0:e1:2c:cd:8f:0c:cd:08:0f:2d:bd:3e:e8:00:39:92:35:44: ff:fc:a0:ca:97:cd:78:cc:df:2f:dc:a2:81:e6:10:e0:9b:72: a2:d2:51:c8:a3:5f:3d:92:d6:d2:2f:d4:2a:86:ce:18:83:49: ec:87:88:4f:5a:1f:91:e6:e3:88:9a:8d:3b:35:9d:90:ec:b5: 31:17:85:b3:ad:66:e4:ca:f0:7a:5a:a1:da:ee:b8:f8:14:90: 10:e0:da:49:18:b5:b3:e5:9b:d5:ce:d8:08:62:c4:b4:23:87: f4:e1:89:12:cd:6c:cb:71:df:5d:3d:38:97:4e:d5:c4:20:f2: 90:1f:74:2f:e7:b7:8c:63:d1:60:ab:89:88:eb:6f:03:d7:e4: 50:13:0f:85:d1:24:2b:97:b4:76:b7:c1:8d:f9:cc:84:d6:c5: c8:d7:39:82:a1:99:ed:28:a6:a7:3b:a5:48:b5:17:d3:5f:4b: f7:48:3c:d8:09:59:ae:87:55:52:e8:ce:5d:3c:39:e4:1e:44: 52:9b:9d:fc:b6:21:12:e4:88:30:e2:81:94:4d:be:80:fb:3c: c3:13:09:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd4gSwtfyn6IdQVbf6sWAokJsm+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNFOEZEM0QxNzNCRDE4OUY4MDgwQzRDMURFOUQxOTAw MTFFNDYzRDAeFw0yNjEwMDQwMDAwMDhaFw0yNjEwMDUwMjA3MDhaMDMxMTAvBgNV BAMTKEM4MUFBMkYzMjZEQTIzQzM1NTIxMkYwRDYwNTg2MUVBQTM2MEJDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJtqQc9eJ5s7jf2Y9vA2Luj6Kh L2ukw0FanUHJzfXcA7xJa+ra8VCOMH9mErAZ7yMCAYckoryfmPhG15wMlxa/rWtL QeOmBV9ahRnadrzQpkziI+jtFYcXpswbDa6ZFIJMmZsNekCIzKGna3mINJISB6/U JpvHKZ7i/vUMUf2aGedKQ8IykMmVm+ls8ygPSTM414ZyrszF5Pm4nq64oI8JKNtO rIZQamOidy3LZtn5D14E/0ThlKHMR0uYN/pxGXOwbjv6u0+iFM0cQwxLyPeIpn5l 8ZxQCciSdoGn1yK0lH+ATbyH6MRzGSgRBxjib6dddkZim8yooJGYDnOI4SpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyBqi8ybaI8NVIS8NYFhh6qNgvJAwHwYDVR0j BBgwFoAUs+j9PRc70Yn4CAxMHenRkAEeRj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcyODA0MDAtOTY1NC00ZDQ1LTg4OGItOTA2N2JhZGExOTBiLzAvQjNFOEZEM0Qx NzNCRDE4OUY4MDgwQzRDMURFOUQxOTAwMTFFNDYzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0U4RkQzRDE3M0JEMTg5RjgwODBDNEMxREU5RDE5MDAxMUU0 NjNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQjNFOEZEM0QxNzNCRDE4OUY4MDgwQzRDMURFOUQx OTAwMTFFNDYzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeFTomRQylAa7waMqBqd9qDO1PbDwhRRBAd VtiDSAyBo33LPuDhLM2PDM0IDy29PugAOZI1RP/8oMqXzXjM3y/cooHmEOCbcqLS UcijXz2S1tIv1CqGzhiDSeyHiE9aH5Hm44iajTs1nZDstTEXhbOtZuTK8Hpaodru uPgUkBDg2kkYtbPlm9XO2AhixLQjh/ThiRLNbMtx3109OJdO1cQg8pAfdC/nt4xj 0WCriYjrbwPX5FATD4XRJCuXtHa3wY35zITWxcjXOYKhme0opqc7pUi1F9NfS/dI PNgJWa6HVVLozl08OeQeRFKbnfy2IRLkiDDigZRNvoD7PMMTCfk= -----END CERTIFICATE-----Generated at Sun Oct 4 18:32:49 2026 by rpki-client