$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft File: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft (raw, json) Hash identifier: A0ymvtfCVkNV89z8+fsinS9JGe4p17EXBauH7o9+G30= Subject key identifier: 74:3A:54:7A:C2:ED:9E:2B:90:79:FF:B4:D8:31:1D:01:93:A4:78:80 Authority key identifier: 3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 Certificate issuer: /CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Certificate serial: 7A5AD5F1F02B9539711CDA9AFA86E17D37CD131E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 20:15:57 +0000 Manifest this update: Mon 09 Nov 2026 20:10:57 +0000 Manifest next update: Tue 10 Nov 2026 22:13:57 +0000 Files and hashes: 1: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tCaJ2zwdgsb4+fHqF/Tm3Uoxd1Qn9nKNIXa1bnIvzy4=) 2: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: UuNBQfu/W2xG5QH9528nkcryc9rKbacdNqSPH3ls1PA=) 3: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl (hash: XeYSc7rLT+Gdut0CVCLKXlEgFnYumklmRbywdKvRTeQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:5a:d5:f1:f0:2b:95:39:71:1c:da:9a:fa:86:e1:7d:37:cd:13:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Validity Not Before: Nov 9 20:10:57 2026 GMT Not After : Nov 10 22:13:57 2026 GMT Subject: CN=743A547AC2ED9E2B9079FFB4D8311D0193A47880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:92:ac:ff:bf:69:e9:d6:cd:5d:bb:fe:82: 7c:fd:be:7f:71:aa:c7:8e:43:57:28:d7:6d:6e:4c: 37:7d:6c:46:5b:29:6e:53:75:1b:43:d1:c7:e4:0f: 10:01:0f:e7:2a:d9:d5:9a:e7:16:e3:ba:c0:e2:bf: 8c:52:e6:9c:82:78:30:87:3c:67:01:69:18:21:c7: db:f4:f1:0e:13:8e:c7:f3:2d:86:1b:12:95:ac:c3: c2:ef:26:19:0e:57:5b:4d:c5:cb:a5:29:13:9b:bb: 6d:32:c7:c9:36:92:b1:52:b3:80:45:00:79:0b:ad: 3a:4e:05:49:48:66:a7:ad:c1:e1:27:1b:5f:c8:38: 32:66:e1:f1:ec:3e:05:5c:ac:a2:0e:43:09:b6:d9: 68:4e:47:a8:8e:7c:2e:a3:61:a0:23:d3:0d:2b:92: 9d:6c:88:97:e9:5c:8c:01:ee:48:a8:9a:7e:f3:74: 26:75:fc:f4:31:1f:bc:0e:c9:3f:99:a3:b6:03:88: 1f:2d:66:8a:e8:0a:5f:75:5e:9b:a7:41:fc:dd:00: 8e:4e:5c:f2:11:23:ab:ef:ab:cc:6d:a9:fe:ab:db: 2d:a9:5f:73:cf:79:85:38:85:cf:dc:41:a6:e9:6b: 3a:cc:13:70:c3:98:db:1e:32:1b:bc:71:ab:76:73: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3A:54:7A:C2:ED:9E:2B:90:79:FF:B4:D8:31:1D:01:93:A4:78:80 X509v3 Authority Key Identifier: keyid:3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:54:6e:99:63:46:8d:ea:59:f2:a6:77:8b:b6:7c:2b:dd:18: 2b:62:b1:06:b7:72:c7:35:b3:0d:52:fb:1f:e3:d5:ec:3f:10: bc:d3:56:65:a5:ac:0f:a5:c6:3d:8e:0d:d3:12:2c:88:7d:86: 52:b8:ce:a4:35:c0:26:88:f3:00:04:18:de:5d:bb:93:f7:e9: e2:55:0e:7a:a5:ec:60:82:60:db:76:69:d3:1f:78:7c:8b:8e: ba:15:26:ca:13:08:8e:0a:be:06:fd:03:9f:b3:62:c4:55:34: 09:dc:41:73:f2:86:9f:c9:14:08:59:0c:d7:0e:0a:85:4e:60: 7c:b1:38:31:89:ea:60:37:c0:86:d0:32:ad:69:71:56:dc:a3: d7:f4:90:71:67:b4:b9:4e:90:b3:c2:98:c2:df:3d:a8:f1:66: 45:e5:d3:3b:b1:bf:a9:8c:3b:df:ed:33:6b:86:10:cc:67:c7: 4a:5b:82:b0:e5:bc:96:2c:d8:00:23:71:4f:26:57:81:98:ff: 90:7b:38:68:37:a0:47:3b:fb:98:94:e6:c1:23:4e:11:73:90: 9e:15:ec:ae:4f:f3:6d:16:22:91:39:9e:d5:76:a4:83:fb:3e: 85:89:7d:77:7e:03:90:df:41:f2:dc:ff:36:fc:c7:d8:c8:f6: bd:b2:db:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUelrV8fArlTlxHNqa+obhfTfNEx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhC RTc3NzdGOTAeFw0yNjExMDkyMDEwNTdaFw0yNjExMTAyMjEzNTdaMDMxMTAvBgNV BAMTKDc0M0E1NDdBQzJFRDlFMkI5MDc5RkZCNEQ4MzExRDAxOTNBNDc4ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PZKs/79p6dbNXbv+gnz9vn9x qseOQ1co121uTDd9bEZbKW5TdRtD0cfkDxABD+cq2dWa5xbjusDiv4xS5pyCeDCH PGcBaRghx9v08Q4TjsfzLYYbEpWsw8LvJhkOV1tNxculKRObu20yx8k2krFSs4BF AHkLrTpOBUlIZqetweEnG1/IODJm4fHsPgVcrKIOQwm22WhOR6iOfC6jYaAj0w0r kp1siJfpXIwB7kiomn7zdCZ1/PQxH7wOyT+Zo7YDiB8tZoroCl91XpunQfzdAI5O XPIRI6vvq8xtqf6r2y2pX3PPeYU4hc/cQabpazrME3DDmNseMhu8cat2cx2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdDpUesLtniuQef+02DEdAZOkeIAwHwYDVR0j BBgwFoAUP+Wgn4DCLATXfzDe3ya5CL53d/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkxNTdjZWQtZTgyYy00MzM0LTkwM2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4 MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhCRTc3NzdGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU1QTA5RjgwQzIyQzA0RDc3RjMwREVERjI2QjkwOEJFNzc3 N0Y5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5 MDhCRTc3NzdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANUbpljRo3qWfKmd4u2fCvdGCtisQa3csc1 sw1S+x/j1ew/ELzTVmWlrA+lxj2ODdMSLIh9hlK4zqQ1wCaI8wAEGN5du5P36eJV Dnql7GCCYNt2adMfeHyLjroVJsoTCI4Kvgb9A5+zYsRVNAncQXPyhp/JFAhZDNcO CoVOYHyxODGJ6mA3wIbQMq1pcVbco9f0kHFntLlOkLPCmMLfPajxZkXl0zuxv6mM O9/tM2uGEMxnx0pbgrDlvJYs2AAjcU8mV4GY/5B7OGg3oEc7+5iU5sEjThFzkJ4V 7K5P820WIpE5ntV2pIP7PoWJfXd+A5DfQfLc/zb8x9jI9r2y2zY= -----END CERTIFICATE-----Generated at Tue Nov 10 00:48:09 2026 by rpki-client