$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft File: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft (raw, json) Hash identifier: xdRkgJkt3tp0rBFnzQGoDltWXqObPu2BCzRFnTA8XCA= Subject key identifier: DE:A7:A4:8F:19:64:A9:AA:01:2A:61:91:26:24:12:73:34:E8:4C:5A Authority key identifier: 3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 Certificate issuer: /CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Certificate serial: 7C952BB6EA9AF70B0AB1B822B6D9ADC59AD93BD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:33:34 +0000 Manifest this update: Mon 21 Sep 2026 05:28:34 +0000 Manifest next update: Tue 22 Sep 2026 08:50:34 +0000 Files and hashes: 1: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: UuNBQfu/W2xG5QH9528nkcryc9rKbacdNqSPH3ls1PA=) 2: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tCaJ2zwdgsb4+fHqF/Tm3Uoxd1Qn9nKNIXa1bnIvzy4=) 3: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl (hash: Ko+/56mLElg/b47ZO8eyJ7U0EWz5a5Huj+PeR5buNc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:95:2b:b6:ea:9a:f7:0b:0a:b1:b8:22:b6:d9:ad:c5:9a:d9:3b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Validity Not Before: Sep 21 05:28:34 2026 GMT Not After : Sep 22 08:50:34 2026 GMT Subject: CN=DEA7A48F1964A9AA012A61912624127334E84C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5e:6c:2e:94:33:3e:ed:b2:ad:e3:fa:f4:e5: 4e:2c:46:81:5d:a4:07:f3:89:59:4a:19:ce:b6:82: 24:43:1c:ac:8d:29:47:0c:6c:08:40:05:59:5a:19: 3e:62:5f:20:02:65:8e:61:5d:c5:37:0f:68:d7:01: 5e:4c:94:96:35:28:b8:ee:1c:84:65:a2:85:67:ae: f8:c6:a4:bd:82:26:cd:d2:40:4c:f9:ea:05:2f:15: 94:31:d8:1e:e3:b3:bd:4f:34:28:de:ca:d3:35:af: c5:fd:67:c7:21:79:a4:ed:17:53:fd:d9:79:90:55: 0f:ab:c2:3e:88:6b:32:6a:a7:79:d8:74:b0:a0:ad: e6:5c:57:18:7b:0e:db:4e:43:75:7d:8b:46:df:76: 2a:59:fe:9f:05:af:1d:bc:db:21:2a:a7:8d:55:1c: 42:44:58:16:ad:29:bb:68:52:3c:cf:b5:c8:37:c7: dd:e7:44:d0:1e:f3:bf:fc:11:4f:93:f8:ef:10:c2: 09:dd:7b:df:1c:3a:c7:08:95:7d:6a:eb:76:ef:06: 15:a7:ab:34:1a:5d:1f:70:09:32:de:f2:9c:c0:ae: 48:ec:7b:31:31:3d:54:68:1f:43:9a:71:8a:b3:3e: f0:c2:52:6d:a0:a5:0d:91:59:ea:1e:8b:a8:69:cd: 10:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A7:A4:8F:19:64:A9:AA:01:2A:61:91:26:24:12:73:34:E8:4C:5A X509v3 Authority Key Identifier: keyid:3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:83:75:f2:39:2f:42:8d:d0:06:b6:d2:3d:c6:3a:69:48:78: 8b:49:f6:e6:78:75:f9:13:f0:4a:86:06:86:fb:38:39:47:dd: 64:fd:01:ce:b4:c3:dc:96:f2:28:81:90:02:90:54:28:45:a4: 2f:97:50:73:ae:77:ca:57:6e:81:79:f7:3d:6b:df:da:10:8c: 4b:b2:2f:1a:9a:9c:06:0e:d8:77:89:82:fe:67:35:f4:9b:38: da:a6:8c:12:f7:44:a2:a4:89:31:9b:d8:11:a0:28:1e:7b:4a: 70:a6:83:d7:5e:1e:dd:16:c0:21:3f:98:3c:66:13:5b:d6:a4: 77:22:a9:d0:46:2c:74:2f:f1:48:89:86:54:6e:b9:e9:ef:ae: 03:c6:b6:c0:43:f1:57:18:5b:8c:87:9c:42:a0:83:a0:f2:01: ca:a3:a7:54:5f:b7:ed:52:43:7f:b4:b7:9a:c1:a6:c5:a3:3e: ca:da:ea:00:85:ba:47:a2:74:11:b4:76:cf:ba:45:75:86:6f: 5c:50:f9:58:c6:54:52:21:3a:f0:b6:90:d0:73:ab:9d:ee:0d: bf:c8:87:08:18:c2:5a:b6:cb:d6:e5:f3:3f:b9:74:39:b3:d6: c3:39:90:0c:77:68:1b:af:46:af:de:0c:18:89:0f:95:18:ef: 7d:36:83:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJUrtuqa9wsKsbgittmtxZrZO9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhC RTc3NzdGOTAeFw0yNjA5MjEwNTI4MzRaFw0yNjA5MjIwODUwMzRaMDMxMTAvBgNV BAMTKERFQTdBNDhGMTk2NEE5QUEwMTJBNjE5MTI2MjQxMjczMzRFODRDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXmwulDM+7bKt4/r05U4sRoFd pAfziVlKGc62giRDHKyNKUcMbAhABVlaGT5iXyACZY5hXcU3D2jXAV5MlJY1KLju HIRlooVnrvjGpL2CJs3SQEz56gUvFZQx2B7js71PNCjeytM1r8X9Z8cheaTtF1P9 2XmQVQ+rwj6IazJqp3nYdLCgreZcVxh7DttOQ3V9i0bfdipZ/p8Frx282yEqp41V HEJEWBatKbtoUjzPtcg3x93nRNAe87/8EU+T+O8Qwgnde98cOscIlX1q63bvBhWn qzQaXR9wCTLe8pzArkjsezExPVRoH0OacYqzPvDCUm2gpQ2RWeoei6hpzRDjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3qekjxlkqaoBKmGRJiQSczToTFowHwYDVR0j BBgwFoAUP+Wgn4DCLATXfzDe3ya5CL53d/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkxNTdjZWQtZTgyYy00MzM0LTkwM2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4 MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhCRTc3NzdGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU1QTA5RjgwQzIyQzA0RDc3RjMwREVERjI2QjkwOEJFNzc3 N0Y5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5 MDhCRTc3NzdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKDdfI5L0KN0Aa20j3GOmlIeItJ9uZ4dfkT 8EqGBob7ODlH3WT9Ac60w9yW8iiBkAKQVChFpC+XUHOud8pXboF59z1r39oQjEuy LxqanAYO2HeJgv5nNfSbONqmjBL3RKKkiTGb2BGgKB57SnCmg9deHt0WwCE/mDxm E1vWpHciqdBGLHQv8UiJhlRuuenvrgPGtsBD8VcYW4yHnEKgg6DyAcqjp1Rft+1S Q3+0t5rBpsWjPsra6gCFukeidBG0ds+6RXWGb1xQ+VjGVFIhOvC2kNBzq53uDb/I hwgYwlq2y9bl8z+5dDmz1sM5kAx3aBuvRq/eDBiJD5UY7302g5k= -----END CERTIFICATE-----Generated at Mon Sep 21 12:22:54 2026 by rpki-client