$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft File: 3B610B6D52EFC83BEC0E681395E172E5584CB922.mft (raw, json) Hash identifier: xf7wRYvluttghaJkVcSDyZtcUieZziyS30xOF7p8Bqo= Subject key identifier: 7A:D6:53:AD:4D:22:73:CD:31:42:4E:8E:CA:9F:6A:B6:BB:6F:8B:27 Authority key identifier: 3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22 Certificate issuer: /CN=3B610B6D52EFC83BEC0E681395E172E5584CB922 Certificate serial: 1E4E3D755AF42F8358A642CD9A7FF78A313C74CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:37:09 +0000 Manifest this update: Mon 21 Sep 2026 20:32:09 +0000 Manifest next update: Wed 23 Sep 2026 00:14:09 +0000 Files and hashes: 1: 3B610B6D52EFC83BEC0E681395E172E5584CB922.crl (hash: z6/tNN3vkrMrfFYkNlVIubEMBR2DJAwLEYd3D3gB9Gw=) 2: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: rS+TB49YP+YKxVsyAwTK2Y9kOM5qpa1/Sqk+oSuWw+E=) 3: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: +4k5B1hiZNKTDNmRtO1UucDd1K3kJOf9PkAdB1Yr6bU=) 4: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: JeBWxU2nKUoJd4mmQd29lF3qX2yOUpENL2Ej8COjW7k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:4e:3d:75:5a:f4:2f:83:58:a6:42:cd:9a:7f:f7:8a:31:3c:74:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B610B6D52EFC83BEC0E681395E172E5584CB922 Validity Not Before: Sep 21 20:32:09 2026 GMT Not After : Sep 23 00:14:09 2026 GMT Subject: CN=7AD653AD4D2273CD31424E8ECA9F6AB6BB6F8B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:83:55:0f:fb:e4:6b:1a:2f:11:c1:98:4b: 12:6b:6b:f3:5e:1c:81:e7:7e:77:f9:12:a7:3e:42: c2:b8:c1:6b:b5:3a:92:2a:ce:c0:6c:1a:98:9e:ab: 76:19:d4:e4:09:3b:f9:02:1b:43:67:3c:46:72:1e: 6e:fb:4c:42:ff:10:34:04:6b:89:3a:a4:57:a2:ad: e4:3d:b4:dd:63:33:8e:88:d8:50:9c:26:2b:c6:52: b5:20:cf:92:4d:44:71:2c:da:86:13:70:1f:5c:1c: 31:2b:94:be:a1:16:d7:7f:9c:18:df:05:fe:3a:f1: a2:af:bd:4a:e0:26:a8:d9:7b:38:ed:5f:25:99:23: 4a:24:50:46:38:0c:0d:66:12:ea:36:21:b6:8c:a1: b5:bd:a7:15:22:cc:88:8e:e5:14:7e:fe:e1:0e:70: 1e:38:a7:38:c5:d8:6a:9f:cf:53:8a:16:26:90:ec: 34:01:31:59:a2:27:d4:c6:67:a6:c8:68:0c:c4:0d: 9e:34:f6:24:65:d0:bc:ca:22:0b:02:eb:84:53:a2: 29:da:71:5c:c2:f0:64:a3:dc:8a:ca:99:32:d8:11: c7:a6:cc:fe:fb:b6:67:2b:9a:8b:b6:c7:fa:98:9f: 42:1d:be:b0:a7:c8:32:d6:63:d6:4b:66:56:b3:d3: d4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D6:53:AD:4D:22:73:CD:31:42:4E:8E:CA:9F:6A:B6:BB:6F:8B:27 X509v3 Authority Key Identifier: keyid:3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:02:cb:82:66:55:cc:7a:e2:9b:82:a2:64:3e:81:3d:57:62: b9:84:cc:da:2b:4a:d8:33:ac:01:ce:fc:15:04:47:a2:f9:ea: 05:9a:8d:3a:b0:9a:e1:2b:c9:84:3c:31:21:57:45:4b:ba:e5: c3:62:0b:82:c9:46:1d:5c:08:3d:9d:ec:bb:22:97:66:64:78: ce:16:c8:c9:51:5a:96:b7:4f:9d:5b:4f:d9:31:b5:61:ac:45: f9:5a:58:24:de:ef:bb:12:0e:44:b4:e0:14:89:33:03:69:b0: 1f:83:25:09:0c:b7:49:83:5b:1c:ed:5e:5d:bf:61:5e:ae:33: 84:1d:0d:4c:d2:ac:54:2f:76:d0:bb:7f:92:f9:96:23:9b:1d: 5f:f8:db:9a:53:23:a9:4c:a0:82:e3:5a:5e:9e:f5:46:de:8b: 57:32:ed:c6:4c:2a:5a:a9:67:ba:70:51:32:23:05:7e:fe:4a: 3a:92:ae:f5:6f:7b:26:59:dc:80:6e:93:6f:5e:aa:bc:f8:d2: f2:84:f8:e5:33:c2:3e:8b:44:f2:1e:f4:7b:85:0a:60:ca:8a: d0:40:e3:f5:f8:d6:ac:eb:ce:97:56:63:88:42:c0:56:1d:45: 87:21:f8:24:b3:d4:36:89:0d:c7:c2:3a:2b:26:9c:06:ea:a1: a1:bc:d6:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHk49dVr0L4NYpkLNmn/3ijE8dMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1 ODRDQjkyMjAeFw0yNjA5MjEyMDMyMDlaFw0yNjA5MjMwMDE0MDlaMDMxMTAvBgNV BAMTKDdBRDY1M0FENEQyMjczQ0QzMTQyNEU4RUNBOUY2QUI2QkI2RjhCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwH4NVD/vkaxovEcGYSxJra/Ne HIHnfnf5Eqc+QsK4wWu1OpIqzsBsGpieq3YZ1OQJO/kCG0NnPEZyHm77TEL/EDQE a4k6pFeireQ9tN1jM46I2FCcJivGUrUgz5JNRHEs2oYTcB9cHDErlL6hFtd/nBjf Bf468aKvvUrgJqjZezjtXyWZI0okUEY4DA1mEuo2IbaMobW9pxUizIiO5RR+/uEO cB44pzjF2Gqfz1OKFiaQ7DQBMVmiJ9TGZ6bIaAzEDZ409iRl0LzKIgsC64RToina cVzC8GSj3IrKmTLYEcemzP77tmcrmou2x/qYn0IdvrCnyDLWY9ZLZlaz09TdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUetZTrU0ic80xQk6Oyp9qtrtviycwHwYDVR0j BBgwFoAUO2ELbVLvyDvsDmgTleFy5VhMuSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmE4OTZmZGMtNTYzOC00MWQyLThhOTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1 MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1ODRDQjkyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjYxMEI2RDUyRUZDODNCRUMwRTY4MTM5NUUxNzJFNTU4NENC OTIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcy RTU1ODRDQjkyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJICy4JmVcx64puComQ+gT1XYrmEzNorStgz rAHO/BUER6L56gWajTqwmuEryYQ8MSFXRUu65cNiC4LJRh1cCD2d7Lsil2ZkeM4W yMlRWpa3T51bT9kxtWGsRflaWCTe77sSDkS04BSJMwNpsB+DJQkMt0mDWxztXl2/ YV6uM4QdDUzSrFQvdtC7f5L5liObHV/425pTI6lMoILjWl6e9Ubei1cy7cZMKlqp Z7pwUTIjBX7+SjqSrvVveyZZ3IBuk29eqrz40vKE+OUzwj6LRPIe9HuFCmDKitBA 4/X41qzrzpdWY4hCwFYdRYch+CSz1DaJDcfCOismnAbqoaG81jY= -----END CERTIFICATE-----Generated at Tue Sep 22 14:24:49 2026 by rpki-client