$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft File: 3693BDB8D9539D53978D42B71411F72DA033C8CE.mft (raw, json) Hash identifier: 0tC9fl1GK3RkEb3tRjneJU0YfMch0gcdIG4kH7hJUmk= Subject key identifier: 08:AB:C6:AC:16:0E:59:B3:80:89:12:BC:CD:5A:57:FA:B9:94:3F:15 Authority key identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE Certificate issuer: /CN=3693BDB8D9539D53978D42B71411F72DA033C8CE Certificate serial: 025BEFD9E6F7D1E7FA7C5570920CF89D2BD8620B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft Manifest number: BD Signing time: Sun 20 Sep 2026 03:26:21 +0000 Manifest this update: Sun 20 Sep 2026 03:21:21 +0000 Manifest next update: Mon 21 Sep 2026 03:39:21 +0000 Files and hashes: 1: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: c8/N6Mnq9mJVhr1EK8ir1JGtt4U3UW5BenMICe3Zx1c=) 2: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: bAc9RLO23BGn7FV3ehHaNXdYHbfpmRikpiaRJEbpm9w=) 3: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: ygnIvxWNgcK1plnIZrJxs3dfEQPzyHrhskTC9g4HRXE=) 4: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: jSE6GYUud3AuGy6/ruvI9yrqiBFhTM+Gr4dy4Eh9xGg=) 5: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: WqTCn5j59dOFJUOOhy3KFyXF/4R8dQGK4UV0a5vcULQ=) 6: 3693BDB8D9539D53978D42B71411F72DA033C8CE.crl (hash: xAFd5yA2EHyWFcUZS+qjAt5K3Ti3+XSApT7RFVzNExM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 03:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5b:ef:d9:e6:f7:d1:e7:fa:7c:55:70:92:0c:f8:9d:2b:d8:62:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3693BDB8D9539D53978D42B71411F72DA033C8CE Validity Not Before: Sep 20 03:21:21 2026 GMT Not After : Sep 21 03:39:21 2026 GMT Subject: CN=08ABC6AC160E59B3808912BCCD5A57FAB9943F15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:5e:35:0d:92:34:b4:50:1f:aa:fd:e0:e6: 4b:c6:d6:76:67:cc:d5:7f:77:79:af:6f:51:b0:0f: bd:6a:ef:e0:a9:8a:df:14:bb:5f:6c:69:97:e5:04: dd:94:35:12:84:50:89:a1:ca:c4:5c:f5:cb:de:1e: df:78:99:e6:0e:78:f1:2d:1d:dd:30:e6:e4:93:4b: d6:87:c7:46:96:79:b8:94:63:f7:c4:b7:b4:ad:e5: 33:51:f3:ed:38:7c:49:b1:6b:5c:ff:68:8d:c9:26: b0:f9:39:9d:31:b2:2d:9a:ff:66:fc:c8:c9:1e:eb: 14:46:e2:ae:87:f3:4b:48:28:b2:b1:87:8a:cb:e7: 91:2a:dd:e1:f2:ae:d6:3f:a5:f8:2a:d7:d5:f8:e1: e8:9a:46:4d:0c:91:09:7f:e3:a1:8e:ec:9e:a0:53: 8b:80:52:1f:b0:53:77:10:b2:d2:19:2f:af:20:c8: e9:c4:5e:16:a2:6d:1f:14:2f:d6:29:38:e9:71:8d: 6d:8e:b2:a5:0b:b9:64:ab:52:97:af:37:f6:85:6c: c6:89:b2:e3:c5:67:3c:5b:3e:12:fb:40:ca:e7:13: 1f:dc:78:83:14:7e:1e:c7:9a:ed:d7:5e:96:4f:ec: 94:82:d7:81:4f:3b:c3:08:35:15:51:d0:bc:fa:e7: 27:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AB:C6:AC:16:0E:59:B3:80:89:12:BC:CD:5A:57:FA:B9:94:3F:15 X509v3 Authority Key Identifier: keyid:36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5d:51:9b:a8:ab:1a:4a:91:c0:0b:68:21:de:fd:c8:43:f6: 28:52:0b:22:22:46:d9:78:93:19:e7:9e:95:27:c0:96:73:df: 98:07:4e:63:d2:c5:46:6a:2d:06:17:2a:c1:49:6e:27:31:b2: 5b:f1:b3:98:04:01:ca:7f:05:35:2a:13:37:25:29:d0:a3:7e: f9:75:ee:21:e8:b5:24:6f:64:18:ed:f3:46:4a:00:ed:99:16: 6d:78:e2:a0:f4:d5:86:c8:c0:55:d3:7d:46:25:e5:8d:bd:56: 85:d3:59:9a:d4:da:71:a7:22:ed:12:fe:26:1b:19:c2:10:1b: 9c:a0:e8:3a:01:b4:46:49:1b:43:52:54:69:a9:78:5c:95:b8: fc:11:77:06:34:2e:95:06:65:25:64:ed:2b:b6:df:33:04:7b: c0:aa:9b:3d:2b:be:eb:b4:6d:15:60:b5:de:ac:2e:ab:02:67: e6:4e:57:63:0f:6a:ab:66:e6:a6:59:5b:34:ad:46:bb:b7:55: 1e:80:16:f0:cd:5c:ae:bc:e6:63:30:a1:d5:e8:39:6e:30:7e: bc:4e:36:3d:23:12:d1:04:2d:8c:b4:35:d5:2c:1f:49:3d:c0: b4:d2:45:c3:7f:89:87:3a:17:d0:f9:51:bc:79:eb:37:4b:40: c1:69:d4:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAlvv2eb30ef6fFVwkgz4nSvYYgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5M0JEQjhEOTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3MkRB MDMzQzhDRTAeFw0yNjA5MjAwMzIxMjFaFw0yNjA5MjEwMzM5MjFaMDMxMTAvBgNV BAMTKDA4QUJDNkFDMTYwRTU5QjM4MDg5MTJCQ0NENUE1N0ZBQjk5NDNGMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfV41DZI0tFAfqv3g5kvG1nZn zNV/d3mvb1GwD71q7+Cpit8Uu19saZflBN2UNRKEUImhysRc9cveHt94meYOePEt Hd0w5uSTS9aHx0aWebiUY/fEt7St5TNR8+04fEmxa1z/aI3JJrD5OZ0xsi2a/2b8 yMke6xRG4q6H80tIKLKxh4rL55Eq3eHyrtY/pfgq19X44eiaRk0MkQl/46GO7J6g U4uAUh+wU3cQstIZL68gyOnEXhaibR8UL9YpOOlxjW2OsqULuWSrUpevN/aFbMaJ suPFZzxbPhL7QMrnEx/ceIMUfh7Hmu3XXpZP7JSC14FPO8MINRVR0Lz65yfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCKvGrBYOWbOAiRK8zVpX+rmUPxUwHwYDVR0j BBgwFoAUNpO9uNlTnVOXjUK3FBH3LaAzyM4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2IxMzBiNzUtNDU5My00MTQxLWEwNmYtNTdhMjJhMDIzZGQwLzAvMzY5M0JEQjhE OTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3MkRBMDMzQzhDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjkzQkRCOEQ5NTM5RDUzOTc4RDQyQjcxNDExRjcyREEwMzND OENFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMzY5M0JEQjhEOTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3 MkRBMDMzQzhDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxdUZuoqxpKkcALaCHe/chD9ihSCyIiRtl4 kxnnnpUnwJZz35gHTmPSxUZqLQYXKsFJbicxslvxs5gEAcp/BTUqEzclKdCjfvl1 7iHotSRvZBjt80ZKAO2ZFm144qD01YbIwFXTfUYl5Y29VoXTWZrU2nGnIu0S/iYb GcIQG5yg6DoBtEZJG0NSVGmpeFyVuPwRdwY0LpUGZSVk7Su23zMEe8Cqmz0rvuu0 bRVgtd6sLqsCZ+ZOV2MPaqtm5qZZWzStRru3VR6AFvDNXK685mMwodXoOW4wfrxO Nj0jEtEELYy0NdUsH0k9wLTSRcN/iYc6F9D5Ubx56zdLQMFp1M0= -----END CERTIFICATE-----Generated at Sun Sep 20 17:57:46 2026 by rpki-client