$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft File: 3FB91A5366225ED818B1E745D18CD5555C3F9180.mft (raw, json) Hash identifier: 9HcXxvbKAbeDfzDMocezLi3lgGx13HAjln4OKpfR19s= Subject key identifier: B9:A5:F6:0B:5E:64:5A:AA:64:04:96:F6:10:A3:68:E3:69:5E:4C:A7 Authority key identifier: 3F:B9:1A:53:66:22:5E:D8:18:B1:E7:45:D1:8C:D5:55:5C:3F:91:80 Certificate issuer: /CN=3FB91A5366225ED818B1E745D18CD5555C3F9180 Certificate serial: 2711BA2730A02BDE97162EDC1D2713BD8BCEFEB5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft Manifest number: BE Signing time: Tue 22 Sep 2026 03:00:15 +0000 Manifest this update: Tue 22 Sep 2026 02:55:15 +0000 Manifest next update: Wed 23 Sep 2026 05:46:15 +0000 Files and hashes: 1: 3FB91A5366225ED818B1E745D18CD5555C3F9180.crl (hash: etQwg1/qgzR0H11jiuhQyUAhA5Q0IQ0O1oQ1Y9X0mLc=) 2: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: CSG0H/DZBA3s6AGv8lPFFy0HS/2QV2mwHN4jVwXK0hQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.crl rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:11:ba:27:30:a0:2b:de:97:16:2e:dc:1d:27:13:bd:8b:ce:fe:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB91A5366225ED818B1E745D18CD5555C3F9180 Validity Not Before: Sep 22 02:55:15 2026 GMT Not After : Sep 23 05:46:15 2026 GMT Subject: CN=B9A5F60B5E645AAA640496F610A368E3695E4CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dc:6b:93:67:de:c3:0e:cc:67:29:21:a8:76: aa:77:76:79:98:76:07:58:c9:3a:81:8d:b7:a8:4f: ff:5d:49:ab:ca:b5:2a:3b:c5:04:e6:37:86:69:33: 51:67:6d:e4:37:4a:7c:c7:56:cf:47:ae:08:93:6a: c0:18:b0:32:68:59:ee:87:62:24:71:aa:bd:1c:9e: 29:14:b7:17:8d:8d:b6:29:53:ef:32:20:14:74:5d: 2c:bd:45:a3:80:3a:73:ac:9f:59:15:0c:a7:07:2d: 0a:33:88:4e:96:72:81:4f:9f:e5:00:34:07:4b:2a: 53:15:25:6c:84:99:7f:c1:a3:27:a7:69:11:fe:ef: 7e:96:6b:89:ed:fe:31:ff:8e:e2:d6:e9:ee:a1:f1: a0:10:48:ec:4f:31:3f:be:8c:ff:67:bd:62:fd:5c: a9:e7:3f:60:65:f1:48:06:75:0f:a2:2d:82:8b:72: dd:76:6e:65:02:1e:b1:1a:6a:ad:02:46:9f:cf:9c: 81:04:3a:1e:40:6f:5c:dd:bb:0b:68:27:f3:10:ce: be:4c:97:c5:cc:c0:a0:3f:d3:0d:20:95:12:42:ff: 7e:56:54:34:41:55:dc:04:21:0c:78:84:33:3a:87: 11:0c:22:c1:3b:a0:d1:50:af:8e:f5:44:f8:ca:0c: 4a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A5:F6:0B:5E:64:5A:AA:64:04:96:F6:10:A3:68:E3:69:5E:4C:A7 X509v3 Authority Key Identifier: keyid:3F:B9:1A:53:66:22:5E:D8:18:B1:E7:45:D1:8C:D5:55:5C:3F:91:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d3:43:85:3c:2a:03:69:19:ec:4f:98:29:70:83:11:b2:a5: 0d:ec:89:80:a5:44:38:08:6c:76:7e:85:4a:3e:96:5a:9e:4b: 7f:34:68:bf:1a:39:64:9c:be:57:53:36:12:ef:fc:f3:ac:bf: 92:2a:40:f8:c4:9b:94:47:65:4f:1b:4b:96:62:de:6e:c5:97: 5c:c2:c7:e5:e2:a6:7c:ba:17:68:41:3e:47:7a:f3:08:3d:25: 90:7b:78:aa:11:c1:8f:b2:c6:0f:1e:55:57:b3:e7:d0:b2:26: 73:9d:1b:26:70:b8:55:56:30:df:35:4a:dc:d3:87:58:a8:80: d5:7f:d1:bd:9f:3b:b0:79:8e:9c:71:c7:1a:04:77:19:52:5a: 1e:c6:49:10:58:1b:1c:28:81:01:06:05:f9:d3:7b:99:cb:9e: b2:f0:b0:11:d3:d3:1c:6f:45:36:a3:f8:42:28:26:f3:a6:f9: 8d:3d:46:bd:67:f3:20:bd:b2:78:e1:c3:cc:c7:05:30:63:ca: 9c:1f:2d:53:e4:de:0f:01:b4:08:3e:38:fc:97:49:3b:5f:8a: 0a:91:01:5c:d4:24:fa:b6:9f:4d:ac:da:1f:f4:0e:e6:0c:44: 8e:b3:9b:4f:c2:81:b0:d0:4a:cd:b0:60:9a:6b:53:85:f1:bd: da:2c:97:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJxG6JzCgK96XFi7cHScTvYvO/rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCOTFBNTM2NjIyNUVEODE4QjFFNzQ1RDE4Q0Q1NTU1 QzNGOTE4MDAeFw0yNjA5MjIwMjU1MTVaFw0yNjA5MjMwNTQ2MTVaMDMxMTAvBgNV BAMTKEI5QTVGNjBCNUU2NDVBQUE2NDA0OTZGNjEwQTM2OEUzNjk1RTRDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX3GuTZ97DDsxnKSGodqp3dnmY dgdYyTqBjbeoT/9dSavKtSo7xQTmN4ZpM1FnbeQ3SnzHVs9HrgiTasAYsDJoWe6H YiRxqr0cnikUtxeNjbYpU+8yIBR0XSy9RaOAOnOsn1kVDKcHLQoziE6WcoFPn+UA NAdLKlMVJWyEmX/BoyenaRH+736Wa4nt/jH/juLW6e6h8aAQSOxPMT++jP9nvWL9 XKnnP2Bl8UgGdQ+iLYKLct12bmUCHrEaaq0CRp/PnIEEOh5Ab1zduwtoJ/MQzr5M l8XMwKA/0w0glRJC/35WVDRBVdwEIQx4hDM6hxEMIsE7oNFQr471RPjKDEqVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuaX2C15kWqpkBJb2EKNo42leTKcwHwYDVR0j BBgwFoAUP7kaU2YiXtgYsedF0YzVVVw/kYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M2MzVjZTktMGVhNS00N2Q4LTlmY2MtY2FkMWM5ZjA2ZmJlLzAvM0ZCOTFBNTM2 NjIyNUVEODE4QjFFNzQ1RDE4Q0Q1NTU1QzNGOTE4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkI5MUE1MzY2MjI1RUQ4MThCMUU3NDVEMThDRDU1NTVDM0Y5 MTgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvM0ZCOTFBNTM2NjIyNUVEODE4QjFFNzQ1RDE4Q0Q1 NTU1QzNGOTE4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7TQ4U8KgNpGexPmClwgxGypQ3siYClRDgI bHZ+hUo+llqeS380aL8aOWScvldTNhLv/POsv5IqQPjEm5RHZU8bS5Zi3m7Fl1zC x+Xipny6F2hBPkd68wg9JZB7eKoRwY+yxg8eVVez59CyJnOdGyZwuFVWMN81StzT h1iogNV/0b2fO7B5jpxxxxoEdxlSWh7GSRBYGxwogQEGBfnTe5nLnrLwsBHT0xxv RTaj+EIoJvOm+Y09Rr1n8yC9snjhw8zHBTBjypwfLVPk3g8BtAg+OPyXSTtfigqR AVzUJPq2n02s2h/0DuYMRI6zm0/CgbDQSs2wYJprU4Xxvdosl0k= -----END CERTIFICATE-----Generated at Tue Sep 22 17:15:33 2026 by rpki-client