$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft File: 3B7FE3B2042531E0B36242D947F82DF031754FD3.mft (raw, json) Hash identifier: 4Okb0KyZstmu4A8wd5xq1EhhTgX2Q5qTsbD6JD3I64s= Subject key identifier: FB:4E:F0:75:78:E6:5C:32:53:24:92:15:8C:B2:CD:40:12:44:83:6F Authority key identifier: 3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 Certificate issuer: /CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Certificate serial: 650CC7B86D1B35C9905C0BAF4501331845801B64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft Manifest number: BD Signing time: Sun 20 Sep 2026 11:31:30 +0000 Manifest this update: Sun 20 Sep 2026 11:26:30 +0000 Manifest next update: Mon 21 Sep 2026 14:56:30 +0000 Files and hashes: 1: 3B7FE3B2042531E0B36242D947F82DF031754FD3.crl (hash: PdE9cKCrXO3Y5UVGlrFtoTia5MjOA0Wgux8WEWFU8Q0=) 2: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: 137GCdmWkDay1INFZoJTq4DPdPLmTUTYDzr+pVTMq4w=) 3: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: pTAxtDqCoq1lZ0weKvW5ktevS+0YSpgq+YtzT/tKQzQ=) 4: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: nG1oS5kPYmQFB9gUVJnLfk54lZwsWyYkdNpEIO9gT/M=) 5: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: NeiRD0Vhv/h8RWipDP6Q873ht3qdQPfYf3BUMU4aFVw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0c:c7:b8:6d:1b:35:c9:90:5c:0b:af:45:01:33:18:45:80:1b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Validity Not Before: Sep 20 11:26:30 2026 GMT Not After : Sep 21 14:56:30 2026 GMT Subject: CN=FB4EF07578E65C32532492158CB2CD401244836F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:27:48:2d:84:0b:cf:58:00:86:c2:7e:7a:86: 9b:6c:18:36:cd:f3:a0:9e:a5:ba:4d:22:00:30:9a: 83:eb:a3:be:4b:31:e7:67:b1:43:79:0d:5c:5f:3c: fa:70:13:08:f6:cb:b7:bb:9e:d7:59:a2:80:a6:c1: 21:c5:4e:bf:ad:7e:f6:5a:c1:ac:a5:98:e1:2e:4a: 68:e6:ce:5b:c2:2d:f6:f6:c5:8b:28:8c:e7:d8:ad: 7e:72:0c:5a:c7:cb:88:a0:46:70:52:41:78:a9:c6: bc:0d:a1:50:c4:0d:35:76:f7:11:c7:41:d1:80:5f: fe:a5:3f:81:b2:53:cc:99:27:40:3e:f3:84:b8:ff: 7a:c4:a7:9a:07:77:7e:8d:00:79:2f:ae:a1:b5:d6: 49:16:12:8d:1d:86:45:e4:47:3f:55:5f:04:56:be: cb:ee:14:d8:8d:b7:a6:ef:67:0f:c3:75:b5:bb:22: ca:7f:a3:cb:b1:ff:38:08:f1:02:03:27:b4:f3:62: 20:3d:5d:29:25:cb:10:e1:32:83:db:a6:e6:0d:5d: 04:66:56:da:23:4b:d1:94:4e:cc:c9:7f:93:98:f7: b8:90:e7:94:06:02:a7:ec:a3:67:2c:a4:b8:41:8d: 1c:8f:91:2e:9f:f8:53:13:39:78:3c:3e:9f:e7:e7: 4a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4E:F0:75:78:E6:5C:32:53:24:92:15:8C:B2:CD:40:12:44:83:6F X509v3 Authority Key Identifier: keyid:3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:fe:14:24:81:26:0f:54:e5:71:38:27:12:00:a2:43:03:1d: e1:ea:7e:ad:32:41:a8:6c:8f:b5:06:d5:ea:77:34:2c:3d:7b: 4e:f5:8f:d2:2a:bb:ca:93:ca:06:2c:47:33:6a:f8:a2:e8:62: 71:e2:1f:0a:b3:a6:8e:df:e2:98:30:9f:a7:44:93:8f:b4:75: 21:14:6d:dd:e0:1f:19:68:d5:4c:28:26:6e:ef:2a:fd:1d:04: 6e:29:06:d2:c8:51:46:96:4a:2a:10:75:b1:25:7d:75:a4:97: 94:29:a9:a0:76:b8:e3:af:72:45:9a:71:92:55:4d:39:9a:34: c5:51:f8:f5:f6:bc:47:45:95:cc:9a:66:0f:0a:61:c2:9b:de: 51:1f:2d:e4:c6:2b:3b:9b:17:bd:89:51:24:c8:78:7b:9e:c7: 73:a3:2b:96:5b:c4:90:10:f5:fb:c1:b0:a1:b0:76:a9:f1:0e: bf:d7:a2:ad:33:3f:48:c9:d4:14:de:10:24:93:7a:95:41:3c: c3:26:f8:d9:95:af:e0:c6:38:65:81:07:01:ca:63:58:d7:b6: 81:1a:15:d2:21:33:65:82:2d:9d:79:db:30:96:af:5f:55:16: 55:7b:41:ac:9b:b8:f2:4f:a3:ee:69:d5:f5:67:37:41:a7:25: ea:26:bb:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQzHuG0bNcmQXAuvRQEzGEWAG2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJERjAz MTc1NEZEMzAeFw0yNjA5MjAxMTI2MzBaFw0yNjA5MjExNDU2MzBaMDMxMTAvBgNV BAMTKEZCNEVGMDc1NzhFNjVDMzI1MzI0OTIxNThDQjJDRDQwMTI0NDgzNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJ0gthAvPWACGwn56hptsGDbN 86CepbpNIgAwmoPro75LMednsUN5DVxfPPpwEwj2y7e7ntdZooCmwSHFTr+tfvZa waylmOEuSmjmzlvCLfb2xYsojOfYrX5yDFrHy4igRnBSQXipxrwNoVDEDTV29xHH QdGAX/6lP4GyU8yZJ0A+84S4/3rEp5oHd36NAHkvrqG11kkWEo0dhkXkRz9VXwRW vsvuFNiNt6bvZw/DdbW7Isp/o8ux/zgI8QIDJ7TzYiA9XSklyxDhMoPbpuYNXQRm VtojS9GUTszJf5OY97iQ55QGAqfso2cspLhBjRyPkS6f+FMTOXg8Pp/n50o5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+07wdXjmXDJTJJIVjLLNQBJEg28wHwYDVR0j BBgwFoAUO3/jsgQlMeCzYkLZR/gt8DF1T9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTE0MWY4ODQtZDVjOS00MzM2LTlhNWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIw NDI1MzFFMEIzNjI0MkQ5NDdGODJERjAzMTc1NEZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjdGRTNCMjA0MjUzMUUwQjM2MjQyRDk0N0Y4MkRGMDMxNzU0 RkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJE RjAzMTc1NEZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAED+FCSBJg9U5XE4JxIAokMDHeHqfq0yQahs j7UG1ep3NCw9e071j9Iqu8qTygYsRzNq+KLoYnHiHwqzpo7f4pgwn6dEk4+0dSEU bd3gHxlo1UwoJm7vKv0dBG4pBtLIUUaWSioQdbElfXWkl5QpqaB2uOOvckWacZJV TTmaNMVR+PX2vEdFlcyaZg8KYcKb3lEfLeTGKzubF72JUSTIeHuex3OjK5ZbxJAQ 9fvBsKGwdqnxDr/Xoq0zP0jJ1BTeECSTepVBPMMm+NmVr+DGOGWBBwHKY1jXtoEa FdIhM2WCLZ152zCWr19VFlV7QaybuPJPo+5p1fVnN0GnJeomuyQ= -----END CERTIFICATE-----Generated at Sun Sep 20 17:58:10 2026 by rpki-client