$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft File: 3B905656ECAB5F25C747565B1F6158A544607342.mft (raw, json) Hash identifier: JeimjtQe5VbXLehbo3UN2FNAsFVKoyAyM/FZO3eRbpc= Subject key identifier: CC:D7:13:88:E2:FA:71:E3:36:B2:98:68:A8:B9:20:6A:C4:81:B4:23 Authority key identifier: 3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 Certificate issuer: /CN=3B905656ECAB5F25C747565B1F6158A544607342 Certificate serial: 22481E20DCD6F3A9D620E5EC36EFE66A6D06C1B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft Manifest number: BD Signing time: Sun 20 Sep 2026 08:32:41 +0000 Manifest this update: Sun 20 Sep 2026 08:27:41 +0000 Manifest next update: Mon 21 Sep 2026 09:27:41 +0000 Files and hashes: 1: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: qR5fJsbozBhXPJh8WuiE5z4yLvoKQfTANugzq/ELLiU=) 2: 3B905656ECAB5F25C747565B1F6158A544607342.crl (hash: LAMk3QfTTpRDCCVgpaLHcl55Aj9i8w0u7GA3NQkt6DU=) 3: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: SZMiP70bobuD5/c0OLg4Km31ztDYKaW8prAjAv3Nm8M=) 4: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: 96TgCS7ETcD0HP72sHWel8um1ZSywlXykltIHFwAFDk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.crl rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 09:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:48:1e:20:dc:d6:f3:a9:d6:20:e5:ec:36:ef:e6:6a:6d:06:c1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B905656ECAB5F25C747565B1F6158A544607342 Validity Not Before: Sep 20 08:27:41 2026 GMT Not After : Sep 21 09:27:41 2026 GMT Subject: CN=CCD71388E2FA71E336B29868A8B9206AC481B423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:f7:b8:ed:30:4b:e0:2e:9c:a9:52:7d:ff: a8:b2:b4:27:02:d7:65:75:85:25:68:1a:bf:59:b2: d3:a6:00:85:1e:81:46:ea:1f:ce:2c:d6:c9:64:ea: 4d:e3:f2:56:f1:bb:87:00:47:70:6e:62:50:07:ea: ec:13:b8:00:d0:5a:44:25:17:b2:5f:48:d6:ed:c5: 50:d7:b0:5c:c7:ba:1a:63:fb:f6:f3:ac:cc:4b:30: 06:94:4a:f8:4c:6c:2f:7c:e1:3d:5e:9c:ab:87:f3: a4:ec:0b:bf:3d:12:17:9e:52:37:fa:ef:ee:54:3e: 4c:76:0a:42:a3:50:f2:da:67:24:ab:d4:82:95:d6: e0:be:2a:2b:b7:7d:34:18:da:b7:c1:04:59:62:de: 15:3d:b2:55:e7:67:1b:e0:83:49:9f:18:b6:b9:c2: 61:2a:7e:9d:90:d7:68:57:99:71:21:c4:53:37:d6: f8:d3:40:39:89:93:56:6f:1c:f2:cd:23:2e:26:88: 84:36:3b:0f:d9:24:41:35:8e:63:b8:c0:b8:ae:c4: 47:c0:01:b7:91:d9:f6:55:86:8e:1a:33:e2:11:32: 24:51:fe:72:72:c8:dc:54:96:c7:ce:b5:b1:f7:a5: 5c:3f:ad:a9:31:8c:13:19:e5:ce:85:de:2e:0f:86: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D7:13:88:E2:FA:71:E3:36:B2:98:68:A8:B9:20:6A:C4:81:B4:23 X509v3 Authority Key Identifier: keyid:3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e7:82:b5:a1:d9:dd:b6:54:f7:f3:2d:ae:cd:77:12:2f:ad: 01:0f:37:20:e3:2a:ee:0e:0c:3f:7e:dd:b5:bd:44:c9:74:70: aa:bc:3b:48:04:09:a8:55:c8:3b:4f:96:75:93:16:f9:38:2e: 1d:30:3c:e5:17:c3:49:13:e2:88:c7:57:9c:76:85:6d:cc:62: 5e:69:94:ec:10:d0:56:c6:46:fa:64:4e:c1:35:93:19:d7:0a: b7:50:3c:30:b9:09:06:f1:c1:43:e4:6b:ef:26:b2:19:59:17: 39:21:fe:dd:1d:aa:08:f9:3b:0d:d5:42:da:6e:79:7c:84:1a: 41:d4:ea:18:96:f9:fa:86:54:e8:ef:ec:13:6f:d2:41:ce:d9: e0:f5:f2:7e:68:5c:58:a6:88:c0:a8:18:82:16:b6:28:57:0e: b0:67:d8:0d:3c:db:a5:2e:65:fb:22:70:23:7d:45:6e:50:c4: cd:28:20:68:6d:3d:c4:49:2c:72:f4:12:05:07:dd:7d:74:a5: 68:17:53:ca:cf:2e:81:45:31:0e:e2:ba:2b:9c:21:ba:6d:ba: e0:b5:3b:a9:35:7e:c9:77:83:b3:0c:dc:e5:23:59:5f:95:ab: b2:13:6b:38:73:32:ef:3e:73:69:2a:09:7f:e0:16:88:9c:76: 67:50:c5:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIkgeINzW86nWIOXsNu/mam0GwbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I5MDU2NTZFQ0FCNUYyNUM3NDc1NjVCMUY2MTU4QTU0 NDYwNzM0MjAeFw0yNjA5MjAwODI3NDFaFw0yNjA5MjEwOTI3NDFaMDMxMTAvBgNV BAMTKENDRDcxMzg4RTJGQTcxRTMzNkIyOTg2OEE4QjkyMDZBQzQ4MUI0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpS/e47TBL4C6cqVJ9/6iytCcC 12V1hSVoGr9ZstOmAIUegUbqH84s1slk6k3j8lbxu4cAR3BuYlAH6uwTuADQWkQl F7JfSNbtxVDXsFzHuhpj+/bzrMxLMAaUSvhMbC984T1enKuH86TsC789EheeUjf6 7+5UPkx2CkKjUPLaZySr1IKV1uC+Kiu3fTQY2rfBBFli3hU9slXnZxvgg0mfGLa5 wmEqfp2Q12hXmXEhxFM31vjTQDmJk1ZvHPLNIy4miIQ2Ow/ZJEE1jmO4wLiuxEfA AbeR2fZVho4aM+IRMiRR/nJyyNxUlsfOtbH3pVw/rakxjBMZ5c6F3i4Phmi5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzNcTiOL6ceM2sphoqLkgasSBtCMwHwYDVR0j BBgwFoAUO5BWVuyrXyXHR1ZbH2FYpURgc0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA5MTc5M2UtYmQ2OS00NWE0LTk3YTgtYzY4YWEzZGQ0N2EzLzAvM0I5MDU2NTZF Q0FCNUYyNUM3NDc1NjVCMUY2MTU4QTU0NDYwNzM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjkwNTY1NkVDQUI1RjI1Qzc0NzU2NUIxRjYxNThBNTQ0NjA3 MzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvM0I5MDU2NTZFQ0FCNUYyNUM3NDc1NjVCMUY2MTU4 QTU0NDYwNzM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbngrWh2d22VPfzLa7NdxIvrQEPNyDjKu4O DD9+3bW9RMl0cKq8O0gECahVyDtPlnWTFvk4Lh0wPOUXw0kT4ojHV5x2hW3MYl5p lOwQ0FbGRvpkTsE1kxnXCrdQPDC5CQbxwUPka+8mshlZFzkh/t0dqgj5Ow3VQtpu eXyEGkHU6hiW+fqGVOjv7BNv0kHO2eD18n5oXFimiMCoGIIWtihXDrBn2A0826Uu ZfsicCN9RW5QxM0oIGhtPcRJLHL0EgUH3X10pWgXU8rPLoFFMQ7iuiucIbptuuC1 O6k1fsl3g7MM3OUjWV+Vq7ITazhzMu8+c2kqCX/gFoicdmdQxb0= -----END CERTIFICATE-----Generated at Mon Sep 21 04:14:45 2026 by rpki-client