$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft File: 3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft (raw, json) Hash identifier: 21uNPalWZ9xkAhTnDWj3mzKgKQk1dcJ/f2Lwr892aFw= Subject key identifier: C7:7E:BE:38:FE:03:B1:0E:AF:FF:99:74:EF:BC:DF:5D:18:9C:22:7F Authority key identifier: 3E:69:CF:E7:EE:7B:DA:A3:7C:23:FA:5D:26:2D:53:BB:58:C0:82:C9 Certificate issuer: /CN=3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9 Certificate serial: 1A00587CB65ACD567FFA9B0F59DBEBBC0A0EC099 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft Manifest number: BF Signing time: Mon 21 Sep 2026 23:10:27 +0000 Manifest this update: Mon 21 Sep 2026 23:05:27 +0000 Manifest next update: Wed 23 Sep 2026 01:38:27 +0000 Files and hashes: 1: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: yPTQbXIMPAX5YHFZg3gghjvfBRXpbrPMIjd6u88I2sQ=) 2: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: c5m1jy/LAyjB0nA9ZGi7kHoU7bN15iBSminDikOhk08=) 3: 3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.crl (hash: dyTMFtux9gz8yuLMHW/YRsn3Iuz06PhnlaX7RDbh0JI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.crl rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:00:58:7c:b6:5a:cd:56:7f:fa:9b:0f:59:db:eb:bc:0a:0e:c0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9 Validity Not Before: Sep 21 23:05:27 2026 GMT Not After : Sep 23 01:38:27 2026 GMT Subject: CN=C77EBE38FE03B10EAFFF9974EFBCDF5D189C227F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:cf:2c:3c:78:29:0a:f1:90:ee:7b:4c:99:df: ab:d2:e5:7b:f3:f0:42:93:c2:19:0d:07:ad:f2:63: 8c:50:5f:76:dc:85:04:cf:98:aa:63:ce:ad:ee:98: 08:90:15:b7:08:70:7d:16:2d:6c:e6:cf:48:8c:e9: 8d:32:77:a6:2d:4e:f7:42:a3:37:a8:81:6f:fe:67: 43:9c:16:4a:2e:44:7e:0b:1e:d9:44:cc:04:1e:62: 4b:48:bb:b9:d3:24:ff:c9:26:eb:bd:47:7f:d7:fb: 62:6c:38:38:32:f9:0f:a4:66:90:3d:3b:b7:e3:00: f2:d3:5d:18:d3:79:e8:55:bf:4b:1e:be:fe:56:cd: a8:03:24:62:6e:ef:da:2b:b0:d5:c7:8e:3d:91:13: 97:8d:b2:2e:0a:1f:6b:39:9a:f4:47:c7:99:4c:1f: 5b:cf:be:d0:2e:e3:df:c2:01:a4:79:15:74:6f:4b: ec:9f:d0:53:74:05:81:54:44:7c:7e:14:71:9d:42: 4b:22:7f:d6:0a:be:ee:dd:c7:d8:ae:1d:a9:aa:41: f9:3c:17:00:2e:f6:cb:e3:1e:ad:6d:f0:b3:30:9f: 0c:18:ef:36:df:74:e7:ad:09:ae:d6:b1:02:bd:51: 84:77:86:5b:fe:b2:0e:9d:b6:88:57:85:98:76:73: e5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7E:BE:38:FE:03:B1:0E:AF:FF:99:74:EF:BC:DF:5D:18:9C:22:7F X509v3 Authority Key Identifier: keyid:3E:69:CF:E7:EE:7B:DA:A3:7C:23:FA:5D:26:2D:53:BB:58:C0:82:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/3E69CFE7EE7BDAA37C23FA5D262D53BB58C082C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:fb:95:80:3c:54:92:71:c7:1a:35:b5:80:ec:ff:66:8a:dc: 35:db:73:eb:59:0f:eb:2f:88:09:c9:c4:e9:1b:df:7a:3f:d7: ba:35:ee:53:b6:7d:7f:92:5f:8c:a8:a5:97:f0:36:8e:ce:e4: 3b:d1:60:f7:1c:cc:3f:0a:23:a6:2a:6e:38:55:b0:c6:67:b2: 11:bc:7f:42:47:b4:fa:3f:e8:b8:b2:5e:0b:5e:fb:60:e4:80: 20:1b:f7:5c:9c:36:e6:4d:3e:f7:ab:4b:1f:8f:8b:f9:b1:82: 96:71:58:40:81:bf:05:f6:ee:7c:d5:4b:cf:e8:07:19:ce:03: 67:0d:22:6b:cc:2a:f2:56:3b:8a:c1:53:d0:bc:19:fe:87:9a: a4:14:fd:1a:27:f2:0d:b3:ea:f8:51:97:1b:75:e8:d1:75:8e: a2:f6:87:d4:bf:90:60:35:77:ef:da:d5:76:85:d4:33:e6:9f: 8a:d4:ee:13:e8:54:67:88:08:ea:91:b2:ea:5a:9e:98:cd:2e: 8f:48:df:fd:3e:4f:95:15:50:32:0c:36:2e:be:c8:0b:2f:64: 37:49:31:25:03:c1:16:94:76:e0:17:f5:1f:84:09:a5:62:80: 91:7f:4a:82:ec:af:ed:f6:15:47:49:b1:1e:3d:09:07:fc:f9: 11:5c:1b:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgBYfLZazVZ/+psPWdvrvAoOwJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OUNGRTdFRTdCREFBMzdDMjNGQTVEMjYyRDUzQkI1 OEMwODJDOTAeFw0yNjA5MjEyMzA1MjdaFw0yNjA5MjMwMTM4MjdaMDMxMTAvBgNV BAMTKEM3N0VCRTM4RkUwM0IxMEVBRkZGOTk3NEVGQkNERjVEMTg5QzIyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1zyw8eCkK8ZDue0yZ36vS5Xvz 8EKTwhkNB63yY4xQX3bchQTPmKpjzq3umAiQFbcIcH0WLWzmz0iM6Y0yd6YtTvdC ozeogW/+Z0OcFkouRH4LHtlEzAQeYktIu7nTJP/JJuu9R3/X+2JsODgy+Q+kZpA9 O7fjAPLTXRjTeehVv0sevv5WzagDJGJu79orsNXHjj2RE5eNsi4KH2s5mvRHx5lM H1vPvtAu49/CAaR5FXRvS+yf0FN0BYFURHx+FHGdQksif9YKvu7dx9iuHamqQfk8 FwAu9svjHq1t8LMwnwwY7zbfdOetCa7WsQK9UYR3hlv+sg6dtohXhZh2c+XHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx36+OP4DsQ6v/5l077zfXRicIn8wHwYDVR0j BBgwFoAUPmnP5+572qN8I/pdJi1Tu1jAgskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjVjOWMzOTQtZmNkMC00YjRiLWJiMWEtODI0NzcwZjQwMzQyLzAvM0U2OUNGRTdF RTdCREFBMzdDMjNGQTVEMjYyRDUzQkI1OEMwODJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRTY5Q0ZFN0VFN0JEQUEzN0MyM0ZBNUQyNjJENTNCQjU4QzA4 MkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjVjOWMzOTQtZmNkMC00YjRiLWJi MWEtODI0NzcwZjQwMzQyLzAvM0U2OUNGRTdFRTdCREFBMzdDMjNGQTVEMjYyRDUz QkI1OEMwODJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/7lYA8VJJxxxo1tYDs/2aK3DXbc+tZD+sv iAnJxOkb33o/17o17lO2fX+SX4yopZfwNo7O5DvRYPcczD8KI6YqbjhVsMZnshG8 f0JHtPo/6LiyXgte+2DkgCAb91ycNuZNPverSx+Pi/mxgpZxWECBvwX27nzVS8/o BxnOA2cNImvMKvJWO4rBU9C8Gf6HmqQU/Ron8g2z6vhRlxt16NF1jqL2h9S/kGA1 d+/a1XaF1DPmn4rU7hPoVGeICOqRsupanpjNLo9I3/0+T5UVUDIMNi6+yAsvZDdJ MSUDwRaUduAX9R+ECaVigJF/SoLsr+32FUdJsR49CQf8+RFcG6s= -----END CERTIFICATE-----Generated at Tue Sep 22 11:21:07 2026 by rpki-client