$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft File: 3B740E02ADF50A090229B5DFEE5D48777D442C83.mft (raw, json) Hash identifier: Z/5jLl1AH98sNIn/fhhAr/kLwa28LLAK5OQBLleSAPw= Subject key identifier: 11:1B:B9:28:3B:BA:99:EC:D7:27:B0:46:F0:B9:DD:A4:0E:48:BA:45 Authority key identifier: 3B:74:0E:02:AD:F5:0A:09:02:29:B5:DF:EE:5D:48:77:7D:44:2C:83 Certificate issuer: /CN=3B740E02ADF50A090229B5DFEE5D48777D442C83 Certificate serial: 7942B76158522A63DE7B7BF7836A411AB5F77C1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft Manifest number: BD Signing time: Mon 21 Sep 2026 08:27:02 +0000 Manifest this update: Mon 21 Sep 2026 08:22:01 +0000 Manifest next update: Tue 22 Sep 2026 09:13:01 +0000 Files and hashes: 1: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: t900xpPMJSc/gFkRKXE//s7FBpHQK9U7wVdaIlj2010=) 2: 3B740E02ADF50A090229B5DFEE5D48777D442C83.crl (hash: FsY/U2mzWWuDQpBpWZCmd53Rn0KB0t/kNwM5VM2QGA8=) 3: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: i56VPm8geIM7DmKA6wVbD62/QX+ViWuBIOqGaxDkwxE=) 4: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: A64nz+PX97FI4XaYpiwCqqmRUX6++gtRUre5i1lF2QA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.crl rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:42:b7:61:58:52:2a:63:de:7b:7b:f7:83:6a:41:1a:b5:f7:7c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B740E02ADF50A090229B5DFEE5D48777D442C83 Validity Not Before: Sep 21 08:22:01 2026 GMT Not After : Sep 22 09:13:01 2026 GMT Subject: CN=111BB9283BBA99ECD727B046F0B9DDA40E48BA45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fc:0c:0a:72:28:a2:77:1f:ba:ad:66:eb:4a: e5:a4:05:15:70:69:cf:f9:90:b8:70:bb:ae:7c:43: 15:5e:33:2c:13:db:8f:81:56:74:28:7e:d1:6a:33: e9:32:e6:7b:1c:3f:5d:c2:9e:33:5c:5e:6d:2b:6a: 9e:a9:d1:82:46:4d:6a:af:8b:07:03:dd:f4:57:4b: fe:0f:96:d3:de:1f:a4:cc:e5:8f:02:ea:20:38:8f: f2:50:15:9b:39:ec:44:8d:62:09:6c:21:69:23:9f: 53:72:be:93:70:c3:f2:ac:97:81:eb:30:b5:94:ea: b5:f1:ea:3d:56:39:33:87:3a:5d:fa:63:f2:86:97: 77:5e:62:7f:43:7a:aa:3b:07:ee:54:36:85:ed:e1: 44:8a:6c:65:63:aa:38:fa:7f:86:47:df:f7:5c:0f: 3a:3b:a4:ca:9f:89:48:bd:70:ee:95:22:47:cd:d4: bd:a1:63:1a:42:6d:cf:76:13:f5:6f:e7:9c:ec:12: d2:4d:2f:8f:a0:8a:12:4a:98:75:5d:43:da:cc:f6: 5f:57:ec:e3:a6:b1:54:df:99:79:0e:30:1b:6c:81: 81:d0:54:59:22:51:59:6a:67:4a:2a:69:51:36:88: 61:8f:1f:15:e0:af:11:d4:d5:5c:3a:a2:d0:60:71: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1B:B9:28:3B:BA:99:EC:D7:27:B0:46:F0:B9:DD:A4:0E:48:BA:45 X509v3 Authority Key Identifier: keyid:3B:74:0E:02:AD:F5:0A:09:02:29:B5:DF:EE:5D:48:77:7D:44:2C:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b4:d0:b1:8e:2a:9e:87:b5:80:4e:7e:52:d3:b1:58:8f:e1: d1:be:ac:e3:e2:d7:27:82:b4:26:ae:dc:e7:5a:b0:60:6b:30: dd:16:97:1b:78:f3:49:74:8f:19:ab:21:2a:ef:77:2f:95:6a: a9:0a:7a:be:25:16:f8:f9:36:48:b4:0c:6b:77:ae:e3:b5:e0: 4a:0b:41:48:89:50:98:d7:b8:bd:b1:a4:3f:ce:9b:cf:ea:b8: a1:40:ca:5d:89:05:43:8c:c5:b1:b1:d4:21:80:fd:fa:2c:bc: 10:ec:27:e0:72:75:66:d6:0c:80:5f:7c:7f:4b:1e:f5:3d:c4: 8b:a0:c2:f2:56:78:8a:8c:72:ba:09:87:da:6a:3f:7f:19:eb: 2a:bc:89:ea:7c:87:0e:d6:f5:d0:91:f5:82:ae:47:76:a3:ad: 66:84:14:40:94:cf:69:9e:f0:3e:37:eb:37:36:97:b9:a2:f0: f6:9c:7d:34:75:7c:2b:90:f8:e7:11:2c:34:67:43:9a:cf:36: bd:16:f8:30:46:06:5a:e4:81:1e:b5:f5:41:55:a4:62:c0:ca: 24:8e:52:99:2b:3b:c1:b6:0b:fe:b9:9f:0e:23:04:bd:fc:eb: e2:c6:70:01:75:54:d7:85:2c:0b:2d:73:2c:a8:18:04:fa:be: 87:73:18:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeUK3YVhSKmPee3v3g2pBGrX3fB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NDBFMDJBREY1MEEwOTAyMjlCNURGRUU1RDQ4Nzc3 RDQ0MkM4MzAeFw0yNjA5MjEwODIyMDFaFw0yNjA5MjIwOTEzMDFaMDMxMTAvBgNV BAMTKDExMUJCOTI4M0JCQTk5RUNENzI3QjA0NkYwQjlEREE0MEU0OEJBNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh/AwKciiidx+6rWbrSuWkBRVw ac/5kLhwu658QxVeMywT24+BVnQoftFqM+ky5nscP13CnjNcXm0rap6p0YJGTWqv iwcD3fRXS/4PltPeH6TM5Y8C6iA4j/JQFZs57ESNYglsIWkjn1NyvpNww/Ksl4Hr MLWU6rXx6j1WOTOHOl36Y/KGl3deYn9Deqo7B+5UNoXt4USKbGVjqjj6f4ZH3/dc Dzo7pMqfiUi9cO6VIkfN1L2hYxpCbc92E/Vv55zsEtJNL4+gihJKmHVdQ9rM9l9X 7OOmsVTfmXkOMBtsgYHQVFkiUVlqZ0oqaVE2iGGPHxXgrxHU1Vw6otBgcYmVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUERu5KDu6mezXJ7BG8LndpA5IukUwHwYDVR0j BBgwFoAUO3QOAq31CgkCKbXf7l1Id31ELIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2MwZDQwYmMtOTNjOC00MTViLWI2YTgtYWVmMDg4ZDdmNGQ0LzAvM0I3NDBFMDJB REY1MEEwOTAyMjlCNURGRUU1RDQ4Nzc3RDQ0MkM4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjc0MEUwMkFERjUwQTA5MDIyOUI1REZFRTVENDg3NzdENDQy QzgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0I3NDBFMDJBREY1MEEwOTAyMjlCNURGRUU1RDQ4 Nzc3RDQ0MkM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABu00LGOKp6HtYBOflLTsViP4dG+rOPi1yeC tCau3OdasGBrMN0Wlxt480l0jxmrISrvdy+VaqkKer4lFvj5Nki0DGt3ruO14EoL QUiJUJjXuL2xpD/Om8/quKFAyl2JBUOMxbGx1CGA/fosvBDsJ+BydWbWDIBffH9L HvU9xIugwvJWeIqMcroJh9pqP38Z6yq8iep8hw7W9dCR9YKuR3ajrWaEFECUz2me 8D436zc2l7mi8PacfTR1fCuQ+OcRLDRnQ5rPNr0W+DBGBlrkgR619UFVpGLAyiSO UpkrO8G2C/65nw4jBL386+LGcAF1VNeFLAstcyyoGAT6vodzGCg= -----END CERTIFICATE-----Generated at Mon Sep 21 21:55:17 2026 by rpki-client