$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft File: 3B5092CF38247651A4F776617E70229749D4DF27.mft (raw, json) Hash identifier: UYK2YDGx2k6J1oc8J23ousCoX2RcOce7eocRY/b7tMY= Subject key identifier: F3:CD:FA:B2:75:F8:A4:E8:AA:24:3D:A2:AE:72:A6:2E:7E:B8:C1:05 Authority key identifier: 3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 Certificate issuer: /CN=3B5092CF38247651A4F776617E70229749D4DF27 Certificate serial: 28C833C76465C0403F8D008DD67EB9986E57E92A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 11:20:06 +0000 Manifest this update: Wed 23 Sep 2026 11:15:06 +0000 Manifest next update: Thu 24 Sep 2026 13:02:06 +0000 Files and hashes: 1: 34332e3234302e3232362e302f32342d3234203d3e203633343933.roa (hash: J0FfR9JSKls+f1CuVbHQ5JPg6SCAprcR1QwuMf2ba6c=) 2: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: NJ/ZuXg3IzseC0419KTO2YbQ/VOZZfzQExIZsLUwy0I=) 3: 3B5092CF38247651A4F776617E70229749D4DF27.crl (hash: RbM4PEBtSsR3mv/lSR29PfysQsQaW4lhPI5TVBX7ghg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c8:33:c7:64:65:c0:40:3f:8d:00:8d:d6:7e:b9:98:6e:57:e9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B5092CF38247651A4F776617E70229749D4DF27 Validity Not Before: Sep 23 11:15:06 2026 GMT Not After : Sep 24 13:02:06 2026 GMT Subject: CN=F3CDFAB275F8A4E8AA243DA2AE72A62E7EB8C105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:7e:1f:a5:ef:de:f4:a1:f7:d2:5e:35:58: c4:e3:56:9e:51:51:fb:f7:b5:55:02:6a:17:89:d9: ad:fb:72:0a:02:2d:5b:09:04:2a:68:1d:2d:87:df: b4:d7:d1:23:5b:67:7e:6c:55:18:94:57:33:91:aa: 05:e8:d0:43:59:4c:b7:05:c0:cf:d5:16:b3:c3:ce: 07:92:d4:19:47:63:1e:d7:da:b2:28:0a:16:f1:76: 5e:4b:78:6f:34:d2:2e:ac:c8:4a:a8:21:f5:58:42: fb:f8:61:6e:ea:62:67:6b:54:c5:08:cb:23:33:b9: 97:68:4d:da:44:40:be:2d:b4:b8:67:86:24:e3:a7: f7:c2:6e:1f:7d:ae:53:ef:5f:32:27:61:2f:18:2c: bc:32:c6:55:65:61:eb:3c:5b:7a:33:77:84:9d:3e: 52:ab:1f:e8:2d:25:e4:a5:96:a9:9b:cf:54:22:8d: c3:b8:55:07:8d:ce:a4:60:d9:5a:fa:51:e1:93:c8: 0c:96:f2:49:78:3c:a8:7d:e4:48:e2:02:c8:af:15: 73:19:5a:dd:8e:28:2d:89:42:7b:8b:38:7a:80:1a: 58:c2:3e:01:28:25:96:8b:5c:6e:6f:07:5f:64:46: f9:25:6b:be:ae:7e:ad:8c:55:97:8f:bc:c5:bc:0c: fe:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CD:FA:B2:75:F8:A4:E8:AA:24:3D:A2:AE:72:A6:2E:7E:B8:C1:05 X509v3 Authority Key Identifier: keyid:3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:38:95:e6:90:6c:3c:94:bb:a5:8b:a6:48:73:a6:58:67:fa: 6f:27:58:33:7f:5b:a7:7f:c2:95:b9:8f:93:13:d3:6f:00:e0: 36:5b:8a:f6:00:fe:c7:64:42:32:45:83:7b:3f:e3:65:8d:6a: 11:e1:dd:7d:16:ec:dc:2b:ad:14:67:e9:92:80:a2:45:db:9a: f5:fc:5d:d7:a3:bb:37:27:97:9b:16:d8:b0:d3:61:e0:80:6d: 13:bd:d8:f2:1b:06:ac:b3:2b:01:aa:ae:ff:ad:4a:34:ab:c1: a4:ab:60:cf:5b:4c:82:d3:6f:96:7b:ae:ac:21:da:fd:03:b6: dc:d0:8b:8f:f5:93:42:59:41:c3:a6:fc:35:c6:66:64:99:aa: da:ae:18:5e:3d:f3:a2:14:c8:09:fa:b7:c0:29:74:12:4e:55: a2:2a:2f:eb:37:02:62:46:5f:58:a9:9c:38:0a:cf:fd:fc:e2: f8:8a:84:67:3f:0e:7a:ae:73:e9:2b:3b:aa:e5:4e:63:0d:7c: 2a:9c:6a:1e:9f:97:e9:db:d5:10:ea:cb:45:3c:88:00:ee:ef: 7a:a1:a2:73:41:f8:94:a6:de:d5:94:71:77:71:38:8a:5e:ac: 37:72:3e:4a:db:d7:fc:fc:2a:19:d2:2b:aa:db:d9:94:85:95: eb:ff:f9:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMgzx2RlwEA/jQCN1n65mG5X6SowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MDkyQ0YzODI0NzY1MUE0Rjc3NjYxN0U3MDIyOTc0 OUQ0REYyNzAeFw0yNjA5MjMxMTE1MDZaFw0yNjA5MjQxMzAyMDZaMDMxMTAvBgNV BAMTKEYzQ0RGQUIyNzVGOEE0RThBQTI0M0RBMkFFNzJBNjJFN0VCOEMxMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCze34fpe/e9KH30l41WMTjVp5R Ufv3tVUCaheJ2a37cgoCLVsJBCpoHS2H37TX0SNbZ35sVRiUVzORqgXo0ENZTLcF wM/VFrPDzgeS1BlHYx7X2rIoChbxdl5LeG800i6syEqoIfVYQvv4YW7qYmdrVMUI yyMzuZdoTdpEQL4ttLhnhiTjp/fCbh99rlPvXzInYS8YLLwyxlVlYes8W3ozd4Sd PlKrH+gtJeSllqmbz1QijcO4VQeNzqRg2Vr6UeGTyAyW8kl4PKh95EjiAsivFXMZ Wt2OKC2JQnuLOHqAGljCPgEoJZaLXG5vB19kRvkla76ufq2MVZePvMW8DP4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8836snX4pOiqJD2irnKmLn64wQUwHwYDVR0j BBgwFoAUO1CSzzgkdlGk93ZhfnAil0nU3ycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZhYmVjNzEtN2VjYi00ZGJkLWE0MjEtOTliOWNkMjA5MDNhLzAvM0I1MDkyQ0Yz ODI0NzY1MUE0Rjc3NjYxN0U3MDIyOTc0OUQ0REYyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjUwOTJDRjM4MjQ3NjUxQTRGNzc2NjE3RTcwMjI5NzQ5RDRE RjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvM0I1MDkyQ0YzODI0NzY1MUE0Rjc3NjYxN0U3MDIy OTc0OUQ0REYyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ4leaQbDyUu6WLpkhzplhn+m8nWDN/W6d/ wpW5j5MT028A4DZbivYA/sdkQjJFg3s/42WNahHh3X0W7NwrrRRn6ZKAokXbmvX8 Xdejuzcnl5sW2LDTYeCAbRO92PIbBqyzKwGqrv+tSjSrwaSrYM9bTILTb5Z7rqwh 2v0DttzQi4/1k0JZQcOm/DXGZmSZqtquGF4986IUyAn6t8ApdBJOVaIqL+s3AmJG X1ipnDgKz/384viKhGc/Dnquc+krO6rlTmMNfCqcah6fl+nb1RDqy0U8iADu73qh onNB+JSm3tWUcXdxOIperDdyPkrb1/z8KhnSK6rb2ZSFlev/+RE= -----END CERTIFICATE-----Generated at Wed Sep 23 15:59:28 2026 by rpki-client