$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft File: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft (raw, json) Hash identifier: kMYhR2ujrK7FKaSv5NwJ91psDGp8QfVE9sV7VmrpmkU= Subject key identifier: 3F:AD:CC:56:79:26:21:3F:D1:CC:67:50:43:B9:99:8E:C4:00:0D:4E Authority key identifier: 3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA Certificate issuer: /CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA Certificate serial: 0D0515D51C1CD534F20F807BBB152A861277C7EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 16:31:28 +0000 Manifest this update: Mon 09 Nov 2026 16:26:28 +0000 Manifest next update: Tue 10 Nov 2026 18:44:28 +0000 Files and hashes: 1: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl (hash: nJfyyPgIQV8QacSLFjWzD2B7SGarQom1c1pqCn38GIY=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: m4byyQ/Ci01kF9bhXe9ckh1HOnnhsJwIBUWhcPZT6ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:05:15:d5:1c:1c:d5:34:f2:0f:80:7b:bb:15:2a:86:12:77:c7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA Validity Not Before: Nov 9 16:26:28 2026 GMT Not After : Nov 10 18:44:28 2026 GMT Subject: CN=3FADCC567926213FD1CC675043B9998EC4000D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:67:34:0b:3f:a6:1c:45:d9:9a:35:b8:ec:ce: b2:32:3b:4a:4d:d0:db:d6:bb:98:fd:dc:19:77:05: 20:20:89:35:82:05:42:39:a0:3d:fe:b6:8f:6a:0e: 4b:4d:1f:92:35:3f:a9:53:bc:ee:ee:5c:79:1d:e5: d7:d2:7c:3a:83:c0:9c:5a:93:f0:ff:fd:c8:a8:a5: b6:33:35:43:ae:90:db:6c:b0:45:ed:62:b1:64:fa: ea:80:f6:95:18:94:43:ac:92:7a:09:4b:1b:5e:a6: 6e:03:c5:0d:95:5d:20:aa:8a:c9:c8:71:34:c0:32: 18:60:50:c0:8e:15:0f:79:f7:45:35:e8:72:ee:98: 9d:5a:93:e0:2c:42:f2:0c:c7:72:c4:74:ca:b9:a6: 67:b9:f8:c7:3b:6b:b2:cf:a3:c8:15:9f:38:9b:49: 70:82:3c:a2:46:88:8f:11:3f:30:e5:d6:d8:80:a6: 2d:b4:7b:28:01:e9:07:c1:19:e9:a9:18:81:bf:7f: 43:13:78:30:2a:8f:3f:3f:d3:d6:23:1c:ae:4a:0f: d7:41:de:4e:b6:0c:c7:e4:06:bf:b9:42:c3:21:d8: d1:0e:46:1b:b8:59:14:ca:8a:9b:9c:67:84:df:80: 8c:a5:ea:b0:98:f3:bd:68:11:a2:13:af:76:17:af: 84:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AD:CC:56:79:26:21:3F:D1:CC:67:50:43:B9:99:8E:C4:00:0D:4E X509v3 Authority Key Identifier: keyid:3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d8:4e:57:16:c4:1f:d3:b5:01:c4:e6:f7:a6:77:0c:52:96: 3c:55:c1:30:66:4b:c4:96:8b:5a:2a:e0:49:d4:c5:30:5c:05: 27:33:34:4d:a7:8e:0d:be:f7:04:c7:7a:cf:b7:05:6d:ad:c6: c7:c6:18:1e:4a:e1:ca:17:c9:3a:b7:e0:9c:c8:d6:3e:82:9b: 1e:af:bb:11:5b:26:74:19:6f:7e:50:65:a1:d6:61:79:f6:e8: 2a:70:3f:39:73:93:f6:da:c6:59:0c:5e:98:ac:46:4c:92:3f: 85:ca:c0:59:41:d8:3a:c5:26:72:7a:2d:5f:bd:31:5e:f9:f3: 4a:af:45:b6:31:53:be:df:aa:f7:16:ab:ec:54:f6:d7:90:22: 62:0a:35:23:b2:84:35:db:e8:8a:e2:fd:ec:98:65:20:17:0a: 9a:da:c1:6f:bb:c9:50:6e:0b:26:53:2d:8f:d2:7d:e5:14:2c: 9c:70:6b:c7:70:1c:02:18:c6:9a:b6:be:b7:02:4d:fd:ee:54: c9:80:c1:3e:5d:71:70:b1:e4:15:2f:b3:b5:e3:53:50:02:b2: ce:55:a4:61:96:b3:37:50:aa:29:e9:e0:df:35:14:8e:73:79: ab:ef:09:cf:4d:ea:92:9d:ff:25:4f:6f:8d:57:d3:ad:9d:af: 37:6d:e9:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQUV1Rwc1TTyD4B7uxUqhhJ3x+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENGRTNC NjY3NzNCQTAeFw0yNjExMDkxNjI2MjhaFw0yNjExMTAxODQ0MjhaMDMxMTAvBgNV BAMTKDNGQURDQzU2NzkyNjIxM0ZEMUNDNjc1MDQzQjk5OThFQzQwMDBENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHZzQLP6YcRdmaNbjszrIyO0pN 0NvWu5j93Bl3BSAgiTWCBUI5oD3+to9qDktNH5I1P6lTvO7uXHkd5dfSfDqDwJxa k/D//ciopbYzNUOukNtssEXtYrFk+uqA9pUYlEOsknoJSxtepm4DxQ2VXSCqisnI cTTAMhhgUMCOFQ9590U16HLumJ1ak+AsQvIMx3LEdMq5pme5+Mc7a7LPo8gVnzib SXCCPKJGiI8RPzDl1tiApi20eygB6QfBGempGIG/f0MTeDAqjz8/09YjHK5KD9dB 3k62DMfkBr+5QsMh2NEORhu4WRTKipucZ4TfgIyl6rCY871oEaITr3YXr4SFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP63MVnkmIT/RzGdQQ7mZjsQADU4wHwYDVR0j BBgwFoAUPXSrwv0CFW6/iG3eIr3P47Znc7owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNDJhMjktYmQ0OC00ZWY3LWFmNDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJG RDAyMTU2RUJGODg2RERFMjJCRENGRTNCNjY3NzNCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDc0QUJDMkZEMDIxNTZFQkY4ODZEREUyMkJEQ0ZFM0I2Njc3 M0JBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENG RTNCNjY3NzNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzYTlcWxB/TtQHE5vemdwxSljxVwTBmS8SW i1oq4EnUxTBcBSczNE2njg2+9wTHes+3BW2txsfGGB5K4coXyTq34JzI1j6Cmx6v uxFbJnQZb35QZaHWYXn26CpwPzlzk/baxlkMXpisRkySP4XKwFlB2DrFJnJ6LV+9 MV7580qvRbYxU77fqvcWq+xU9teQImIKNSOyhDXb6Iri/eyYZSAXCprawW+7yVBu CyZTLY/SfeUULJxwa8dwHAIYxpq2vrcCTf3uVMmAwT5dcXCx5BUvs7XjU1ACss5V pGGWszdQqinp4N81FI5zeavvCc9N6pKd/yVPb41X062drzdt6Wc= -----END CERTIFICATE-----Generated at Tue Nov 10 01:56:04 2026 by rpki-client