$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft File: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft (raw, json) Hash identifier: zrEPYhsn67UW+wOlCf/5XSi8qLOsN8zz0JmiNf+CAnc= Subject key identifier: 75:EF:12:A1:7A:3D:24:7A:1D:93:A7:03:04:AF:4F:36:A2:C3:2E:B4 Authority key identifier: 3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA Certificate issuer: /CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA Certificate serial: 14E4EDF40F11AAB6BA444C9F3DEF111DFC4B70DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:11:47 +0000 Manifest this update: Mon 21 Sep 2026 04:06:47 +0000 Manifest next update: Tue 22 Sep 2026 05:04:47 +0000 Files and hashes: 1: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: m4byyQ/Ci01kF9bhXe9ckh1HOnnhsJwIBUWhcPZT6ow=) 2: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl (hash: Xeds4N6YEbXZVIFven8EMzp6z87imR3J9AL5b7fV0OU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e4:ed:f4:0f:11:aa:b6:ba:44:4c:9f:3d:ef:11:1d:fc:4b:70:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA Validity Not Before: Sep 21 04:06:47 2026 GMT Not After : Sep 22 05:04:47 2026 GMT Subject: CN=75EF12A17A3D247A1D93A70304AF4F36A2C32EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:e4:54:16:ff:fd:f4:00:1c:f3:8f:0c:68: fe:a4:fa:b0:8d:98:47:34:ef:41:5e:45:4a:80:16: 7a:58:2a:60:13:16:90:8b:81:7b:19:2e:a0:5d:37: 0e:90:de:a4:54:96:35:86:5f:a5:d2:2a:07:69:02: f0:ae:39:eb:a7:31:f6:41:a0:b2:be:7a:f6:bc:ac: 29:0d:25:7c:4f:9b:d2:88:24:e2:f0:a0:39:ae:2a: f7:ba:8a:03:46:15:9b:58:03:ed:cf:4c:1d:6d:84: f8:24:0e:de:a7:da:6e:4d:1c:f3:de:d2:90:f4:c5: e6:24:fc:1e:2d:77:b4:bb:64:2f:20:54:0c:eb:a8: be:f7:f0:36:dd:35:4a:f6:e8:72:ae:29:79:c9:ad: 22:64:ab:82:c1:0f:59:b4:f5:bd:f9:17:58:ae:99: 97:22:cd:df:c0:a6:db:3d:4e:d5:89:8f:00:f1:c4: e0:ab:df:6f:35:47:09:0e:bd:04:8a:af:18:a4:8e: fd:a8:1f:6d:26:ee:28:fd:7f:04:b0:ef:2f:b6:ae: bb:24:a4:81:ed:05:b1:0e:aa:9f:4e:fe:3f:04:d0: 2c:7f:07:2c:c0:aa:1b:b4:52:4d:fd:57:69:53:3e: 8f:2e:c2:62:5f:6e:bf:5e:a3:56:58:f6:84:45:ea: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EF:12:A1:7A:3D:24:7A:1D:93:A7:03:04:AF:4F:36:A2:C3:2E:B4 X509v3 Authority Key Identifier: keyid:3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a3:1f:8e:2f:b4:52:b8:72:6a:fa:d4:4d:14:65:8a:d1:a6: 5e:5e:a3:10:e5:2a:a8:38:ff:7f:bb:7c:c0:df:fa:51:ea:42: ee:89:ba:d8:2f:7a:0a:17:62:ba:26:2d:98:00:22:0d:12:1b: 0b:44:31:7b:18:09:b4:7e:af:0b:d0:5d:6e:5d:38:1f:40:62: 95:38:56:c9:af:8a:df:7d:3e:e9:3f:59:6a:3e:0b:b0:ef:43: e3:0a:29:e3:6e:98:45:70:d4:33:77:ee:cb:bc:f6:e5:67:6e: 96:8e:17:a6:8e:28:c5:fa:28:e4:87:37:8e:52:db:df:dd:18: 76:c2:43:f6:28:05:31:cd:04:19:57:68:81:3d:d3:bb:ac:d6: 33:be:c8:3a:a6:55:11:f2:15:f1:4f:3d:75:ae:c8:56:a6:75: 01:9c:b3:ff:ae:83:28:50:81:91:60:e2:88:74:33:3a:c9:8a: 74:cd:5b:b2:fc:0e:a1:f3:00:a2:c9:c6:45:92:c7:21:b3:e7: 1f:66:c1:ad:7d:a4:68:e7:88:70:49:6c:3c:44:39:8d:72:dc: 8e:66:07:16:b2:39:5c:40:35:e1:f8:aa:6a:7a:03:53:69:64: ae:6f:32:fe:38:ed:fd:e6:d1:2f:2e:92:e0:71:76:69:4c:1d: e3:ee:3a:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOTt9A8Rqra6REyfPe8RHfxLcNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENGRTNC NjY3NzNCQTAeFw0yNjA5MjEwNDA2NDdaFw0yNjA5MjIwNTA0NDdaMDMxMTAvBgNV BAMTKDc1RUYxMkExN0EzRDI0N0ExRDkzQTcwMzA0QUY0RjM2QTJDMzJFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQeRUFv/99AAc848MaP6k+rCN mEc070FeRUqAFnpYKmATFpCLgXsZLqBdNw6Q3qRUljWGX6XSKgdpAvCuOeunMfZB oLK+eva8rCkNJXxPm9KIJOLwoDmuKve6igNGFZtYA+3PTB1thPgkDt6n2m5NHPPe 0pD0xeYk/B4td7S7ZC8gVAzrqL738DbdNUr26HKuKXnJrSJkq4LBD1m09b35F1iu mZcizd/Apts9TtWJjwDxxOCr3281RwkOvQSKrxikjv2oH20m7ij9fwSw7y+2rrsk pIHtBbEOqp9O/j8E0Cx/ByzAqhu0Uk39V2lTPo8uwmJfbr9eo1ZY9oRF6mPZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUde8SoXo9JHodk6cDBK9PNqLDLrQwHwYDVR0j BBgwFoAUPXSrwv0CFW6/iG3eIr3P47Znc7owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNDJhMjktYmQ0OC00ZWY3LWFmNDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJG RDAyMTU2RUJGODg2RERFMjJCRENGRTNCNjY3NzNCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDc0QUJDMkZEMDIxNTZFQkY4ODZEREUyMkJEQ0ZFM0I2Njc3 M0JBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENG RTNCNjY3NzNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOjH44vtFK4cmr61E0UZYrRpl5eoxDlKqg4 /3+7fMDf+lHqQu6JutgvegoXYromLZgAIg0SGwtEMXsYCbR+rwvQXW5dOB9AYpU4 Vsmvit99Puk/WWo+C7DvQ+MKKeNumEVw1DN37su89uVnbpaOF6aOKMX6KOSHN45S 29/dGHbCQ/YoBTHNBBlXaIE907us1jO+yDqmVRHyFfFPPXWuyFamdQGcs/+ugyhQ gZFg4oh0MzrJinTNW7L8DqHzAKLJxkWSxyGz5x9mwa19pGjniHBJbDxEOY1y3I5m BxayOVxANeH4qmp6A1NpZK5vMv447f3m0S8ukuBxdmlMHePuOmQ= -----END CERTIFICATE-----Generated at Mon Sep 21 22:15:21 2026 by rpki-client