$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft File: 3B15BA656D26B1B7E87FC6809B5DC98888377711.mft (raw, json) Hash identifier: /+tqh/1k5rQcPc2BDcQj2v1lBSzi59N8cpOS5x6UjOs= Subject key identifier: 22:01:A6:AE:E1:E1:02:25:78:2D:22:CF:B7:A0:86:E8:C9:EC:A0:88 Authority key identifier: 3B:15:BA:65:6D:26:B1:B7:E8:7F:C6:80:9B:5D:C9:88:88:37:77:11 Certificate issuer: /CN=3B15BA656D26B1B7E87FC6809B5DC98888377711 Certificate serial: 6EC02E309B429E98F2D26E88B38EE9E03539B835 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 07:24:51 +0000 Manifest this update: Thu 24 Sep 2026 07:19:51 +0000 Manifest next update: Fri 25 Sep 2026 08:32:51 +0000 Files and hashes: 1: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: ORkadPFDAal3pRKFSqyDMiG09OIpPciiMF7Guuyi4C0=) 2: 3B15BA656D26B1B7E87FC6809B5DC98888377711.crl (hash: x9ugfChnL88C6UIbe5Bj7LWojmHj8wCxrrot6O6DUBQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.crl rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c0:2e:30:9b:42:9e:98:f2:d2:6e:88:b3:8e:e9:e0:35:39:b8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B15BA656D26B1B7E87FC6809B5DC98888377711 Validity Not Before: Sep 24 07:19:51 2026 GMT Not After : Sep 25 08:32:51 2026 GMT Subject: CN=2201A6AEE1E10225782D22CFB7A086E8C9ECA088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:6a:a0:fa:53:22:c4:1e:14:d9:c7:70:48: fc:fa:17:9c:16:6a:37:02:76:30:a3:8b:05:b3:76: d4:b7:6d:45:d3:d0:34:38:1c:fe:2f:9a:98:f5:af: 65:df:b0:bc:d5:48:ac:1e:7a:6d:68:ea:73:5b:c8: fe:e2:3c:6c:6f:74:36:65:80:d6:fb:d2:f1:60:19: 1a:57:bf:a7:fb:aa:f9:65:d1:0c:d6:08:7f:f2:14: 96:8c:a6:37:36:11:3f:e3:2e:bb:52:13:2d:06:90: 6c:fe:58:4b:95:9e:90:21:02:c4:54:5c:ce:71:6c: d1:fd:fe:93:c9:ae:a8:d1:65:ea:1a:11:ec:b0:05: ae:47:7c:cb:96:66:20:cb:b4:af:9c:ad:a2:20:5f: 34:d0:28:0c:4d:ff:76:56:3b:35:09:1b:4f:b4:82: 5c:c0:45:b7:bb:bb:4b:2e:aa:1c:fc:9d:3b:a1:fb: 27:83:72:28:c5:dd:a8:a0:75:59:57:cd:42:9a:dd: 33:63:83:06:4d:87:7d:19:b0:95:bd:bd:0e:8b:27: 12:96:e1:e9:48:fa:93:ad:40:0b:c3:f1:9a:4a:2a: 63:ab:d5:b3:df:fb:ad:d9:5c:af:c4:e8:cd:d3:58: e5:6f:ee:c0:86:bc:99:19:97:f0:b6:59:ff:b8:94: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:01:A6:AE:E1:E1:02:25:78:2D:22:CF:B7:A0:86:E8:C9:EC:A0:88 X509v3 Authority Key Identifier: keyid:3B:15:BA:65:6D:26:B1:B7:E8:7F:C6:80:9B:5D:C9:88:88:37:77:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B15BA656D26B1B7E87FC6809B5DC98888377711.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3B15BA656D26B1B7E87FC6809B5DC98888377711.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:3c:4a:c3:46:28:b8:f3:6c:85:a0:b9:5c:69:61:25:43:62: 3b:b2:f3:f6:82:a1:47:a1:5f:3b:58:df:af:8d:c9:91:9a:af: f0:e8:de:7a:67:b8:ae:68:43:f7:f9:05:e8:f0:78:df:b7:86: 7e:51:e3:d4:c8:bb:b5:f8:1c:fe:17:07:02:d5:c4:15:e7:22: 0b:51:7e:47:88:1a:41:d7:e1:32:13:ab:fd:11:4e:32:30:99: c7:c4:2d:d4:b1:ca:8b:39:9e:1b:37:d7:55:a5:57:42:8f:b4: 8a:10:5d:9e:31:f5:fc:9a:69:60:cf:65:6a:51:3f:c4:b8:8f: 18:d0:8e:41:7f:61:0a:80:f0:d4:b3:a1:75:9f:78:c9:94:39: 02:cd:25:83:f5:61:3f:f1:f9:f5:fb:d6:de:e2:3a:db:ed:c9: 07:98:9e:10:10:14:7c:d2:46:68:45:60:6d:15:62:6a:07:d0: fb:0a:56:54:85:18:c2:81:23:5a:20:10:68:4a:79:ef:0c:f6: 57:d3:18:1d:20:cc:29:e5:4f:23:d6:aa:64:88:ac:cf:f7:bf: dd:22:b0:a7:82:1d:ff:88:51:75:94:2e:5b:65:d6:3c:57:90: 15:f6:2d:c3:6c:17:ac:f3:28:a3:55:42:ed:c4:17:9d:36:28: b3:06:42:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbsAuMJtCnpjy0m6Is47p4DU5uDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxNUJBNjU2RDI2QjFCN0U4N0ZDNjgwOUI1REM5ODg4 ODM3NzcxMTAeFw0yNjA5MjQwNzE5NTFaFw0yNjA5MjUwODMyNTFaMDMxMTAvBgNV BAMTKDIyMDFBNkFFRTFFMTAyMjU3ODJEMjJDRkI3QTA4NkU4QzlFQ0EwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHmqg+lMixB4U2cdwSPz6F5wW ajcCdjCjiwWzdtS3bUXT0DQ4HP4vmpj1r2XfsLzVSKweem1o6nNbyP7iPGxvdDZl gNb70vFgGRpXv6f7qvll0QzWCH/yFJaMpjc2ET/jLrtSEy0GkGz+WEuVnpAhAsRU XM5xbNH9/pPJrqjRZeoaEeywBa5HfMuWZiDLtK+craIgXzTQKAxN/3ZWOzUJG0+0 glzARbe7u0suqhz8nTuh+yeDcijF3aigdVlXzUKa3TNjgwZNh30ZsJW9vQ6LJxKW 4elI+pOtQAvD8ZpKKmOr1bPf+63ZXK/E6M3TWOVv7sCGvJkZl/C2Wf+4lA8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIgGmruHhAiV4LSLPt6CG6MnsoIgwHwYDVR0j BBgwFoAUOxW6ZW0msbfof8aAm13JiIg3dxEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDUzZTRhZjUtYWFmNS00NmNlLWIxMTktZDdlNzZkYWUyMGI4LzAvM0IxNUJBNjU2 RDI2QjFCN0U4N0ZDNjgwOUI1REM5ODg4ODM3NzcxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjE1QkE2NTZEMjZCMUI3RTg3RkM2ODA5QjVEQzk4ODg4Mzc3 NzExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvM0IxNUJBNjU2RDI2QjFCN0U4N0ZDNjgwOUI1REM5 ODg4ODM3NzcxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACI8SsNGKLjzbIWguVxpYSVDYjuy8/aCoUeh XztY36+NyZGar/Do3npnuK5oQ/f5BejweN+3hn5R49TIu7X4HP4XBwLVxBXnIgtR fkeIGkHX4TITq/0RTjIwmcfELdSxyos5nhs311WlV0KPtIoQXZ4x9fyaaWDPZWpR P8S4jxjQjkF/YQqA8NSzoXWfeMmUOQLNJYP1YT/x+fX71t7iOtvtyQeYnhAQFHzS RmhFYG0VYmoH0PsKVlSFGMKBI1ogEGhKee8M9lfTGB0gzCnlTyPWqmSIrM/3v90i sKeCHf+IUXWULltl1jxXkBX2LcNsF6zzKKNVQu3EF502KLMGQoo= -----END CERTIFICATE-----Generated at Thu Sep 24 18:03:14 2026 by rpki-client