$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft File: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft (raw, json) Hash identifier: U1tvi4UR54y8so78MEGFF3TRupjz//LgfjyYkk0/8pQ= Subject key identifier: 59:84:70:C5:A7:E0:AC:F0:52:07:44:50:BC:AF:9F:65:EE:82:93:2E Authority key identifier: 3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 Certificate issuer: /CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Certificate serial: 3F0CF99F744F47FF5D895004FF6F4BE41CFC5BF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft Manifest number: BD Signing time: Mon 21 Sep 2026 12:21:35 +0000 Manifest this update: Mon 21 Sep 2026 12:16:35 +0000 Manifest next update: Tue 22 Sep 2026 12:49:35 +0000 Files and hashes: 1: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: InPNxYRaf3FwNMQXVehetQN/Y6CMxZDL5d0U1h33pOA=) 2: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl (hash: QuqUIpCh29RSmVX/f9KbCY+q0UsvZRi98bc/KEwARzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0c:f9:9f:74:4f:47:ff:5d:89:50:04:ff:6f:4b:e4:1c:fc:5b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Validity Not Before: Sep 21 12:16:35 2026 GMT Not After : Sep 22 12:49:35 2026 GMT Subject: CN=598470C5A7E0ACF052074450BCAF9F65EE82932E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:d8:7f:6b:6e:48:8a:59:e1:13:2d:0d:aa: 2d:37:b5:6c:08:06:7e:7f:56:58:aa:2d:a4:0e:fe: 83:39:3e:92:7b:d7:fd:47:fa:31:3a:c5:f8:c3:b8: 7a:1c:09:e9:bf:d2:2a:ee:9b:23:6b:af:23:3e:83: 97:1a:bb:6a:ad:9a:c9:7f:e2:4d:3e:c2:f0:1f:26: 66:38:d7:1d:c6:c6:1f:df:bb:a3:4b:5d:2f:1e:35: d0:22:f5:89:0f:33:93:0a:f7:64:34:e7:65:28:28: 1a:00:7d:26:13:18:d2:9e:cd:9d:19:60:e4:b1:79: f5:61:8c:69:cd:bf:59:b9:e1:83:8b:5b:be:17:83: b8:bc:a3:03:73:34:47:a9:f9:63:e1:e9:a2:9e:86: f8:20:67:a2:7f:0a:94:5e:3f:1b:79:b4:e1:a2:4b: 49:57:55:b4:66:a7:58:00:8b:56:3c:1e:ac:7f:2a: 50:58:be:0a:cf:8e:5e:c6:7d:cc:10:69:3e:28:7c: 5e:0c:21:a0:6a:d9:47:9d:f5:89:54:53:92:6b:ef: 35:b9:e4:7d:1e:36:b2:f4:ec:b5:6d:71:33:3e:67: 1f:ed:4f:a9:ab:f3:64:40:be:1c:d6:d9:b3:07:2c: 31:69:55:ca:9b:b1:28:0e:05:6b:f6:64:f3:d1:72: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:84:70:C5:A7:E0:AC:F0:52:07:44:50:BC:AF:9F:65:EE:82:93:2E X509v3 Authority Key Identifier: keyid:3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a5:8f:7d:da:77:51:63:44:bd:3b:f6:67:0d:83:d8:ec:38: 3a:9e:5a:9c:9d:5d:55:fe:df:96:ea:0e:08:41:55:6a:51:26: ea:7d:d7:5f:eb:e1:a9:1a:ae:7e:d0:33:12:67:a4:9c:d5:a2: f7:ae:e9:43:2f:19:93:29:2c:2e:fb:3a:48:63:50:2c:dc:b8: 1a:f1:0d:6e:ad:5d:e4:4d:60:c6:85:d6:59:59:d5:14:60:93: 14:24:11:14:dc:e3:d2:f4:79:c1:4d:d6:c4:9b:52:ec:15:d9: e3:f4:0f:b9:be:cd:e4:1a:0c:3c:d3:36:82:bb:15:2b:ef:07: 65:6e:54:bc:df:d7:30:3a:6a:b4:69:2f:48:0f:8d:55:e3:81: 6c:9c:12:5c:2c:14:9a:f1:30:df:0b:05:8e:39:b0:e7:b5:ba: 18:cd:97:de:33:06:98:10:c8:6b:21:f8:ed:b9:e8:41:28:f2: 31:97:ca:b1:38:94:db:e1:a3:33:1b:eb:cc:03:8a:11:09:1c: 1b:ae:fb:78:1a:c4:4a:ec:81:ae:22:de:8d:18:90:55:4d:83: a8:66:66:5f:78:4a:4c:2e:95:d4:2d:a5:9a:fd:bc:7b:c0:69: 4a:91:a7:5a:cb:cf:e3:52:ee:f0:4f:9b:bd:8a:c8:a6:0a:e5: 24:db:dd:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwz5n3RPR/9diVAE/29L5Bz8W/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNE MEU5M0Y0MDAeFw0yNjA5MjExMjE2MzVaFw0yNjA5MjIxMjQ5MzVaMDMxMTAvBgNV BAMTKDU5ODQ3MEM1QTdFMEFDRjA1MjA3NDQ1MEJDQUY5RjY1RUU4MjkzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3b9h/a25IilnhEy0Nqi03tWwI Bn5/VliqLaQO/oM5PpJ71/1H+jE6xfjDuHocCem/0irumyNrryM+g5cau2qtmsl/ 4k0+wvAfJmY41x3Gxh/fu6NLXS8eNdAi9YkPM5MK92Q052UoKBoAfSYTGNKezZ0Z YOSxefVhjGnNv1m54YOLW74Xg7i8owNzNEep+WPh6aKehvggZ6J/CpRePxt5tOGi S0lXVbRmp1gAi1Y8Hqx/KlBYvgrPjl7GfcwQaT4ofF4MIaBq2Ued9YlUU5Jr7zW5 5H0eNrL07LVtcTM+Zx/tT6mr82RAvhzW2bMHLDFpVcqbsSgOBWv2ZPPRcgKFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWYRwxafgrPBSB0RQvK+fZe6Cky4wHwYDVR0j BBgwFoAUO3bVmj8Wj2EQ5Spi7XZJo9DpP0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc0YTE1MjctNWM4ZS00YmQzLWExYzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEz RjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNEMEU5M0Y0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjc2RDU5QTNGMTY4RjYxMTBFNTJBNjJFRDc2NDlBM0QwRTkz RjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5 QTNEMEU5M0Y0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKalj33ad1FjRL079mcNg9jsODqeWpydXVX+ 35bqDghBVWpRJup911/r4akarn7QMxJnpJzVoveu6UMvGZMpLC77OkhjUCzcuBrx DW6tXeRNYMaF1llZ1RRgkxQkERTc49L0ecFN1sSbUuwV2eP0D7m+zeQaDDzTNoK7 FSvvB2VuVLzf1zA6arRpL0gPjVXjgWycElwsFJrxMN8LBY45sOe1uhjNl94zBpgQ yGsh+O256EEo8jGXyrE4lNvhozMb68wDihEJHBuu+3gaxErsga4i3o0YkFVNg6hm Zl94SkwuldQtpZr9vHvAaUqRp1rLz+NS7vBPm72KyKYK5STb3YA= -----END CERTIFICATE-----Generated at Mon Sep 21 20:07:42 2026 by rpki-client