$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft File: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft (raw, json) Hash identifier: 1x+1zdBFtV+ArWTiHw5QjO5rMdDmc9aEp53ImuG7G5U= Subject key identifier: B0:45:82:EF:69:08:0A:1D:09:E3:25:24:B1:26:2E:2F:6D:C7:12:07 Authority key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 Certificate issuer: /CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Certificate serial: 673A2AD58443DB5B65A5DCE952B2F75D7EAD5BEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft Manifest number: BE Signing time: Sun 20 Sep 2026 12:48:00 +0000 Manifest this update: Sun 20 Sep 2026 12:43:00 +0000 Manifest next update: Mon 21 Sep 2026 13:07:00 +0000 Files and hashes: 1: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: C4nE65Bmt4vsoADCvXJtdLeHcH0r1PmaQ5qo7rMWJUM=) 2: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: CjlIt4MYvo7XEt2sGyJogAmUB68TdPA5ouLe//ZK0KM=) 3: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl (hash: YHjVOlFU3+fGvzgu/8Cl4koHfjhHLUKYwqHjz3PUc3I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3a:2a:d5:84:43:db:5b:65:a5:dc:e9:52:b2:f7:5d:7e:ad:5b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Validity Not Before: Sep 20 12:43:00 2026 GMT Not After : Sep 21 13:07:00 2026 GMT Subject: CN=B04582EF69080A1D09E32524B1262E2F6DC71207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e6:77:04:86:a1:d2:01:bf:51:bc:79:2e:f9: 3d:6c:45:a2:ec:ff:94:22:f3:b2:ff:bb:2c:34:db: ca:b3:01:54:9e:c0:1b:8b:4f:3e:b6:ab:69:9b:89: f0:71:2a:4a:98:04:f1:24:5d:5b:5b:b2:aa:16:09: 4b:56:c6:72:56:34:0e:12:4a:64:1d:8d:2a:7e:82: b9:2e:1f:1d:88:e4:cd:44:55:22:d5:75:3f:8d:01: b7:2d:7f:e3:77:50:4e:ea:6a:a8:c3:a0:8a:b4:27: b5:fe:6b:ef:55:d9:0c:81:6e:c0:92:58:82:78:ed: 25:9b:14:50:0f:51:39:2b:2e:50:08:a7:28:8f:a5: c9:f5:b2:a5:35:2c:d1:dc:c3:81:8f:d1:c6:5f:57: a1:fd:00:33:ed:05:72:93:29:20:e7:74:96:d1:39: 32:14:ff:a9:74:54:b9:f0:cb:cb:8b:10:3e:65:fc: 05:35:ca:9e:9a:5c:21:05:c7:b5:67:5e:43:62:f4: ab:3e:7a:9d:13:10:04:89:7a:80:ef:f0:96:b8:62: 7d:33:81:39:a7:fb:a3:fc:f6:73:43:83:7f:03:a3: 8b:e6:18:ea:28:6f:96:e3:13:7f:08:3d:44:2e:7e: c9:4b:83:70:65:e5:0c:c5:80:e0:91:83:33:73:54: 40:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:45:82:EF:69:08:0A:1D:09:E3:25:24:B1:26:2E:2F:6D:C7:12:07 X509v3 Authority Key Identifier: keyid:37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b7:73:ec:21:45:e5:0c:b3:bd:3f:10:08:52:67:28:41:08: 0b:e2:12:7b:15:33:eb:7f:ca:4a:01:83:b0:e0:36:de:54:2c: e9:7b:9d:ac:0e:53:af:54:9e:aa:75:8b:48:38:50:1b:02:39: 33:38:1f:36:65:8e:16:bb:91:13:1f:11:00:f9:02:e6:f8:a3: 3f:23:1f:a9:a9:74:10:19:86:40:93:96:5b:11:3d:7c:15:64: 99:39:fb:4f:5e:6a:94:f0:72:1d:76:03:6f:30:d2:a7:c7:72: c1:e9:38:01:d4:c0:d8:59:21:dc:03:b8:7a:1f:d5:3b:7d:90: 6e:d3:7a:6c:0f:ab:63:14:60:e4:ae:4a:bf:8c:2c:34:b1:dc: 26:c1:b8:ab:73:9a:6d:5a:cf:c8:91:83:a2:30:e4:38:c5:57: 62:18:67:18:2b:d7:1f:bd:07:f3:9a:e4:e9:73:bf:b1:5b:4b: 1f:1c:fb:64:d9:0a:35:3f:95:2c:b1:c6:ac:5f:58:cb:29:b7: 3e:a1:75:fd:37:39:b9:ae:f1:79:e8:c6:fb:5d:87:cc:30:56: 67:24:ee:78:1c:76:3a:27:f1:58:ca:6c:86:c5:ff:71:9e:ef: 54:f2:79:9f:ea:9b:d2:26:b8:a5:3a:d1:bc:70:a3:4a:69:bd: 33:39:c8:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZzoq1YRD21tlpdzpUrL3XX6tW+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1 RTUzQTYxMTAeFw0yNjA5MjAxMjQzMDBaFw0yNjA5MjExMzA3MDBaMDMxMTAvBgNV BAMTKEIwNDU4MkVGNjkwODBBMUQwOUUzMjUyNEIxMjYyRTJGNkRDNzEyMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR5ncEhqHSAb9RvHku+T1sRaLs /5Qi87L/uyw028qzAVSewBuLTz62q2mbifBxKkqYBPEkXVtbsqoWCUtWxnJWNA4S SmQdjSp+grkuHx2I5M1EVSLVdT+NAbctf+N3UE7qaqjDoIq0J7X+a+9V2QyBbsCS WIJ47SWbFFAPUTkrLlAIpyiPpcn1sqU1LNHcw4GP0cZfV6H9ADPtBXKTKSDndJbR OTIU/6l0VLnwy8uLED5l/AU1yp6aXCEFx7VnXkNi9Ks+ep0TEASJeoDv8Ja4Yn0z gTmn+6P89nNDg38Do4vmGOoob5bjE38IPUQufslLg3Bl5QzFgOCRgzNzVEDLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsEWC72kICh0J4yUksSYuL23HEgcwHwYDVR0j BBgwFoAUNyL1fzb8bfZPD2Y4yJzys15TphEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJhOWY0ZTItYzczYi00NDI3LTk4MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0Yz NkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1RTUzQTYxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzIyRjU3RjM2RkM2REY2NEYwRjY2MzhDODlDRjJCMzVFNTNB NjExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0Yy QjM1RTUzQTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD63c+whReUMs70/EAhSZyhBCAviEnsVM+t/ ykoBg7DgNt5ULOl7nawOU69Unqp1i0g4UBsCOTM4HzZljha7kRMfEQD5Aub4oz8j H6mpdBAZhkCTllsRPXwVZJk5+09eapTwch12A28w0qfHcsHpOAHUwNhZIdwDuHof 1Tt9kG7TemwPq2MUYOSuSr+MLDSx3CbBuKtzmm1az8iRg6Iw5DjFV2IYZxgr1x+9 B/Oa5Olzv7FbSx8c+2TZCjU/lSyxxqxfWMsptz6hdf03Obmu8Xnoxvtdh8wwVmck 7ngcdjon8VjKbIbF/3Ge71TyeZ/qm9ImuKU60bxwo0ppvTM5yHY= -----END CERTIFICATE-----Generated at Mon Sep 21 03:24:10 2026 by rpki-client