$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft File: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft (raw, json) Hash identifier: LUbncGanpDBRJEIuaPN5FLme8Yzb9KOancWPPocOf7M= Subject key identifier: 75:61:82:C3:E2:3C:26:94:4D:09:9F:8D:4E:7B:DA:48:B7:CE:9F:C0 Authority key identifier: 3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE Certificate issuer: /CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Certificate serial: 3B15EE14E387A5786125AC46FD528AB0C54A4B47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft Manifest number: BF Signing time: Tue 22 Sep 2026 21:07:33 +0000 Manifest this update: Tue 22 Sep 2026 21:02:33 +0000 Manifest next update: Wed 23 Sep 2026 23:01:33 +0000 Files and hashes: 1: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: Q+S9A/y116CZNR4HsWvWafo8POLMzZHES9UK/q+FgoQ=) 2: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl (hash: Q3U0sM97marr9l2mhhdLbSD9lgLc7afMBFDYx3yHLEA=) 3: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: hwkmKFqZZs0/Na72m9HaYmz05ZyTB7V+dfx8PoWeKHY=) 4: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: nPHGyPRlVU4NvbiCVIa+b1x20FU3xtj+iCnjkj2L1yY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 23:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:15:ee:14:e3:87:a5:78:61:25:ac:46:fd:52:8a:b0:c5:4a:4b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Validity Not Before: Sep 22 21:02:33 2026 GMT Not After : Sep 23 23:01:33 2026 GMT Subject: CN=756182C3E23C26944D099F8D4E7BDA48B7CE9FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:bd:6c:c1:8c:c1:d8:cc:71:4e:5b:10:9c: a7:e4:29:4f:fb:08:e3:bd:85:db:c5:d0:bd:fe:af: 5b:10:f0:cb:88:f1:75:d6:8f:ff:f2:50:79:f1:1d: ec:00:c3:46:08:4e:e4:a3:31:75:99:ec:5b:3b:cb: c3:90:ef:c3:c2:54:ee:f0:a3:cd:e2:81:11:13:b7: e7:db:40:fa:22:10:4b:ac:47:b3:c0:2a:b6:fb:a3: ef:4e:bf:cf:8c:8a:6e:e9:9b:83:c7:7b:7f:fe:4e: 7f:62:26:fe:a4:05:7e:97:db:53:62:19:cf:a1:59: 1b:51:b5:9b:78:da:8c:3b:48:50:e2:31:9c:04:5e: eb:ef:f0:99:9f:0b:27:7e:90:87:cd:36:0c:2c:a5: 19:ac:31:ee:89:cc:25:a9:61:5f:a0:88:e0:f6:ee: b5:cc:7a:5e:85:23:72:e1:af:86:de:da:fe:d6:e0: ce:3b:1b:64:bb:7f:72:6e:79:21:a8:ea:e9:39:28: 84:90:58:e8:77:59:6a:c0:d6:18:e6:43:b6:0d:bf: 81:e8:c9:d2:6d:89:0e:8c:20:44:20:48:7b:69:4e: e5:11:69:83:97:f6:ba:09:ab:b3:37:b3:b6:76:3e: 52:27:aa:10:0b:e8:12:53:f7:46:ac:d1:4a:98:b3: b5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:61:82:C3:E2:3C:26:94:4D:09:9F:8D:4E:7B:DA:48:B7:CE:9F:C0 X509v3 Authority Key Identifier: keyid:3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f9:de:34:ab:a6:5f:28:7d:66:26:fa:19:6a:45:4f:db:92: 39:6c:2f:09:8f:72:c6:dc:64:59:5c:91:51:3d:00:fb:22:be: 43:5b:3d:24:cf:1e:2c:72:14:86:43:be:11:57:62:79:4d:72: ab:3b:15:3a:6a:43:61:1c:f0:11:92:e2:c4:ba:d9:e4:bf:16: 15:16:5d:9b:17:75:cc:18:c5:01:18:84:24:b4:fd:13:f8:dc: 1a:37:a6:7d:e1:9b:9f:45:ad:1c:33:f2:b0:85:75:00:28:4a: c0:db:d4:c8:59:49:71:b7:ab:af:f3:71:14:0e:e0:4c:f5:7e: df:f9:67:a3:08:44:05:b0:9e:6e:8c:b9:a4:e6:aa:82:93:56: 6a:ab:f2:69:bf:59:85:8a:18:09:f2:dd:ae:9d:57:1e:9a:83: f5:51:78:52:6a:14:df:f7:a8:c7:06:cb:53:c3:c7:84:fa:9b: 55:d7:75:f6:03:79:d0:d0:9d:9d:5d:7a:49:cf:41:93:38:19: 45:24:63:74:af:77:fc:5d:f4:19:59:76:72:e9:be:a5:c5:15: 15:00:6e:cd:b9:9a:47:7f:42:db:8f:9f:92:f5:58:12:3b:94: 67:2c:3e:a5:71:3d:6b:1d:74:e1:c0:3c:42:5c:33:88:92:83: 77:d6:16:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxXuFOOHpXhhJaxG/VKKsMVKS0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5 NkM4MjdERTAeFw0yNjA5MjIyMTAyMzNaFw0yNjA5MjMyMzAxMzNaMDMxMTAvBgNV BAMTKDc1NjE4MkMzRTIzQzI2OTQ0RDA5OUY4RDRFN0JEQTQ4QjdDRTlGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qr1swYzB2MxxTlsQnKfkKU/7 COO9hdvF0L3+r1sQ8MuI8XXWj//yUHnxHewAw0YITuSjMXWZ7Fs7y8OQ78PCVO7w o83igRETt+fbQPoiEEusR7PAKrb7o+9Ov8+Mim7pm4PHe3/+Tn9iJv6kBX6X21Ni Gc+hWRtRtZt42ow7SFDiMZwEXuvv8JmfCyd+kIfNNgwspRmsMe6JzCWpYV+giOD2 7rXMel6FI3Lhr4be2v7W4M47G2S7f3JueSGo6uk5KISQWOh3WWrA1hjmQ7YNv4Ho ydJtiQ6MIEQgSHtpTuURaYOX9roJq7M3s7Z2PlInqhAL6BJT90as0UqYs7VXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdWGCw+I8JpRNCZ+NTnvaSLfOn8AwHwYDVR0j BBgwFoAUPYsbD/x4ZLGg6ZoJ6/WnbJbIJ94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWEwNzczODYtMzAxYi00ZmYxLTg3MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZG Qzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5NkM4MjdERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRDhCMUIwRkZDNzg2NEIxQTBFOTlBMDlFQkY1QTc2Qzk2Qzgy N0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3 NkM5NkM4MjdERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAT53jSrpl8ofWYm+hlqRU/bkjlsLwmPcsbc ZFlckVE9APsivkNbPSTPHixyFIZDvhFXYnlNcqs7FTpqQ2Ec8BGS4sS62eS/FhUW XZsXdcwYxQEYhCS0/RP43Bo3pn3hm59FrRwz8rCFdQAoSsDb1MhZSXG3q6/zcRQO 4Ez1ft/5Z6MIRAWwnm6MuaTmqoKTVmqr8mm/WYWKGAny3a6dVx6ag/VReFJqFN/3 qMcGy1PDx4T6m1XXdfYDedDQnZ1deknPQZM4GUUkY3Svd/xd9BlZdnLpvqXFFRUA bs25mkd/QtuPn5L1WBI7lGcsPqVxPWsddOHAPEJcM4iSg3fWFlI= -----END CERTIFICATE-----Generated at Wed Sep 23 13:32:39 2026 by rpki-client