$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft File: 3790F06CA970C551E1C9D51C4794B87804967AF1.mft (raw, json) Hash identifier: 4i43HmmuaMpg/cEpw2YKbe/gzMtNRmQq3QHXP04ZbbU= Subject key identifier: C3:95:F6:84:21:4B:E9:33:90:C8:5F:67:76:99:B2:E5:A4:B0:46:C8 Authority key identifier: 37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1 Certificate issuer: /CN=3790F06CA970C551E1C9D51C4794B87804967AF1 Certificate serial: 2248E914C88B5EE69746C25F1D2FFC942BB30641 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft Manifest number: E4 Signing time: Mon 19 Oct 2026 05:21:10 +0000 Manifest this update: Mon 19 Oct 2026 05:16:10 +0000 Manifest next update: Tue 20 Oct 2026 05:41:10 +0000 Files and hashes: 1: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: SPxSgg7v93g2zKDq6VJY7JIwATBMTBJuqljMQUmTbgY=) 2: 3790F06CA970C551E1C9D51C4794B87804967AF1.crl (hash: +6lLX7Bf0xOMrUo7q7jFYiLPO3OqlhxjSIEyCaJtZ54=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 05:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:48:e9:14:c8:8b:5e:e6:97:46:c2:5f:1d:2f:fc:94:2b:b3:06:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3790F06CA970C551E1C9D51C4794B87804967AF1 Validity Not Before: Oct 19 05:16:10 2026 GMT Not After : Oct 20 05:41:10 2026 GMT Subject: CN=C395F684214BE93390C85F677699B2E5A4B046C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:ce:ee:4b:d1:4c:27:8f:cd:6b:69:fe:e3: c3:cb:87:48:a5:50:26:e2:d8:4a:4c:ad:0b:00:f5: af:7c:6b:04:1c:da:3d:4e:f0:a5:c0:15:d1:da:19: 25:a1:dc:b8:7b:73:1b:2d:e8:d7:4b:9c:8b:9f:13: 49:6c:1d:88:f7:0c:d5:25:8c:45:71:cd:e9:ae:65: 17:bd:49:45:79:7b:41:09:60:c0:04:2d:79:44:cb: 71:e4:a6:d5:b3:53:0c:80:34:ae:0a:94:4b:5c:0a: a0:79:20:04:db:5b:03:de:4d:a8:e1:c1:76:c7:cd: e2:ff:78:5d:35:62:4c:0b:57:d4:47:19:a0:1e:6d: 19:1e:68:92:dc:35:4a:ba:03:fa:5d:b6:b9:c1:a5: 29:e1:10:3f:cf:00:16:a4:40:2f:ba:f4:75:55:4a: 44:c5:2e:80:30:7f:0b:28:f7:96:81:cc:8f:ce:06: 46:d3:d9:b8:be:10:52:90:19:9b:d8:14:bf:03:e0: ba:f5:18:27:a1:64:96:50:33:3e:51:e5:e3:ca:23: ff:8d:c9:c1:67:4c:e1:a0:1e:77:85:e3:30:83:2c: 0d:47:1a:b8:8d:5f:06:b2:87:50:70:d5:82:9a:16: dc:7e:be:ad:f6:58:a6:84:a9:00:1c:b9:70:ab:61: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:95:F6:84:21:4B:E9:33:90:C8:5F:67:76:99:B2:E5:A4:B0:46:C8 X509v3 Authority Key Identifier: keyid:37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2e:57:ca:20:04:62:e3:44:1b:1d:10:e5:29:a8:47:eb:7f: 15:ba:9a:32:d7:3b:c3:40:f1:a3:a8:30:ec:07:4f:87:39:b4: 5f:08:7a:22:0a:94:eb:b1:e5:f6:20:1a:19:65:a6:04:4b:d5: 34:a0:2c:60:40:8d:0b:ec:de:98:ab:a8:da:c6:7f:f7:4a:d5: 2d:e1:08:af:c1:7f:62:04:f0:c1:b6:cf:27:ec:c0:a4:70:13: b4:73:21:f8:40:42:8d:bf:ed:b5:cf:14:03:7a:12:4c:04:c3: 27:55:46:0e:cb:cc:33:0a:26:63:f4:ca:dd:92:9e:f3:f3:93: 23:65:f7:d1:17:26:aa:86:73:02:02:21:46:2a:9e:22:e6:3d: 82:8b:69:59:8e:77:aa:f7:0c:8b:00:33:3f:1a:49:22:70:7e: 51:db:e1:02:85:a4:ef:17:52:56:8e:6b:b1:ab:70:05:be:7b: ef:1f:40:91:d0:a0:16:16:3c:2b:72:01:74:4a:2a:d7:70:b5: fd:49:9e:1b:ee:09:8f:27:94:fa:b8:ca:36:0a:e4:55:0c:e3: 9a:f4:a2:f0:2a:34:cc:e7:73:3a:37:2a:a6:fb:96:d7:e6:5f: da:43:e9:01:52:7e:d4:b5:9d:75:41:55:2f:7f:e0:ef:52:18: 5a:ce:97:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIkjpFMiLXuaXRsJfHS/8lCuzBkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5MEYwNkNBOTcwQzU1MUUxQzlENTFDNDc5NEI4Nzgw NDk2N0FGMTAeFw0yNjEwMTkwNTE2MTBaFw0yNjEwMjAwNTQxMTBaMDMxMTAvBgNV BAMTKEMzOTVGNjg0MjE0QkU5MzM5MEM4NUY2Nzc2OTlCMkU1QTRCMDQ2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIO87uS9FMJ4/Na2n+48PLh0il UCbi2EpMrQsA9a98awQc2j1O8KXAFdHaGSWh3Lh7cxst6NdLnIufE0lsHYj3DNUl jEVxzemuZRe9SUV5e0EJYMAELXlEy3HkptWzUwyANK4KlEtcCqB5IATbWwPeTajh wXbHzeL/eF01YkwLV9RHGaAebRkeaJLcNUq6A/pdtrnBpSnhED/PABakQC+69HVV SkTFLoAwfwso95aBzI/OBkbT2bi+EFKQGZvYFL8D4Lr1GCehZJZQMz5R5ePKI/+N ycFnTOGgHneF4zCDLA1HGriNXwayh1Bw1YKaFtx+vq32WKaEqQAcuXCrYbfbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw5X2hCFL6TOQyF9ndpmy5aSwRsgwHwYDVR0j BBgwFoAUN5DwbKlwxVHhydUcR5S4eASWevEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWMwNGRlZDgtYjBmNS00NTk0LThlMGUtOTExZWNiNzdlZTczLzAvMzc5MEYwNkNB OTcwQzU1MUUxQzlENTFDNDc5NEI4NzgwNDk2N0FGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzkwRjA2Q0E5NzBDNTUxRTFDOUQ1MUM0Nzk0Qjg3ODA0OTY3 QUYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvMzc5MEYwNkNBOTcwQzU1MUUxQzlENTFDNDc5NEI4 NzgwNDk2N0FGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8uV8ogBGLjRBsdEOUpqEfrfxW6mjLXO8NA 8aOoMOwHT4c5tF8IeiIKlOux5fYgGhllpgRL1TSgLGBAjQvs3pirqNrGf/dK1S3h CK/Bf2IE8MG2zyfswKRwE7RzIfhAQo2/7bXPFAN6EkwEwydVRg7LzDMKJmP0yt2S nvPzkyNl99EXJqqGcwICIUYqniLmPYKLaVmOd6r3DIsAMz8aSSJwflHb4QKFpO8X UlaOa7GrcAW+e+8fQJHQoBYWPCtyAXRKKtdwtf1JnhvuCY8nlPq4yjYK5FUM45r0 ovAqNMznczo3Kqb7ltfmX9pD6QFSftS1nXVBVS9/4O9SGFrOl1U= -----END CERTIFICATE-----Generated at Mon Oct 19 23:51:16 2026 by rpki-client