$ rpki-client -vvvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft File: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft (raw, json) Hash identifier: f88eJ9sWBaxkuJlFFNaTdOc9lpzRgg0NXqQ/fI4gDpU= Subject key identifier: 4B:7F:9B:E9:BD:BE:E8:39:65:26:A4:1D:20:0D:BC:88:F1:E1:04:EE Authority key identifier: 3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E Certificate issuer: /CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Certificate serial: 6702574DA66DA36A27710B2FD46D2BC957C194A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 10:05:45 +0000 Manifest this update: Wed 04 Nov 2026 10:00:45 +0000 Manifest next update: Thu 05 Nov 2026 12:22:45 +0000 Files and hashes: 1: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: RmMN8NhmM0RZ6Enalsn3xwEVvbhkE3C1i1JWeXv+gOw=) 2: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl (hash: DMh4yA80uQPMGgZ4F3Ij0FwHxlGWps46iZQPhVht1wk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 12:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:02:57:4d:a6:6d:a3:6a:27:71:0b:2f:d4:6d:2b:c9:57:c1:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Validity Not Before: Nov 4 10:00:45 2026 GMT Not After : Nov 5 12:22:45 2026 GMT Subject: CN=4B7F9BE9BDBEE8396526A41D200DBC88F1E104EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:3b:b9:39:d1:78:8d:09:c9:dc:f1:64:03: e2:1d:87:b1:af:76:7d:92:74:ef:99:55:35:01:dd: 23:da:a9:4d:5d:53:f9:44:6e:15:8a:00:36:09:19: 28:30:65:82:2f:65:f4:eb:dc:38:5d:57:4d:d0:1e: b4:fa:dc:cf:21:5a:bf:5c:b2:9f:f2:8c:4d:4a:08: 81:ca:8f:7b:d9:82:69:36:69:00:6b:ef:ba:e8:b7: 90:29:43:f5:78:1c:25:ac:c1:9a:cc:15:41:12:7c: 22:08:d8:90:8e:99:13:f1:78:0f:1a:07:18:66:0b: 29:80:e1:65:62:b6:bb:78:3c:f6:af:21:44:c5:0a: 58:6f:0f:f3:13:2d:61:c5:b0:b4:a0:d9:29:cd:2b: ec:98:ca:42:83:88:b3:0b:18:d9:bc:26:bc:e9:c4: bc:ba:6a:12:13:3f:fc:6d:05:9c:32:0e:8c:8c:29: f0:96:99:c0:e8:cf:d3:22:4c:cf:14:85:22:8e:f4: 09:bf:61:29:54:cb:c1:0a:29:17:27:36:61:bf:4f: 0e:49:d2:b9:80:25:ad:73:fc:6b:fe:9a:fd:16:da: 52:fc:36:b4:ab:87:97:f5:48:ef:1e:38:09:83:35: 93:f2:32:ef:25:8e:5b:ca:1b:c7:55:5c:56:93:41: e9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7F:9B:E9:BD:BE:E8:39:65:26:A4:1D:20:0D:BC:88:F1:E1:04:EE X509v3 Authority Key Identifier: keyid:3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0d:f4:52:5a:af:21:ba:01:00:fb:e9:aa:e7:bc:0d:52:31: c4:39:3c:11:38:44:ed:86:cf:71:30:59:fa:b2:3e:41:90:90: 72:57:6c:92:3c:eb:2c:43:d6:99:1c:2d:2b:cd:e8:a3:1b:b8: 8c:b1:63:3e:c2:02:e3:4f:b9:6e:9f:93:8f:9f:61:2c:bf:6b: b4:e8:34:72:d8:c4:da:29:07:10:d7:6f:a0:4e:8f:3b:dc:14: 77:a3:88:9b:5f:ed:45:ad:da:a8:66:e7:d6:8c:0c:6b:19:c5: d8:8b:55:c6:86:93:78:0c:84:b0:39:e8:a3:44:46:9f:53:3a: 25:c8:41:e2:f0:9d:d9:62:25:77:20:d5:ed:39:4a:fb:ef:27: 03:c7:2a:f9:b3:1a:d3:10:65:7c:3c:14:39:5b:8b:61:2e:1b: 8e:cf:51:b1:24:47:58:d1:6b:ae:00:06:fa:00:38:a6:ff:30: d9:a6:91:a4:ea:98:9f:ab:2c:06:87:3d:b1:cb:29:c1:08:72: 5d:9d:75:79:0b:43:0c:95:87:66:53:c3:2f:25:65:e2:84:af: 09:d0:e7:67:56:03:fb:f3:56:29:f8:f9:38:73:2a:74:f7:8f: 50:40:61:4e:a4:fe:64:64:84:4b:c3:25:1d:ea:38:6a:84:c7: ac:e9:6d:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwJXTaZto2oncQsv1G0ryVfBlKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYx QzdGNjUxRTAeFw0yNjExMDQxMDAwNDVaFw0yNjExMDUxMjIyNDVaMDMxMTAvBgNV BAMTKDRCN0Y5QkU5QkRCRUU4Mzk2NTI2QTQxRDIwMERCQzg4RjFFMTA0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1zu5OdF4jQnJ3PFkA+Idh7Gv dn2SdO+ZVTUB3SPaqU1dU/lEbhWKADYJGSgwZYIvZfTr3DhdV03QHrT63M8hWr9c sp/yjE1KCIHKj3vZgmk2aQBr77rot5ApQ/V4HCWswZrMFUESfCII2JCOmRPxeA8a BxhmCymA4WVitrt4PPavIUTFClhvD/MTLWHFsLSg2SnNK+yYykKDiLMLGNm8Jrzp xLy6ahITP/xtBZwyDoyMKfCWmcDoz9MiTM8UhSKO9Am/YSlUy8EKKRcnNmG/Tw5J 0rmAJa1z/Gv+mv0W2lL8NrSrh5f1SO8eOAmDNZPyMu8ljlvKG8dVXFaTQenFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS3+b6b2+6DllJqQdIA28iPHhBO4wHwYDVR0j BBgwFoAUPxotHUtFNjAqUFl3t49fnxx/ZR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0 QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYxQzdGNjUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRjFBMkQxRDRCNDUzNjMwMkE1MDU5NzdCNzhGNUY5RjFDN0Y2 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVG OUYxQzdGNjUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYN9FJaryG6AQD76arnvA1SMcQ5PBE4RO2G z3EwWfqyPkGQkHJXbJI86yxD1pkcLSvN6KMbuIyxYz7CAuNPuW6fk4+fYSy/a7To NHLYxNopBxDXb6BOjzvcFHejiJtf7UWt2qhm59aMDGsZxdiLVcaGk3gMhLA56KNE Rp9TOiXIQeLwndliJXcg1e05SvvvJwPHKvmzGtMQZXw8FDlbi2EuG47PUbEkR1jR a64ABvoAOKb/MNmmkaTqmJ+rLAaHPbHLKcEIcl2ddXkLQwyVh2ZTwy8lZeKErwnQ 52dWA/vzVin4+ThzKnT3j1BAYU6k/mRkhEvDJR3qOGqEx6zpbQU= -----END CERTIFICATE-----Generated at Wed Nov 4 17:05:34 2026 by rpki-client