$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft File: 3B49013F73B5A7AF137F414DE362E405F31D32DC.mft (raw, json) Hash identifier: otrcpeCwG1h+kXwBwtLXyuYjy0zhA9oTwXPamR/sEIo= Subject key identifier: 51:41:55:24:FB:88:5A:65:84:39:C8:BC:E6:76:FD:63:8D:B4:46:F0 Authority key identifier: 3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC Certificate issuer: /CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Certificate serial: 1F5994D27ADED1CC1B0D26C0B83D2EB3A9B169D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 17:44:46 +0000 Manifest this update: Tue 03 Nov 2026 17:39:46 +0000 Manifest next update: Wed 04 Nov 2026 18:58:46 +0000 Files and hashes: 1: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: ahm/HoRAolOxtaIWGqQ0MLjBkp/CWv9tH60t0eSWQkU=) 2: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: KAa2YP9GlXrFj15zwBpksmX3bAfUKyYMHaAYDuzpQWY=) 3: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: 8mVUx2m6cehmTjXBEOh2fhiknIQmwcR5DCPv3UxdfA4=) 4: 3B49013F73B5A7AF137F414DE362E405F31D32DC.crl (hash: G5i9wCxmFo+lM+RId5HmI/ZoB2gETBbcLSqZas24mck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 18:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:59:94:d2:7a:de:d1:cc:1b:0d:26:c0:b8:3d:2e:b3:a9:b1:69:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Validity Not Before: Nov 3 17:39:46 2026 GMT Not After : Nov 4 18:58:46 2026 GMT Subject: CN=51415524FB885A658439C8BCE676FD638DB446F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:50:3e:94:60:4a:65:86:17:9b:65:76:20: 77:3d:ed:41:17:9e:6f:68:ab:d8:d5:32:76:cd:49: 66:0d:c7:be:2d:16:25:83:35:fd:b6:76:6b:21:b0: 7b:c3:eb:2a:b2:c6:35:46:fe:69:da:c8:cc:d4:11: e4:18:9b:3f:a8:38:d8:04:07:6a:9f:fe:4b:04:d1: cd:34:8e:a1:8d:80:0b:b9:15:cd:ee:0a:cc:de:e5: 10:a7:d8:3f:13:4e:f1:f2:25:38:87:ef:99:70:bf: 0a:46:21:12:f0:52:6c:62:70:5a:5a:43:04:86:01: 7d:bc:8e:af:85:8e:7d:e6:15:1f:b0:1b:55:a5:f7: 90:1b:73:b8:0a:ba:a8:aa:e4:c5:a5:98:61:de:50: 7a:6d:c0:cf:00:41:0f:86:7d:81:86:6c:1e:5c:1d: b1:ad:57:34:30:24:87:d6:d9:9f:23:46:54:43:59: 41:cd:87:b0:98:29:45:e7:18:a3:5b:d7:cb:f8:d7: 5c:1c:da:51:11:2d:ba:05:b0:db:39:bb:ae:2d:a3: 55:e7:87:e7:d7:1f:1a:a3:79:dc:df:03:de:e3:eb: 5d:af:f8:00:8f:68:2c:b9:4f:e1:24:95:8e:90:bc: 86:cc:de:95:83:69:3e:a4:95:9c:0f:e0:e9:ad:6c: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:41:55:24:FB:88:5A:65:84:39:C8:BC:E6:76:FD:63:8D:B4:46:F0 X509v3 Authority Key Identifier: keyid:3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:51:88:e6:b4:cb:81:1f:37:fc:ff:30:73:27:f0:57:48:0e: 55:42:8a:ac:bc:7c:b2:b2:15:1b:a9:a9:3d:8c:61:76:60:f2: 97:44:2e:fb:24:56:e1:5e:11:92:69:fe:fc:c9:f7:1a:21:84: ac:3c:18:93:93:e2:0a:41:3c:15:de:cd:47:41:74:00:d3:5e: bf:8b:c6:82:63:54:c3:12:2c:a3:f4:8c:a5:67:57:86:5b:8f: e1:af:5c:2b:bc:a4:21:76:7a:ae:85:1f:bc:28:ba:28:ba:1f: 91:45:f8:ba:c0:fb:28:4e:51:86:ef:e8:7c:90:d4:06:63:1c: cc:b1:cd:7d:e0:f1:a3:3c:6f:b3:6a:86:1f:38:04:1f:20:20: 93:c6:d0:49:de:20:e1:f4:a2:10:10:d8:f0:45:07:89:57:60: fe:0e:9a:f6:38:bb:b7:40:00:2b:66:83:77:1c:a3:b3:e3:ed: 92:c7:59:e1:e0:8b:4a:dd:9c:75:ec:95:45:a8:b5:47:41:4d: d7:d8:8e:1e:1c:fa:65:b8:24:da:fc:43:57:76:41:0e:ac:f6: de:9a:19:23:31:79:7c:fa:71:7f:ac:83:a2:90:ec:20:0d:d3: 21:3e:5f:92:1e:4c:3b:fc:e3:9c:97:d9:48:fd:cd:87:66:cf: 1f:7e:d2:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH1mU0nre0cwbDSbAuD0us6mxadYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVG MzFEMzJEQzAeFw0yNjExMDMxNzM5NDZaFw0yNjExMDQxODU4NDZaMDMxMTAvBgNV BAMTKDUxNDE1NTI0RkI4ODVBNjU4NDM5QzhCQ0U2NzZGRDYzOERCNDQ2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBFA+lGBKZYYXm2V2IHc97UEX nm9oq9jVMnbNSWYNx74tFiWDNf22dmshsHvD6yqyxjVG/mnayMzUEeQYmz+oONgE B2qf/ksE0c00jqGNgAu5Fc3uCsze5RCn2D8TTvHyJTiH75lwvwpGIRLwUmxicFpa QwSGAX28jq+Fjn3mFR+wG1Wl95Abc7gKuqiq5MWlmGHeUHptwM8AQQ+GfYGGbB5c HbGtVzQwJIfW2Z8jRlRDWUHNh7CYKUXnGKNb18v411wc2lERLboFsNs5u64to1Xn h+fXHxqjedzfA97j612v+ACPaCy5T+EklY6QvIbM3pWDaT6klZwP4OmtbLChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUUFVJPuIWmWEOci85nb9Y420RvAwHwYDVR0j BBgwFoAUO0kBP3O1p68Tf0FN42LkBfMdMtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJmM2Y1ZDktY2ZiOC00MTIzLWEyYjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3 M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVGMzFEMzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjQ5MDEzRjczQjVBN0FGMTM3RjQxNERFMzYyRTQwNUYzMUQz MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0 MDVGMzFEMzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5RiOa0y4EfN/z/MHMn8FdIDlVCiqy8fLKy FRupqT2MYXZg8pdELvskVuFeEZJp/vzJ9xohhKw8GJOT4gpBPBXezUdBdADTXr+L xoJjVMMSLKP0jKVnV4Zbj+GvXCu8pCF2eq6FH7wouii6H5FF+LrA+yhOUYbv6HyQ 1AZjHMyxzX3g8aM8b7Nqhh84BB8gIJPG0EneIOH0ohAQ2PBFB4lXYP4OmvY4u7dA ACtmg3cco7Pj7ZLHWeHgi0rdnHXslUWotUdBTdfYjh4c+mW4JNr8Q1d2QQ6s9t6a GSMxeXz6cX+sg6KQ7CAN0yE+X5IeTDv845yX2Uj9zYdmzx9+0uM= -----END CERTIFICATE-----Generated at Wed Nov 4 10:40:48 2026 by rpki-client