$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft File: 3B49013F73B5A7AF137F414DE362E405F31D32DC.mft (raw, json) Hash identifier: nSnxwx5b13JibDWy3tJgnEocxiEvM/w8y3ccmRPX4Tc= Subject key identifier: F1:40:53:5D:44:FA:B8:19:CA:6E:97:F8:A5:A9:70:44:FC:48:4C:4F Authority key identifier: 3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC Certificate issuer: /CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Certificate serial: 371A98F4E895A5B84865F28E1402FEA57E9B1BC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 11:01:54 +0000 Manifest this update: Wed 04 Nov 2026 10:56:54 +0000 Manifest next update: Thu 05 Nov 2026 11:08:54 +0000 Files and hashes: 1: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: KAa2YP9GlXrFj15zwBpksmX3bAfUKyYMHaAYDuzpQWY=) 2: 3B49013F73B5A7AF137F414DE362E405F31D32DC.crl (hash: viwNvTbA5jDC6kc+NTTfU8AWBo9zqG9Fgrhd7V4PgEY=) 3: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: 8mVUx2m6cehmTjXBEOh2fhiknIQmwcR5DCPv3UxdfA4=) 4: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: ahm/HoRAolOxtaIWGqQ0MLjBkp/CWv9tH60t0eSWQkU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:1a:98:f4:e8:95:a5:b8:48:65:f2:8e:14:02:fe:a5:7e:9b:1b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Validity Not Before: Nov 4 10:56:54 2026 GMT Not After : Nov 5 11:08:54 2026 GMT Subject: CN=F140535D44FAB819CA6E97F8A5A97044FC484C4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:e3:ee:70:f4:01:66:f2:3f:17:41:00:99: 1c:f6:ec:cf:5a:4a:c0:6b:e8:62:64:f7:e2:1d:5a: bf:9a:a1:7a:49:44:97:e0:a0:4b:19:50:ab:bb:bd: ea:84:16:33:3a:32:f4:62:9f:78:6a:a9:de:42:89: 45:aa:ce:7e:9a:7a:dd:e5:b7:e5:eb:85:4e:17:5c: d0:6b:f2:d4:08:ce:6d:dd:96:8b:96:36:81:46:33: e8:43:ae:dc:ff:46:e2:92:51:ac:74:ba:57:48:4c: 0d:df:69:f7:fe:aa:e6:f1:52:0a:db:2a:c1:d0:22: f5:b1:8c:6c:9d:1e:c7:13:64:d9:07:02:65:ac:c9: 97:9e:fd:2d:06:0b:26:93:52:25:88:f6:77:f2:aa: fd:27:29:f4:fd:cb:af:38:fb:87:28:40:61:4f:64: 70:98:5f:6a:5d:bb:33:ef:8d:1f:6b:29:fc:17:03: 69:b2:1a:d0:7e:1e:c7:31:66:f3:c0:19:cb:3f:15: b9:ac:4d:74:f6:f3:f8:3f:0f:eb:42:d9:a3:36:16: ff:11:28:dc:ba:17:ea:ce:a2:f1:48:9f:a8:92:ae: b8:bc:6b:97:50:ef:76:b7:22:c5:75:d3:30:44:34: 75:73:20:42:1e:b2:ff:1a:f4:30:7e:23:60:db:52: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:40:53:5D:44:FA:B8:19:CA:6E:97:F8:A5:A9:70:44:FC:48:4C:4F X509v3 Authority Key Identifier: keyid:3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:40:57:14:5d:7d:65:dc:bc:68:06:8d:c2:53:e7:7b:86:ea: 7c:91:1b:17:10:53:49:ad:b0:b5:12:f7:8c:22:4f:6d:26:23: 71:54:6e:7e:ba:52:7e:3f:5a:f8:29:cd:ad:db:29:c8:aa:7b: 1f:f4:80:a7:46:ba:20:4b:96:49:82:94:bf:94:d8:71:b7:cd: 23:20:f1:e7:db:7a:e6:6c:d7:5e:5d:e5:d6:4e:c3:e8:4f:aa: b4:f2:54:16:fb:d7:dc:bb:55:45:2b:2f:ac:7a:8b:c5:92:d0: 3d:1b:37:4d:82:a5:2c:13:17:44:80:04:25:13:05:83:19:33: 08:f2:0a:be:34:9a:da:56:4e:e0:37:56:28:39:0f:34:93:51: 80:08:7c:97:46:90:48:7b:27:ea:b0:ed:7b:3b:7f:29:cb:3d: f1:67:a5:c8:65:20:2c:cb:98:a1:a9:d5:0c:50:7f:9f:89:2f: ac:60:19:b7:9b:b7:c9:16:4e:1c:2f:6a:44:7e:2f:bc:7d:92: 8d:3c:da:e9:47:f9:9f:37:39:f0:6d:8f:dc:86:56:55:45:97: 94:9a:23:6f:48:bd:bc:66:39:41:39:ba:8c:30:5f:66:96:82: cc:9b:c5:7a:49:0a:4d:d2:1e:05:b4:d6:85:5a:f5:84:2d:6e: 84:ba:b9:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxqY9OiVpbhIZfKOFAL+pX6bG8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVG MzFEMzJEQzAeFw0yNjExMDQxMDU2NTRaFw0yNjExMDUxMTA4NTRaMDMxMTAvBgNV BAMTKEYxNDA1MzVENDRGQUI4MTlDQTZFOTdGOEE1QTk3MDQ0RkM0ODRDNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+G+PucPQBZvI/F0EAmRz27M9a SsBr6GJk9+IdWr+aoXpJRJfgoEsZUKu7veqEFjM6MvRin3hqqd5CiUWqzn6aet3l t+XrhU4XXNBr8tQIzm3dlouWNoFGM+hDrtz/RuKSUax0uldITA3faff+qubxUgrb KsHQIvWxjGydHscTZNkHAmWsyZee/S0GCyaTUiWI9nfyqv0nKfT9y684+4coQGFP ZHCYX2pduzPvjR9rKfwXA2myGtB+HscxZvPAGcs/FbmsTXT28/g/D+tC2aM2Fv8R KNy6F+rOovFIn6iSrri8a5dQ73a3IsV10zBENHVzIEIesv8a9DB+I2DbUjTXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8UBTXUT6uBnKbpf4palwRPxITE8wHwYDVR0j BBgwFoAUO0kBP3O1p68Tf0FN42LkBfMdMtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJmM2Y1ZDktY2ZiOC00MTIzLWEyYjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3 M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVGMzFEMzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjQ5MDEzRjczQjVBN0FGMTM3RjQxNERFMzYyRTQwNUYzMUQz MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0 MDVGMzFEMzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFAVxRdfWXcvGgGjcJT53uG6nyRGxcQU0mt sLUS94wiT20mI3FUbn66Un4/Wvgpza3bKciqex/0gKdGuiBLlkmClL+U2HG3zSMg 8efbeuZs115d5dZOw+hPqrTyVBb719y7VUUrL6x6i8WS0D0bN02CpSwTF0SABCUT BYMZMwjyCr40mtpWTuA3Vig5DzSTUYAIfJdGkEh7J+qw7Xs7fynLPfFnpchlICzL mKGp1QxQf5+JL6xgGbebt8kWThwvakR+L7x9ko082ulH+Z83OfBtj9yGVlVFl5Sa I29IvbxmOUE5uowwX2aWgsybxXpJCk3SHgW01oVa9YQtboS6uQA= -----END CERTIFICATE-----Generated at Wed Nov 4 13:53:33 2026 by rpki-client