$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft File: 3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft (raw, json) Hash identifier: D8L5pe615JrGS19g9jzRA9U4a3dxwX5kBG4mYv3lWKg= Subject key identifier: 63:9F:84:43:24:84:D8:ED:BC:87:9B:F8:4D:38:C7:C9:81:E6:86:FF Authority key identifier: 3B:D4:34:9E:7B:55:0B:CE:0E:7C:95:7E:03:D6:2D:60:B7:D2:85:F8 Certificate issuer: /CN=3BD4349E7B550BCE0E7C957E03D62D60B7D285F8 Certificate serial: 5D8E0DCB68D5E0020F7AC78F1925C121EDBAB9CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 16:17:55 +0000 Manifest this update: Tue 03 Nov 2026 16:12:55 +0000 Manifest next update: Wed 04 Nov 2026 19:51:55 +0000 Files and hashes: 1: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: ErPUUUg1dRZKVbJQVmVoH6jrv862m0Pddw1XMyfUrjA=) 2: 3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl (hash: WgNmgChhgEhBLLRedE0Y6a4IDsexOLaygfe2W1ejjT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 19:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:8e:0d:cb:68:d5:e0:02:0f:7a:c7:8f:19:25:c1:21:ed:ba:b9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BD4349E7B550BCE0E7C957E03D62D60B7D285F8 Validity Not Before: Nov 3 16:12:55 2026 GMT Not After : Nov 4 19:51:55 2026 GMT Subject: CN=639F84432484D8EDBC879BF84D38C7C981E686FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:06:0c:6f:e2:1d:6e:d0:ba:86:ac:71:87: 12:68:14:a2:03:2a:1f:d2:99:7a:58:6e:e1:3c:f1: 50:d4:f9:c5:b4:03:be:17:ba:b8:0c:ed:fe:60:04: ee:a2:6c:fd:9a:0f:1b:da:65:7a:99:3c:51:68:fc: d9:59:4b:a9:22:6b:45:4d:7a:28:57:e3:e0:f9:d0: 6e:0c:09:a2:60:92:6b:e5:fd:0e:08:fc:0c:df:de: 37:1e:9e:51:46:fd:64:d2:e6:79:41:03:92:26:1f: d4:36:0a:91:a0:87:1c:87:ad:e1:7f:e8:36:6f:42: 66:d8:46:c8:ba:20:5f:38:50:e9:b0:a5:06:fa:d4: 1d:26:b0:99:cc:3b:03:f4:70:76:b7:4a:e9:a2:c4: f1:56:ac:64:65:d4:a3:58:2c:f6:45:bc:46:2b:2e: ab:16:c7:88:2a:5d:e6:00:df:4a:31:ab:cb:dc:df: 7a:67:ed:92:50:80:6a:30:f5:81:86:ab:bb:7b:ae: bd:e5:95:59:20:0d:b4:6b:33:ec:6f:df:8f:f4:0f: 8f:a2:64:71:f3:73:99:54:8d:5d:b5:c7:90:23:8c: 0d:c0:89:22:8a:48:84:23:ef:07:0f:bf:95:07:d0: 59:d7:30:01:67:f9:c3:f7:46:90:17:5c:4d:60:94: 06:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9F:84:43:24:84:D8:ED:BC:87:9B:F8:4D:38:C7:C9:81:E6:86:FF X509v3 Authority Key Identifier: keyid:3B:D4:34:9E:7B:55:0B:CE:0E:7C:95:7E:03:D6:2D:60:B7:D2:85:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:12:41:f7:a8:b2:3f:f8:39:41:b4:19:82:ac:7e:bf:7d:77: e3:0a:f7:fc:18:97:06:d9:bf:e6:a3:c5:81:c3:6c:c5:6d:77: c5:3d:91:51:61:70:91:ad:ed:e6:ca:28:b4:e9:7f:fa:a2:eb: 2d:cb:40:b3:7a:d7:7b:b1:a8:da:05:55:95:6f:b6:8a:3a:9e: 79:b8:45:e1:6b:19:e0:89:25:40:2b:c4:d2:61:da:47:67:46: 10:08:44:63:ba:fe:46:bd:ef:66:16:ed:b5:e1:c9:8e:77:6a: 60:e7:60:15:84:60:1c:bd:bb:ce:3c:03:99:96:22:77:29:b0: a8:c5:aa:b5:e6:69:e2:4a:81:76:4d:10:2a:a5:b5:1e:5a:33: 7d:37:4e:74:08:dd:30:ac:2d:d5:58:54:e7:51:2a:d9:b3:76: 7c:96:60:2a:d4:6f:67:52:28:83:ae:e6:51:a7:ef:ef:73:74: 9f:e3:da:a8:e1:bb:c8:71:9a:f4:bd:4f:aa:c4:aa:e6:b5:bf: f7:dd:ca:56:d5:5f:da:99:71:bf:f3:fe:6e:30:80:c3:d1:79: 1c:70:ad:08:f1:80:50:63:8e:6c:df:05:a7:a0:89:96:2b:3a: 02:cd:fb:71:a5:25:b4:3f:b1:b5:af:1b:b8:4b:b8:02:8d:d1: f0:9f:68:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXY4Ny2jV4AIPesePGSXBIe26ucswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JENDM0OUU3QjU1MEJDRTBFN0M5NTdFMDNENjJENjBC N0QyODVGODAeFw0yNjExMDMxNjEyNTVaFw0yNjExMDQxOTUxNTVaMDMxMTAvBgNV BAMTKDYzOUY4NDQzMjQ4NEQ4RURCQzg3OUJGODREMzhDN0M5ODFFNjg2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KwYMb+IdbtC6hqxxhxJoFKID Kh/SmXpYbuE88VDU+cW0A74XurgM7f5gBO6ibP2aDxvaZXqZPFFo/NlZS6kia0VN eihX4+D50G4MCaJgkmvl/Q4I/Azf3jcenlFG/WTS5nlBA5ImH9Q2CpGghxyHreF/ 6DZvQmbYRsi6IF84UOmwpQb61B0msJnMOwP0cHa3SumixPFWrGRl1KNYLPZFvEYr LqsWx4gqXeYA30oxq8vc33pn7ZJQgGow9YGGq7t7rr3llVkgDbRrM+xv34/0D4+i ZHHzc5lUjV21x5AjjA3AiSKKSIQj7wcPv5UH0FnXMAFn+cP3RpAXXE1glAbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY5+EQySE2O28h5v4TTjHyYHmhv8wHwYDVR0j BBgwFoAUO9Q0nntVC84OfJV+A9YtYLfShfgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ExZjYyOTktYjE1NS00MjEyLWI1ZTEtOWY1NzAzY2QwOTg5LzAvM0JENDM0OUU3 QjU1MEJDRTBFN0M5NTdFMDNENjJENjBCN0QyODVGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQkQ0MzQ5RTdCNTUwQkNFMEU3Qzk1N0UwM0Q2MkQ2MEI3RDI4 NUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvM0JENDM0OUU3QjU1MEJDRTBFN0M5NTdFMDNENjJE NjBCN0QyODVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoSQfeosj/4OUG0GYKsfr99d+MK9/wYlwbZ v+ajxYHDbMVtd8U9kVFhcJGt7ebKKLTpf/qi6y3LQLN613uxqNoFVZVvtoo6nnm4 ReFrGeCJJUArxNJh2kdnRhAIRGO6/ka972YW7bXhyY53amDnYBWEYBy9u848A5mW IncpsKjFqrXmaeJKgXZNECqltR5aM303TnQI3TCsLdVYVOdRKtmzdnyWYCrUb2dS KIOu5lGn7+9zdJ/j2qjhu8hxmvS9T6rEqua1v/fdylbVX9qZcb/z/m4wgMPReRxw rQjxgFBjjmzfBaegiZYrOgLN+3GlJbQ/sbWvG7hLuAKN0fCfaLM= -----END CERTIFICATE-----Generated at Wed Nov 4 11:15:28 2026 by rpki-client