$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft File: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft (raw, json) Hash identifier: wbwkj5iwm/c03FsY3n1uCEzhi65Mt9Sma1GU7vMiFCE= Subject key identifier: A4:66:D2:27:46:A2:3A:15:6A:AB:07:0E:CC:78:66:D5:FD:5C:E1:65 Authority key identifier: 3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 Certificate issuer: /CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Certificate serial: 7081358EDD5DF05D8BFBD9F9AD8A18D72C9C93D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 05:39:47 +0000 Manifest this update: Thu 03 Sep 2026 05:34:47 +0000 Manifest next update: Fri 04 Sep 2026 06:44:47 +0000 Files and hashes: 1: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: UuNBQfu/W2xG5QH9528nkcryc9rKbacdNqSPH3ls1PA=) 2: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tCaJ2zwdgsb4+fHqF/Tm3Uoxd1Qn9nKNIXa1bnIvzy4=) 3: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl (hash: P2PECmFwPiZTMkmwkS+vQy2KU6bAy52MtPGVFOAM76I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 06:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:81:35:8e:dd:5d:f0:5d:8b:fb:d9:f9:ad:8a:18:d7:2c:9c:93:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Validity Not Before: Sep 3 05:34:47 2026 GMT Not After : Sep 4 06:44:47 2026 GMT Subject: CN=A466D22746A23A156AAB070ECC7866D5FD5CE165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:29:5d:a8:7e:4d:d2:a8:3e:1a:6d:08:ac: ca:5b:1b:e5:8d:51:f6:6d:a2:51:ac:66:2f:86:c0: 52:ed:44:c7:31:7e:f1:d4:7a:16:4e:2d:2f:3a:26: c5:a4:af:86:fa:6d:af:85:57:9f:0c:20:ea:9d:35: de:2a:04:83:65:17:7e:06:04:85:6c:a0:07:c7:26: 38:ac:33:93:bc:78:16:3f:45:7e:f4:ea:3b:3b:a7: 96:32:47:d0:62:e2:b7:f6:76:26:01:23:a5:78:b6: b1:97:3a:61:0f:17:e5:f5:a2:e0:66:05:df:93:6e: 0f:9f:02:93:ae:85:48:7d:30:70:26:98:59:7f:4d: 11:be:a1:31:cb:c4:d8:87:13:ee:64:9e:e5:88:9f: 0c:78:51:46:07:b5:f4:bb:89:d4:14:be:fd:a0:53: a3:72:47:4a:25:eb:41:b6:0d:27:4e:0a:3f:52:f7: e1:89:eb:9e:3a:79:98:2c:0c:26:f9:a8:4c:c9:7d: f3:5b:31:ec:fc:7d:00:02:34:ab:40:2e:8a:64:aa: 93:4f:1f:a8:e1:bc:b8:ec:7b:0c:f4:7a:a9:ba:78: dd:e7:e8:0a:73:1d:71:5c:22:fa:e9:5c:01:7e:08: 4b:ca:46:bc:63:fb:2e:5a:26:82:c5:5c:54:e4:92: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:66:D2:27:46:A2:3A:15:6A:AB:07:0E:CC:78:66:D5:FD:5C:E1:65 X509v3 Authority Key Identifier: keyid:3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e0:cb:a8:37:9a:6b:3f:02:51:b8:c8:b2:b1:fc:a7:42:da: d4:c3:f1:be:5c:6b:9b:fa:6c:35:aa:cb:ae:fd:63:31:f7:c8: dc:b8:f8:f0:cb:d7:9d:c2:46:0d:5f:bd:f0:1e:cd:04:ea:3e: ad:cf:a1:cf:c5:d7:c2:43:47:57:d3:55:c9:c9:7e:d7:72:1d: 7a:73:a0:3a:37:6d:89:9e:7b:47:9c:60:b9:ea:12:6a:0c:8c: 3f:12:90:1f:36:84:51:eb:ff:17:60:82:d9:b0:2d:d2:6d:1a: 89:0e:48:18:34:f7:97:9c:54:7e:3a:f8:69:ea:7c:3b:65:39: 95:26:c2:ad:1f:2a:71:7d:46:c4:7d:b7:2b:cc:3b:c5:72:2f: 0f:c1:1d:c1:a6:76:8e:4c:f2:1d:7e:0a:1c:0f:66:fb:28:36: 03:c8:7e:9d:a8:f6:5b:3b:b1:55:d9:f6:54:26:18:dd:77:56: a3:1a:6c:0c:3f:39:3a:22:f8:2b:26:b9:df:f0:ca:6b:c6:90: 97:18:b7:d1:4f:ad:07:d6:3b:95:0d:d9:7b:e2:97:b8:ed:26: 9d:a2:e8:da:d7:bd:61:fa:8d:56:28:8e:30:f5:12:59:54:64: 0d:47:a9:47:55:d4:67:4e:6d:57:e6:76:9b:f4:f2:c5:84:27: 9f:d4:8e:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcIE1jt1d8F2L+9n5rYoY1yyck9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhC RTc3NzdGOTAeFw0yNjA5MDMwNTM0NDdaFw0yNjA5MDQwNjQ0NDdaMDMxMTAvBgNV BAMTKEE0NjZEMjI3NDZBMjNBMTU2QUFCMDcwRUNDNzg2NkQ1RkQ1Q0UxNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrSldqH5N0qg+Gm0IrMpbG+WN UfZtolGsZi+GwFLtRMcxfvHUehZOLS86JsWkr4b6ba+FV58MIOqdNd4qBINlF34G BIVsoAfHJjisM5O8eBY/RX706js7p5YyR9Bi4rf2diYBI6V4trGXOmEPF+X1ouBm Bd+Tbg+fApOuhUh9MHAmmFl/TRG+oTHLxNiHE+5knuWInwx4UUYHtfS7idQUvv2g U6NyR0ol60G2DSdOCj9S9+GJ6546eZgsDCb5qEzJffNbMez8fQACNKtALopkqpNP H6jhvLjsewz0eqm6eN3n6ApzHXFcIvrpXAF+CEvKRrxj+y5aJoLFXFTkktcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpGbSJ0aiOhVqqwcOzHhm1f1c4WUwHwYDVR0j BBgwFoAUP+Wgn4DCLATXfzDe3ya5CL53d/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkxNTdjZWQtZTgyYy00MzM0LTkwM2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4 MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhCRTc3NzdGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU1QTA5RjgwQzIyQzA0RDc3RjMwREVERjI2QjkwOEJFNzc3 N0Y5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5 MDhCRTc3NzdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXgy6g3mms/AlG4yLKx/KdC2tTD8b5ca5v6 bDWqy679YzH3yNy4+PDL153CRg1fvfAezQTqPq3Poc/F18JDR1fTVcnJftdyHXpz oDo3bYmee0ecYLnqEmoMjD8SkB82hFHr/xdggtmwLdJtGokOSBg095ecVH46+Gnq fDtlOZUmwq0fKnF9RsR9tyvMO8VyLw/BHcGmdo5M8h1+ChwPZvsoNgPIfp2o9ls7 sVXZ9lQmGN13VqMabAw/OToi+Csmud/wymvGkJcYt9FPrQfWO5UN2Xvil7jtJp2i 6NrXvWH6jVYojjD1EllUZA1HqUdV1GdObVfmdpv08sWEJ5/Ujvk= -----END CERTIFICATE-----Generated at Thu Sep 3 12:35:38 2026 by rpki-client