$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft File: 3B610B6D52EFC83BEC0E681395E172E5584CB922.mft (raw, json) Hash identifier: dF/EX4QZXoIxFwIQCpYW45pIE+uutkVxx0jOLzLoAow= Subject key identifier: 4A:BD:44:98:71:41:4F:8F:CF:48:81:F6:7C:DC:BF:FE:49:AE:E5:07 Authority key identifier: 3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22 Certificate issuer: /CN=3B610B6D52EFC83BEC0E681395E172E5584CB922 Certificate serial: 7571742077449C3F0010EA9954AFD75AEABE351E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 12:28:35 +0000 Manifest this update: Mon 02 Nov 2026 12:23:35 +0000 Manifest next update: Tue 03 Nov 2026 16:26:35 +0000 Files and hashes: 1: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: +4k5B1hiZNKTDNmRtO1UucDd1K3kJOf9PkAdB1Yr6bU=) 2: 3B610B6D52EFC83BEC0E681395E172E5584CB922.crl (hash: 9sq7q8QuM7xM0JpH0qTUUcuPGgGmLFzwyTUTkjmPIS8=) 3: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: rS+TB49YP+YKxVsyAwTK2Y9kOM5qpa1/Sqk+oSuWw+E=) 4: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: JeBWxU2nKUoJd4mmQd29lF3qX2yOUpENL2Ej8COjW7k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:71:74:20:77:44:9c:3f:00:10:ea:99:54:af:d7:5a:ea:be:35:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B610B6D52EFC83BEC0E681395E172E5584CB922 Validity Not Before: Nov 2 12:23:35 2026 GMT Not After : Nov 3 16:26:35 2026 GMT Subject: CN=4ABD449871414F8FCF4881F67CDCBFFE49AEE507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:f1:e6:e9:72:8d:ed:5f:4f:10:3b:1c:60: 3a:ee:68:47:76:37:1f:65:56:2a:4a:25:ea:b8:d6: 62:a7:9d:cf:0c:2b:a9:24:76:6e:6c:59:b0:0b:9f: 62:ee:98:b2:98:3b:5b:3e:d6:b6:bb:07:41:41:2a: 76:52:8c:7b:34:7d:81:10:59:ee:10:b7:9b:32:1d: bd:af:28:5d:4c:20:1f:16:f9:3c:85:bf:60:af:0b: b3:ba:f0:c8:88:0e:71:96:5a:7a:aa:3e:8f:b3:2d: f1:6f:51:87:93:f4:f9:1d:e7:bb:c6:49:85:15:60: 05:03:d3:eb:c2:62:9c:5a:6e:ac:10:43:30:5c:59: 39:b7:19:da:ec:3c:ba:5a:8c:46:72:22:1e:b4:09: 7e:9a:e9:08:8d:24:5c:d1:99:be:0b:1e:34:95:36: 14:c0:37:5c:13:42:9b:c4:f4:57:a4:29:b8:21:51: 3c:ef:8a:20:8c:e6:e3:c0:dc:68:d4:b9:c6:27:6d: f6:f2:41:fb:c9:9e:70:fd:32:5b:02:72:f4:54:fd: 3d:f6:b9:47:45:04:3b:5a:e4:c6:7f:ea:2e:c6:4c: 70:2c:b3:0b:4d:2f:a9:43:43:e7:54:11:64:ab:94: 3f:31:f2:91:99:e9:6d:2c:2b:a6:c5:f9:0b:e1:75: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BD:44:98:71:41:4F:8F:CF:48:81:F6:7C:DC:BF:FE:49:AE:E5:07 X509v3 Authority Key Identifier: keyid:3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d0:c0:7e:cb:fc:f3:bc:38:2b:7b:b1:46:20:b2:76:08:27: 6a:b8:67:8d:3e:6b:32:2f:17:f0:ca:ce:85:d6:24:de:d6:1e: 1f:9a:9f:cc:95:9d:d7:7f:a2:47:63:f2:f1:3a:1d:70:28:62: 73:7c:b6:5e:6f:e8:ab:e4:a7:2c:5b:cb:98:ad:72:26:f1:3a: 72:12:16:f3:a4:ec:18:71:71:bf:df:f6:0b:40:d5:53:5a:03: da:b0:d6:33:f7:3e:5c:58:58:6a:eb:6c:7e:24:92:81:23:d2: 16:77:29:fe:18:ac:68:26:a9:32:73:49:1f:8a:7c:ae:f6:28: 51:90:22:56:b0:85:49:5a:6b:35:4c:22:50:4a:cb:25:4b:b0: b0:26:30:07:33:c5:76:1f:da:95:01:a5:2f:85:c7:17:e8:f3: fa:8e:3b:0c:d8:b5:3a:11:0d:7c:96:dc:6f:3f:3f:2c:6a:cb: 5f:ed:56:5e:91:8d:d1:f1:e6:c2:3f:7c:52:d6:c5:b5:02:8e: d3:32:b7:09:59:b5:b1:b5:fe:b5:41:05:9a:a5:45:1c:a5:20: b1:83:3a:97:6a:03:2f:ea:f7:5e:02:1a:f7:26:be:96:f7:b7: 02:be:8c:ca:0d:ac:db:45:5e:77:49:e2:11:cc:5a:ce:91:a0: 6b:a5:0c:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXF0IHdEnD8AEOqZVK/XWuq+NR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1 ODRDQjkyMjAeFw0yNjExMDIxMjIzMzVaFw0yNjExMDMxNjI2MzVaMDMxMTAvBgNV BAMTKDRBQkQ0NDk4NzE0MTRGOEZDRjQ4ODFGNjdDRENCRkZFNDlBRUU1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9XPHm6XKN7V9PEDscYDruaEd2 Nx9lVipKJeq41mKnnc8MK6kkdm5sWbALn2LumLKYO1s+1ra7B0FBKnZSjHs0fYEQ We4Qt5syHb2vKF1MIB8W+TyFv2CvC7O68MiIDnGWWnqqPo+zLfFvUYeT9Pkd57vG SYUVYAUD0+vCYpxabqwQQzBcWTm3GdrsPLpajEZyIh60CX6a6QiNJFzRmb4LHjSV NhTAN1wTQpvE9FekKbghUTzviiCM5uPA3GjUucYnbfbyQfvJnnD9MlsCcvRU/T32 uUdFBDta5MZ/6i7GTHAsswtNL6lDQ+dUEWSrlD8x8pGZ6W0sK6bF+QvhdfrVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSr1EmHFBT4/PSIH2fNy//kmu5QcwHwYDVR0j BBgwFoAUO2ELbVLvyDvsDmgTleFy5VhMuSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmE4OTZmZGMtNTYzOC00MWQyLThhOTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1 MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1ODRDQjkyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjYxMEI2RDUyRUZDODNCRUMwRTY4MTM5NUUxNzJFNTU4NENC OTIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcy RTU1ODRDQjkyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvQwH7L/PO8OCt7sUYgsnYIJ2q4Z40+azIv F/DKzoXWJN7WHh+an8yVndd/okdj8vE6HXAoYnN8tl5v6Kvkpyxby5itcibxOnIS FvOk7Bhxcb/f9gtA1VNaA9qw1jP3PlxYWGrrbH4kkoEj0hZ3Kf4YrGgmqTJzSR+K fK72KFGQIlawhUlaazVMIlBKyyVLsLAmMAczxXYf2pUBpS+Fxxfo8/qOOwzYtToR DXyW3G8/Pyxqy1/tVl6RjdHx5sI/fFLWxbUCjtMytwlZtbG1/rVBBZqlRRylILGD OpdqAy/q914CGvcmvpb3twK+jMoNrNtFXndJ4hHMWs6RoGulDLw= -----END CERTIFICATE-----Generated at Tue Nov 3 01:32:13 2026 by rpki-client