$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft File: 3693BDB8D9539D53978D42B71411F72DA033C8CE.mft (raw, json) Hash identifier: D+FFDObeMVhXUzENQgvlHzkumhaILW0R2YQNIfDdd78= Subject key identifier: CA:08:91:D5:6A:49:ED:DB:0D:4A:93:0A:98:DD:16:5B:7E:9B:01:6A Authority key identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE Certificate issuer: /CN=3693BDB8D9539D53978D42B71411F72DA033C8CE Certificate serial: 5A63C25D46D9489ED44A9EBA8A270AB39566330D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 20:22:52 +0000 Manifest this update: Wed 02 Sep 2026 20:17:52 +0000 Manifest next update: Thu 03 Sep 2026 22:03:52 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: jSE6GYUud3AuGy6/ruvI9yrqiBFhTM+Gr4dy4Eh9xGg=) 2: 3693BDB8D9539D53978D42B71411F72DA033C8CE.crl (hash: +baqibR+op+BFnjcfsDlo1NTUb/EhAItSjHJn1sg6ww=) 3: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: bAc9RLO23BGn7FV3ehHaNXdYHbfpmRikpiaRJEbpm9w=) 4: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: ygnIvxWNgcK1plnIZrJxs3dfEQPzyHrhskTC9g4HRXE=) 5: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: c8/N6Mnq9mJVhr1EK8ir1JGtt4U3UW5BenMICe3Zx1c=) 6: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: WqTCn5j59dOFJUOOhy3KFyXF/4R8dQGK4UV0a5vcULQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:63:c2:5d:46:d9:48:9e:d4:4a:9e:ba:8a:27:0a:b3:95:66:33:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3693BDB8D9539D53978D42B71411F72DA033C8CE Validity Not Before: Sep 2 20:17:52 2026 GMT Not After : Sep 3 22:03:52 2026 GMT Subject: CN=CA0891D56A49EDDB0D4A930A98DD165B7E9B016A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:13:6f:90:a4:fc:a4:60:90:33:da:17:e0:be: 7a:52:e3:c7:8f:db:8d:ac:ac:dd:70:6e:ae:d7:ac: f0:ba:ff:cf:90:6a:dc:39:81:ca:51:71:17:97:1c: 0f:9a:29:17:e5:a2:6b:6d:e6:fd:bb:d8:11:27:40: 24:99:63:19:94:ec:ea:a0:aa:18:18:28:56:3b:2c: 70:d5:b5:6d:e7:a8:ab:83:87:2e:f7:01:f5:24:d1: ff:5b:01:7b:42:65:d7:f5:8e:31:89:53:a4:79:ca: 79:aa:48:07:c7:b0:31:aa:9e:32:66:42:27:e5:d4: b0:f3:c3:2c:29:4e:4a:6e:d9:80:99:f1:0d:4c:f5: 06:7d:97:c9:82:6c:12:33:c1:aa:28:d5:a5:27:b9: 5b:20:e6:f5:cc:73:11:e0:c6:33:61:e0:b4:1d:c8: bd:1a:65:fa:31:62:2c:3f:48:2d:bd:9b:c8:27:51: e7:e7:5a:f6:a2:a5:7a:89:44:66:af:ef:45:84:65: 46:56:b3:59:d8:70:02:d9:d5:fd:02:c5:3d:79:87: 30:63:69:2a:ac:de:93:fb:bb:44:5d:99:3b:ea:8a: 45:5f:1d:ce:98:c6:d8:f4:f8:85:c6:6e:0a:fc:55: a0:3a:f8:4d:93:c3:7f:80:d9:5b:6c:4a:de:8f:af: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:08:91:D5:6A:49:ED:DB:0D:4A:93:0A:98:DD:16:5B:7E:9B:01:6A X509v3 Authority Key Identifier: keyid:36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:86:da:2c:9e:e3:2d:cc:56:19:c9:5b:da:a6:50:ad:9f:4d: 1d:33:43:fb:97:61:a0:06:2f:69:c3:7a:d4:3f:3a:40:bd:d1: 44:96:df:fb:9b:1c:f9:5f:13:0b:25:75:e8:ce:b1:5f:2a:56: 15:99:b5:26:ab:3d:ab:57:fe:a7:c1:ec:76:b3:52:64:9c:23: 72:a1:95:30:db:cb:7a:de:ba:c6:3e:1a:f4:49:9c:5b:fb:f3: 69:99:5f:07:51:e9:dd:e3:45:d1:b1:c0:f9:de:8a:98:9b:f5: 73:fc:71:17:4b:09:4a:0b:a5:bf:b4:1e:2d:18:3a:84:88:3c: 33:fc:df:c8:5a:03:1a:ee:4f:49:d5:e9:ad:a6:29:3c:3f:3b: 78:66:1e:eb:7d:61:fd:a9:e1:ec:a7:bb:40:16:c9:da:e4:b1: 74:fe:85:8c:3a:3c:96:be:a2:d3:aa:3c:b8:61:57:3e:fc:81: 97:8c:b2:48:be:d3:88:38:66:28:ee:db:88:bb:d8:3f:bc:4c: 17:ef:bb:67:85:b6:9d:37:ee:88:34:cd:20:23:c4:10:bb:4f: fc:00:cf:db:1c:5c:2f:27:b7:79:d6:6d:89:3f:51:99:35:a7: 09:1c:50:06:59:4c:bf:62:ca:58:9d:0a:7f:ba:f3:e6:cb:eb: f9:71:02:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmPCXUbZSJ7USp66iicKs5VmMw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5M0JEQjhEOTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3MkRB MDMzQzhDRTAeFw0yNjA5MDIyMDE3NTJaFw0yNjA5MDMyMjAzNTJaMDMxMTAvBgNV BAMTKENBMDg5MUQ1NkE0OUVEREIwRDRBOTMwQTk4REQxNjVCN0U5QjAxNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdE2+QpPykYJAz2hfgvnpS48eP 242srN1wbq7XrPC6/8+Qatw5gcpRcReXHA+aKRflomtt5v272BEnQCSZYxmU7Oqg qhgYKFY7LHDVtW3nqKuDhy73AfUk0f9bAXtCZdf1jjGJU6R5ynmqSAfHsDGqnjJm Qifl1LDzwywpTkpu2YCZ8Q1M9QZ9l8mCbBIzwaoo1aUnuVsg5vXMcxHgxjNh4LQd yL0aZfoxYiw/SC29m8gnUefnWvaipXqJRGav70WEZUZWs1nYcALZ1f0CxT15hzBj aSqs3pP7u0RdmTvqikVfHc6Yxtj0+IXGbgr8VaA6+E2Tw3+A2VtsSt6PrxXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUygiR1WpJ7dsNSpMKmN0WW36bAWowHwYDVR0j BBgwFoAUNpO9uNlTnVOXjUK3FBH3LaAzyM4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2IxMzBiNzUtNDU5My00MTQxLWEwNmYtNTdhMjJhMDIzZGQwLzAvMzY5M0JEQjhE OTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3MkRBMDMzQzhDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjkzQkRCOEQ5NTM5RDUzOTc4RDQyQjcxNDExRjcyREEwMzND OENFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMzY5M0JEQjhEOTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3 MkRBMDMzQzhDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmG2iye4y3MVhnJW9qmUK2fTR0zQ/uXYaAG L2nDetQ/OkC90USW3/ubHPlfEwsldejOsV8qVhWZtSarPatX/qfB7HazUmScI3Kh lTDby3reusY+GvRJnFv782mZXwdR6d3jRdGxwPneipib9XP8cRdLCUoLpb+0Hi0Y OoSIPDP838haAxruT0nV6a2mKTw/O3hmHut9Yf2p4eynu0AWydrksXT+hYw6PJa+ otOqPLhhVz78gZeMski+04g4Ziju24i72D+8TBfvu2eFtp037og0zSAjxBC7T/wA z9scXC8nt3nWbYk/UZk1pwkcUAZZTL9iylidCn+68+bL6/lxApU= -----END CERTIFICATE-----Generated at Thu Sep 3 09:28:21 2026 by rpki-client