$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft File: 3B53322385FC84075D5F59542B2C6639361DE40C.mft (raw, json) Hash identifier: VDXf+tglH20h7BfusTkrGg9v8/pUCYNZkz03PUJsFiA= Subject key identifier: 02:F0:25:2B:24:A4:87:17:C0:BF:1D:6B:A7:94:43:F6:2D:70:17:05 Authority key identifier: 3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C Certificate issuer: /CN=3B53322385FC84075D5F59542B2C6639361DE40C Certificate serial: 2BF1F6CF11B25F947D477E99FDB27CB484BD7EC7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 08:43:55 +0000 Manifest this update: Tue 03 Nov 2026 08:38:55 +0000 Manifest next update: Wed 04 Nov 2026 10:23:55 +0000 Files and hashes: 1: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: edgXYAVoofbMfNNTYL6wJjTWLg+lJA34PwxUNFokvFo=) 2: 3B53322385FC84075D5F59542B2C6639361DE40C.crl (hash: Ge7qhiJlhGlJ20eIrWCd7q5i7TwyXbUdBmhk+zeM4X8=) 3: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: zCD5tPWCUNUK6oOFsXZp8GFckmeJahFdBXRBLxy8mgQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f1:f6:cf:11:b2:5f:94:7d:47:7e:99:fd:b2:7c:b4:84:bd:7e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B53322385FC84075D5F59542B2C6639361DE40C Validity Not Before: Nov 3 08:38:55 2026 GMT Not After : Nov 4 10:23:55 2026 GMT Subject: CN=02F0252B24A48717C0BF1D6BA79443F62D701705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:0f:29:36:99:3b:ae:c1:54:f4:02:a7:58: 50:c1:07:8e:7e:09:04:37:de:51:42:02:a8:81:b5: 0f:ff:ba:65:e4:cd:91:7f:0c:a9:bb:74:53:f2:94: 37:75:5e:47:fd:0c:e4:9f:1a:5b:e7:0c:c4:20:10: c9:b1:a5:9e:f3:fe:26:79:06:3d:0c:2f:6b:51:02: 70:46:3b:2d:4d:aa:7c:b1:f3:46:f1:87:94:3a:2f: 0c:c7:28:9a:73:3b:be:3b:59:bd:36:78:2f:fa:54: 8e:1f:3d:e2:91:17:9d:b2:0b:fd:26:89:10:0c:2c: 77:97:1c:ae:c2:99:3a:96:40:48:29:d5:ab:94:1b: 29:05:77:1a:97:e9:d3:68:26:be:c1:c3:32:cc:c2: 09:30:4f:da:6b:e5:02:69:d9:4e:48:f7:4d:03:9d: fe:8e:6a:db:31:c2:79:7d:54:c7:3a:14:a5:e6:57: f4:6f:43:dc:34:15:67:da:d2:57:49:f7:bc:11:44: 0a:9b:ce:33:b5:14:bb:94:e5:ae:a9:d6:bd:45:57: 53:ce:34:28:a1:a3:ef:cb:b5:79:a2:9f:47:7d:6d: 3c:af:ba:db:a2:ea:bf:a6:59:bd:c5:ff:43:ed:27: 9a:2a:48:f8:7e:55:8a:d1:8a:41:e8:9c:bb:e0:6c: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F0:25:2B:24:A4:87:17:C0:BF:1D:6B:A7:94:43:F6:2D:70:17:05 X509v3 Authority Key Identifier: keyid:3B:53:32:23:85:FC:84:07:5D:5F:59:54:2B:2C:66:39:36:1D:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B53322385FC84075D5F59542B2C6639361DE40C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3B53322385FC84075D5F59542B2C6639361DE40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:31:d4:b1:45:5a:90:09:56:a6:90:92:8f:da:7c:47:f4:da: 2c:83:65:de:b6:48:ec:8d:e4:e4:e2:6c:15:b0:38:df:71:7d: fa:ed:7d:79:86:db:7b:63:fb:c3:00:bf:a9:74:0f:ac:ab:25: 0e:2a:f6:a8:94:97:a4:5b:bf:36:86:37:b9:0e:07:f1:66:22: 8c:14:16:a5:ea:7f:8d:4f:1c:c5:33:47:0d:26:45:5e:3f:8e: 73:49:f8:87:ab:20:57:14:aa:0d:24:21:23:79:24:af:d4:9b: 70:a5:92:50:3c:c3:29:26:e4:1d:45:13:42:ec:4e:2d:fe:e6: 38:2f:df:3c:d4:6b:af:b0:74:c0:fa:9b:4e:83:42:86:be:4a: a6:1e:c1:59:a3:7c:68:fc:3e:3a:da:67:94:d6:31:26:f8:fd: b4:47:49:52:48:8b:d9:e6:27:30:85:0e:b9:40:4e:c0:45:7f: 03:06:9a:7c:bc:d4:ce:36:93:1b:84:28:fc:a6:45:91:4e:4b: c8:82:4b:61:2b:4e:38:11:68:e7:6f:51:34:fa:c9:ae:10:5c: 5a:e8:5d:22:7e:87:e1:50:7d:72:49:27:88:28:b8:e2:be:58: cf:8e:63:6d:b4:24:3d:34:9c:52:64:56:4a:97:8d:da:7b:cd: d2:32:64:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/H2zxGyX5R9R36Z/bJ8tIS9fscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2Mzkz NjFERTQwQzAeFw0yNjExMDMwODM4NTVaFw0yNjExMDQxMDIzNTVaMDMxMTAvBgNV BAMTKDAyRjAyNTJCMjRBNDg3MTdDMEJGMUQ2QkE3OTQ0M0Y2MkQ3MDE3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fQ8pNpk7rsFU9AKnWFDBB45+ CQQ33lFCAqiBtQ//umXkzZF/DKm7dFPylDd1Xkf9DOSfGlvnDMQgEMmxpZ7z/iZ5 Bj0ML2tRAnBGOy1Nqnyx80bxh5Q6LwzHKJpzO747Wb02eC/6VI4fPeKRF52yC/0m iRAMLHeXHK7CmTqWQEgp1auUGykFdxqX6dNoJr7BwzLMwgkwT9pr5QJp2U5I900D nf6Oatsxwnl9VMc6FKXmV/RvQ9w0FWfa0ldJ97wRRAqbzjO1FLuU5a6p1r1FV1PO NCiho+/LtXmin0d9bTyvutui6r+mWb3F/0PtJ5oqSPh+VYrRikHonLvgbLS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAvAlKySkhxfAvx1rp5RD9i1wFwUwHwYDVR0j BBgwFoAUO1MyI4X8hAddX1lUKyxmOTYd5AwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODNjYmQ2N2ItZDE5MC00YTRjLTgzYjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4 NUZDODQwNzVENUY1OTU0MkIyQzY2MzkzNjFERTQwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjUzMzIyMzg1RkM4NDA3NUQ1RjU5NTQyQjJDNjYzOTM2MURF NDBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvM0I1MzMyMjM4NUZDODQwNzVENUY1OTU0MkIyQzY2 MzkzNjFERTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMx1LFFWpAJVqaQko/afEf02iyDZd62SOyN 5OTibBWwON9xffrtfXmG23tj+8MAv6l0D6yrJQ4q9qiUl6RbvzaGN7kOB/FmIowU FqXqf41PHMUzRw0mRV4/jnNJ+IerIFcUqg0kISN5JK/Um3ClklA8wykm5B1FE0Ls Ti3+5jgv3zzUa6+wdMD6m06DQoa+SqYewVmjfGj8PjraZ5TWMSb4/bRHSVJIi9nm JzCFDrlATsBFfwMGmny81M42kxuEKPymRZFOS8iCS2ErTjgRaOdvUTT6ya4QXFro XSJ+h+FQfXJJJ4gouOK+WM+OY220JD00nFJkVkqXjdp7zdIyZHM= -----END CERTIFICATE-----Generated at Tue Nov 3 22:44:46 2026 by rpki-client