$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft File: 3B7FE3B2042531E0B36242D947F82DF031754FD3.mft (raw, json) Hash identifier: CcX/VjEWe12qA2GdGnIl3D9a7urz7BeFPw5Ri6fY3GU= Subject key identifier: 97:22:0D:2B:DF:9C:FE:96:3D:94:31:41:BB:5C:D9:CE:C7:87:60:E6 Authority key identifier: 3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 Certificate issuer: /CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Certificate serial: 0A75C83D5674E7EE9756AA91860D972C3B51C97B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft Manifest number: F9 Signing time: Thu 05 Nov 2026 02:21:57 +0000 Manifest this update: Thu 05 Nov 2026 02:16:57 +0000 Manifest next update: Fri 06 Nov 2026 03:23:57 +0000 Files and hashes: 1: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: nG1oS5kPYmQFB9gUVJnLfk54lZwsWyYkdNpEIO9gT/M=) 2: 3B7FE3B2042531E0B36242D947F82DF031754FD3.crl (hash: uRDHRjJHdDAW3lf7xfzhMZJ24CFHfH4KE8EqeVfT+mA=) 3: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: 137GCdmWkDay1INFZoJTq4DPdPLmTUTYDzr+pVTMq4w=) 4: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: pTAxtDqCoq1lZ0weKvW5ktevS+0YSpgq+YtzT/tKQzQ=) 5: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: NeiRD0Vhv/h8RWipDP6Q873ht3qdQPfYf3BUMU4aFVw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 03:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:75:c8:3d:56:74:e7:ee:97:56:aa:91:86:0d:97:2c:3b:51:c9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Validity Not Before: Nov 5 02:16:57 2026 GMT Not After : Nov 6 03:23:57 2026 GMT Subject: CN=97220D2BDF9CFE963D943141BB5CD9CEC78760E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:c0:cb:dd:74:6b:6f:22:f7:6d:4f:f7:a8: 64:c7:89:64:84:4d:79:8c:cd:16:5d:08:13:97:96: 3c:95:c8:be:0f:18:dc:83:f8:ae:cd:8c:73:0d:3c: 53:22:63:3f:ee:94:87:ab:3e:7b:16:8d:7d:97:f5: 6a:64:6d:43:eb:a9:88:c1:0f:7e:24:ef:85:72:3b: 8d:cd:db:9f:ce:99:6d:44:65:e9:ea:1e:b1:69:8f: 8a:78:aa:dd:c7:a9:a5:73:3a:50:11:05:85:c6:95: de:65:2a:e6:7e:84:ac:9f:22:96:f2:9c:45:78:1d: 1f:4f:44:90:20:84:75:e3:1c:2f:cb:63:0c:7b:69: 11:c9:4d:84:82:db:15:f2:b1:73:cc:75:83:16:bc: 98:b5:a4:8c:fb:41:92:69:0b:43:f7:37:fc:84:68: 53:26:5a:b7:70:44:29:36:25:f8:c0:55:bd:45:bb: 43:d6:c4:ab:71:34:a9:c2:19:9a:78:d0:94:b4:97: 46:a8:d8:e8:ae:96:5b:98:fe:76:af:f8:bf:ea:30: 0a:79:8f:6c:c3:43:f1:ed:18:26:68:6f:a4:da:93: e1:ca:bc:60:73:fe:b9:f5:e2:48:3e:84:a4:63:41: fe:1c:5d:1c:28:5b:06:a6:01:92:e7:4e:6c:69:2e: 29:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:22:0D:2B:DF:9C:FE:96:3D:94:31:41:BB:5C:D9:CE:C7:87:60:E6 X509v3 Authority Key Identifier: keyid:3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b2:16:78:a5:f3:de:0c:b7:9f:64:ed:96:ef:d1:35:3d:e6: f3:22:bc:ee:f2:d0:df:60:b6:e2:fa:85:77:34:53:35:77:10: fb:af:f6:86:0b:de:40:4c:c3:8f:df:96:0d:6c:4a:70:94:29: bd:2a:60:6b:61:aa:32:02:ee:0e:60:74:1b:e2:10:fe:b7:68: 79:2d:d6:bc:a6:b6:2c:56:5d:6d:3f:6b:22:74:42:08:a1:21: ec:8b:e3:2b:30:c3:02:d8:49:de:e9:9a:ef:05:44:5e:2f:6e: 2c:e7:06:fe:07:c8:e8:71:30:6b:f9:dc:91:72:c3:82:af:3e: 1b:d4:26:fb:fd:f6:cd:cc:20:93:8a:e4:ff:bd:f5:1f:cd:c0: 6e:82:25:32:e6:69:01:08:ff:ea:3a:c1:2b:fe:b1:38:b0:55: dd:dd:ed:af:19:3e:3d:cb:19:f9:15:48:c1:51:81:66:c2:18: 16:ba:56:6b:60:11:bb:82:ff:79:77:92:6a:47:34:61:4c:1a: 89:bc:d9:a0:97:c5:bf:ca:be:69:8d:7c:6b:16:71:e8:b7:fb: b5:bc:ee:10:96:3a:f4:24:9f:a9:22:62:c8:6b:ed:92:9f:83: a6:5f:e4:f3:0c:b5:6d:b3:82:27:f0:eb:70:4f:a4:8b:94:e5: 41:2e:f1:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnXIPVZ05+6XVqqRhg2XLDtRyXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJERjAz MTc1NEZEMzAeFw0yNjExMDUwMjE2NTdaFw0yNjExMDYwMzIzNTdaMDMxMTAvBgNV BAMTKDk3MjIwRDJCREY5Q0ZFOTYzRDk0MzE0MUJCNUNEOUNFQzc4NzYwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICsDL3XRrbyL3bU/3qGTHiWSE TXmMzRZdCBOXljyVyL4PGNyD+K7NjHMNPFMiYz/ulIerPnsWjX2X9WpkbUPrqYjB D34k74VyO43N25/OmW1EZenqHrFpj4p4qt3HqaVzOlARBYXGld5lKuZ+hKyfIpby nEV4HR9PRJAghHXjHC/LYwx7aRHJTYSC2xXysXPMdYMWvJi1pIz7QZJpC0P3N/yE aFMmWrdwRCk2JfjAVb1Fu0PWxKtxNKnCGZp40JS0l0ao2OiulluY/nav+L/qMAp5 j2zDQ/HtGCZob6Tak+HKvGBz/rn14kg+hKRjQf4cXRwoWwamAZLnTmxpLimJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlyINK9+c/pY9lDFBu1zZzseHYOYwHwYDVR0j BBgwFoAUO3/jsgQlMeCzYkLZR/gt8DF1T9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTE0MWY4ODQtZDVjOS00MzM2LTlhNWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIw NDI1MzFFMEIzNjI0MkQ5NDdGODJERjAzMTc1NEZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjdGRTNCMjA0MjUzMUUwQjM2MjQyRDk0N0Y4MkRGMDMxNzU0 RkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJE RjAzMTc1NEZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqyFnil894Mt59k7Zbv0TU95vMivO7y0N9g tuL6hXc0UzV3EPuv9oYL3kBMw4/flg1sSnCUKb0qYGthqjIC7g5gdBviEP63aHkt 1rymtixWXW0/ayJ0QgihIeyL4yswwwLYSd7pmu8FRF4vbiznBv4HyOhxMGv53JFy w4KvPhvUJvv99s3MIJOK5P+99R/NwG6CJTLmaQEI/+o6wSv+sTiwVd3d7a8ZPj3L GfkVSMFRgWbCGBa6VmtgEbuC/3l3kmpHNGFMGom82aCXxb/KvmmNfGsWcei3+7W8 7hCWOvQkn6kiYshr7ZKfg6Zf5PMMtW2zgifw63BPpIuU5UEu8Sk= -----END CERTIFICATE-----Generated at Thu Nov 5 05:23:24 2026 by rpki-client