$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft File: 3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft (raw, json) Hash identifier: 0RvUJ6vD0F4sVwTLyJBetVoQjeaXK/Ac9hBowM8gwmg= Subject key identifier: EA:8C:EF:63:FD:B8:98:18:B4:83:2D:44:C0:F7:7F:91:21:99:1A:AC Authority key identifier: 3B:23:9D:64:43:F9:FF:34:F9:3D:5A:A3:9D:F2:8D:7E:DE:E8:06:89 Certificate issuer: /CN=3B239D6443F9FF34F93D5AA39DF28D7EDEE80689 Certificate serial: 42420390F109873F04B421A4A1D57784808885DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 00:08:15 +0000 Manifest this update: Thu 03 Sep 2026 00:03:15 +0000 Manifest next update: Fri 04 Sep 2026 03:00:15 +0000 Files and hashes: 1: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: KJK22WdEptN4Z5tJMclzFpxJ7XT8hQKbX5zWOGXbC6s=) 2: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: b6jqSGzO23ax7FGySYAB/IT1h4HAm4Nn/5ElYlZlniI=) 3: 3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl (hash: Pq7S3FdUiqFAXPjcxEL85Z7GKzVxPU/mnZ58EMwhUjg=) 4: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: 4WWBK+Xqi+9dfO6ReYcexqiP6BjY/M7vdE8KEBcG6ss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 03:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:42:03:90:f1:09:87:3f:04:b4:21:a4:a1:d5:77:84:80:88:85:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B239D6443F9FF34F93D5AA39DF28D7EDEE80689 Validity Not Before: Sep 3 00:03:15 2026 GMT Not After : Sep 4 03:00:15 2026 GMT Subject: CN=EA8CEF63FDB89818B4832D44C0F77F9121991AAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:be:8e:66:8f:93:5e:0a:c7:6a:be:ad:94: de:be:f3:16:b9:73:2c:0d:ef:3a:32:5a:e4:28:6f: c2:ff:c5:31:c9:dd:9d:6b:46:2b:3a:31:8b:73:e6: 9e:8a:79:f4:6c:6b:26:ea:02:bd:8d:9f:6b:65:5d: c8:5e:89:64:73:a2:5d:12:3f:0e:ea:25:c0:c1:68: a0:92:18:13:0b:89:df:ab:a9:8c:dc:3d:8f:d8:6c: ba:05:97:5b:a4:fd:78:32:7b:2d:8b:91:4e:08:9e: 73:3c:a6:e0:3d:6b:61:82:66:f1:4f:69:8c:b3:c3: d3:44:00:65:4f:d0:2d:4f:a4:9e:e4:04:ba:29:df: 1c:74:37:28:05:bd:b7:c3:0c:50:28:b2:9e:4b:b8: 6b:40:af:d8:5c:c1:d0:35:7e:a2:d1:6b:bc:09:fa: 80:d0:7e:a8:6a:77:75:4b:ed:b4:35:dd:37:2f:52: 2b:cb:59:6b:2c:b4:66:13:74:d0:45:e6:50:a7:c6: be:e8:e0:cb:51:ac:19:4a:e8:6f:46:1d:43:36:e2: 92:ec:52:6c:ae:fc:e8:a4:d2:6f:e8:42:f5:27:b5: 70:0f:39:30:7e:89:cd:d1:eb:57:83:e2:93:da:e7: b3:a8:ce:12:91:c4:eb:69:70:a5:7c:48:bf:90:d0: 6a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8C:EF:63:FD:B8:98:18:B4:83:2D:44:C0:F7:7F:91:21:99:1A:AC X509v3 Authority Key Identifier: keyid:3B:23:9D:64:43:F9:FF:34:F9:3D:5A:A3:9D:F2:8D:7E:DE:E8:06:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3B239D6443F9FF34F93D5AA39DF28D7EDEE80689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:b2:a2:c6:4f:c1:40:45:37:fb:5d:2a:d1:fe:64:30:b3:95: a4:25:9f:48:b1:54:14:a9:aa:2a:ff:1c:34:cc:15:c6:19:54: c0:21:56:28:87:0c:27:e7:4a:4d:d3:0b:50:a8:91:d3:5f:e7: a9:60:d9:9b:aa:4f:27:56:03:30:b1:2b:df:8d:0c:82:bf:b1: 55:34:e6:82:cb:ae:e8:8c:73:33:0a:1f:38:41:cd:15:9c:a7: db:77:d4:d4:a0:6b:35:d4:8d:13:2a:80:c0:fc:bc:de:d3:6a: a3:92:03:c0:9e:b5:14:fa:ee:0a:1b:1e:d2:24:85:54:0f:dc: 39:d1:20:bb:40:47:79:e9:22:6b:ba:a9:26:f9:b8:98:9d:62: 4c:13:67:76:b9:a7:fa:ec:40:8c:a8:71:ee:b2:1f:db:50:73: 99:33:08:92:bc:76:66:ce:8d:73:26:12:94:15:26:44:c0:4b: 14:35:19:c9:b8:a6:2f:b7:95:3b:25:3e:1a:e4:22:bc:9d:e9: 65:d1:a7:9d:4e:8d:af:ca:13:fb:f3:f5:b8:d7:ec:f5:53:e1: 91:77:55:2c:da:43:8f:7e:b6:4b:19:5f:11:b7:5a:de:9f:25: df:ae:c9:84:66:f4:a2:34:06:09:3b:27:cd:c3:a0:95:11:9d: 7c:2b:65:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkIDkPEJhz8EtCGkodV3hICIhdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyMzlENjQ0M0Y5RkYzNEY5M0Q1QUEzOURGMjhEN0VE RUU4MDY4OTAeFw0yNjA5MDMwMDAzMTVaFw0yNjA5MDQwMzAwMTVaMDMxMTAvBgNV BAMTKEVBOENFRjYzRkRCODk4MThCNDgzMkQ0NEMwRjc3RjkxMjE5OTFBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVf76OZo+TXgrHar6tlN6+8xa5 cywN7zoyWuQob8L/xTHJ3Z1rRis6MYtz5p6KefRsaybqAr2Nn2tlXcheiWRzol0S Pw7qJcDBaKCSGBMLid+rqYzcPY/YbLoFl1uk/Xgyey2LkU4InnM8puA9a2GCZvFP aYyzw9NEAGVP0C1PpJ7kBLop3xx0NygFvbfDDFAosp5LuGtAr9hcwdA1fqLRa7wJ +oDQfqhqd3VL7bQ13TcvUivLWWsstGYTdNBF5lCnxr7o4MtRrBlK6G9GHUM24pLs Umyu/Oik0m/oQvUntXAPOTB+ic3R61eD4pPa57OozhKRxOtpcKV8SL+Q0Gr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ozvY/24mBi0gy1EwPd/kSGZGqwwHwYDVR0j BBgwFoAUOyOdZEP5/zT5PVqjnfKNft7oBokwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzQ5NTY1MDUtZDZiMy00M2RjLTkwNzAtZDRkYmRiN2NmOTYzLzAvM0IyMzlENjQ0 M0Y5RkYzNEY5M0Q1QUEzOURGMjhEN0VERUU4MDY4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjIzOUQ2NDQzRjlGRjM0RjkzRDVBQTM5REYyOEQ3RURFRTgw Njg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzQ5NTY1MDUtZDZiMy00M2RjLTkw NzAtZDRkYmRiN2NmOTYzLzAvM0IyMzlENjQ0M0Y5RkYzNEY5M0Q1QUEzOURGMjhE N0VERUU4MDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANGyosZPwUBFN/tdKtH+ZDCzlaQln0ixVBSp qir/HDTMFcYZVMAhViiHDCfnSk3TC1CokdNf56lg2ZuqTydWAzCxK9+NDIK/sVU0 5oLLruiMczMKHzhBzRWcp9t31NSgazXUjRMqgMD8vN7TaqOSA8CetRT67gobHtIk hVQP3DnRILtAR3npImu6qSb5uJidYkwTZ3a5p/rsQIyoce6yH9tQc5kzCJK8dmbO jXMmEpQVJkTASxQ1Gcm4pi+3lTslPhrkIryd6WXRp51Oja/KE/vz9bjX7PVT4ZF3 VSzaQ49+tksZXxG3Wt6fJd+uyYRm9KI0Bgk7J83DoJURnXwrZc0= -----END CERTIFICATE-----Generated at Thu Sep 3 12:59:14 2026 by rpki-client