$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft File: 3B740E02ADF50A090229B5DFEE5D48777D442C83.mft (raw, json) Hash identifier: /IL+H/Vf8hVfkYsGshTjq/3Wkoad5asq6pChqrBoCUY= Subject key identifier: 7A:2B:4B:17:58:84:AF:BE:07:7A:FA:97:70:B7:AE:9F:9D:FB:BF:38 Authority key identifier: 3B:74:0E:02:AD:F5:0A:09:02:29:B5:DF:EE:5D:48:77:7D:44:2C:83 Certificate issuer: /CN=3B740E02ADF50A090229B5DFEE5D48777D442C83 Certificate serial: 537829D98D64EB9B12D43AE9971A5290C3FC66BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 06:10:24 +0000 Manifest this update: Mon 02 Nov 2026 06:05:24 +0000 Manifest next update: Tue 03 Nov 2026 09:31:24 +0000 Files and hashes: 1: 3B740E02ADF50A090229B5DFEE5D48777D442C83.crl (hash: 9mmsAkceIWLtDkNdw3TxdmllwpBm6Wg0E8u0xQys09s=) 2: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: i56VPm8geIM7DmKA6wVbD62/QX+ViWuBIOqGaxDkwxE=) 3: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: A64nz+PX97FI4XaYpiwCqqmRUX6++gtRUre5i1lF2QA=) 4: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: t900xpPMJSc/gFkRKXE//s7FBpHQK9U7wVdaIlj2010=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.crl rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:78:29:d9:8d:64:eb:9b:12:d4:3a:e9:97:1a:52:90:c3:fc:66:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B740E02ADF50A090229B5DFEE5D48777D442C83 Validity Not Before: Nov 2 06:05:24 2026 GMT Not After : Nov 3 09:31:24 2026 GMT Subject: CN=7A2B4B175884AFBE077AFA9770B7AE9F9DFBBF38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:0a:e8:0d:3b:0e:3b:6d:7a:3a:e7:5b:17: 03:05:b5:51:20:a4:d4:81:18:d6:5b:b7:c9:5b:8f: 74:b0:bd:35:69:60:e7:3f:e5:4a:1b:42:26:a8:4c: 58:3f:21:a5:0e:73:04:8c:c9:ef:11:58:43:94:58: c0:91:d9:9e:f8:bc:e0:7b:c7:62:39:e4:df:56:56: 39:9e:45:83:8d:c1:72:48:56:f9:d8:5e:a1:75:d9: 79:39:78:bc:10:16:b3:44:e2:80:51:da:45:93:ec: a2:c6:d7:23:fe:25:08:60:91:a0:ce:dc:f0:dc:6d: 7d:aa:94:3e:a2:47:77:60:ca:0b:76:00:da:9a:fa: ef:6a:db:10:3f:9e:19:7e:1b:dd:4c:41:f2:7e:ab: 0a:15:40:0f:44:84:50:94:37:5d:e5:bf:1c:44:29: 34:6e:1a:5b:57:7b:71:ca:d3:0f:ca:35:6d:a4:2c: 9f:01:e7:e3:33:69:2c:3d:82:a9:e7:08:4d:a8:07: cb:16:2d:3f:aa:c5:6f:c4:ab:f6:b5:26:e0:db:78: 00:60:e9:08:f6:6c:d2:df:cb:be:47:50:66:87:0e: 60:37:6a:b0:a3:bc:f6:f4:4a:71:51:40:d3:3e:26: f9:11:34:60:1b:79:bd:06:6f:d1:35:19:c2:78:ce: 69:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2B:4B:17:58:84:AF:BE:07:7A:FA:97:70:B7:AE:9F:9D:FB:BF:38 X509v3 Authority Key Identifier: keyid:3B:74:0E:02:AD:F5:0A:09:02:29:B5:DF:EE:5D:48:77:7D:44:2C:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:93:db:df:c2:30:a1:98:a5:94:e9:8a:8e:f6:c4:de:36:41: 74:7f:93:c9:03:0e:ab:d9:b0:9d:73:5b:69:1d:a3:ac:d6:fa: 7d:82:02:ab:32:cd:00:5d:77:8b:8c:da:ce:3c:ae:a9:df:29: e2:b7:5d:40:54:2f:5f:58:bb:4b:f3:e6:bb:16:01:22:8d:b0: 2e:36:02:47:31:a5:98:d3:c1:da:fb:77:e0:1d:c2:0d:04:70: 8d:78:89:b9:62:30:cd:7a:f7:c1:a2:50:3f:99:fc:7c:c6:61: 64:94:70:70:17:df:db:c4:66:6a:06:43:17:c1:e8:b7:11:a3: 33:ec:cd:de:29:fd:2f:6e:b7:42:7b:65:25:c3:c9:d8:61:25: db:11:91:20:f8:ef:bd:a1:1a:bb:15:f3:25:95:87:1e:fc:04: 37:25:e1:ed:77:63:96:2a:a8:7e:fd:02:41:3a:c6:8e:a4:9e: 8b:3c:61:2c:3a:df:22:d5:61:b6:2b:51:e4:b6:30:09:84:4f: b6:1e:e4:6f:c0:ca:9a:a8:92:8d:0b:ee:2b:41:04:85:45:f5: 64:c5:5d:0f:d4:10:4f:57:ff:33:bc:ba:f9:d2:7a:89:fd:b7: 50:88:d9:fa:2e:e6:00:e1:35:73:4b:67:4f:47:b8:e5:6b:a1: 5e:b8:4a:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU3gp2Y1k65sS1DrplxpSkMP8Zr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NDBFMDJBREY1MEEwOTAyMjlCNURGRUU1RDQ4Nzc3 RDQ0MkM4MzAeFw0yNjExMDIwNjA1MjRaFw0yNjExMDMwOTMxMjRaMDMxMTAvBgNV BAMTKDdBMkI0QjE3NTg4NEFGQkUwNzdBRkE5NzcwQjdBRTlGOURGQkJGMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPvAroDTsOO216OudbFwMFtVEg pNSBGNZbt8lbj3SwvTVpYOc/5UobQiaoTFg/IaUOcwSMye8RWEOUWMCR2Z74vOB7 x2I55N9WVjmeRYONwXJIVvnYXqF12Xk5eLwQFrNE4oBR2kWT7KLG1yP+JQhgkaDO 3PDcbX2qlD6iR3dgygt2ANqa+u9q2xA/nhl+G91MQfJ+qwoVQA9EhFCUN13lvxxE KTRuGltXe3HK0w/KNW2kLJ8B5+MzaSw9gqnnCE2oB8sWLT+qxW/Eq/a1JuDbeABg 6Qj2bNLfy75HUGaHDmA3arCjvPb0SnFRQNM+JvkRNGAbeb0Gb9E1GcJ4zmmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeitLF1iEr74HevqXcLeun537vzgwHwYDVR0j BBgwFoAUO3QOAq31CgkCKbXf7l1Id31ELIMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2MwZDQwYmMtOTNjOC00MTViLWI2YTgtYWVmMDg4ZDdmNGQ0LzAvM0I3NDBFMDJB REY1MEEwOTAyMjlCNURGRUU1RDQ4Nzc3RDQ0MkM4My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjc0MEUwMkFERjUwQTA5MDIyOUI1REZFRTVENDg3NzdENDQy QzgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0I3NDBFMDJBREY1MEEwOTAyMjlCNURGRUU1RDQ4 Nzc3RDQ0MkM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiT29/CMKGYpZTpio72xN42QXR/k8kDDqvZ sJ1zW2kdo6zW+n2CAqsyzQBdd4uM2s48rqnfKeK3XUBUL19Yu0vz5rsWASKNsC42 AkcxpZjTwdr7d+Adwg0EcI14ibliMM1698GiUD+Z/HzGYWSUcHAX39vEZmoGQxfB 6LcRozPszd4p/S9ut0J7ZSXDydhhJdsRkSD4772hGrsV8yWVhx78BDcl4e13Y5Yq qH79AkE6xo6knos8YSw63yLVYbYrUeS2MAmET7Ye5G/Aypqoko0L7itBBIVF9WTF XQ/UEE9X/zO8uvnSeon9t1CI2fou5gDhNXNLZ09HuOVroV64Sjc= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:52 2026 by rpki-client