$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft File: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft (raw, json) Hash identifier: vKWBIbHBJW1zPgXQiZkW2qUDBazK7pc/GDWuH5aoipg= Subject key identifier: 1F:3E:F1:AC:EF:CD:A4:57:4F:89:B8:FF:FA:B7:5B:37:7A:C2:04:5E Authority key identifier: 3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA Certificate issuer: /CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA Certificate serial: 470BBE46C3F880D0845EDA3C135DAA835789EEB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 12:22:43 +0000 Manifest this update: Sun 01 Nov 2026 12:17:43 +0000 Manifest next update: Mon 02 Nov 2026 15:53:43 +0000 Files and hashes: 1: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: m4byyQ/Ci01kF9bhXe9ckh1HOnnhsJwIBUWhcPZT6ow=) 2: 3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl (hash: BABd+WTsGMUq0cXwaAcn3on0kkcC4Hh77xCqF6KzZW4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0b:be:46:c3:f8:80:d0:84:5e:da:3c:13:5d:aa:83:57:89:ee:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA Validity Not Before: Nov 1 12:17:43 2026 GMT Not After : Nov 2 15:53:43 2026 GMT Subject: CN=1F3EF1ACEFCDA4574F89B8FFFAB75B377AC2045E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:32:6a:6d:f2:38:b4:30:5a:d0:e5:45:f6:f2: c6:f0:39:e7:f1:06:4c:b7:08:ca:be:d5:07:e5:02: 47:66:93:89:86:fc:f3:c4:dd:60:29:f8:01:45:c1: f1:03:8a:ce:8c:7a:0a:d6:1f:2f:61:91:98:5a:3f: 12:92:e8:be:34:d6:f9:96:fe:67:2a:09:f4:b7:1a: 4b:45:6b:40:e5:a0:08:8b:73:f2:38:fc:a4:7e:e8: e3:16:d0:a2:05:c4:2d:9f:96:80:01:ca:43:54:6d: 57:45:c9:1c:59:f3:c2:51:57:97:2c:4c:ff:18:58: d2:9b:ce:fe:47:5d:be:b7:a9:30:42:11:02:d5:89: d5:56:01:67:f4:93:29:41:83:b8:c3:0d:06:d7:5e: b0:a4:b2:e1:4d:c7:e7:88:0a:2f:51:1c:31:cb:e7: 1c:89:25:73:23:92:ac:e5:6b:95:19:69:c9:23:9b: d9:88:fc:aa:22:e7:9a:d1:97:ad:48:51:64:77:1b: 4a:a5:f8:ee:e4:5e:f4:50:50:78:9a:56:6d:6c:3e: b1:f6:02:d2:68:11:83:6e:81:f1:02:12:67:24:c2: 65:f1:9e:5b:73:28:78:9a:1a:43:12:bb:82:64:c8: 15:61:c0:1a:7f:90:e3:d9:ff:4c:3e:04:65:81:e1: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3E:F1:AC:EF:CD:A4:57:4F:89:B8:FF:FA:B7:5B:37:7A:C2:04:5E X509v3 Authority Key Identifier: keyid:3D:74:AB:C2:FD:02:15:6E:BF:88:6D:DE:22:BD:CF:E3:B6:67:73:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/3D74ABC2FD02156EBF886DDE22BDCFE3B66773BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:53:9a:67:ef:f1:16:88:08:af:ec:b2:0d:8c:29:fb:c3:f0: 52:64:63:f7:5c:57:e4:49:97:56:8b:ab:8e:37:68:f4:09:6e: 60:9d:02:67:0e:44:83:7c:39:ef:73:92:28:70:8b:f8:4b:82: 0d:0c:e3:22:a5:68:d4:46:ff:7f:f3:75:ad:13:b7:1a:4b:ff: cb:e7:97:85:4c:ad:87:84:6e:b1:b5:f8:ef:04:9a:d5:d3:ee: 7a:92:28:ab:52:d4:39:56:eb:c0:73:35:3f:a6:59:71:5c:3c: dc:af:3f:bc:16:2d:e3:b0:07:28:98:20:b9:db:e9:8d:fe:f2: ee:f6:88:67:b3:33:18:ea:d7:e8:5b:bc:2f:58:f7:ae:56:a8: 5d:53:7b:6a:26:f7:3a:bf:50:00:d7:b3:9e:02:d4:82:6b:4a: 95:9b:d4:b9:b4:04:84:2f:36:44:63:30:b7:96:d9:4d:50:ea: 34:ae:4b:29:d6:38:35:b8:52:17:c0:07:b1:cd:a4:51:27:0f: 84:63:f5:6e:f2:b5:f0:5a:89:36:b1:3f:cb:be:8a:b1:72:ad: c9:5b:cf:e3:0c:94:e2:d3:4e:ea:05:5b:69:66:40:ac:b2:fc: 17:f0:6f:c3:36:e4:8d:0c:c0:2c:2a:41:de:5d:ff:f3:4c:38: fb:db:0b:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwu+RsP4gNCEXto8E12qg1eJ7rMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENGRTNC NjY3NzNCQTAeFw0yNjExMDExMjE3NDNaFw0yNjExMDIxNTUzNDNaMDMxMTAvBgNV BAMTKDFGM0VGMUFDRUZDREE0NTc0Rjg5QjhGRkZBQjc1QjM3N0FDMjA0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIMmpt8ji0MFrQ5UX28sbwOefx Bky3CMq+1QflAkdmk4mG/PPE3WAp+AFFwfEDis6MegrWHy9hkZhaPxKS6L401vmW /mcqCfS3GktFa0DloAiLc/I4/KR+6OMW0KIFxC2floABykNUbVdFyRxZ88JRV5cs TP8YWNKbzv5HXb63qTBCEQLVidVWAWf0kylBg7jDDQbXXrCksuFNx+eICi9RHDHL 5xyJJXMjkqzla5UZackjm9mI/Koi55rRl61IUWR3G0ql+O7kXvRQUHiaVm1sPrH2 AtJoEYNugfECEmckwmXxnltzKHiaGkMSu4JkyBVhwBp/kOPZ/0w+BGWB4XBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHz7xrO/NpFdPibj/+rdbN3rCBF4wHwYDVR0j BBgwFoAUPXSrwv0CFW6/iG3eIr3P47Znc7owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNDJhMjktYmQ0OC00ZWY3LWFmNDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJG RDAyMTU2RUJGODg2RERFMjJCRENGRTNCNjY3NzNCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDc0QUJDMkZEMDIxNTZFQkY4ODZEREUyMkJEQ0ZFM0I2Njc3 M0JBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvM0Q3NEFCQzJGRDAyMTU2RUJGODg2RERFMjJCRENG RTNCNjY3NzNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlTmmfv8RaICK/ssg2MKfvD8FJkY/dcV+RJ l1aLq443aPQJbmCdAmcORIN8Oe9zkihwi/hLgg0M4yKlaNRG/3/zda0TtxpL/8vn l4VMrYeEbrG1+O8EmtXT7nqSKKtS1DlW68BzNT+mWXFcPNyvP7wWLeOwByiYILnb 6Y3+8u72iGezMxjq1+hbvC9Y965WqF1Te2om9zq/UADXs54C1IJrSpWb1Lm0BIQv NkRjMLeW2U1Q6jSuSynWODW4UhfAB7HNpFEnD4Rj9W7ytfBaiTaxP8u+irFyrclb z+MMlOLTTuoFW2lmQKyy/Bfwb8M25I0MwCwqQd5d//NMOPvbC70= -----END CERTIFICATE-----Generated at Sun Nov 1 19:56:10 2026 by rpki-client