$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft File: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft (raw, json) Hash identifier: fnR4dKFQh7R9uaevnhrugd5SlASa9X1FjuPOUk71uOg= Subject key identifier: 4A:C9:02:E0:2B:CF:C9:8A:83:AD:B2:94:07:7D:31:40:C9:08:A4:49 Authority key identifier: 3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 Certificate issuer: /CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Certificate serial: 1EB8A11B7DA6A8CD9CC4ECFE73B4024AE0E6F40D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft Manifest number: A6 Signing time: Fri 04 Sep 2026 03:41:07 +0000 Manifest this update: Fri 04 Sep 2026 03:36:07 +0000 Manifest next update: Sat 05 Sep 2026 06:24:07 +0000 Files and hashes: 1: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl (hash: yV08aLoWIPsgy3vth2cSu8wLDMD7Fa7dViNYt7wZ7+c=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: InPNxYRaf3FwNMQXVehetQN/Y6CMxZDL5d0U1h33pOA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b8:a1:1b:7d:a6:a8:cd:9c:c4:ec:fe:73:b4:02:4a:e0:e6:f4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Validity Not Before: Sep 4 03:36:07 2026 GMT Not After : Sep 5 06:24:07 2026 GMT Subject: CN=4AC902E02BCFC98A83ADB294077D3140C908A449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:3f:c1:c6:1b:98:8d:36:99:df:a6:79:da: 35:d5:bf:9d:98:ea:4a:d1:d3:eb:fd:a6:be:15:f4: 2d:7c:58:81:9e:32:0f:bd:11:64:14:76:9e:a0:b0: ba:a3:dc:30:38:61:1c:ef:15:6c:cf:05:5f:d7:3b: 03:47:e3:87:ab:e7:ae:dc:89:47:84:b0:c9:ce:f0: c1:33:36:3f:1e:52:ea:27:9b:a4:e5:b0:01:f5:20: d6:f4:6f:1a:13:4e:bf:29:b8:b0:13:93:9f:6f:bc: 4b:09:71:0a:c7:06:4a:8f:5f:58:e5:8d:69:a0:b8: 09:5c:c5:e0:bc:f1:78:5c:73:e6:a1:d0:0d:30:d2: dd:0f:01:77:a4:c2:99:c1:45:4c:00:2f:5d:52:06: 7c:63:55:9b:b4:ab:16:3a:1b:3a:f3:2a:62:5a:c2: 46:8e:64:fb:4b:b4:c5:48:4d:9c:14:c1:b2:7d:93: 9f:84:82:30:31:37:52:d2:43:e9:89:db:96:dd:7e: 99:25:6b:28:37:84:00:94:38:3f:a3:9d:87:31:ea: 47:62:33:2c:df:f6:49:56:ad:ab:e9:50:84:9a:b8: 51:2a:14:68:8a:b4:7c:8f:a2:2f:41:3a:63:a2:fb: cd:c4:be:c6:82:f0:7c:15:48:47:ec:29:00:ae:61: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C9:02:E0:2B:CF:C9:8A:83:AD:B2:94:07:7D:31:40:C9:08:A4:49 X509v3 Authority Key Identifier: keyid:3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a8:aa:9a:4d:37:49:15:6d:2d:d1:79:c7:bd:68:ec:f3:76: 8e:d4:98:90:7b:71:bd:bf:55:31:c1:6e:f2:c9:aa:cb:71:ca: 78:e5:2f:21:27:d0:db:f8:2b:5f:d4:da:c6:5a:39:35:65:db: 85:a3:d4:ab:29:51:ab:77:e5:54:62:f4:c5:4e:54:b3:96:56: 82:aa:24:f5:94:de:22:1d:24:54:79:22:15:70:1a:8b:e2:74: dd:e0:0d:1d:53:49:89:69:10:d4:94:fb:26:fc:4a:63:ab:62: 56:ca:f6:81:ae:8a:40:73:0d:d0:7d:4a:9e:0b:a3:93:c1:89: 2e:e5:ca:db:09:8c:10:55:c5:4e:b7:3a:23:bc:95:90:e6:b5: ee:2c:8d:95:f6:54:90:fa:07:56:3f:d3:6a:0d:02:4b:39:bd: 7e:1d:8f:27:c0:6e:81:78:50:b5:96:b6:e7:39:1d:7d:c5:81: 06:b5:14:13:0b:3e:c7:d8:16:16:45:1c:50:f8:23:70:1f:a0: 53:2f:fe:4b:88:e5:f5:dc:41:46:4c:1a:76:94:1d:c4:57:b9: 6e:c4:c8:a0:83:cc:df:f9:52:6a:e9:e8:b6:b1:47:aa:8c:ca: 60:1c:73:78:20:69:9d:2d:f0:92:3d:bc:d5:cf:4e:7c:c4:93: 0d:6d:e1:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHrihG32mqM2cxOz+c7QCSuDm9A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNE MEU5M0Y0MDAeFw0yNjA5MDQwMzM2MDdaFw0yNjA5MDUwNjI0MDdaMDMxMTAvBgNV BAMTKDRBQzkwMkUwMkJDRkM5OEE4M0FEQjI5NDA3N0QzMTQwQzkwOEE0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSKz/BxhuYjTaZ36Z52jXVv52Y 6krR0+v9pr4V9C18WIGeMg+9EWQUdp6gsLqj3DA4YRzvFWzPBV/XOwNH44er567c iUeEsMnO8MEzNj8eUuonm6TlsAH1INb0bxoTTr8puLATk59vvEsJcQrHBkqPX1jl jWmguAlcxeC88Xhcc+ah0A0w0t0PAXekwpnBRUwAL11SBnxjVZu0qxY6GzrzKmJa wkaOZPtLtMVITZwUwbJ9k5+EgjAxN1LSQ+mJ25bdfpklayg3hACUOD+jnYcx6kdi Myzf9klWravpUISauFEqFGiKtHyPoi9BOmOi+83EvsaC8HwVSEfsKQCuYYRdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSskC4CvPyYqDrbKUB30xQMkIpEkwHwYDVR0j BBgwFoAUO3bVmj8Wj2EQ5Spi7XZJo9DpP0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc0YTE1MjctNWM4ZS00YmQzLWExYzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEz RjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNEMEU5M0Y0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjc2RDU5QTNGMTY4RjYxMTBFNTJBNjJFRDc2NDlBM0QwRTkz RjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5 QTNEMEU5M0Y0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKoqppNN0kVbS3Rece9aOzzdo7UmJB7cb2/ VTHBbvLJqstxynjlLyEn0Nv4K1/U2sZaOTVl24Wj1KspUat35VRi9MVOVLOWVoKq JPWU3iIdJFR5IhVwGovidN3gDR1TSYlpENSU+yb8SmOrYlbK9oGuikBzDdB9Sp4L o5PBiS7lytsJjBBVxU63OiO8lZDmte4sjZX2VJD6B1Y/02oNAks5vX4djyfAboF4 ULWWtuc5HX3FgQa1FBMLPsfYFhZFHFD4I3AfoFMv/kuI5fXcQUZMGnaUHcRXuW7E yKCDzN/5Umrp6LaxR6qMymAcc3ggaZ0t8JI9vNXPTnzEkw1t4dU= -----END CERTIFICATE-----Generated at Fri Sep 4 12:18:48 2026 by rpki-client