$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft File: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft (raw, json) Hash identifier: 9x7gREUUgqZVOb1SkKWPoUXibKDSeUp62RAZUV0Uy+w= Subject key identifier: 77:14:DE:EF:34:CA:24:8F:7B:B8:A5:90:2B:28:85:E6:AC:83:B1:BA Authority key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 Certificate issuer: /CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Certificate serial: 5942D4EC093AC8470E1F774B439148FD87070561 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft Manifest number: FA Signing time: Tue 03 Nov 2026 19:37:08 +0000 Manifest this update: Tue 03 Nov 2026 19:32:08 +0000 Manifest next update: Wed 04 Nov 2026 23:07:08 +0000 Files and hashes: 1: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: CjlIt4MYvo7XEt2sGyJogAmUB68TdPA5ouLe//ZK0KM=) 2: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl (hash: QVFAZqFZUPpkZ+wBhgMXRoMo9KmU0QqnfTL7KJxiDfY=) 3: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: C4nE65Bmt4vsoADCvXJtdLeHcH0r1PmaQ5qo7rMWJUM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 23:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:42:d4:ec:09:3a:c8:47:0e:1f:77:4b:43:91:48:fd:87:07:05:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Validity Not Before: Nov 3 19:32:08 2026 GMT Not After : Nov 4 23:07:08 2026 GMT Subject: CN=7714DEEF34CA248F7BB8A5902B2885E6AC83B1BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:e7:e7:c2:3a:be:20:c7:52:7d:a4:cf:a2: 4c:5d:24:12:5f:77:87:78:7c:10:f4:cb:4e:a8:f3: 63:b9:26:37:c6:dc:7a:a8:11:93:c0:95:70:89:3e: 18:27:6a:02:92:0c:54:e4:8b:02:d1:79:df:ed:97: 3c:58:53:2f:39:2d:26:e8:00:cd:5f:30:ed:97:61: d2:7b:64:f4:cb:d1:6c:74:27:51:cd:69:7f:db:54: 92:fb:c0:15:e7:11:44:73:2a:c7:80:1f:8d:db:69: 1d:31:cc:e5:5b:a1:a5:d3:99:97:e9:7f:de:f6:d0: 87:86:22:b6:2e:c0:50:c2:05:e8:2b:ac:a2:ab:a8: 00:c1:fc:5f:90:a9:a9:fe:6c:a4:bd:df:06:0f:87: e3:44:e9:b9:86:59:d5:a9:1f:97:c3:67:74:e4:f3: b9:a6:36:67:8e:77:18:89:7d:5d:41:88:7f:ce:f7: 28:6a:f0:7a:eb:38:8e:2c:63:78:92:4e:f8:5b:d9: 03:8a:86:b2:6b:69:49:56:67:b2:ae:99:ca:60:32: ab:c2:b5:26:a3:dd:0c:e9:f6:d3:d2:6d:a0:c3:2d: 0a:01:84:2f:e5:ad:4d:ee:2a:d7:84:cd:e6:c8:49: 94:9f:e4:1a:8b:3a:c7:f1:25:56:6e:75:81:6b:dc: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:14:DE:EF:34:CA:24:8F:7B:B8:A5:90:2B:28:85:E6:AC:83:B1:BA X509v3 Authority Key Identifier: keyid:37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:76:d8:86:bc:10:60:81:d3:06:55:06:81:7b:40:f5:96:75: 9a:e5:00:de:2a:71:b5:00:b1:f4:46:e8:fb:59:81:01:12:09: fb:e0:d1:35:4e:8e:d9:be:9d:b7:ee:5f:e7:8a:6c:67:53:04: 3e:1d:97:84:80:eb:b0:55:f3:19:b4:b2:f9:23:81:d1:31:96: b8:14:88:96:a5:31:e2:aa:91:fb:62:b6:8e:2b:73:0e:24:ac: ba:54:ab:c8:e2:df:42:5f:58:d8:8c:4e:89:3f:0c:8d:f3:58: 5f:cb:6c:ce:dc:c6:d0:ed:13:c3:df:45:8b:b5:ff:b8:f6:c4: dc:b0:71:83:e4:f6:f1:64:66:e8:26:df:22:41:d0:25:26:91: f5:37:ef:d8:73:99:45:5d:a4:2b:db:43:04:eb:95:1c:40:2c: 98:69:16:c2:0e:aa:97:b9:7b:14:a8:fe:f0:c1:4c:71:a5:bb: 15:9e:0f:dd:c8:9b:fe:58:cc:9c:c4:91:30:9c:03:ce:31:df: f3:0e:62:2f:0e:aa:bd:c4:dc:ca:d9:70:a3:bb:35:ac:81:8e: 5e:49:04:ae:4a:e5:19:e9:65:dc:e5:a8:14:da:b7:37:4c:b5: 53:c0:f4:63:08:8e:76:ec:94:09:3e:5e:c9:98:4c:ca:a7:fa: 45:7a:cc:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWULU7Ak6yEcOH3dLQ5FI/YcHBWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1 RTUzQTYxMTAeFw0yNjExMDMxOTMyMDhaFw0yNjExMDQyMzA3MDhaMDMxMTAvBgNV BAMTKDc3MTRERUVGMzRDQTI0OEY3QkI4QTU5MDJCMjg4NUU2QUM4M0IxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAx+fnwjq+IMdSfaTPokxdJBJf d4d4fBD0y06o82O5JjfG3HqoEZPAlXCJPhgnagKSDFTkiwLRed/tlzxYUy85LSbo AM1fMO2XYdJ7ZPTL0Wx0J1HNaX/bVJL7wBXnEURzKseAH43baR0xzOVboaXTmZfp f9720IeGIrYuwFDCBegrrKKrqADB/F+Qqan+bKS93wYPh+NE6bmGWdWpH5fDZ3Tk 87mmNmeOdxiJfV1BiH/O9yhq8HrrOI4sY3iSTvhb2QOKhrJraUlWZ7KumcpgMqvC tSaj3Qzp9tPSbaDDLQoBhC/lrU3uKteEzebISZSf5BqLOsfxJVZudYFr3Pv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdxTe7zTKJI97uKWQKyiF5qyDsbowHwYDVR0j BBgwFoAUNyL1fzb8bfZPD2Y4yJzys15TphEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJhOWY0ZTItYzczYi00NDI3LTk4MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0Yz NkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1RTUzQTYxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzIyRjU3RjM2RkM2REY2NEYwRjY2MzhDODlDRjJCMzVFNTNB NjExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0Yy QjM1RTUzQTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA122Ia8EGCB0wZVBoF7QPWWdZrlAN4qcbUA sfRG6PtZgQESCfvg0TVOjtm+nbfuX+eKbGdTBD4dl4SA67BV8xm0svkjgdExlrgU iJalMeKqkftito4rcw4krLpUq8ji30JfWNiMTok/DI3zWF/LbM7cxtDtE8PfRYu1 /7j2xNywcYPk9vFkZugm3yJB0CUmkfU379hzmUVdpCvbQwTrlRxALJhpFsIOqpe5 exSo/vDBTHGluxWeD93Im/5YzJzEkTCcA84x3/MOYi8Oqr3E3MrZcKO7NayBjl5J BK5K5RnpZdzlqBTatzdMtVPA9GMIjnbslAk+XsmYTMqn+kV6zA8= -----END CERTIFICATE-----Generated at Wed Nov 4 12:12:51 2026 by rpki-client