$ rpki-client -vvvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft File: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft (raw, json) Hash identifier: fDFVnyE58S8Kj3vFp8JN3XiNT987g1Av0pqh3xWlAws= Subject key identifier: 56:67:EE:60:C1:F6:48:11:9C:3E:84:DA:DD:B5:E0:B6:5D:7C:7E:09 Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 Certificate issuer: /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Certificate serial: 1815873325BA89DADED8112DE870EBA9878D3388 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 10:51:27 +0000 Manifest this update: Thu 08 Oct 2026 10:46:27 +0000 Manifest next update: Fri 09 Oct 2026 14:07:27 +0000 Files and hashes: 1: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl (hash: fVHBRHZ6pN0+tuNGdO7TeZI1YksdoT/pmMW173gjlXM=) 2: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: lpwKH/1rt1O8n37PkqiZ5Fo1jTQNKkwVgQuRatXBn2c=) 3: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: eaitOk5B7Jr1jxdZCm0AVOvl4hgE6wJsB8PnaacOno4=) 4: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: c4wYihjNVRnxptUGtDAxVDHluIjX7/1xYD6gvJUxJM8=) 5: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: 4DtXaRxKzA2NgphfITj3rvmS/5Zg3IKyMFd8f9pE1pU=) 6: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: lz98VZByNVjP88hEyC/FArLpyfqt3UkStR89LwAjmAE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 11:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:15:87:33:25:ba:89:da:de:d8:11:2d:e8:70:eb:a9:87:8d:33:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Validity Not Before: Oct 8 10:46:27 2026 GMT Not After : Oct 9 14:07:27 2026 GMT Subject: CN=5667EE60C1F648119C3E84DADDB5E0B65D7C7E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:da:2c:db:aa:7c:15:41:bf:14:d0:d9:00:8d: 8f:5b:31:10:c1:b2:9b:e0:31:61:c9:61:0c:75:08: 02:7b:a8:1c:cc:92:36:82:85:70:72:8c:b0:9c:30: a9:03:df:4f:6b:d6:bf:e6:7e:43:1f:f2:a0:e1:3e: ff:92:59:5d:c8:c4:22:52:65:43:8c:7a:93:52:29: 15:26:64:d3:04:d0:43:25:5f:86:63:72:21:3d:c8: 88:44:20:78:25:2f:4c:ce:d0:9c:b0:43:b7:f5:68: 06:e9:d0:7d:af:b9:72:81:68:cb:78:e0:ad:4a:f4: f2:e1:aa:47:87:c2:b3:66:bc:c2:a6:4d:bf:49:63: bf:de:ea:f7:76:96:ae:0e:69:82:9a:60:76:82:2f: 4a:b3:cc:52:f4:9f:e5:3d:ca:66:82:a3:b1:61:d6: c1:92:f3:92:42:4a:5f:e8:16:85:53:c2:e6:de:34: c9:92:73:37:bc:2d:c6:51:ac:44:d8:93:c7:02:47: 37:ec:73:31:38:e8:22:28:c5:e5:ee:d2:1c:e5:cd: d2:4b:c6:96:4f:01:d4:24:f0:f3:2f:e4:70:b0:56: 5c:7c:c1:b1:44:8b:b4:82:10:9c:46:d7:e8:25:1b: bd:0a:81:0e:b6:ec:97:a1:bf:d3:0f:9d:ea:82:ef: 21:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:67:EE:60:C1:F6:48:11:9C:3E:84:DA:DD:B5:E0:B6:5D:7C:7E:09 X509v3 Authority Key Identifier: keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:41:ac:f5:52:60:b2:95:bc:a5:97:b8:71:b4:ee:a0:bd:90: aa:ce:43:52:0b:bf:7f:cb:86:4b:4a:e3:c6:b1:46:fc:e5:c0: 50:7c:d7:da:71:3d:00:95:6e:07:29:06:56:18:10:a2:97:35: bd:2f:e1:bc:9d:58:b4:c5:62:22:95:7a:f0:72:b2:05:0d:0c: 5b:20:6a:34:20:5f:13:f5:1e:50:8f:08:61:4d:7c:3a:53:ae: ba:64:31:63:ac:da:3d:2e:f7:c6:5e:9b:83:a2:b3:ad:2d:1a: eb:0f:f4:b2:00:e7:6c:8d:cc:0f:7e:23:60:39:c5:ae:85:1e: 9a:20:eb:85:eb:ad:fc:60:17:1a:e5:96:e2:23:6a:ae:3a:03: de:f3:0a:51:64:bb:84:92:79:87:11:a5:2d:3f:61:d3:66:4c: 77:17:68:51:24:b4:fe:55:e7:aa:39:07:37:c7:38:68:1d:67: 63:bf:8e:76:e2:43:bc:01:f3:34:5b:f3:cf:b2:35:fe:1b:05: 38:f9:c9:b5:dd:87:0d:43:27:37:de:31:f4:e4:4c:a8:d5:87: 38:17:a7:10:8b:81:bd:36:c2:1f:c2:bf:f6:82:5a:0a:9c:1a: e1:fc:ec:5e:65:19:85:24:68:25:93:56:cc:b7:14:e8:ab:e8: ba:3e:b9:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBWHMyW6idre2BEt6HDrqYeNM4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RCOUEy NEE4Qjg3NzAeFw0yNjEwMDgxMDQ2MjdaFw0yNjEwMDkxNDA3MjdaMDMxMTAvBgNV BAMTKDU2NjdFRTYwQzFGNjQ4MTE5QzNFODREQUREQjVFMEI2NUQ3QzdFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD72izbqnwVQb8U0NkAjY9bMRDB spvgMWHJYQx1CAJ7qBzMkjaChXByjLCcMKkD309r1r/mfkMf8qDhPv+SWV3IxCJS ZUOMepNSKRUmZNME0EMlX4ZjciE9yIhEIHglL0zO0JywQ7f1aAbp0H2vuXKBaMt4 4K1K9PLhqkeHwrNmvMKmTb9JY7/e6vd2lq4OaYKaYHaCL0qzzFL0n+U9ymaCo7Fh 1sGS85JCSl/oFoVTwubeNMmScze8LcZRrETYk8cCRzfsczE46CIoxeXu0hzlzdJL xpZPAdQk8PMv5HCwVlx8wbFEi7SCEJxG1+glG70KgQ627Jehv9MPneqC7yFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVmfuYMH2SBGcPoTa3bXgtl18fgkwHwYDVR0j BBgwFoAUNpnt1x2mCrxQs8gYenfbmiSouHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZjM3YzAtMzgwYy00MDUzLWIzYmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcx REE2MEFCQzUwQjNDODE4N0E3N0RCOUEyNEE4Qjg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk5RURENzFEQTYwQUJDNTBCM0M4MTg3QTc3REI5QTI0QThC ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RC OUEyNEE4Qjg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVBrPVSYLKVvKWXuHG07qC9kKrOQ1ILv3/L hktK48axRvzlwFB819pxPQCVbgcpBlYYEKKXNb0v4bydWLTFYiKVevBysgUNDFsg ajQgXxP1HlCPCGFNfDpTrrpkMWOs2j0u98Zem4Ois60tGusP9LIA52yNzA9+I2A5 xa6FHpog64XrrfxgFxrlluIjaq46A97zClFku4SSeYcRpS0/YdNmTHcXaFEktP5V 56o5BzfHOGgdZ2O/jnbiQ7wB8zRb88+yNf4bBTj5ybXdhw1DJzfeMfTkTKjVhzgX pxCLgb02wh/Cv/aCWgqcGuH87F5lGYUkaCWTVsy3FOir6Lo+udA= -----END CERTIFICATE-----Generated at Thu Oct 8 21:21:42 2026 by rpki-client