$ rpki-client -vvvf rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft File: 3EBE2E74F0EE59A6395F325E6928084B763824A1.mft (raw, json) Hash identifier: IuEIM7J/OX3ZJZ7qQLzLTYJS4CANWk+v0mjadD9p/e4= Subject key identifier: 84:3B:B5:DC:CB:5C:4F:22:A2:94:94:5D:C9:55:B5:5C:75:FD:AD:FF Authority key identifier: 3E:BE:2E:74:F0:EE:59:A6:39:5F:32:5E:69:28:08:4B:76:38:24:A1 Certificate issuer: /CN=3EBE2E74F0EE59A6395F325E6928084B763824A1 Certificate serial: 660B0CCC2005071C213840E3A205EDCC40916C09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:08:43 +0000 Manifest this update: Thu 17 Sep 2026 00:03:43 +0000 Manifest next update: Fri 18 Sep 2026 02:12:43 +0000 Files and hashes: 1: 3EBE2E74F0EE59A6395F325E6928084B763824A1.crl (hash: 5tqwAuEvSQsDRKDUrBzAi6UrJpX6uzm3PahnCxG5rYE=) 2: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: Vv6wC/28GD4ZoyK7hWQWrNGkv38OB4xq7yXYGqatH3E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.crl rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0b:0c:cc:20:05:07:1c:21:38:40:e3:a2:05:ed:cc:40:91:6c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EBE2E74F0EE59A6395F325E6928084B763824A1 Validity Not Before: Sep 17 00:03:43 2026 GMT Not After : Sep 18 02:12:43 2026 GMT Subject: CN=843BB5DCCB5C4F22A294945DC955B55C75FDADFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:4d:80:3d:13:c2:96:39:e1:48:cb:d9:8a: ab:c8:e2:03:89:8a:55:45:53:77:12:78:e3:65:e1: bd:1d:5c:de:29:a7:87:86:ea:34:8e:6f:e6:14:6b: 7f:20:b3:e3:ff:d2:96:3a:de:d0:c5:33:de:9e:4f: 9a:d1:98:e8:69:55:12:9e:a7:3e:1c:95:33:dc:12: ad:cf:81:08:c0:70:57:84:2a:e7:bf:cb:59:eb:95: d6:21:f8:28:f8:fa:5e:bf:62:b6:a1:6b:ea:2f:8e: 6f:f6:b0:e9:c7:c4:e0:12:da:e8:28:fe:71:40:88: b1:cf:2a:1e:d8:38:0b:c6:4a:c8:66:2a:53:45:36: 94:60:16:46:65:fe:d8:b5:f0:cc:9c:af:ce:2b:e3: 12:82:5b:29:fd:b3:21:df:c2:34:bd:03:96:fe:d1: 62:30:0e:ad:26:29:c1:a1:63:15:4b:70:c0:50:2d: e6:d2:10:7c:49:3e:04:6f:d3:a7:62:ca:a1:a7:cc: f3:6f:ca:43:00:2c:cb:0d:cc:23:2a:4f:32:bb:40: 16:cf:df:b5:99:67:64:cb:2f:7b:8f:f4:6c:48:4e: 99:37:d1:a1:2f:dc:ae:83:40:ba:b4:50:35:5a:35: d0:67:2b:d4:a4:aa:b2:6e:f6:bd:21:e8:2d:3d:ce: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3B:B5:DC:CB:5C:4F:22:A2:94:94:5D:C9:55:B5:5C:75:FD:AD:FF X509v3 Authority Key Identifier: keyid:3E:BE:2E:74:F0:EE:59:A6:39:5F:32:5E:69:28:08:4B:76:38:24:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3EBE2E74F0EE59A6395F325E6928084B763824A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3EBE2E74F0EE59A6395F325E6928084B763824A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8d:e5:7f:06:e9:70:c6:0d:5f:f5:ef:42:b4:38:b9:84:c1: 25:02:c1:7f:0e:a5:aa:5c:7d:58:12:18:dd:2e:83:0e:de:fd: 6d:4c:de:39:45:6c:5c:30:cf:77:70:86:b2:8e:82:e4:58:88: ea:3e:52:6b:52:dc:fe:cf:56:fb:84:fb:02:25:da:39:6c:dd: 40:e5:eb:58:26:2a:c8:4c:75:53:c8:83:65:e9:f6:33:d7:29: cf:84:b2:e9:03:69:0f:74:3d:1d:bb:d0:8f:c6:d3:ed:fb:a3: d0:8b:7a:d6:3b:b3:e6:6b:0d:f7:b1:6b:6d:ed:94:1d:1a:06: 8a:12:39:48:3a:8b:fc:4e:81:1e:5e:50:d6:78:f8:1c:e0:97: 45:96:45:44:91:c1:e7:f4:29:b4:30:eb:97:c4:00:15:24:54: 92:f3:cf:db:22:ac:30:ca:4c:44:c2:8e:1c:e6:25:51:6f:45: 96:f9:95:d6:ad:27:25:de:7d:37:b7:33:42:ff:4e:49:7a:37: 15:bd:40:33:72:18:fd:b5:de:e3:50:c0:b9:80:87:49:77:dd: 7c:99:65:8b:ae:ce:19:d7:bb:19:d3:1e:b2:ec:7c:12:38:ab: d7:bf:5c:fc:b0:b3:df:1f:fa:ca:23:e2:4a:5a:7a:8d:be:2f: c1:db:a0:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgsMzCAFBxwhOEDjogXtzECRbAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VCRTJFNzRGMEVFNTlBNjM5NUYzMjVFNjkyODA4NEI3 NjM4MjRBMTAeFw0yNjA5MTcwMDAzNDNaFw0yNjA5MTgwMjEyNDNaMDMxMTAvBgNV BAMTKDg0M0JCNURDQ0I1QzRGMjJBMjk0OTQ1REM5NTVCNTVDNzVGREFERkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnSk2APRPCljnhSMvZiqvI4gOJ ilVFU3cSeONl4b0dXN4pp4eG6jSOb+YUa38gs+P/0pY63tDFM96eT5rRmOhpVRKe pz4clTPcEq3PgQjAcFeEKue/y1nrldYh+Cj4+l6/Yraha+ovjm/2sOnHxOAS2ugo /nFAiLHPKh7YOAvGSshmKlNFNpRgFkZl/ti18Mycr84r4xKCWyn9syHfwjS9A5b+ 0WIwDq0mKcGhYxVLcMBQLebSEHxJPgRv06diyqGnzPNvykMALMsNzCMqTzK7QBbP 37WZZ2TLL3uP9GxITpk30aEv3K6DQLq0UDVaNdBnK9SkqrJu9r0h6C09zhoBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhDu13MtcTyKilJRdyVW1XHX9rf8wHwYDVR0j BBgwFoAUPr4udPDuWaY5XzJeaSgIS3Y4JKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MThiNDI0MjAtNTZkMC00NTFhLWEyOWQtNWY5ZDYyMzBlMjI3LzAvM0VCRTJFNzRG MEVFNTlBNjM5NUYzMjVFNjkyODA4NEI3NjM4MjRBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRUJFMkU3NEYwRUU1OUE2Mzk1RjMyNUU2OTI4MDg0Qjc2Mzgy NEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMThiNDI0MjAtNTZkMC00NTFhLWEy OWQtNWY5ZDYyMzBlMjI3LzAvM0VCRTJFNzRGMEVFNTlBNjM5NUYzMjVFNjkyODA4 NEI3NjM4MjRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyN5X8G6XDGDV/170K0OLmEwSUCwX8Opapc fVgSGN0ugw7e/W1M3jlFbFwwz3dwhrKOguRYiOo+UmtS3P7PVvuE+wIl2jls3UDl 61gmKshMdVPIg2Xp9jPXKc+EsukDaQ90PR270I/G0+37o9CLetY7s+ZrDfexa23t lB0aBooSOUg6i/xOgR5eUNZ4+Bzgl0WWRUSRwef0KbQw65fEABUkVJLzz9sirDDK TETCjhzmJVFvRZb5ldatJyXefTe3M0L/Tkl6NxW9QDNyGP213uNQwLmAh0l33XyZ ZYuuzhnXuxnTHrLsfBI4q9e/XPyws98f+soj4kpaeo2+L8HboDI= -----END CERTIFICATE-----Generated at Thu Sep 17 14:02:16 2026 by rpki-client