$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft File: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft (raw, json) Hash identifier: ouUFggRUfzpQEi2KYb00UzjqDeS/++6fnl/n1IpGPiU= Subject key identifier: 45:AA:B6:65:BC:C0:4D:6A:2B:B7:2C:4F:7B:59:04:D8:7E:D7:6A:2C Authority key identifier: 3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B Certificate issuer: /CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Certificate serial: 7D653745C463E8532E4C777F2A33053329C87208 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 00:54:42 +0000 Manifest this update: Thu 17 Sep 2026 00:49:42 +0000 Manifest next update: Fri 18 Sep 2026 02:19:42 +0000 Files and hashes: 1: 3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl (hash: X9Kf6n7pCr8LVkPGK+kvPq2xcJSVjIbXvoeW3OEXbbY=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: lJ60QC6hkGeg/VLRUN+YScgOEnnAlSVZ9ySMXaFKus8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:65:37:45:c4:63:e8:53:2e:4c:77:7f:2a:33:05:33:29:c8:72:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B686CBC7943CB0EE971418DB2F41C3817F7DB0B Validity Not Before: Sep 17 00:49:42 2026 GMT Not After : Sep 18 02:19:42 2026 GMT Subject: CN=45AAB665BCC04D6A2BB72C4F7B5904D87ED76A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4f:d4:83:40:43:39:21:92:35:87:ed:78:ea: 79:df:56:64:a0:08:85:73:86:da:95:43:02:2b:af: ce:fb:47:5f:cb:33:8a:2c:1c:d6:b1:a7:29:04:fb: ea:b6:e5:7f:76:f4:d2:81:d9:ea:72:f0:91:62:6f: 3b:2d:5f:8c:4f:fb:9e:69:b5:4a:36:43:7b:5c:5b: 85:af:3b:f4:e5:0d:2d:40:f8:4e:1e:46:a0:23:6f: 2b:c8:b5:97:33:1b:7e:d4:f8:76:15:dc:4b:0a:7b: 79:c5:77:10:76:7b:e8:a2:1d:8e:e2:de:72:f5:fc: a0:2b:eb:85:9a:e7:a2:38:f2:ee:08:ff:8b:96:31: 5e:1d:83:7a:84:de:62:c0:46:1f:12:43:ba:85:bc: 74:bb:bf:d8:fc:ae:5d:eb:90:0b:6e:7a:be:9b:f5: a1:52:1b:40:dc:7d:d5:95:a9:35:85:83:31:58:ba: 4b:4d:1e:8a:0b:22:18:29:a8:43:c3:fa:17:66:c7: de:d6:72:a2:af:31:b2:78:a3:fc:0e:98:aa:4c:80: 5c:9c:0e:55:66:ee:ea:20:4b:88:eb:a1:6f:e8:92: 0e:b7:5c:fd:ab:31:f0:39:df:df:f6:ea:80:b1:de: 56:ce:e2:e7:e2:d4:f1:a4:93:36:f3:e5:4d:27:0a: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AA:B6:65:BC:C0:4D:6A:2B:B7:2C:4F:7B:59:04:D8:7E:D7:6A:2C X509v3 Authority Key Identifier: keyid:3B:68:6C:BC:79:43:CB:0E:E9:71:41:8D:B2:F4:1C:38:17:F7:DB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/3B686CBC7943CB0EE971418DB2F41C3817F7DB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:d4:35:96:20:af:ce:54:bf:d7:7f:97:62:88:cf:e5:8c:75: 15:c9:2d:a0:ad:9d:4c:86:cf:a5:d6:7d:66:bb:ec:da:5a:59: c5:a5:57:90:a0:57:20:59:f2:a4:a9:6f:12:b7:c5:97:d7:49: 85:2f:19:b0:bb:e3:ae:8f:83:7a:68:6f:ed:60:ec:78:f9:0e: 36:1a:cd:e1:94:46:33:0a:a4:1f:0d:44:c3:49:7b:c1:e9:c3: b7:10:7f:78:0b:d6:c2:76:c1:1d:81:34:d8:a8:02:cb:85:20: 88:e8:01:0e:74:8f:95:e3:bc:d4:50:8b:52:3d:28:84:34:2e: 44:50:8e:ca:96:7b:34:5a:21:bb:c1:5c:51:7d:20:a5:b0:b3: 9b:44:4f:f4:d4:dc:b3:70:46:93:93:af:92:93:8d:87:ae:0c: 67:9c:a3:d2:03:7b:8b:10:0c:00:1b:2a:26:d4:01:7d:db:4d: 57:53:b9:b5:38:a1:5e:45:42:a5:4c:7d:dd:6b:d0:b7:1b:02: e9:b0:88:31:39:49:9f:93:c5:15:51:3f:21:d2:cd:5f:02:c6: fe:52:74:9b:e2:e7:53:3f:d1:25:48:50:53:2d:20:f5:c9:3e: 66:68:45:7d:e1:03:18:50:45:03:67:6f:19:4b:8d:8b:d8:b1: 22:1f:9c:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWU3RcRj6FMuTHd/KjMFMynIcggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgx N0Y3REIwQjAeFw0yNjA5MTcwMDQ5NDJaFw0yNjA5MTgwMjE5NDJaMDMxMTAvBgNV BAMTKDQ1QUFCNjY1QkNDMDRENkEyQkI3MkM0RjdCNTkwNEQ4N0VENzZBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmT9SDQEM5IZI1h+146nnfVmSg CIVzhtqVQwIrr877R1/LM4osHNaxpykE++q25X929NKB2epy8JFibzstX4xP+55p tUo2Q3tcW4WvO/TlDS1A+E4eRqAjbyvItZczG37U+HYV3EsKe3nFdxB2e+iiHY7i 3nL1/KAr64Wa56I48u4I/4uWMV4dg3qE3mLARh8SQ7qFvHS7v9j8rl3rkAtuer6b 9aFSG0DcfdWVqTWFgzFYuktNHooLIhgpqEPD+hdmx97WcqKvMbJ4o/wOmKpMgFyc DlVm7uogS4jroW/okg63XP2rMfA539/26oCx3lbO4ufi1PGkkzbz5U0nCvxxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURaq2ZbzATWortyxPe1kE2H7XaiwwHwYDVR0j BBgwFoAUO2hsvHlDyw7pcUGNsvQcOBf32wswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3 OTQzQ0IwRUU5NzE0MThEQjJGNDFDMzgxN0Y3REIwQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjY4NkNCQzc5NDNDQjBFRTk3MTQxOERCMkY0MUMzODE3RjdE QjBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvM0I2ODZDQkM3OTQzQ0IwRUU5NzE0MThEQjJGNDFD MzgxN0Y3REIwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjUNZYgr85Uv9d/l2KIz+WMdRXJLaCtnUyG z6XWfWa77NpaWcWlV5CgVyBZ8qSpbxK3xZfXSYUvGbC7466Pg3pob+1g7Hj5DjYa zeGURjMKpB8NRMNJe8Hpw7cQf3gL1sJ2wR2BNNioAsuFIIjoAQ50j5XjvNRQi1I9 KIQ0LkRQjsqWezRaIbvBXFF9IKWws5tET/TU3LNwRpOTr5KTjYeuDGeco9IDe4sQ DAAbKibUAX3bTVdTubU4oV5FQqVMfd1r0LcbAumwiDE5SZ+TxRVRPyHSzV8Cxv5S dJvi51M/0SVIUFMtIPXJPmZoRX3hAxhQRQNnbxlLjYvYsSIfnCY= -----END CERTIFICATE-----Generated at Thu Sep 17 08:23:41 2026 by rpki-client