$ rpki-client -vvvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft File: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft (raw, json) Hash identifier: 5BUvTrgw6udOtkW7TNQOU86LUHVSZ10ro7DffpVgsDU= Subject key identifier: 1E:38:06:94:77:2C:1D:04:58:9C:90:4B:40:CD:D3:01:54:65:C0:20 Authority key identifier: 3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E Certificate issuer: /CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Certificate serial: 701286F1F0DA4058E164CA8F91CE53D24C0BEF0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft Manifest number: BA Signing time: Thu 17 Sep 2026 10:31:33 +0000 Manifest this update: Thu 17 Sep 2026 10:26:33 +0000 Manifest next update: Fri 18 Sep 2026 12:25:33 +0000 Files and hashes: 1: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl (hash: RPL4QGYRtvs7eyB498eyPJblKRMIRD1tX+MkHHhLlzA=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: RmMN8NhmM0RZ6Enalsn3xwEVvbhkE3C1i1JWeXv+gOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:12:86:f1:f0:da:40:58:e1:64:ca:8f:91:ce:53:d2:4c:0b:ef:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Validity Not Before: Sep 17 10:26:33 2026 GMT Not After : Sep 18 12:25:33 2026 GMT Subject: CN=1E380694772C1D04589C904B40CDD3015465C020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:29:2a:dc:77:4d:13:b5:9d:34:f5:a0:e4:68: 0e:2e:93:10:ba:e4:93:ee:b8:cf:7d:6b:78:61:14: e2:f8:dc:45:c6:b9:bf:1c:22:1c:ec:9d:c3:ec:24: 0b:94:e2:49:59:2a:05:ae:70:df:5d:95:15:22:1e: c8:2b:8c:ca:dd:99:f7:25:1e:50:3a:6e:4a:27:49: a2:e0:45:94:4c:25:db:0f:5f:c0:d3:f9:1a:35:e7: 70:a6:5d:c1:c0:9e:5f:3a:b0:f6:8e:5f:0a:7c:e0: a7:e2:a5:39:2a:91:5f:34:6a:b7:10:cd:18:82:ad: da:ee:b0:31:2d:1c:5c:5e:87:d1:99:be:d2:22:22: 85:a3:30:19:93:a5:93:a7:05:14:e9:11:e0:fa:1a: 8a:d2:d5:9b:28:39:24:15:d8:d0:37:0c:61:da:a0: ac:05:1c:c0:3e:00:0a:5f:e9:8b:b5:f1:e3:63:56: 86:0d:bd:20:0e:61:a8:8a:38:38:24:12:8a:0b:db: 21:d9:c1:c9:78:81:36:48:b2:15:1a:de:33:a7:7a: 6b:1c:97:ab:5b:2f:44:2e:7f:c4:e1:80:75:ac:bb: 1f:5d:2a:e5:6f:15:5f:5f:88:ac:c0:95:74:40:4d: c8:6a:8b:01:b0:41:83:ab:02:70:6e:58:d5:f1:af: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:38:06:94:77:2C:1D:04:58:9C:90:4B:40:CD:D3:01:54:65:C0:20 X509v3 Authority Key Identifier: keyid:3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:4c:0c:c3:57:33:e4:d5:26:34:4b:25:27:16:9d:9d:22:e0: a8:5a:ff:17:1b:b1:59:9b:c2:df:98:39:20:3e:41:8a:14:25: aa:81:d9:41:9f:46:19:fd:40:78:4c:b0:30:30:09:a6:a1:07: d8:47:17:84:27:44:85:6d:2a:19:e2:a5:8f:84:3d:83:87:3f: 1e:b8:33:5b:12:83:a5:bd:a2:8e:04:da:7b:f7:e9:bf:61:73: 18:47:f4:82:42:ad:19:8e:cd:bd:40:3d:60:9b:c5:e5:5b:79: ed:02:bd:33:01:32:3a:6c:da:a4:e2:16:40:0e:eb:38:61:43: 47:c9:20:01:f3:82:6f:86:d2:36:a9:7f:4a:eb:b3:96:87:e2: 15:9d:56:53:22:5c:dc:25:a7:1e:02:eb:ba:0f:88:57:14:9c: 21:98:77:40:db:bf:48:87:f0:18:d8:bd:30:22:51:dc:ac:92: ac:eb:85:bd:46:ac:e8:62:19:18:45:24:60:11:5e:52:07:ab: db:7b:1f:e6:af:1f:4d:7a:94:cf:58:ac:35:48:b1:45:23:72: d0:b6:09:86:77:b8:6f:c5:16:27:e9:36:ca:af:f4:4c:57:c9: 4d:b2:93:01:62:95:b8:36:20:40:59:f8:5f:8f:ed:61:5a:31: a5:d5:2d:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBKG8fDaQFjhZMqPkc5T0kwL7w8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYx QzdGNjUxRTAeFw0yNjA5MTcxMDI2MzNaFw0yNjA5MTgxMjI1MzNaMDMxMTAvBgNV BAMTKDFFMzgwNjk0NzcyQzFEMDQ1ODlDOTA0QjQwQ0REMzAxNTQ2NUMwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKSrcd00TtZ009aDkaA4ukxC6 5JPuuM99a3hhFOL43EXGub8cIhzsncPsJAuU4klZKgWucN9dlRUiHsgrjMrdmfcl HlA6bkonSaLgRZRMJdsPX8DT+Ro153CmXcHAnl86sPaOXwp84KfipTkqkV80arcQ zRiCrdrusDEtHFxeh9GZvtIiIoWjMBmTpZOnBRTpEeD6GorS1ZsoOSQV2NA3DGHa oKwFHMA+AApf6Yu18eNjVoYNvSAOYaiKODgkEooL2yHZwcl4gTZIshUa3jOnemsc l6tbL0Quf8ThgHWsux9dKuVvFV9fiKzAlXRATchqiwGwQYOrAnBuWNXxr8YjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHjgGlHcsHQRYnJBLQM3TAVRlwCAwHwYDVR0j BBgwFoAUPxotHUtFNjAqUFl3t49fnxx/ZR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0 QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYxQzdGNjUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRjFBMkQxRDRCNDUzNjMwMkE1MDU5NzdCNzhGNUY5RjFDN0Y2 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVG OUYxQzdGNjUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMhMDMNXM+TVJjRLJScWnZ0i4Kha/xcbsVmb wt+YOSA+QYoUJaqB2UGfRhn9QHhMsDAwCaahB9hHF4QnRIVtKhnipY+EPYOHPx64 M1sSg6W9oo4E2nv36b9hcxhH9IJCrRmOzb1APWCbxeVbee0CvTMBMjps2qTiFkAO 6zhhQ0fJIAHzgm+G0japf0rrs5aH4hWdVlMiXNwlpx4C67oPiFcUnCGYd0Dbv0iH 8BjYvTAiUdyskqzrhb1GrOhiGRhFJGARXlIHq9t7H+avH016lM9YrDVIsUUjctC2 CYZ3uG/FFifpNsqv9ExXyU2ykwFilbg2IEBZ+F+P7WFaMaXVLVk= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:35 2026 by rpki-client