$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft File: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft (raw, json) Hash identifier: LsJ5Atpwink5ceFWkXmfjAzbYmmbi0NS8RsmA/dBqlM= Subject key identifier: B4:D4:64:5D:B5:E2:1E:E8:FE:89:EB:15:BA:8E:EC:73:7A:76:9D:49 Authority key identifier: 3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 Certificate issuer: /CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Certificate serial: 437D48A625766DEC9DB1E32C009B87FE46F19601 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft Manifest number: EC Signing time: Sun 25 Oct 2026 16:11:57 +0000 Manifest this update: Sun 25 Oct 2026 16:06:57 +0000 Manifest next update: Mon 26 Oct 2026 18:06:57 +0000 Files and hashes: 1: 3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl (hash: B9e/N3YXHpWZsol2vUbJTc9gMH1Sm2sfsi+oKS99FpM=) 2: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tCaJ2zwdgsb4+fHqF/Tm3Uoxd1Qn9nKNIXa1bnIvzy4=) 3: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: UuNBQfu/W2xG5QH9528nkcryc9rKbacdNqSPH3ls1PA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7d:48:a6:25:76:6d:ec:9d:b1:e3:2c:00:9b:87:fe:46:f1:96:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9 Validity Not Before: Oct 25 16:06:57 2026 GMT Not After : Oct 26 18:06:57 2026 GMT Subject: CN=B4D4645DB5E21EE8FE89EB15BA8EEC737A769D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:99:c1:92:aa:00:06:09:e4:1f:81:3a:51: 55:c8:34:e4:cc:53:3d:a8:76:55:bb:67:49:cf:c6: 66:16:bd:4c:16:90:ea:d3:76:7a:c2:57:84:62:ea: d8:80:17:ad:e1:d9:f7:93:b9:9d:5b:49:e2:b6:c9: 86:b6:2a:92:49:ac:e4:23:50:5a:20:1a:63:01:6d: 34:e6:f8:48:17:ac:74:7c:af:0a:a8:b4:4d:b5:d8: 11:bb:b8:61:9e:6b:8c:75:38:70:d0:c5:31:2b:ac: a4:6b:82:bb:5e:5f:15:e3:a4:ca:55:34:9b:4f:c3: b3:ef:7b:37:5f:22:1d:e4:db:c7:cd:e0:a3:42:1b: af:15:6b:27:9e:d7:6c:db:34:59:64:4e:bf:d5:35: e7:15:62:c1:c7:84:58:25:4b:2c:c9:fb:66:32:f9: c5:f6:16:39:80:26:68:80:6f:45:47:12:1b:e0:2a: 52:27:ec:15:5e:74:02:b9:f2:b6:e0:d3:04:35:e7: 5e:81:11:f2:a5:80:55:ab:20:fe:38:3e:08:2f:44: 70:cf:33:a0:56:03:18:b4:9d:f5:e7:1f:5c:08:f9: 2a:47:b7:8c:45:f0:e4:4d:38:f3:88:bc:01:6a:44: 8c:e6:48:d7:1c:d6:53:4a:63:f5:73:57:b9:d6:22: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D4:64:5D:B5:E2:1E:E8:FE:89:EB:15:BA:8E:EC:73:7A:76:9D:49 X509v3 Authority Key Identifier: keyid:3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d3:c4:04:92:8c:61:17:0d:ae:b8:07:94:5a:eb:63:9d:c7: 89:37:13:4b:7b:c8:2d:69:f3:c2:6b:93:19:c2:b1:f0:d5:a8: 39:75:4f:a2:36:47:18:ea:9a:29:ba:26:a5:c2:da:2d:6d:a6: 48:a4:d9:06:04:fa:3b:cf:d0:66:1d:68:40:51:65:82:1c:59: fd:f5:b8:b8:a8:46:09:73:2d:af:e8:40:fd:6b:37:39:01:48: c4:37:13:bf:a6:1d:18:b8:34:0b:73:b2:ba:1e:ea:61:93:d3: 95:47:82:8e:0e:3e:8d:9e:ca:0f:3c:42:63:c9:15:93:b1:63: 7c:9d:c0:17:c6:2b:2f:84:89:2b:c9:03:15:28:25:b8:1e:6c: ff:f1:df:96:d8:0d:f1:04:14:9c:4e:12:3d:9e:8a:1c:41:62: 7c:bb:8f:6d:2c:ee:a0:11:04:50:4b:82:ee:3a:23:89:27:fd: 73:8a:2e:b4:5d:bf:7f:d6:de:3e:c7:d2:94:3c:e2:2e:87:2d: 53:0c:a6:57:aa:ee:60:76:6f:b5:a0:c3:57:f3:b4:7e:1a:f9: 54:71:46:1d:b4:be:57:94:bd:f6:b7:8e:3d:27:ab:17:6c:78: 9c:4d:8c:26:40:00:cc:37:73:67:7c:23:ce:18:8c:14:b5:09: 9f:53:fb:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ31IpiV2beydseMsAJuH/kbxlgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhC RTc3NzdGOTAeFw0yNjEwMjUxNjA2NTdaFw0yNjEwMjYxODA2NTdaMDMxMTAvBgNV BAMTKEI0RDQ2NDVEQjVFMjFFRThGRTg5RUIxNUJBOEVFQzczN0E3NjlENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOp5nBkqoABgnkH4E6UVXINOTM Uz2odlW7Z0nPxmYWvUwWkOrTdnrCV4Ri6tiAF63h2feTuZ1bSeK2yYa2KpJJrOQj UFogGmMBbTTm+EgXrHR8rwqotE212BG7uGGea4x1OHDQxTErrKRrgrteXxXjpMpV NJtPw7PvezdfIh3k28fN4KNCG68Vayee12zbNFlkTr/VNecVYsHHhFglSyzJ+2Yy +cX2FjmAJmiAb0VHEhvgKlIn7BVedAK58rbg0wQ1516BEfKlgFWrIP44PggvRHDP M6BWAxi0nfXnH1wI+SpHt4xF8ORNOPOIvAFqRIzmSNcc1lNKY/VzV7nWIh+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtNRkXbXiHuj+iesVuo7sc3p2nUkwHwYDVR0j BBgwFoAUP+Wgn4DCLATXfzDe3ya5CL53d/kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTkxNTdjZWQtZTgyYy00MzM0LTkwM2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4 MEMyMkMwNEQ3N0YzMERFREYyNkI5MDhCRTc3NzdGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkU1QTA5RjgwQzIyQzA0RDc3RjMwREVERjI2QjkwOEJFNzc3 N0Y5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvM0ZFNUEwOUY4MEMyMkMwNEQ3N0YzMERFREYyNkI5 MDhCRTc3NzdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArTxASSjGEXDa64B5Ra62Odx4k3E0t7yC1p 88JrkxnCsfDVqDl1T6I2Rxjqmim6JqXC2i1tpkik2QYE+jvP0GYdaEBRZYIcWf31 uLioRglzLa/oQP1rNzkBSMQ3E7+mHRi4NAtzsroe6mGT05VHgo4OPo2eyg88QmPJ FZOxY3ydwBfGKy+EiSvJAxUoJbgebP/x35bYDfEEFJxOEj2eihxBYny7j20s7qAR BFBLgu46I4kn/XOKLrRdv3/W3j7H0pQ84i6HLVMMpleq7mB2b7Wgw1fztH4a+VRx Rh20vleUvfa3jj0nqxdseJxNjCZAAMw3c2d8I84YjBS1CZ9T+yQ= -----END CERTIFICATE-----Generated at Mon Oct 26 05:45:01 2026 by rpki-client