$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft File: 3B610B6D52EFC83BEC0E681395E172E5584CB922.mft (raw, json) Hash identifier: FYcOy7muFcGCrN2B8a4qLnF6SIQQmtniZGZThdNWsww= Subject key identifier: C3:2F:78:65:56:9F:8A:7C:42:AF:03:80:C8:48:5C:DF:F8:32:A9:6A Authority key identifier: 3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22 Certificate issuer: /CN=3B610B6D52EFC83BEC0E681395E172E5584CB922 Certificate serial: 4120AEA7AC199D349CD7652B4120CA7A285C667B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 09:04:47 +0000 Manifest this update: Thu 17 Sep 2026 08:59:47 +0000 Manifest next update: Fri 18 Sep 2026 11:17:47 +0000 Files and hashes: 1: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: JeBWxU2nKUoJd4mmQd29lF3qX2yOUpENL2Ej8COjW7k=) 2: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: +4k5B1hiZNKTDNmRtO1UucDd1K3kJOf9PkAdB1Yr6bU=) 3: 3B610B6D52EFC83BEC0E681395E172E5584CB922.crl (hash: pKlzcqVzFlTvpx5XM7YImOnx+nhdVg9AxzAeka9ge9A=) 4: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: rS+TB49YP+YKxVsyAwTK2Y9kOM5qpa1/Sqk+oSuWw+E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:20:ae:a7:ac:19:9d:34:9c:d7:65:2b:41:20:ca:7a:28:5c:66:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B610B6D52EFC83BEC0E681395E172E5584CB922 Validity Not Before: Sep 17 08:59:47 2026 GMT Not After : Sep 18 11:17:47 2026 GMT Subject: CN=C32F7865569F8A7C42AF0380C8485CDFF832A96A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:29:d8:4b:30:21:9c:ad:f5:d6:7e:07:99: 6f:4d:20:94:79:92:41:4c:fc:c0:82:88:19:44:e8: 2d:17:6c:00:44:4e:31:f0:c5:62:ce:39:4c:22:06: 54:69:97:75:7f:71:cc:5f:8e:af:e1:c1:4c:9f:c9: dc:3c:ec:7b:18:cc:1a:c7:0a:d6:99:eb:46:56:e1: 4b:ca:33:cd:75:1d:0e:1d:34:5c:63:1d:02:34:6a: f1:03:e5:f0:a9:13:fa:61:66:bb:7d:e7:36:c0:bc: cd:5e:90:3e:8f:f0:78:98:37:ba:52:1f:75:6e:1a: 9b:13:2e:33:09:4f:91:f1:df:b8:51:1f:c4:73:25: 84:33:85:06:3c:ba:f7:14:1e:48:ad:71:43:e8:f9: db:25:6a:a9:5b:5b:88:1e:3d:7c:39:64:bb:5a:e6: 57:31:86:79:58:5c:56:c6:16:cd:36:96:50:80:0c: af:4b:72:b3:80:53:75:f5:b9:75:45:4d:a8:d9:e7: ac:5a:95:8e:84:1a:21:25:6b:4d:70:a1:0a:fc:94: 2a:b2:06:e7:85:2f:31:d9:a4:af:d3:14:a0:96:d3: 25:1b:d8:d0:f7:dc:84:6e:2d:15:bd:02:71:4b:e3: 2a:95:e4:81:2a:db:b4:66:1c:e8:c1:b1:95:f1:13: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2F:78:65:56:9F:8A:7C:42:AF:03:80:C8:48:5C:DF:F8:32:A9:6A X509v3 Authority Key Identifier: keyid:3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:06:80:0c:ff:7e:9d:6e:ec:b5:95:82:db:b4:06:ec:0a:29: 50:27:a2:3f:d1:2f:ff:28:74:9d:11:66:9b:0f:8a:3a:7b:29: 44:1c:e4:dc:53:e7:7f:81:89:99:33:ce:4a:ce:27:58:2f:26: ee:fe:0b:43:4c:4d:67:0b:1c:18:f9:c1:d6:64:2f:55:d5:b4: 13:85:50:a6:b2:59:19:82:47:7f:d4:ce:40:cb:17:41:ab:8c: ff:ef:57:d0:65:7d:ef:d3:da:c0:81:e4:48:70:b7:92:10:bd: 8b:39:5f:2b:7b:5c:02:d2:fe:72:be:58:af:cf:dc:c3:78:04: c8:cd:46:03:9d:4e:83:b4:63:d7:47:22:5e:93:05:58:28:19: 30:4b:36:45:8f:00:65:a6:55:fa:f1:eb:49:5a:80:d2:f0:11: 6c:6e:bc:8a:f9:b0:22:9d:52:b5:82:bf:98:d0:ff:85:58:a4: ef:fe:fd:24:8e:14:8a:e0:53:d4:8d:62:c5:f2:67:7d:26:a4: 1f:f2:b4:13:b4:d1:d0:20:fa:e1:f2:b1:aa:69:d6:64:16:7a: 47:8d:68:e5:5b:f7:ae:5a:3b:a2:44:13:fc:3d:00:b9:24:2f: 75:01:b2:ec:3a:e7:49:e5:9e:d0:af:d6:3c:86:e9:84:53:3c: 90:33:16:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSCup6wZnTSc12UrQSDKeihcZnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1 ODRDQjkyMjAeFw0yNjA5MTcwODU5NDdaFw0yNjA5MTgxMTE3NDdaMDMxMTAvBgNV BAMTKEMzMkY3ODY1NTY5RjhBN0M0MkFGMDM4MEM4NDg1Q0RGRjgzMkE5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6minYSzAhnK311n4HmW9NIJR5 kkFM/MCCiBlE6C0XbABETjHwxWLOOUwiBlRpl3V/ccxfjq/hwUyfydw87HsYzBrH CtaZ60ZW4UvKM811HQ4dNFxjHQI0avED5fCpE/phZrt95zbAvM1ekD6P8HiYN7pS H3VuGpsTLjMJT5Hx37hRH8RzJYQzhQY8uvcUHkitcUPo+dslaqlbW4gePXw5ZLta 5lcxhnlYXFbGFs02llCADK9LcrOAU3X1uXVFTajZ56xalY6EGiEla01woQr8lCqy BueFLzHZpK/TFKCW0yUb2ND33IRuLRW9AnFL4yqV5IEq27RmHOjBsZXxEwzvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwy94ZVafinxCrwOAyEhc3/gyqWowHwYDVR0j BBgwFoAUO2ELbVLvyDvsDmgTleFy5VhMuSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmE4OTZmZGMtNTYzOC00MWQyLThhOTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1 MkVGQzgzQkVDMEU2ODEzOTVFMTcyRTU1ODRDQjkyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQjYxMEI2RDUyRUZDODNCRUMwRTY4MTM5NUUxNzJFNTU4NENC OTIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvM0I2MTBCNkQ1MkVGQzgzQkVDMEU2ODEzOTVFMTcy RTU1ODRDQjkyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUGgAz/fp1u7LWVgtu0BuwKKVAnoj/RL/8o dJ0RZpsPijp7KUQc5NxT53+BiZkzzkrOJ1gvJu7+C0NMTWcLHBj5wdZkL1XVtBOF UKayWRmCR3/UzkDLF0GrjP/vV9Blfe/T2sCB5Ehwt5IQvYs5Xyt7XALS/nK+WK/P 3MN4BMjNRgOdToO0Y9dHIl6TBVgoGTBLNkWPAGWmVfrx60lagNLwEWxuvIr5sCKd UrWCv5jQ/4VYpO/+/SSOFIrgU9SNYsXyZ30mpB/ytBO00dAg+uHysapp1mQWekeN aOVb965aO6JEE/w9ALkkL3UBsuw650nlntCv1jyG6YRTPJAzFlU= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:39 2026 by rpki-client