$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft File: 3693BDB8D9539D53978D42B71411F72DA033C8CE.mft (raw, json) Hash identifier: +W2cZGS1WoxmtnY81USFtLHcih9T9C8YZQDopIeYcUk= Subject key identifier: 1F:26:3F:2E:DC:66:98:1B:BD:E0:E9:E1:0A:44:C2:98:07:D4:DC:6C Authority key identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE Certificate issuer: /CN=3693BDB8D9539D53978D42B71411F72DA033C8CE Certificate serial: 3DDA050B246D29CFA86E870D85922DDB5BF3C3AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft Manifest number: EC Signing time: Sun 25 Oct 2026 13:02:56 +0000 Manifest this update: Sun 25 Oct 2026 12:57:56 +0000 Manifest next update: Mon 26 Oct 2026 15:08:56 +0000 Files and hashes: 1: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: ygnIvxWNgcK1plnIZrJxs3dfEQPzyHrhskTC9g4HRXE=) 2: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: c8/N6Mnq9mJVhr1EK8ir1JGtt4U3UW5BenMICe3Zx1c=) 3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: WqTCn5j59dOFJUOOhy3KFyXF/4R8dQGK4UV0a5vcULQ=) 4: 3693BDB8D9539D53978D42B71411F72DA033C8CE.crl (hash: noI+2pjdEkslR5i5d9Ve3iY7EnGxfSGE4ih8GQ00ETI=) 5: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: bAc9RLO23BGn7FV3ehHaNXdYHbfpmRikpiaRJEbpm9w=) 6: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: jSE6GYUud3AuGy6/ruvI9yrqiBFhTM+Gr4dy4Eh9xGg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:da:05:0b:24:6d:29:cf:a8:6e:87:0d:85:92:2d:db:5b:f3:c3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3693BDB8D9539D53978D42B71411F72DA033C8CE Validity Not Before: Oct 25 12:57:56 2026 GMT Not After : Oct 26 15:08:56 2026 GMT Subject: CN=1F263F2EDC66981BBDE0E9E10A44C29807D4DC6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:40:12:44:91:8d:1e:ca:fd:92:43:21:f2:6f: 15:27:55:98:03:c6:34:8b:1c:a2:ed:4c:90:85:b9: 3f:d6:80:79:a8:2f:66:5f:f0:2a:0f:81:b0:1f:e7: af:8f:a7:fa:69:3a:4d:be:27:d3:80:94:f2:77:cb: 25:d1:64:95:8e:42:9c:7b:9c:55:b7:74:e5:6e:51: fe:8c:57:5e:8d:11:42:f1:d9:d0:17:13:66:06:ac: 18:05:27:c4:8e:cb:52:be:76:a5:05:69:f9:6e:a8: 89:c5:00:d3:af:bc:9f:70:e2:b5:de:32:8e:a0:ab: 86:00:d5:d3:b9:31:51:6c:94:b7:76:80:29:2d:41: 1b:c1:64:16:e4:65:2e:d7:de:50:10:0f:19:23:c2: cf:f4:30:84:2d:aa:d6:af:a4:74:3b:ad:d8:e7:23: d0:50:3e:f7:58:4c:85:30:d4:2e:c1:f5:52:44:e5: 31:6e:e4:b3:fb:98:11:07:40:96:2f:87:2f:5f:9b: ac:64:82:70:a9:1f:3d:ec:23:18:d9:ba:da:2a:4e: fd:e2:75:c3:48:df:45:15:64:d1:71:69:49:59:bb: 73:08:42:ad:84:0c:fe:eb:d3:78:dd:be:20:a7:88: c6:3c:84:cf:6d:3a:9e:0b:12:49:c5:7c:24:38:16: 28:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:26:3F:2E:DC:66:98:1B:BD:E0:E9:E1:0A:44:C2:98:07:D4:DC:6C X509v3 Authority Key Identifier: keyid:36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:55:8b:c7:dc:53:b2:bb:71:e2:e2:96:db:9f:cf:95:0d:19: a1:68:a4:a0:aa:2d:aa:8b:c1:3e:6f:3f:d4:71:a2:fe:d1:67: 19:61:f7:ae:56:b0:b9:2b:45:40:26:57:09:f2:66:d8:b6:12: 7d:f1:99:f2:26:b2:98:76:77:79:00:21:a1:64:84:2d:73:39: 5a:3d:54:ad:43:78:7f:f9:0b:47:8b:a0:9d:7a:19:bc:a5:0f: 11:05:50:b9:80:1b:6d:3c:21:09:62:e7:df:0a:3a:82:47:94: 14:33:8d:06:75:b9:1d:a5:02:b7:83:dc:a6:71:29:09:fa:eb: 60:eb:4e:bf:93:52:9e:33:be:f8:12:f0:76:78:b8:fb:af:b7: bc:29:1c:1c:61:b7:e5:38:03:9a:dd:e7:55:cc:f6:b9:7a:0e: 28:89:e8:78:5f:14:5e:63:60:39:d0:4d:48:5d:7a:0e:c8:ea: 62:89:ca:ee:35:c7:d7:8b:66:d3:79:11:0a:bc:d3:7e:71:7e: 87:17:99:28:2c:16:86:80:f8:b6:b1:6c:42:54:1e:b2:21:aa: ca:6b:6a:19:22:c8:11:75:f9:e1:67:37:9a:95:db:2e:7b:07: e7:9b:8e:a7:34:d0:e4:26:d8:68:d8:02:63:f9:51:e4:73:cf: 69:54:84:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdoFCyRtKc+obocNhZIt21vzw64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5M0JEQjhEOTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3MkRB MDMzQzhDRTAeFw0yNjEwMjUxMjU3NTZaFw0yNjEwMjYxNTA4NTZaMDMxMTAvBgNV BAMTKDFGMjYzRjJFREM2Njk4MUJCREUwRTlFMTBBNDRDMjk4MDdENERDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1QBJEkY0eyv2SQyHybxUnVZgD xjSLHKLtTJCFuT/WgHmoL2Zf8CoPgbAf56+Pp/ppOk2+J9OAlPJ3yyXRZJWOQpx7 nFW3dOVuUf6MV16NEULx2dAXE2YGrBgFJ8SOy1K+dqUFafluqInFANOvvJ9w4rXe Mo6gq4YA1dO5MVFslLd2gCktQRvBZBbkZS7X3lAQDxkjws/0MIQtqtavpHQ7rdjn I9BQPvdYTIUw1C7B9VJE5TFu5LP7mBEHQJYvhy9fm6xkgnCpHz3sIxjZutoqTv3i dcNI30UVZNFxaUlZu3MIQq2EDP7r03jdviCniMY8hM9tOp4LEknFfCQ4Fii/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHyY/LtxmmBu94OnhCkTCmAfU3GwwHwYDVR0j BBgwFoAUNpO9uNlTnVOXjUK3FBH3LaAzyM4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2IxMzBiNzUtNDU5My00MTQxLWEwNmYtNTdhMjJhMDIzZGQwLzAvMzY5M0JEQjhE OTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3MkRBMDMzQzhDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjkzQkRCOEQ5NTM5RDUzOTc4RDQyQjcxNDExRjcyREEwMzND OENFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2IxMzBiNzUtNDU5My00MTQxLWEw NmYtNTdhMjJhMDIzZGQwLzAvMzY5M0JEQjhEOTUzOUQ1Mzk3OEQ0MkI3MTQxMUY3 MkRBMDMzQzhDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1Vi8fcU7K7ceLiltufz5UNGaFopKCqLaqL wT5vP9Rxov7RZxlh965WsLkrRUAmVwnyZti2En3xmfImsph2d3kAIaFkhC1zOVo9 VK1DeH/5C0eLoJ16GbylDxEFULmAG208IQli598KOoJHlBQzjQZ1uR2lAreD3KZx KQn662DrTr+TUp4zvvgS8HZ4uPuvt7wpHBxht+U4A5rd51XM9rl6DiiJ6HhfFF5j YDnQTUhdeg7I6mKJyu41x9eLZtN5EQq8035xfocXmSgsFoaA+LaxbEJUHrIhqspr ahkiyBF1+eFnN5qV2y57B+ebjqc00OQm2GjYAmP5UeRzz2lUhJU= -----END CERTIFICATE-----Generated at Mon Oct 26 02:21:55 2026 by rpki-client