$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft File: 3FB91A5366225ED818B1E745D18CD5555C3F9180.mft (raw, json) Hash identifier: XjW4j8z91RvZaP4XQ+cD9vut7bN8fe+6G3tecCiR39A= Subject key identifier: 28:39:0C:5D:2A:AE:AE:70:71:03:97:2F:54:DA:92:1E:9B:28:16:4F Authority key identifier: 3F:B9:1A:53:66:22:5E:D8:18:B1:E7:45:D1:8C:D5:55:5C:3F:91:80 Certificate issuer: /CN=3FB91A5366225ED818B1E745D18CD5555C3F9180 Certificate serial: 2FB8A9129C92113489AD28BB3BFF4C5F6BE5A1B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft Manifest number: D3 Signing time: Wed 07 Oct 2026 18:31:24 +0000 Manifest this update: Wed 07 Oct 2026 18:26:24 +0000 Manifest next update: Thu 08 Oct 2026 21:38:24 +0000 Files and hashes: 1: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: CSG0H/DZBA3s6AGv8lPFFy0HS/2QV2mwHN4jVwXK0hQ=) 2: 3FB91A5366225ED818B1E745D18CD5555C3F9180.crl (hash: EWKX9Yv5bfvQ7LN95oeNoGjWAwZ3YwoYRyzWSPh3ieQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.crl rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 21:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b8:a9:12:9c:92:11:34:89:ad:28:bb:3b:ff:4c:5f:6b:e5:a1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB91A5366225ED818B1E745D18CD5555C3F9180 Validity Not Before: Oct 7 18:26:24 2026 GMT Not After : Oct 8 21:38:24 2026 GMT Subject: CN=28390C5D2AAEAE707103972F54DA921E9B28164F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:30:82:8b:83:e6:fa:df:36:ad:e7:a7:f5: f6:a2:d8:a8:03:54:09:e8:59:aa:b4:ad:75:4a:7e: 5c:1b:aa:c1:ae:a9:1a:3c:ef:79:0c:43:47:10:10: d1:73:d3:f9:46:aa:51:85:f2:ea:91:c3:da:ce:22: a8:ea:00:c3:bd:4e:d6:14:69:be:dc:d7:f0:af:cf: 43:88:80:1c:aa:ef:ad:20:21:c7:0b:2a:6e:f0:99: bb:a3:3b:00:18:94:17:09:26:82:cf:0f:20:83:de: 01:03:4e:47:47:9b:00:36:b7:8b:2f:77:25:07:bb: fb:58:56:2d:7b:ba:8f:60:e0:14:04:83:d4:b0:73: d1:b6:db:23:96:7d:21:16:f2:bb:a8:92:92:b4:bf: cc:24:4e:61:88:57:43:03:5b:6a:6c:33:83:bd:09: 84:f1:0e:ea:04:13:e9:7d:31:2f:7a:2c:17:b8:6b: 8c:62:19:f1:56:b8:fb:c3:9a:93:2d:ce:f0:27:93: 45:44:b1:14:74:ee:6e:04:6b:bc:54:56:1f:d9:02: 92:70:b4:09:1d:c5:1a:76:90:c5:90:8a:0a:8d:17: 7c:d8:c5:2a:be:2a:44:27:fe:a3:03:ab:b9:f0:69: 75:3a:93:f5:02:40:f5:48:3b:d4:63:26:37:4f:ec: 2a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:39:0C:5D:2A:AE:AE:70:71:03:97:2F:54:DA:92:1E:9B:28:16:4F X509v3 Authority Key Identifier: keyid:3F:B9:1A:53:66:22:5E:D8:18:B1:E7:45:D1:8C:D5:55:5C:3F:91:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FB91A5366225ED818B1E745D18CD5555C3F9180.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3FB91A5366225ED818B1E745D18CD5555C3F9180.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b9:56:47:08:28:11:e1:c7:b7:79:a5:1a:49:7e:fa:7f:81: f1:05:ff:46:13:2a:45:e5:c0:c4:fc:d2:7e:9e:d6:a2:67:b2: a3:a3:a6:ed:fa:e4:9c:1c:6a:39:e6:1b:d6:e3:77:fb:4d:85: 7e:60:0a:49:0f:90:4d:af:bc:fc:4b:20:b2:a0:b8:2f:21:47: 5c:dd:39:ca:c0:c0:f4:79:f8:87:c8:35:04:37:da:bb:21:32: 47:70:af:06:f0:a9:59:a5:1a:3d:fa:10:e0:cb:ef:a3:5c:31: d7:b9:1a:dd:1e:85:bb:dc:be:cf:90:57:0c:39:26:c5:7c:78: 2d:48:2b:0e:4a:f3:0d:6e:7f:4d:7d:8a:43:a1:bd:98:24:61: 18:4a:35:e7:cc:50:ae:5a:19:49:71:6f:52:ab:c3:0c:c5:8b: a5:23:ed:16:3c:40:3d:bf:d8:28:15:1b:2b:19:63:ab:a7:5d: 93:b8:30:08:68:1e:c3:5c:f1:a6:b1:52:e7:f9:a5:6f:9a:9f: 5a:c1:87:fc:e5:35:92:94:d9:d2:ba:0f:6d:36:78:44:22:fc: 5d:07:4c:74:6d:28:85:d8:75:68:59:61:b2:26:dc:c0:3a:3f: c8:c3:ab:c1:a3:14:a5:38:19:4e:f0:1c:cd:93:1a:d1:8e:68: c5:36:c1:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7ipEpySETSJrSi7O/9MX2vlobkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCOTFBNTM2NjIyNUVEODE4QjFFNzQ1RDE4Q0Q1NTU1 QzNGOTE4MDAeFw0yNjEwMDcxODI2MjRaFw0yNjEwMDgyMTM4MjRaMDMxMTAvBgNV BAMTKDI4MzkwQzVEMkFBRUFFNzA3MTAzOTcyRjU0REE5MjFFOUIyODE2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6TCCi4Pm+t82reen9fai2KgD VAnoWaq0rXVKflwbqsGuqRo873kMQ0cQENFz0/lGqlGF8uqRw9rOIqjqAMO9TtYU ab7c1/Cvz0OIgByq760gIccLKm7wmbujOwAYlBcJJoLPDyCD3gEDTkdHmwA2t4sv dyUHu/tYVi17uo9g4BQEg9Swc9G22yOWfSEW8ruokpK0v8wkTmGIV0MDW2psM4O9 CYTxDuoEE+l9MS96LBe4a4xiGfFWuPvDmpMtzvAnk0VEsRR07m4Ea7xUVh/ZApJw tAkdxRp2kMWQigqNF3zYxSq+KkQn/qMDq7nwaXU6k/UCQPVIO9RjJjdP7CopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKDkMXSqurnBxA5cvVNqSHpsoFk8wHwYDVR0j BBgwFoAUP7kaU2YiXtgYsedF0YzVVVw/kYAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2M2MzVjZTktMGVhNS00N2Q4LTlmY2MtY2FkMWM5ZjA2ZmJlLzAvM0ZCOTFBNTM2 NjIyNUVEODE4QjFFNzQ1RDE4Q0Q1NTU1QzNGOTE4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRkI5MUE1MzY2MjI1RUQ4MThCMUU3NDVEMThDRDU1NTVDM0Y5 MTgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvM0ZCOTFBNTM2NjIyNUVEODE4QjFFNzQ1RDE4Q0Q1 NTU1QzNGOTE4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+5VkcIKBHhx7d5pRpJfvp/gfEF/0YTKkXl wMT80n6e1qJnsqOjpu365JwcajnmG9bjd/tNhX5gCkkPkE2vvPxLILKguC8hR1zd OcrAwPR5+IfINQQ32rshMkdwrwbwqVmlGj36EODL76NcMde5Gt0ehbvcvs+QVww5 JsV8eC1IKw5K8w1uf019ikOhvZgkYRhKNefMUK5aGUlxb1KrwwzFi6Uj7RY8QD2/ 2CgVGysZY6unXZO4MAhoHsNc8aaxUuf5pW+an1rBh/zlNZKU2dK6D202eEQi/F0H THRtKIXYdWhZYbIm3MA6P8jDq8GjFKU4GU7wHM2TGtGOaMU2wcw= -----END CERTIFICATE-----Generated at Thu Oct 8 05:17:25 2026 by rpki-client