$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft File: 3B7FE3B2042531E0B36242D947F82DF031754FD3.mft (raw, json) Hash identifier: DxnftfrWYIvxej06Xp0phV+KVbCTjFNYgwGp3nLisz8= Subject key identifier: 02:8A:09:CF:D2:7A:FF:23:63:2B:0B:57:35:80:23:B3:C9:D6:79:D8 Authority key identifier: 3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 Certificate issuer: /CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Certificate serial: 5F79AB17E425A28094617B200FC7429E73E4D7C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 10:11:17 +0000 Manifest this update: Thu 17 Sep 2026 10:06:17 +0000 Manifest next update: Fri 18 Sep 2026 13:18:17 +0000 Files and hashes: 1: 3B7FE3B2042531E0B36242D947F82DF031754FD3.crl (hash: 6QOPlwV118ozIzGx5uVBImmeYPD4fsKe7jtW7sP3f/8=) 2: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: NeiRD0Vhv/h8RWipDP6Q873ht3qdQPfYf3BUMU4aFVw=) 3: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: pTAxtDqCoq1lZ0weKvW5ktevS+0YSpgq+YtzT/tKQzQ=) 4: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: 137GCdmWkDay1INFZoJTq4DPdPLmTUTYDzr+pVTMq4w=) 5: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: nG1oS5kPYmQFB9gUVJnLfk54lZwsWyYkdNpEIO9gT/M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:79:ab:17:e4:25:a2:80:94:61:7b:20:0f:c7:42:9e:73:e4:d7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B7FE3B2042531E0B36242D947F82DF031754FD3 Validity Not Before: Sep 17 10:06:17 2026 GMT Not After : Sep 18 13:18:17 2026 GMT Subject: CN=028A09CFD27AFF23632B0B57358023B3C9D679D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:43:21:e3:c1:18:9d:f9:a3:3a:94:15:c1:d9: cf:21:6d:3c:80:7d:74:f5:aa:c5:8e:5f:71:fd:07: 4d:10:25:7c:8c:7f:6d:84:7e:b2:07:ce:97:be:83: 44:48:d1:b8:ea:1e:d8:26:0d:11:29:24:31:fc:9d: 7e:9a:96:8e:57:7b:96:c6:56:94:92:7d:a8:af:98: 31:a7:0a:cb:54:0c:25:32:f0:e7:86:40:b7:88:9c: 25:ce:9e:e3:99:9c:59:66:20:43:e1:c2:c3:ec:7d: 40:a7:71:f0:1d:c5:19:f8:ea:56:79:70:0d:1f:16: 2d:85:f7:ce:fb:b9:17:c7:ae:35:ed:a3:2e:dd:10: 96:d6:4e:83:2f:4a:f9:96:99:8b:6d:cf:3d:21:01: 33:ba:29:fc:f3:f0:0e:1e:3d:b2:9c:e8:1f:ff:59: b9:f1:fa:6a:8e:bc:fc:9c:01:3f:89:cf:de:2a:ca: 31:40:24:fb:f1:0c:06:47:63:5d:69:db:e4:80:7e: 1d:dd:f0:95:5c:53:f2:7c:f3:9c:85:4d:24:6a:85: 1f:c3:35:56:5f:fc:4f:75:4c:cd:a3:8c:ef:5e:cb: d3:3a:34:f0:78:4c:65:8d:a9:e7:f4:48:5d:e9:2e: 77:a6:c7:2f:a5:7b:3d:25:02:5e:b1:bb:7d:1f:b4: cf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8A:09:CF:D2:7A:FF:23:63:2B:0B:57:35:80:23:B3:C9:D6:79:D8 X509v3 Authority Key Identifier: keyid:3B:7F:E3:B2:04:25:31:E0:B3:62:42:D9:47:F8:2D:F0:31:75:4F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B7FE3B2042531E0B36242D947F82DF031754FD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3B7FE3B2042531E0B36242D947F82DF031754FD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:68:53:7d:11:e7:a7:60:06:46:2c:9f:56:ce:7f:ea:a7:af: f4:12:3c:97:88:91:76:3d:29:31:fe:ca:89:11:4d:71:12:5e: 7e:26:20:5d:90:6a:f1:b8:68:f2:64:76:d0:5e:74:83:a0:b3: ba:dd:6c:77:9b:45:06:67:33:74:81:e0:93:ad:bc:43:95:ce: b1:24:f6:88:eb:49:fb:25:ea:bb:e6:e0:ed:54:11:78:11:8b: d5:65:41:1c:5d:8b:54:92:43:06:d9:3b:86:84:d0:6b:21:a6: a2:b9:67:94:ec:41:62:9b:fc:9d:ba:ad:6e:e5:a5:c5:af:13: dc:95:cc:33:96:1a:9e:a6:18:76:df:f1:d2:0d:ee:64:18:31: 0f:1d:35:21:d8:71:93:b1:0f:c7:f3:40:cb:f0:b4:88:3e:89: ff:45:23:2f:35:0d:fd:9e:c6:50:ff:c6:a0:07:93:55:3c:e9: 4d:e4:e3:f0:44:7c:c1:5d:91:fc:66:d6:d6:c1:48:e9:4a:55: 73:7d:db:f8:d0:80:b4:a4:c9:7d:00:ab:3f:69:f4:c3:db:37: 7e:04:2a:52:92:6e:f1:bc:86:50:76:d9:68:e8:df:b8:c5:7d: 72:eb:a7:29:11:bd:66:b3:56:4d:91:06:88:00:7d:37:ba:ea: b8:7d:e1:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX3mrF+QlooCUYXsgD8dCnnPk18UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJERjAz MTc1NEZEMzAeFw0yNjA5MTcxMDA2MTdaFw0yNjA5MTgxMzE4MTdaMDMxMTAvBgNV BAMTKDAyOEEwOUNGRDI3QUZGMjM2MzJCMEI1NzM1ODAyM0IzQzlENjc5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNQyHjwRid+aM6lBXB2c8hbTyA fXT1qsWOX3H9B00QJXyMf22EfrIHzpe+g0RI0bjqHtgmDREpJDH8nX6alo5Xe5bG VpSSfaivmDGnCstUDCUy8OeGQLeInCXOnuOZnFlmIEPhwsPsfUCncfAdxRn46lZ5 cA0fFi2F9877uRfHrjXtoy7dEJbWToMvSvmWmYttzz0hATO6Kfzz8A4ePbKc6B// Wbnx+mqOvPycAT+Jz94qyjFAJPvxDAZHY11p2+SAfh3d8JVcU/J885yFTSRqhR/D NVZf/E91TM2jjO9ey9M6NPB4TGWNqef0SF3pLnemxy+lez0lAl6xu30ftM/1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAooJz9J6/yNjKwtXNYAjs8nWedgwHwYDVR0j BBgwFoAUO3/jsgQlMeCzYkLZR/gt8DF1T9MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTE0MWY4ODQtZDVjOS00MzM2LTlhNWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIw NDI1MzFFMEIzNjI0MkQ5NDdGODJERjAzMTc1NEZEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjdGRTNCMjA0MjUzMUUwQjM2MjQyRDk0N0Y4MkRGMDMxNzU0 RkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvM0I3RkUzQjIwNDI1MzFFMEIzNjI0MkQ5NDdGODJE RjAzMTc1NEZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRoU30R56dgBkYsn1bOf+qnr/QSPJeIkXY9 KTH+yokRTXESXn4mIF2QavG4aPJkdtBedIOgs7rdbHebRQZnM3SB4JOtvEOVzrEk 9ojrSfsl6rvm4O1UEXgRi9VlQRxdi1SSQwbZO4aE0GshpqK5Z5TsQWKb/J26rW7l pcWvE9yVzDOWGp6mGHbf8dIN7mQYMQ8dNSHYcZOxD8fzQMvwtIg+if9FIy81Df2e xlD/xqAHk1U86U3k4/BEfMFdkfxm1tbBSOlKVXN92/jQgLSkyX0Aqz9p9MPbN34E KlKSbvG8hlB22Wjo37jFfXLrpykRvWazVk2RBogAfTe66rh94Ss= -----END CERTIFICATE-----Generated at Thu Sep 17 16:47:27 2026 by rpki-client