$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft File: 3B905656ECAB5F25C747565B1F6158A544607342.mft (raw, json) Hash identifier: n/Z53bDTERfrmAwmDTFMOw8d08DT2CoKPF6dnnvaXfw= Subject key identifier: 45:72:D4:B0:74:CD:76:54:8D:26:96:40:B8:70:2C:67:87:96:83:10 Authority key identifier: 3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 Certificate issuer: /CN=3B905656ECAB5F25C747565B1F6158A544607342 Certificate serial: 470D07522BBCAF2E3E37CBF0BB3712A500D583A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:32:51 +0000 Manifest this update: Thu 17 Sep 2026 07:27:51 +0000 Manifest next update: Fri 18 Sep 2026 11:04:51 +0000 Files and hashes: 1: 3B905656ECAB5F25C747565B1F6158A544607342.crl (hash: zFiyy0KSGwktzfrVaWFiAekjz7H/gptQoASZ/s06Fuk=) 2: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: SZMiP70bobuD5/c0OLg4Km31ztDYKaW8prAjAv3Nm8M=) 3: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: 96TgCS7ETcD0HP72sHWel8um1ZSywlXykltIHFwAFDk=) 4: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: qR5fJsbozBhXPJh8WuiE5z4yLvoKQfTANugzq/ELLiU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.crl rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0d:07:52:2b:bc:af:2e:3e:37:cb:f0:bb:37:12:a5:00:d5:83:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B905656ECAB5F25C747565B1F6158A544607342 Validity Not Before: Sep 17 07:27:51 2026 GMT Not After : Sep 18 11:04:51 2026 GMT Subject: CN=4572D4B074CD76548D269640B8702C6787968310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:da:df:13:3c:35:c7:24:9c:9f:b4:a4:8b: 6f:da:13:ae:1d:0c:99:75:66:ce:19:13:b0:f3:f4: 65:f2:4b:f0:83:e1:85:2a:26:64:c1:60:7a:91:42: 74:ac:7b:db:8d:6a:c9:ae:d7:d9:14:57:3d:4a:ee: 49:8b:e1:75:22:55:55:ef:55:71:35:ce:4c:77:a9: d5:2f:83:90:11:13:f7:89:06:08:4a:19:6e:68:4e: 62:3d:4a:29:73:47:ab:7f:9b:c7:6a:55:bb:c9:da: 36:05:cf:a4:d1:82:57:94:89:7f:ea:aa:48:f5:4c: 88:8a:6f:75:c3:f3:7d:42:31:94:2c:51:b2:62:15: 32:65:84:99:1e:e7:55:d0:ae:ce:4e:8f:19:d9:fc: e6:ca:dc:d9:cd:17:38:20:ea:86:37:37:8a:7c:7e: df:22:65:4c:8a:92:c3:6e:93:e9:94:aa:12:c9:1f: a4:45:2c:a7:4b:e5:ff:68:61:5f:2d:28:7a:ac:94: 4c:42:5f:ae:02:30:2c:7d:49:f9:a5:08:62:fb:85: d4:81:03:23:9a:e1:db:5e:c4:57:f9:57:38:77:d8: f6:02:3a:b3:11:d1:7a:2e:e4:64:f9:12:dc:f6:25: fe:6e:e4:08:b2:7c:ef:2d:22:a3:f5:f9:d5:58:b7: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:72:D4:B0:74:CD:76:54:8D:26:96:40:B8:70:2C:67:87:96:83:10 X509v3 Authority Key Identifier: keyid:3B:90:56:56:EC:AB:5F:25:C7:47:56:5B:1F:61:58:A5:44:60:73:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B905656ECAB5F25C747565B1F6158A544607342.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/3B905656ECAB5F25C747565B1F6158A544607342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:86:ba:90:47:47:7d:fc:2e:97:37:7b:7c:e4:33:de:ca:3b: 31:2b:ae:93:2f:94:2b:59:be:8b:52:99:af:b3:de:79:23:9e: f9:2c:14:d3:36:88:e4:dd:97:3b:64:f6:19:21:cf:01:d8:f9: 54:c4:4b:c7:81:21:f4:fa:1f:01:06:5f:e1:84:2d:ee:6a:70: 68:61:6a:3e:a3:5d:47:05:4e:a1:d8:52:75:77:0f:da:d4:dd: 2d:35:95:a4:b1:cb:e1:d7:2e:88:9b:84:04:d4:d7:10:85:68: f0:c3:da:c5:4b:b9:a0:cd:71:16:c9:79:63:8f:89:f8:ef:7a: 2d:7e:d5:3a:46:da:77:82:b6:76:3a:28:d3:68:c2:df:3c:41: ba:1e:8e:ed:3d:19:92:fe:34:70:ac:95:67:2b:9f:eb:1c:19: 83:9f:27:4a:24:3e:3e:af:46:b4:b8:7e:ea:bf:77:50:e9:af: cb:81:2f:db:8c:f2:a9:4b:15:d2:bd:4d:83:dc:bc:4b:cc:f4: 39:3c:25:57:60:20:6c:23:17:4c:99:f6:57:05:80:5e:5d:3e: 6e:37:17:fc:cf:83:99:d5:45:a4:fc:e6:e2:48:dd:19:98:f7: 39:cf:cd:ed:bb:0e:45:42:9d:54:d3:14:56:b8:32:0e:82:62: bb:0d:d6:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURw0HUiu8ry4+N8vwuzcSpQDVg6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I5MDU2NTZFQ0FCNUYyNUM3NDc1NjVCMUY2MTU4QTU0 NDYwNzM0MjAeFw0yNjA5MTcwNzI3NTFaFw0yNjA5MTgxMTA0NTFaMDMxMTAvBgNV BAMTKDQ1NzJENEIwNzRDRDc2NTQ4RDI2OTY0MEI4NzAyQzY3ODc5NjgzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PtrfEzw1xyScn7Ski2/aE64d DJl1Zs4ZE7Dz9GXyS/CD4YUqJmTBYHqRQnSse9uNasmu19kUVz1K7kmL4XUiVVXv VXE1zkx3qdUvg5ARE/eJBghKGW5oTmI9SilzR6t/m8dqVbvJ2jYFz6TRgleUiX/q qkj1TIiKb3XD831CMZQsUbJiFTJlhJke51XQrs5OjxnZ/ObK3NnNFzgg6oY3N4p8 ft8iZUyKksNuk+mUqhLJH6RFLKdL5f9oYV8tKHqslExCX64CMCx9SfmlCGL7hdSB AyOa4dtexFf5Vzh32PYCOrMR0Xou5GT5Etz2Jf5u5AiyfO8tIqP1+dVYt47NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURXLUsHTNdlSNJpZAuHAsZ4eWgxAwHwYDVR0j BBgwFoAUO5BWVuyrXyXHR1ZbH2FYpURgc0IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA5MTc5M2UtYmQ2OS00NWE0LTk3YTgtYzY4YWEzZGQ0N2EzLzAvM0I5MDU2NTZF Q0FCNUYyNUM3NDc1NjVCMUY2MTU4QTU0NDYwNzM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjkwNTY1NkVDQUI1RjI1Qzc0NzU2NUIxRjYxNThBNTQ0NjA3 MzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvM0I5MDU2NTZFQ0FCNUYyNUM3NDc1NjVCMUY2MTU4 QTU0NDYwNzM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6GupBHR338Lpc3e3zkM97KOzErrpMvlCtZ votSma+z3nkjnvksFNM2iOTdlztk9hkhzwHY+VTES8eBIfT6HwEGX+GELe5qcGhh aj6jXUcFTqHYUnV3D9rU3S01laSxy+HXLoibhATU1xCFaPDD2sVLuaDNcRbJeWOP ifjvei1+1TpG2neCtnY6KNNowt88Qboeju09GZL+NHCslWcrn+scGYOfJ0okPj6v RrS4fuq/d1Dpr8uBL9uM8qlLFdK9TYPcvEvM9Dk8JVdgIGwjF0yZ9lcFgF5dPm43 F/zPg5nVRaT85uJI3RmY9znPze27DkVCnVTTFFa4Mg6CYrsN1uY= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:48 2026 by rpki-client