$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft File: 3B5092CF38247651A4F776617E70229749D4DF27.mft (raw, json) Hash identifier: EiO9CdYLSQwHBY6rAEsEXWeyWsUakXxXhluTHpCJKHc= Subject key identifier: 88:07:67:E6:EB:4C:03:69:6D:A3:D3:3B:C4:4D:0A:1E:5E:BC:31:78 Authority key identifier: 3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 Certificate issuer: /CN=3B5092CF38247651A4F776617E70229749D4DF27 Certificate serial: 2F3917DDC238F91CE8B11330BC48D9B02B7A0542 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 14:52:27 +0000 Manifest this update: Wed 16 Sep 2026 14:47:27 +0000 Manifest next update: Thu 17 Sep 2026 17:07:27 +0000 Files and hashes: 1: 34332e3234302e3232362e302f32342d3234203d3e203633343933.roa (hash: J0FfR9JSKls+f1CuVbHQ5JPg6SCAprcR1QwuMf2ba6c=) 2: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: NJ/ZuXg3IzseC0419KTO2YbQ/VOZZfzQExIZsLUwy0I=) 3: 3B5092CF38247651A4F776617E70229749D4DF27.crl (hash: R7+PNebfJL2MEKiC+Xd26xPk2CgC7inTH9/dVuEjE1k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:39:17:dd:c2:38:f9:1c:e8:b1:13:30:bc:48:d9:b0:2b:7a:05:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B5092CF38247651A4F776617E70229749D4DF27 Validity Not Before: Sep 16 14:47:27 2026 GMT Not After : Sep 17 17:07:27 2026 GMT Subject: CN=880767E6EB4C03696DA3D33BC44D0A1E5EBC3178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:14:d6:a7:86:76:c5:6c:aa:5f:db:43:f9:52: 2d:b1:7b:d2:6f:d0:5c:ad:e2:7e:a4:c6:ee:c5:d9: 32:a4:e2:50:36:43:aa:62:30:f9:3c:9a:22:b5:66: 7b:e7:75:16:42:4c:e4:5e:04:f0:b6:4e:9e:02:1e: 59:3b:10:40:f6:3e:24:8b:d2:32:b1:9c:d3:1c:d0: e1:76:1e:ac:1b:11:8e:bb:f4:cf:f0:d0:54:bf:9c: 14:55:a5:67:8a:af:0e:13:ca:0f:dc:78:bf:cb:ec: 81:6a:ea:b7:b7:d3:6f:11:e8:38:9e:43:17:bb:65: 22:e1:cc:11:86:f6:18:ad:0e:e2:a4:c6:ab:3a:8e: 0e:ae:8b:dd:8e:fe:02:b4:cf:59:e4:48:ef:21:7b: f2:50:18:7e:a6:25:f6:3f:6c:e5:6b:67:d0:cf:65: 24:ff:9a:a1:fb:b7:4d:26:6a:89:77:6b:f1:bd:f0: 1a:42:ec:96:61:ab:21:a0:8a:e8:65:77:54:91:ff: 55:83:85:60:d5:61:ed:01:d7:b4:76:49:a7:b9:42: 3c:a9:28:d0:a3:3c:8d:1a:ca:dc:fe:87:9f:44:c5: da:91:5d:4a:1d:8e:97:8d:20:f5:93:07:70:69:b9: ea:8d:f4:ea:0a:a4:b7:23:8f:cf:45:cb:ff:a3:6c: f0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:07:67:E6:EB:4C:03:69:6D:A3:D3:3B:C4:4D:0A:1E:5E:BC:31:78 X509v3 Authority Key Identifier: keyid:3B:50:92:CF:38:24:76:51:A4:F7:76:61:7E:70:22:97:49:D4:DF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B5092CF38247651A4F776617E70229749D4DF27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/3B5092CF38247651A4F776617E70229749D4DF27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:16:76:ee:ce:fd:46:bb:f2:30:e5:8e:08:d8:7d:5f:97:4c: b6:b2:f8:27:45:41:1c:e9:03:60:15:06:af:cb:2e:8a:7d:2b: 94:09:f9:ee:84:17:c5:93:a1:ec:31:a2:c3:f4:58:ed:d8:54: 22:37:c6:50:94:6b:a2:7d:92:88:fd:ef:e0:02:d7:69:4b:3c: 24:c0:11:55:bf:a6:de:b0:0c:7c:0e:3b:4b:1b:b3:07:b1:90: 47:0e:f4:0b:45:0e:45:cc:2f:f2:71:98:75:7d:64:d9:ab:9b: 10:34:1d:36:85:80:0d:fc:b7:51:60:52:a5:de:48:06:4e:d9: 77:aa:8e:c3:81:f0:54:5d:de:df:8a:33:c1:47:bc:4a:ae:23: 5a:07:f8:70:9b:db:d7:fb:39:46:de:04:ef:36:ae:2e:74:c7: d1:04:0f:19:65:ba:d8:40:e5:83:03:8f:45:f6:9d:18:ef:31: f2:43:23:12:d2:4d:41:32:85:06:bf:1c:81:7b:bf:31:82:47: b8:66:f8:6a:40:25:93:f1:3f:8b:34:2d:5b:7d:0e:64:b0:ea: 3a:b0:8e:b6:eb:9a:bc:74:4e:d9:94:7f:0d:59:49:91:fa:39: 4b:cc:d6:19:0d:de:85:09:f8:9f:2e:ee:c1:91:a4:aa:e2:e4: 6e:3b:44:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzkX3cI4+RzosRMwvEjZsCt6BUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I1MDkyQ0YzODI0NzY1MUE0Rjc3NjYxN0U3MDIyOTc0 OUQ0REYyNzAeFw0yNjA5MTYxNDQ3MjdaFw0yNjA5MTcxNzA3MjdaMDMxMTAvBgNV BAMTKDg4MDc2N0U2RUI0QzAzNjk2REEzRDMzQkM0NEQwQTFFNUVCQzMxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFNanhnbFbKpf20P5Ui2xe9Jv 0Fyt4n6kxu7F2TKk4lA2Q6piMPk8miK1ZnvndRZCTOReBPC2Tp4CHlk7EED2PiSL 0jKxnNMc0OF2HqwbEY679M/w0FS/nBRVpWeKrw4Tyg/ceL/L7IFq6re3028R6Die Qxe7ZSLhzBGG9hitDuKkxqs6jg6ui92O/gK0z1nkSO8he/JQGH6mJfY/bOVrZ9DP ZST/mqH7t00maol3a/G98BpC7JZhqyGgiuhld1SR/1WDhWDVYe0B17R2Sae5Qjyp KNCjPI0aytz+h59ExdqRXUodjpeNIPWTB3BpueqN9OoKpLcjj89Fy/+jbPAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiAdn5utMA2lto9M7xE0KHl68MXgwHwYDVR0j BBgwFoAUO1CSzzgkdlGk93ZhfnAil0nU3ycwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZhYmVjNzEtN2VjYi00ZGJkLWE0MjEtOTliOWNkMjA5MDNhLzAvM0I1MDkyQ0Yz ODI0NzY1MUE0Rjc3NjYxN0U3MDIyOTc0OUQ0REYyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjUwOTJDRjM4MjQ3NjUxQTRGNzc2NjE3RTcwMjI5NzQ5RDRE RjI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvM0I1MDkyQ0YzODI0NzY1MUE0Rjc3NjYxN0U3MDIy OTc0OUQ0REYyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcWdu7O/Ua78jDljgjYfV+XTLay+CdFQRzp A2AVBq/LLop9K5QJ+e6EF8WToewxosP0WO3YVCI3xlCUa6J9koj97+AC12lLPCTA EVW/pt6wDHwOO0sbswexkEcO9AtFDkXML/JxmHV9ZNmrmxA0HTaFgA38t1FgUqXe SAZO2XeqjsOB8FRd3t+KM8FHvEquI1oH+HCb29f7OUbeBO82ri50x9EEDxlluthA 5YMDj0X2nRjvMfJDIxLSTUEyhQa/HIF7vzGCR7hm+GpAJZPxP4s0LVt9DmSw6jqw jrbrmrx0TtmUfw1ZSZH6OUvM1hkN3oUJ+J8u7sGRpKri5G47RLU= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:28 2026 by rpki-client