$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft File: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft (raw, json) Hash identifier: FkEa+rx+F1TmUrf978oOF1grJhC/438cbGpbnA+dgdI= Subject key identifier: D1:5E:6D:FA:06:7F:CA:34:5B:43:97:AF:C9:0C:6B:25:A4:BF:80:DB Authority key identifier: 3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 Certificate issuer: /CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Certificate serial: 1832E7A8045B4B3DF575A457FDF87AB3F8CFCBB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 10:42:19 +0000 Manifest this update: Sat 24 Oct 2026 10:37:19 +0000 Manifest next update: Sun 25 Oct 2026 13:54:19 +0000 Files and hashes: 1: 3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl (hash: Giea/eQxPcqKVPEtVf2zlvSFBzeRjVLaRrg+0C73Tgo=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: InPNxYRaf3FwNMQXVehetQN/Y6CMxZDL5d0U1h33pOA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:32:e7:a8:04:5b:4b:3d:f5:75:a4:57:fd:f8:7a:b3:f8:cf:cb:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B76D59A3F168F6110E52A62ED7649A3D0E93F40 Validity Not Before: Oct 24 10:37:19 2026 GMT Not After : Oct 25 13:54:19 2026 GMT Subject: CN=D15E6DFA067FCA345B4397AFC90C6B25A4BF80DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1b:8b:bd:a4:a2:6c:b2:8e:0e:66:a3:50:b2: f3:02:42:c4:34:ca:ab:b1:cc:b7:fa:0d:c8:75:d5: fc:40:3f:7d:70:4f:fb:51:d6:26:d1:1f:df:14:f0: 08:b5:31:72:46:1e:86:3e:56:0a:bd:4e:a8:0d:e6: 1d:86:45:e9:81:69:6e:22:cb:c4:81:10:63:00:80: 46:12:a4:70:18:ce:e8:b6:48:9f:f5:c0:10:a9:83: 42:6e:ff:41:7e:82:09:71:c8:58:a3:69:2d:da:d4: 81:4d:41:5c:20:4c:68:1d:4a:df:51:36:04:b1:96: 7d:af:5e:a5:21:23:e8:55:5f:c1:72:b7:7a:0e:b8: d8:66:f1:79:45:0f:91:46:93:65:8c:63:ee:fa:4d: 53:0c:90:c6:5b:34:68:3d:31:78:fb:6f:a9:89:2e: d4:0c:ba:c2:6e:46:a1:1e:51:a2:40:ea:ae:55:b7: 0f:95:00:68:27:af:9d:23:b7:a5:db:5c:44:c3:94: e6:e7:e7:0d:fe:43:b4:51:d2:55:0c:4a:b8:a9:36: 7b:ce:43:5f:c4:0e:46:ee:39:cf:79:de:75:f5:e8: ea:b4:d3:af:e0:97:d6:c8:e7:16:24:d1:c5:c1:41: 5d:83:8a:19:e1:8d:c4:57:16:1d:cf:84:45:25:0c: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5E:6D:FA:06:7F:CA:34:5B:43:97:AF:C9:0C:6B:25:A4:BF:80:DB X509v3 Authority Key Identifier: keyid:3B:76:D5:9A:3F:16:8F:61:10:E5:2A:62:ED:76:49:A3:D0:E9:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/3B76D59A3F168F6110E52A62ED7649A3D0E93F40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a0:3f:07:3e:fd:d5:ff:e9:46:e4:fa:ab:4d:75:c0:a0:be: d9:4c:1a:33:43:3f:5d:4d:ad:47:32:17:84:01:24:fc:1b:2d: a5:b7:84:c2:45:90:14:6c:55:62:75:dd:79:15:7b:ad:ad:ac: a5:91:96:f2:aa:96:fd:e8:76:4e:f6:03:8a:8a:8a:c1:8b:f4: d9:1a:a5:76:57:08:d9:14:d5:79:37:bc:ad:4f:52:0e:ec:5f: 4d:2d:0b:3f:20:dc:c4:1b:4f:ef:13:4a:17:c9:bc:60:d7:fd: 48:68:e3:81:e5:42:16:7f:55:7e:63:b3:fd:04:cf:7a:92:c6: d4:56:34:4e:70:d8:1a:c0:35:8d:ed:ee:2e:ba:e9:36:aa:da: 06:c9:2a:ff:f1:c1:f7:c2:09:fc:15:36:c9:ed:21:1a:e0:d7: 9e:7a:f0:41:ef:86:b3:b7:f6:1d:6c:7b:1c:62:70:7a:f5:d0: 71:cd:c3:77:0e:f9:fe:d9:c1:97:f1:d5:13:a3:58:06:2b:1f: 49:37:38:6e:fc:c4:dd:5e:2b:c2:d6:8e:4f:23:f8:58:19:46: 4f:56:20:62:5a:cf:cc:a6:82:74:1d:ae:95:f3:3e:66:f0:e7: 29:49:88:f0:3c:2a:e8:91:16:06:88:fc:94:8a:66:d1:23:c1: 29:37:c5:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDLnqARbSz31daRX/fh6s/jPy7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNE MEU5M0Y0MDAeFw0yNjEwMjQxMDM3MTlaFw0yNjEwMjUxMzU0MTlaMDMxMTAvBgNV BAMTKEQxNUU2REZBMDY3RkNBMzQ1QjQzOTdBRkM5MEM2QjI1QTRCRjgwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZG4u9pKJsso4OZqNQsvMCQsQ0 yquxzLf6Dch11fxAP31wT/tR1ibRH98U8Ai1MXJGHoY+Vgq9TqgN5h2GRemBaW4i y8SBEGMAgEYSpHAYzui2SJ/1wBCpg0Ju/0F+gglxyFijaS3a1IFNQVwgTGgdSt9R NgSxln2vXqUhI+hVX8Fyt3oOuNhm8XlFD5FGk2WMY+76TVMMkMZbNGg9MXj7b6mJ LtQMusJuRqEeUaJA6q5Vtw+VAGgnr50jt6XbXETDlObn5w3+Q7RR0lUMSripNnvO Q1/EDkbuOc953nX16Oq006/gl9bI5xYk0cXBQV2DihnhjcRXFh3PhEUlDES/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0V5t+gZ/yjRbQ5evyQxrJaS/gNswHwYDVR0j BBgwFoAUO3bVmj8Wj2EQ5Spi7XZJo9DpP0AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDc0YTE1MjctNWM4ZS00YmQzLWExYzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEz RjE2OEY2MTEwRTUyQTYyRUQ3NjQ5QTNEMEU5M0Y0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjc2RDU5QTNGMTY4RjYxMTBFNTJBNjJFRDc2NDlBM0QwRTkz RjQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvM0I3NkQ1OUEzRjE2OEY2MTEwRTUyQTYyRUQ3NjQ5 QTNEMEU5M0Y0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2gPwc+/dX/6Ubk+qtNdcCgvtlMGjNDP11N rUcyF4QBJPwbLaW3hMJFkBRsVWJ13XkVe62trKWRlvKqlv3odk72A4qKisGL9Nka pXZXCNkU1Xk3vK1PUg7sX00tCz8g3MQbT+8TShfJvGDX/Uho44HlQhZ/VX5js/0E z3qSxtRWNE5w2BrANY3t7i666Taq2gbJKv/xwffCCfwVNsntIRrg15568EHvhrO3 9h1sexxicHr10HHNw3cO+f7ZwZfx1ROjWAYrH0k3OG78xN1eK8LWjk8j+FgZRk9W IGJaz8ymgnQdrpXzPmbw5ylJiPA8KuiRFgaI/JSKZtEjwSk3xfA= -----END CERTIFICATE-----Generated at Sat Oct 24 20:41:37 2026 by rpki-client