$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft File: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft (raw, json) Hash identifier: pTa9TlFFoxFGXc0UBP54f6rXFsRuWtrIVKEtoOWLdXo= Subject key identifier: CB:FB:93:7B:A6:E4:74:50:B5:D8:06:A0:5C:05:C4:B6:36:BA:DC:AF Authority key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 Certificate issuer: /CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Certificate serial: 79DDAC51031449EDE43CEBF8510F4AF730AD7BC0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 20:39:34 +0000 Manifest this update: Wed 16 Sep 2026 20:34:34 +0000 Manifest next update: Fri 18 Sep 2026 00:26:34 +0000 Files and hashes: 1: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: CjlIt4MYvo7XEt2sGyJogAmUB68TdPA5ouLe//ZK0KM=) 2: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: C4nE65Bmt4vsoADCvXJtdLeHcH0r1PmaQ5qo7rMWJUM=) 3: 3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl (hash: KttOGQ5TAgMPuIWyL5+s8Rf2TYcgLejfttnH3NHG/9g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:dd:ac:51:03:14:49:ed:e4:3c:eb:f8:51:0f:4a:f7:30:ad:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611 Validity Not Before: Sep 16 20:34:34 2026 GMT Not After : Sep 18 00:26:34 2026 GMT Subject: CN=CBFB937BA6E47450B5D806A05C05C4B636BADCAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d4:92:53:dd:e7:57:f0:90:11:f3:ad:25:27: b3:d4:de:23:5f:aa:0e:86:8f:2a:05:e3:a7:97:b2: 15:75:ac:7b:79:eb:d6:a8:61:67:d4:4d:66:56:cf: 2e:59:ef:80:a5:68:94:b2:c4:df:cb:da:36:20:cb: cd:b2:00:02:d4:a3:08:2e:6f:be:bb:4d:c7:fb:44: 88:2e:15:30:e3:f5:f3:9d:33:27:fc:96:8f:4e:be: 90:fd:a9:83:18:e5:66:66:41:2c:84:60:9a:de:44: 28:8a:0e:c1:f8:cd:40:4c:04:f3:8c:dd:a8:9e:e4: c8:c2:2c:44:27:fd:15:16:f5:d9:46:e2:97:93:13: cd:07:a2:1e:dd:e5:b9:aa:11:06:78:b2:5f:21:5f: 17:a7:47:78:ea:f6:a3:78:1c:20:b9:b4:bc:e3:8d: 6a:f9:36:6a:4c:07:db:20:f0:24:c5:c6:e0:dc:e0: 7c:f8:f9:3c:65:f0:d3:f7:b6:c9:48:ed:52:41:da: c1:10:13:da:2c:34:5c:90:7e:e1:80:4b:e5:a7:8c: 9d:83:c7:5b:d2:26:53:ef:40:56:a0:6c:0f:1b:aa: 1a:91:2c:8e:91:fb:c6:9e:30:47:d5:f0:47:64:7b: 12:8d:a2:86:01:23:7b:05:17:0c:58:91:a5:d2:37: 66:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FB:93:7B:A6:E4:74:50:B5:D8:06:A0:5C:05:C4:B6:36:BA:DC:AF X509v3 Authority Key Identifier: keyid:37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:47:7c:ea:f2:fa:dc:b4:99:18:47:08:ef:61:fd:e7:b8:90: 9b:25:8b:3f:8d:a6:ae:71:81:3d:2f:ed:c2:61:f8:f7:39:50: 2c:15:c6:28:cf:9e:dc:b4:b1:60:9d:d0:32:cd:f9:59:64:37: d4:dc:6e:a9:d1:63:83:ae:92:e6:c0:a1:85:54:86:0e:34:83: 90:b3:66:af:cf:9b:9f:5b:56:07:98:b9:a3:84:bb:4d:74:75: c4:1f:b2:aa:46:0d:a6:54:df:b5:38:77:22:b7:b9:df:ed:50: b0:d9:cd:76:6d:5e:30:5e:95:6f:77:ef:10:40:08:77:fe:3b: d6:66:de:b7:37:0b:7c:c4:fc:40:eb:4d:5d:13:44:d9:07:eb: f0:4d:44:a6:c5:e6:c6:6f:70:77:76:ca:88:27:6b:97:7f:b4: f2:4e:92:02:13:b2:aa:52:a3:1b:0d:71:ef:26:5b:82:96:7f: 35:10:c2:ee:34:0a:e0:28:bb:70:1d:b6:cc:56:26:71:1f:ab: 63:21:78:03:33:dc:9e:c4:92:9d:d4:d0:70:0c:a9:8c:dc:50: 79:cc:3e:a3:7a:30:01:90:4d:b5:e5:94:a9:e6:0d:24:4f:37: c4:71:ce:97:f8:49:45:c0:77:55:b5:77:65:e9:19:67:a7:89: ca:8d:7a:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUed2sUQMUSe3kPOv4UQ9K9zCte8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1 RTUzQTYxMTAeFw0yNjA5MTYyMDM0MzRaFw0yNjA5MTgwMDI2MzRaMDMxMTAvBgNV BAMTKENCRkI5MzdCQTZFNDc0NTBCNUQ4MDZBMDVDMDVDNEI2MzZCQURDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY1JJT3edX8JAR860lJ7PU3iNf qg6GjyoF46eXshV1rHt569aoYWfUTWZWzy5Z74ClaJSyxN/L2jYgy82yAALUowgu b767Tcf7RIguFTDj9fOdMyf8lo9OvpD9qYMY5WZmQSyEYJreRCiKDsH4zUBMBPOM 3aie5MjCLEQn/RUW9dlG4peTE80Hoh7d5bmqEQZ4sl8hXxenR3jq9qN4HCC5tLzj jWr5NmpMB9sg8CTFxuDc4Hz4+Txl8NP3tslI7VJB2sEQE9osNFyQfuGAS+WnjJ2D x1vSJlPvQFagbA8bqhqRLI6R+8aeMEfV8EdkexKNooYBI3sFFwxYkaXSN2Z/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy/uTe6bkdFC12AagXAXEtja63K8wHwYDVR0j BBgwFoAUNyL1fzb8bfZPD2Y4yJzys15TphEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGJhOWY0ZTItYzczYi00NDI3LTk4MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0Yz NkZDNkRGNjRGMEY2NjM4Qzg5Q0YyQjM1RTUzQTYxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zNzIyRjU3RjM2RkM2REY2NEYwRjY2MzhDODlDRjJCMzVFNTNB NjExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvMzcyMkY1N0YzNkZDNkRGNjRGMEY2NjM4Qzg5Q0Yy QjM1RTUzQTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBHfOry+ty0mRhHCO9h/ee4kJsliz+Npq5x gT0v7cJh+Pc5UCwVxijPnty0sWCd0DLN+VlkN9TcbqnRY4OukubAoYVUhg40g5Cz Zq/Pm59bVgeYuaOEu010dcQfsqpGDaZU37U4dyK3ud/tULDZzXZtXjBelW937xBA CHf+O9Zm3rc3C3zE/EDrTV0TRNkH6/BNRKbF5sZvcHd2yogna5d/tPJOkgITsqpS oxsNce8mW4KWfzUQwu40CuAou3AdtsxWJnEfq2MheAMz3J7Ekp3U0HAMqYzcUHnM PqN6MAGQTbXllKnmDSRPN8Rxzpf4SUXAd1W1d2XpGWenicqNeuI= -----END CERTIFICATE-----Generated at Thu Sep 17 10:44:57 2026 by rpki-client