$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft File: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft (raw, json) Hash identifier: nPMEibjk35b1fZ3+DoD73VmFPac7N+gX1ZTI47ulYZc= Subject key identifier: 36:73:CA:59:68:00:C8:36:0C:51:A5:0E:38:F7:99:55:50:29:AA:4D Authority key identifier: 3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE Certificate issuer: /CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Certificate serial: 1419A44051E90BF76DC38FC0CE90BB423C1EF8EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 23:38:07 +0000 Manifest this update: Wed 16 Sep 2026 23:33:07 +0000 Manifest next update: Fri 18 Sep 2026 02:55:07 +0000 Files and hashes: 1: 3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl (hash: Ib+BkH6JZZ/IJP17pXhYRtAki7l1RUbs8D5dNQCIOpo=) 2: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: hwkmKFqZZs0/Na72m9HaYmz05ZyTB7V+dfx8PoWeKHY=) 3: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: Q+S9A/y116CZNR4HsWvWafo8POLMzZHES9UK/q+FgoQ=) 4: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: nPHGyPRlVU4NvbiCVIa+b1x20FU3xtj+iCnjkj2L1yY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:19:a4:40:51:e9:0b:f7:6d:c3:8f:c0:ce:90:bb:42:3c:1e:f8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE Validity Not Before: Sep 16 23:33:07 2026 GMT Not After : Sep 18 02:55:07 2026 GMT Subject: CN=3673CA596800C8360C51A50E38F799555029AA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:da:da:f7:19:4c:aa:53:c8:fe:32:02:dd: e9:9a:fd:95:e3:b5:a6:bf:7a:c5:39:b3:48:fa:c7: 17:a7:21:b4:db:2a:65:7a:cd:58:d4:27:e3:62:43: 0a:c5:3d:9d:dc:73:c0:90:74:82:28:0d:f8:d2:7e: 66:74:a0:08:99:a3:ac:fa:b4:01:06:85:93:fa:48: 7a:27:e6:bb:e5:e8:ce:3e:e7:0d:94:4a:92:f9:56: cb:98:01:dd:5f:90:97:e0:b7:60:fa:7b:3e:95:b7: a3:ff:02:b5:3b:29:fe:b5:fd:d7:7b:0e:6e:20:4b: 83:e2:75:0b:06:e4:da:ee:e1:a1:0a:85:15:57:9e: 42:91:60:2b:76:a1:ba:9f:7a:1b:e0:47:fb:a5:d1: ef:dc:77:15:2d:6c:4d:22:a0:a3:5c:ef:dc:0c:f0: 16:4c:99:d4:53:94:0f:e9:54:5e:30:28:09:83:4d: 9b:d9:cf:7c:10:52:9d:06:19:d8:ad:3c:7d:b9:4f: 61:f6:34:cf:66:69:47:ea:81:7f:2e:41:65:cb:2f: 96:35:7d:f7:e9:25:d5:fe:7e:62:77:8f:ab:3e:b4: 5e:2f:5f:49:22:32:f2:ad:13:2d:53:0e:1a:40:74: b1:50:15:81:69:41:50:15:f0:bc:35:0b:8d:12:90: a3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:73:CA:59:68:00:C8:36:0C:51:A5:0E:38:F7:99:55:50:29:AA:4D X509v3 Authority Key Identifier: keyid:3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e7:55:fa:2f:56:a8:f3:da:85:e5:0b:31:fc:e7:d1:80:38: d2:93:76:91:6a:96:ce:78:5c:c4:5f:ea:6d:37:0b:29:3d:f9: b6:e1:ae:c9:dd:82:7a:c9:3f:bc:a8:1f:b4:a4:b1:56:aa:a4: d7:df:38:f9:a6:f8:73:71:d4:f8:ca:d0:a7:41:54:8b:b8:e6: 68:0f:c5:84:a4:8c:8c:1d:3f:7d:e5:e8:87:c8:e6:84:30:2c: 14:7d:34:ec:89:98:b1:0d:ac:b5:bf:74:52:06:be:05:e2:b3: a0:15:df:ea:dc:3b:17:ac:ca:f6:70:96:8f:fc:56:cd:3a:db: 37:cc:84:75:4d:af:69:61:6f:3f:15:8b:0c:63:9a:77:b3:4a: 3d:ce:4e:ce:08:e7:42:cc:5e:cb:4f:20:97:3b:3b:19:16:60: 89:d0:cc:d8:3c:f6:11:38:d0:c2:c0:b4:d0:9b:62:bf:48:93: 56:97:e8:0e:5b:04:04:4e:e9:33:fe:00:0e:e7:b6:8b:55:6c: d2:b6:5b:4a:60:b4:09:93:6b:2b:5b:44:eb:63:7f:2e:2c:cd: 4c:86:62:a6:d4:6d:12:1a:0e:3e:9e:4f:80:b0:09:41:de:f7: bf:5b:49:78:a5:9d:0a:64:a8:7b:94:7e:81:cf:38:ea:04:ca: 58:71:13:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBmkQFHpC/dtw4/AzpC7Qjwe+O4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5 NkM4MjdERTAeFw0yNjA5MTYyMzMzMDdaFw0yNjA5MTgwMjU1MDdaMDMxMTAvBgNV BAMTKDM2NzNDQTU5NjgwMEM4MzYwQzUxQTUwRTM4Rjc5OTU1NTAyOUFBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpk9ra9xlMqlPI/jIC3ema/ZXj taa/esU5s0j6xxenIbTbKmV6zVjUJ+NiQwrFPZ3cc8CQdIIoDfjSfmZ0oAiZo6z6 tAEGhZP6SHon5rvl6M4+5w2USpL5VsuYAd1fkJfgt2D6ez6Vt6P/ArU7Kf61/dd7 Dm4gS4PidQsG5Nru4aEKhRVXnkKRYCt2obqfehvgR/ul0e/cdxUtbE0ioKNc79wM 8BZMmdRTlA/pVF4wKAmDTZvZz3wQUp0GGditPH25T2H2NM9maUfqgX8uQWXLL5Y1 fffpJdX+fmJ3j6s+tF4vX0kiMvKtEy1TDhpAdLFQFYFpQVAV8Lw1C40SkKNhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNnPKWWgAyDYMUaUOOPeZVVApqk0wHwYDVR0j BBgwFoAUPYsbD/x4ZLGg6ZoJ6/WnbJbIJ94wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWEwNzczODYtMzAxYi00ZmYxLTg3MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZG Qzc4NjRCMUEwRTk5QTA5RUJGNUE3NkM5NkM4MjdERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRDhCMUIwRkZDNzg2NEIxQTBFOTlBMDlFQkY1QTc2Qzk2Qzgy N0RFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvM0Q4QjFCMEZGQzc4NjRCMUEwRTk5QTA5RUJGNUE3 NkM5NkM4MjdERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvnVfovVqjz2oXlCzH859GAONKTdpFqls54 XMRf6m03Cyk9+bbhrsndgnrJP7yoH7SksVaqpNffOPmm+HNx1PjK0KdBVIu45mgP xYSkjIwdP33l6IfI5oQwLBR9NOyJmLENrLW/dFIGvgXis6AV3+rcOxesyvZwlo/8 Vs062zfMhHVNr2lhbz8ViwxjmnezSj3OTs4I50LMXstPIJc7OxkWYInQzNg89hE4 0MLAtNCbYr9Ik1aX6A5bBARO6TP+AA7ntotVbNK2W0pgtAmTaytbROtjfy4szUyG YqbUbRIaDj6eT4CwCUHe979bSXilnQpkqHuUfoHPOOoEylhxE5A= -----END CERTIFICATE-----Generated at Thu Sep 17 14:41:03 2026 by rpki-client