$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft File: A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft (raw, json) Hash identifier: JiaaqHbDttC1ytutBaylgxfB3kjWHpsaZ0PO8tGNvTM= Subject key identifier: 71:3C:C7:55:5C:A8:01:6E:02:A2:1D:A5:8E:4F:8D:E7:C9:8C:FC:FB Authority key identifier: A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 Certificate issuer: /CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Certificate serial: 03E26049377482ECF995F0A0840FB9BFB028AE5D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft Manifest number: BE Signing time: Sun 20 Sep 2026 17:59:04 +0000 Manifest this update: Sun 20 Sep 2026 17:54:04 +0000 Manifest next update: Mon 21 Sep 2026 19:11:04 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: 9QZ4zyqSjuEvfgjJyJcGuDYRra6HiDhsRoStARqfwRU=) 2: A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl (hash: xoDdxOUx2mtBzYh7TVjzzJIuR12VBmfIjgmNPaO9PvM=) 3: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: rrzxlF06KjaeWOab2SfdeYXEnvubBNLCq3WZSBYMU7k=) 4: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: t5qlWMCg2l2O2xAA9OrAnjww8OOdg9aeZk/sDXkOKPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e2:60:49:37:74:82:ec:f9:95:f0:a0:84:0f:b9:bf:b0:28:ae:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Validity Not Before: Sep 20 17:54:04 2026 GMT Not After : Sep 21 19:11:04 2026 GMT Subject: CN=713CC7555CA8016E02A21DA58E4F8DE7C98CFCFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:4e:8a:79:b1:d6:42:39:e4:7a:d3:5d:65: f6:48:96:39:03:b6:31:8e:e7:5b:c6:59:d3:cc:7c: 4e:5c:aa:e5:b1:cc:fe:df:51:c0:d4:c2:af:96:fb: b0:c3:20:22:db:5d:fa:b1:cd:83:da:f9:d9:54:f4: 39:2b:48:5f:f4:15:88:9c:ac:a7:d3:70:22:eb:ec: 44:32:03:c0:0b:28:cd:a8:3e:d8:be:45:bf:f8:50: 62:6b:80:86:b6:1e:d7:1a:10:33:08:7e:9d:2c:24: 34:17:26:12:30:64:33:20:2a:eb:f0:40:bf:99:a7: de:65:db:2b:c9:b1:bf:fd:55:67:76:56:d1:dc:be: f2:8e:02:cc:20:b0:52:9a:a7:9e:39:d6:2d:9b:52: fc:5e:60:56:0e:c2:c8:e4:77:92:41:a8:50:85:c4: a8:0a:f4:7d:cf:2f:e4:cc:94:2f:6d:de:ff:ef:0d: d8:51:f7:9c:b5:c6:16:88:b2:43:b4:1f:c7:9f:ae: 1c:8d:8e:7c:1f:6c:7b:94:9a:0f:61:fc:0e:70:07: a0:bc:8d:4d:d5:7d:57:82:5f:6a:d6:fd:1d:8c:03: 02:8a:ec:18:00:30:bf:d9:53:65:42:32:06:b9:8c: e5:ce:51:76:67:1a:5c:e9:35:75:94:96:0d:99:7b: 81:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3C:C7:55:5C:A8:01:6E:02:A2:1D:A5:8E:4F:8D:E7:C9:8C:FC:FB X509v3 Authority Key Identifier: keyid:A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:83:1a:8e:2a:2e:29:1a:cd:e6:a6:8b:d1:a7:a3:c8:63:a4: 09:c0:f0:7f:83:9a:55:60:d8:a4:18:93:d0:37:60:ac:ee:4b: 70:5e:53:be:41:5d:aa:b4:45:cb:1a:94:41:07:b3:e5:ac:19: 4d:20:aa:22:b3:14:2e:b6:e4:2e:f3:ba:4f:99:74:ed:52:6d: 17:a6:f9:bb:d6:ca:5b:a8:9c:ce:16:78:2d:ac:a6:4f:d1:9b: 01:1c:27:36:9d:c3:d7:8d:d4:ef:df:7a:8c:93:da:ca:36:02: e9:01:76:fa:7c:d5:43:fe:d0:e0:83:df:9a:2a:86:28:ed:88: 02:84:bd:4f:d0:77:1b:03:d3:13:68:bd:c0:03:f7:e1:e9:b9: 4a:29:e9:41:de:07:c1:a7:3e:fb:2c:a9:fe:88:53:2d:47:48: 84:8e:c7:4b:be:3d:42:a0:21:c3:2c:63:b5:40:2b:b1:c9:b5: ab:3a:76:5c:25:0b:78:93:1f:27:fa:e2:4b:f2:7b:93:a7:ed: 6e:92:18:b8:b0:ec:1e:5c:38:27:27:46:05:cd:11:0e:25:c5: 2a:89:82:90:01:98:96:fd:18:be:85:5e:d9:3a:8a:90:4c:41: 7a:69:2d:15:b7:9c:64:70:8d:44:63:92:52:ea:3a:29:d5:d9: 8a:d0:48:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA+JgSTd0guz5lfCghA+5v7Aorl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUx NDUxMTMzNTAeFw0yNjA5MjAxNzU0MDRaFw0yNjA5MjExOTExMDRaMDMxMTAvBgNV BAMTKDcxM0NDNzU1NUNBODAxNkUwMkEyMURBNThFNEY4REU3Qzk4Q0ZDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+NU6KebHWQjnketNdZfZIljkD tjGO51vGWdPMfE5cquWxzP7fUcDUwq+W+7DDICLbXfqxzYPa+dlU9DkrSF/0FYic rKfTcCLr7EQyA8ALKM2oPti+Rb/4UGJrgIa2HtcaEDMIfp0sJDQXJhIwZDMgKuvw QL+Zp95l2yvJsb/9VWd2VtHcvvKOAswgsFKap5451i2bUvxeYFYOwsjkd5JBqFCF xKgK9H3PL+TMlC9t3v/vDdhR95y1xhaIskO0H8efrhyNjnwfbHuUmg9h/A5wB6C8 jU3VfVeCX2rW/R2MAwKK7BgAML/ZU2VCMga5jOXOUXZnGlzpNXWUlg2Ze4HlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcTzHVVyoAW4Coh2ljk+N58mM/PswHwYDVR0j BBgwFoAUo+z5Fpis0lxO+1bDm3f49RRREzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU4ZDU4YTgtZTE5Ny00MTc5LWI3M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5 OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUxNDUxMTMzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BM0VDRjkxNjk4QUNEMjVDNEVGQjU2QzM5Qjc3RjhGNTE0NTEx MzM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4 RjUxNDUxMTMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWDGo4qLikazeami9Gno8hjpAnA8H+DmlVg 2KQYk9A3YKzuS3BeU75BXaq0RcsalEEHs+WsGU0gqiKzFC625C7zuk+ZdO1SbRem +bvWyluonM4WeC2spk/RmwEcJzadw9eN1O/feoyT2so2AukBdvp81UP+0OCD35oq hijtiAKEvU/QdxsD0xNovcAD9+HpuUop6UHeB8GnPvssqf6IUy1HSISOx0u+PUKg IcMsY7VAK7HJtas6dlwlC3iTHyf64kvye5On7W6SGLiw7B5cOCcnRgXNEQ4lxSqJ gpABmJb9GL6FXtk6ipBMQXppLRW3nGRwjURjklLqOinV2YrQSAo= -----END CERTIFICATE-----Generated at Mon Sep 21 12:15:43 2026 by rpki-client