$ rpki-client -vvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft File: A3FC798CD711AE0868F235A3EA767FB9B4129434.mft (raw, json) Hash identifier: pjIXGcggtqwT+lclZtuwi6X733VO4cKOf+ZEmrTuhuw= Subject key identifier: A6:7B:FF:3C:5D:9A:A1:57:CB:1A:15:89:4B:01:CF:93:33:5C:03:73 Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 Certificate issuer: /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Certificate serial: 4B13DF97A1A1C490FE4AD5A025CCAC5AF3B72376 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:38:11 +0000 Manifest this update: Tue 16 Jun 2026 15:33:11 +0000 Manifest next update: Wed 17 Jun 2026 18:09:11 +0000 Files and hashes: 1: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (hash: PDocKRP/axnGK/2hTz0jcOJCSSzSK6wE612ykd5rfc4=) 2: A3FC798CD711AE0868F235A3EA767FB9B4129434.crl (hash: UOVEoqnD2uUtPIXkuxAJsKVWQzCahIDavXJt8aSMoT0=) 3: 3130332e3137362e34342e302f32342d3234203d3e20313437313238.roa (hash: FHfHZKhnV6nBPDhXGsYl2nhVRShI8kqNDLyrWzHCF1g=) 4: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: 6TaFuBiM6linhPB1ZFPQ8ukQQbZ31lu3G23g8rzDbhE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:13:df:97:a1:a1:c4:90:fe:4a:d5:a0:25:cc:ac:5a:f3:b7:23:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Validity Not Before: Jun 16 15:33:11 2026 GMT Not After : Jun 17 18:09:11 2026 GMT Subject: CN=A67BFF3C5D9AA157CB1A15894B01CF93335C0373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:d2:d6:e6:68:66:3e:a1:7f:b4:28:22:49: a1:8a:1b:d0:8c:a0:06:26:a9:6d:2f:fe:9e:0d:c6: 2e:71:72:22:39:c7:0d:06:22:24:5c:f2:3f:13:2b: 49:1a:06:02:7b:08:31:a8:14:9e:c5:23:d8:66:33: 55:4d:47:4e:5b:42:57:fb:5b:2b:d2:39:96:ea:1a: 04:a4:b1:a1:73:0e:c2:9b:37:b2:75:03:96:c4:b0: 65:82:00:2d:0f:4e:d6:71:31:55:97:c8:27:75:06: 2b:74:4f:31:4d:7c:df:77:8e:b9:0d:1b:3c:cc:bd: ea:e0:af:fe:c8:43:e8:38:a8:6e:28:7c:45:30:3c: f6:88:58:a6:73:20:5b:ab:02:bd:f2:6b:3d:e6:e8: 9f:ae:27:43:91:b2:de:ca:21:1d:c1:5f:3b:39:c6: bc:a8:19:67:c2:5f:83:29:38:20:02:d3:57:5d:e8: 91:6c:0a:9f:62:f3:93:ba:c6:96:56:b0:46:fb:cc: 6e:ff:4a:8c:52:a8:e9:e1:ef:a8:54:d7:dc:1d:aa: fc:7b:63:f5:bf:ab:76:b3:11:19:4f:bd:95:ae:58: 3a:88:d1:02:f7:30:09:a8:3f:0b:be:ea:31:9f:ab: 53:27:89:5f:4d:5d:39:37:5d:80:0b:b8:89:8e:6e: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7B:FF:3C:5D:9A:A1:57:CB:1A:15:89:4B:01:CF:93:33:5C:03:73 X509v3 Authority Key Identifier: keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f4:3d:29:1c:7b:67:54:d0:d9:4d:c4:bb:3c:ef:a7:0d:11: 14:68:a6:65:ec:a3:57:88:ab:c5:b2:40:9f:7a:6a:81:be:e3: a2:69:d7:ea:38:4c:b4:3b:e5:67:a7:1b:cb:02:f2:5e:b6:4e: 1b:e9:1e:00:28:9c:b1:76:21:a2:ec:d6:cf:16:b4:13:ba:94: 1d:74:2d:9c:60:9c:82:63:f9:fc:97:f2:19:5e:60:db:34:2a: df:94:96:30:47:12:80:a4:39:bb:5b:61:ef:88:ff:28:c5:d3: d2:9a:6c:65:37:9e:41:01:87:6d:9f:5f:b8:a6:27:55:d1:8e: 36:7c:d8:9f:40:1f:03:c8:cd:fc:7f:f7:4e:78:d3:ba:d9:31: 93:f5:dd:ba:f5:ea:0d:eb:0d:83:3e:ea:1a:b9:7f:d8:26:97: bc:cb:ce:5c:46:2d:d8:d0:4c:b2:c5:09:64:95:d7:d9:bb:57: 94:30:aa:cd:2f:a0:26:c6:0f:8a:7e:c8:a8:2b:77:f3:d4:fe: 5b:e1:83:19:bf:16:14:51:fb:ad:32:2f:84:45:c4:0a:59:d6: b0:0c:02:96:a4:af:2e:3b:f6:9a:07:c0:7f:aa:5e:13:bd:92: a7:15:d8:a1:11:f7:2a:ec:ef:ba:82:b0:5f:d6:d3:ab:e7:d1: 89:c0:a8:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxPfl6GhxJD+StWgJcysWvO3I3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdGQjlC NDEyOTQzNDAeFw0yNjA2MTYxNTMzMTFaFw0yNjA2MTcxODA5MTFaMDMxMTAvBgNV BAMTKEE2N0JGRjNDNUQ5QUExNTdDQjFBMTU4OTRCMDFDRjkzMzM1QzAzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EdLW5mhmPqF/tCgiSaGKG9CM oAYmqW0v/p4Nxi5xciI5xw0GIiRc8j8TK0kaBgJ7CDGoFJ7FI9hmM1VNR05bQlf7 WyvSOZbqGgSksaFzDsKbN7J1A5bEsGWCAC0PTtZxMVWXyCd1Bit0TzFNfN93jrkN GzzMvergr/7IQ+g4qG4ofEUwPPaIWKZzIFurAr3yaz3m6J+uJ0ORst7KIR3BXzs5 xryoGWfCX4MpOCAC01dd6JFsCp9i85O6xpZWsEb7zG7/SoxSqOnh76hU19wdqvx7 Y/W/q3azERlPvZWuWDqI0QL3MAmoPwu+6jGfq1MniV9NXTk3XYALuImObnPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpnv/PF2aoVfLGhWJSwHPkzNcA3MwHwYDVR0j BBgwFoAUo/x5jNcRrgho8jWj6nZ/ubQSlDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDMxYTk0MjYtM2MzNS00NzBlLWJmMzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENE NzExQUUwODY4RjIzNUEzRUE3NjdGQjlCNDEyOTQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0ZDNzk4Q0Q3MTFBRTA4NjhGMjM1QTNFQTc2N0ZCOUI0MTI5 NDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdG QjlCNDEyOTQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGj0PSkce2dU0NlNxLs876cNERRopmXso1eI q8WyQJ96aoG+46Jp1+o4TLQ75WenG8sC8l62ThvpHgAonLF2IaLs1s8WtBO6lB10 LZxgnIJj+fyX8hleYNs0Kt+UljBHEoCkObtbYe+I/yjF09KabGU3nkEBh22fX7im J1XRjjZ82J9AHwPIzfx/905407rZMZP13br16g3rDYM+6hq5f9gml7zLzlxGLdjQ TLLFCWSV19m7V5Qwqs0voCbGD4p+yKgrd/PU/lvhgxm/FhRR+60yL4RFxApZ1rAM Apakry479poHwH+qXhO9kqcV2KER9yrs77qCsF/W06vn0YnAqMs= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:39 2026 by rpki-client