$ rpki-client -vvvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft File: A3FC798CD711AE0868F235A3EA767FB9B4129434.mft (raw, json) Hash identifier: T/qmRnBl0vLzxIMIJJ27j0qsyRYZhDdYdh+SgxdBPQU= Subject key identifier: 6B:4B:B5:4E:24:CC:AE:AD:B3:C4:C3:60:73:69:C9:5B:F7:49:3D:8F Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 Certificate issuer: /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Certificate serial: 438BB46A2B9AB95734A19069DB09F418F5AD7049 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 04:31:55 +0000 Manifest this update: Mon 21 Sep 2026 04:26:55 +0000 Manifest next update: Tue 22 Sep 2026 05:38:55 +0000 Files and hashes: 1: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: 6TaFuBiM6linhPB1ZFPQ8ukQQbZ31lu3G23g8rzDbhE=) 2: 3130332e3137362e34342e302f32342d3234203d3e20313532373930.roa (hash: jXy0CdGkOe/aCpL4F3KoTBpYXV8a9YPJGcjZWIKjM3o=) 3: A3FC798CD711AE0868F235A3EA767FB9B4129434.crl (hash: ZtAcvpAZdRh5CwPQuM97NrI6FECUWADAq7OHyqpUOcU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8b:b4:6a:2b:9a:b9:57:34:a1:90:69:db:09:f4:18:f5:ad:70:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Validity Not Before: Sep 21 04:26:55 2026 GMT Not After : Sep 22 05:38:55 2026 GMT Subject: CN=6B4BB54E24CCAEADB3C4C3607369C95BF7493D8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:58:1d:36:ba:68:dc:2e:fb:14:98:ea:e7: b5:f3:00:15:b5:2b:fe:72:d3:11:6f:15:14:53:49: 8d:04:1a:05:4d:92:c7:99:c2:c7:a4:a6:09:84:82: 0e:bd:df:84:0f:f6:f0:9d:2a:2e:36:d6:7d:eb:88: 52:3c:1d:00:b9:46:c1:a3:be:a2:df:fc:bf:d2:1e: 26:42:87:b7:63:37:10:8c:ea:f7:2a:07:de:86:06: 46:ff:b3:c6:95:4c:e9:0f:60:16:4a:5a:9b:7b:a7: f0:df:77:f6:f1:55:71:f2:ca:89:a0:22:f6:c3:a7: 7b:77:90:83:24:2f:98:0f:04:62:62:cf:89:67:18: 33:29:14:e0:1e:ea:45:af:bf:6e:c3:a2:a8:93:86: 5b:4a:20:6b:0e:6a:9a:a5:c5:7a:31:fd:7e:19:74: 82:24:b6:af:c3:ec:e3:98:5e:5e:6f:3e:99:9a:ac: 14:f1:3c:24:97:88:a8:b0:58:b6:b5:65:93:0a:ea: fe:14:f8:61:f7:86:bf:2b:59:2d:e0:e5:e0:e2:55: 37:7d:a3:81:ab:4e:5f:9e:97:91:5f:42:aa:fa:5b: f0:ad:ea:ce:ef:4d:cd:a5:07:59:53:cc:34:b2:5c: 8f:b6:12:00:b0:c3:f8:e3:89:08:a4:43:ce:b5:1f: 75:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4B:B5:4E:24:CC:AE:AD:B3:C4:C3:60:73:69:C9:5B:F7:49:3D:8F X509v3 Authority Key Identifier: keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f2:cd:03:f2:33:a2:64:1c:ae:d9:2d:dc:bc:01:83:56:4f: 65:40:cc:0b:9b:c3:9a:9d:93:7f:4b:65:90:53:5a:09:ac:1f: 72:ae:3d:78:f1:04:4a:e8:81:6f:f8:57:d4:93:9d:69:90:08: dc:ae:90:2d:ae:f2:1c:27:a6:d7:d6:0a:99:6a:73:fc:b5:ed: 60:12:f5:87:79:16:fc:73:89:4a:a1:e0:d5:25:5a:62:18:25: f7:1a:e9:b0:43:04:82:6d:04:b9:7b:2e:2c:74:11:35:e7:4f: 05:da:e8:50:ca:f1:6c:54:3a:19:2d:e3:6d:78:7a:81:2e:26: aa:10:e0:51:11:30:75:aa:b6:8a:15:4f:6b:ae:23:b3:d1:b6: 64:5a:4e:3d:7c:b1:f2:03:8a:ea:30:7e:57:1e:6f:21:55:03: a0:9e:46:f5:b4:a5:1b:df:4c:8c:fb:6b:8f:c2:cd:4b:3d:de: 2f:3e:b3:b2:cb:d2:9c:9e:1c:d3:78:0e:71:7a:5c:3f:eb:88: fc:83:26:5b:3e:cf:fa:e6:30:52:9b:bd:78:0d:08:99:f0:dc: 54:46:bb:9a:5e:ed:73:50:52:db:97:c7:af:5c:a8:45:f0:98: 77:21:ea:58:96:8c:7e:42:bf:74:24:f1:45:6b:f5:e6:cf:20: be:3d:c4:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4u0aiuauVc0oZBp2wn0GPWtcEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdGQjlC NDEyOTQzNDAeFw0yNjA5MjEwNDI2NTVaFw0yNjA5MjIwNTM4NTVaMDMxMTAvBgNV BAMTKDZCNEJCNTRFMjRDQ0FFQURCM0M0QzM2MDczNjlDOTVCRjc0OTNEOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgClgdNrpo3C77FJjq57XzABW1 K/5y0xFvFRRTSY0EGgVNkseZwsekpgmEgg6934QP9vCdKi421n3riFI8HQC5RsGj vqLf/L/SHiZCh7djNxCM6vcqB96GBkb/s8aVTOkPYBZKWpt7p/Dfd/bxVXHyyomg IvbDp3t3kIMkL5gPBGJiz4lnGDMpFOAe6kWvv27DoqiThltKIGsOapqlxXox/X4Z dIIktq/D7OOYXl5vPpmarBTxPCSXiKiwWLa1ZZMK6v4U+GH3hr8rWS3g5eDiVTd9 o4GrTl+el5FfQqr6W/Ct6s7vTc2lB1lTzDSyXI+2EgCww/jjiQikQ861H3UjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa0u1TiTMrq2zxMNgc2nJW/dJPY8wHwYDVR0j BBgwFoAUo/x5jNcRrgho8jWj6nZ/ubQSlDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDMxYTk0MjYtM2MzNS00NzBlLWJmMzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENE NzExQUUwODY4RjIzNUEzRUE3NjdGQjlCNDEyOTQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0ZDNzk4Q0Q3MTFBRTA4NjhGMjM1QTNFQTc2N0ZCOUI0MTI5 NDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdG QjlCNDEyOTQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHyzQPyM6JkHK7ZLdy8AYNWT2VAzAubw5qd k39LZZBTWgmsH3KuPXjxBErogW/4V9STnWmQCNyukC2u8hwnptfWCplqc/y17WAS 9Yd5FvxziUqh4NUlWmIYJfca6bBDBIJtBLl7Lix0ETXnTwXa6FDK8WxUOhkt4214 eoEuJqoQ4FERMHWqtooVT2uuI7PRtmRaTj18sfIDiuowflcebyFVA6CeRvW0pRvf TIz7a4/CzUs93i8+s7LL0pyeHNN4DnF6XD/riPyDJls+z/rmMFKbvXgNCJnw3FRG u5pe7XNQUtuXx69cqEXwmHch6liWjH5Cv3Qk8UVr9ebPIL49xME= -----END CERTIFICATE-----Generated at Mon Sep 21 20:14:54 2026 by rpki-client