$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft File: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft (raw, json) Hash identifier: Bw1OWEFhG2yFo4SoHGfLoDiYYj0+Z7XQPhcKqcicSfo= Subject key identifier: B7:0D:F3:C0:EE:35:C8:5C:8C:5F:66:17:6D:94:AA:B5:58:27:1C:03 Authority key identifier: A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E Certificate issuer: /CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Certificate serial: 1ADE7D52320F986FA4F4F1C7FF9FF7A1E45BB70B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft Manifest number: BD Signing time: Sun 20 Sep 2026 09:39:09 +0000 Manifest this update: Sun 20 Sep 2026 09:34:09 +0000 Manifest next update: Mon 21 Sep 2026 12:55:09 +0000 Files and hashes: 1: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl (hash: kG0czyb6i8z2UNdm+5e+duhB+tOHn1iVxMB0GnmWHhQ=) 2: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: bj0wxd5ICBouELscs1c53rXVki6zrAfUoc5PnYBmxBA=) 3: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: qHvmH7kkKUgxVXxeqg/YxT0IJ6BIS+6+UvvwAM7JNvs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:de:7d:52:32:0f:98:6f:a4:f4:f1:c7:ff:9f:f7:a1:e4:5b:b7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Validity Not Before: Sep 20 09:34:09 2026 GMT Not After : Sep 21 12:55:09 2026 GMT Subject: CN=B70DF3C0EE35C85C8C5F66176D94AAB558271C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:d9:10:c5:1b:2d:e8:c1:d1:09:f4:39:82: 83:2d:02:41:09:84:98:d9:83:7d:d1:9d:94:18:b6: 64:10:9a:96:04:cb:95:14:fd:e5:a7:f2:1d:91:d2: e3:d4:c0:e6:ee:5f:89:52:55:25:61:43:e3:fb:97: 9f:1a:ae:e8:c5:7d:c1:b5:e5:e6:d2:aa:0e:60:f6: f4:59:ca:05:6a:f7:0e:20:71:10:2d:c9:d4:74:ce: 74:0a:65:6a:04:b3:40:89:de:43:97:b1:d7:de:f3: a6:8d:9a:8c:a5:8c:d2:28:ee:0c:5b:0c:eb:c0:42: f7:7a:cc:6c:50:bb:00:27:e2:3c:d1:e5:a6:ce:17: 3e:64:d7:31:72:af:70:05:65:b7:7b:cd:56:e7:4d: ef:a5:3e:ce:45:fa:a7:d9:7e:11:08:ab:72:71:53: 90:af:0b:38:72:d9:41:20:9f:a3:0d:86:a6:a6:d8: 64:da:7d:c9:ba:db:b1:a1:73:a8:10:1a:50:a1:a9: 8d:3b:90:3a:89:3e:4f:b2:df:85:97:82:f7:cf:08: 07:53:5e:6d:b3:0a:a8:04:1c:7b:f7:fb:5c:9e:41: 62:9d:0d:61:ee:af:18:f7:49:29:66:48:ba:0e:37: f7:7a:08:19:40:70:8b:98:5e:50:95:5e:75:d4:aa: 03:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0D:F3:C0:EE:35:C8:5C:8C:5F:66:17:6D:94:AA:B5:58:27:1C:03 X509v3 Authority Key Identifier: keyid:A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3f:d3:5b:c5:d8:ac:4b:46:88:2f:82:f8:f9:62:6e:5a:ec: 92:cc:ea:34:47:85:39:70:60:d5:f3:c6:99:17:bd:bc:c3:a7: 3c:9a:2c:c0:ad:d0:75:00:b0:d0:36:57:40:c3:d7:b3:c6:49: 95:1b:e1:67:70:c1:1e:44:7b:6d:1d:d8:dd:a0:ae:61:bd:12: b0:45:c4:0f:36:44:66:5d:ac:5f:e5:ec:26:57:e9:64:68:a2: 97:99:ec:15:22:02:2c:ca:b4:34:54:c5:41:b8:ce:15:7e:9d: 82:a1:11:ff:01:fd:3d:0a:5b:97:a6:bb:20:5c:49:4e:ff:62: 23:d3:c7:fa:78:5f:08:ef:79:2a:03:f4:0a:d9:e1:10:5d:40: 50:e6:12:e1:30:4c:aa:b7:2e:44:83:96:a7:c6:f2:42:ee:e8: 45:6e:12:6c:ed:01:0c:0d:bb:54:17:f5:14:1a:98:1d:25:ed: b5:68:09:1c:6e:d2:5f:6e:4b:a0:99:86:19:9b:f3:5d:e9:7a: d8:62:28:f1:9e:12:e9:61:12:43:b4:3f:b0:dd:e9:de:e9:16: 91:ce:93:e0:b5:cb:80:25:f2:54:70:9d:3a:6a:98:28:03:39: b0:d6:3d:c2:a6:53:26:6f:4e:e1:f2:43:a9:92:95:1b:ae:22: 18:7d:d5:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGt59UjIPmG+k9PHH/5/3oeRbtwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlC NDFCMUMwRTAeFw0yNjA5MjAwOTM0MDlaFw0yNjA5MjExMjU1MDlaMDMxMTAvBgNV BAMTKEI3MERGM0MwRUUzNUM4NUM4QzVGNjYxNzZEOTRBQUI1NTgyNzFDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRFtkQxRst6MHRCfQ5goMtAkEJ hJjZg33RnZQYtmQQmpYEy5UU/eWn8h2R0uPUwObuX4lSVSVhQ+P7l58arujFfcG1 5ebSqg5g9vRZygVq9w4gcRAtydR0znQKZWoEs0CJ3kOXsdfe86aNmoyljNIo7gxb DOvAQvd6zGxQuwAn4jzR5abOFz5k1zFyr3AFZbd7zVbnTe+lPs5F+qfZfhEIq3Jx U5CvCzhy2UEgn6MNhqam2GTafcm627Ghc6gQGlChqY07kDqJPk+y34WXgvfPCAdT Xm2zCqgEHHv3+1yeQWKdDWHurxj3SSlmSLoON/d6CBlAcIuYXlCVXnXUqgODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtw3zwO41yFyMX2YXbZSqtVgnHAMwHwYDVR0j BBgwFoAUo7pjO51ztz/qPoCsbVehqbQbHA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiNGZlOTMtNzI5Ni00OGI0LWFhMGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5 RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlCNDFCMUMwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0JBNjMzQjlENzNCNzNGRUEzRTgwQUM2RDU3QTFBOUI0MUIx QzBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiNGZlOTMtNzI5Ni00OGI0LWFh MGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0Ex QTlCNDFCMUMwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFw/01vF2KxLRogvgvj5Ym5a7JLM6jRHhTlw YNXzxpkXvbzDpzyaLMCt0HUAsNA2V0DD17PGSZUb4WdwwR5Ee20d2N2grmG9ErBF xA82RGZdrF/l7CZX6WRoopeZ7BUiAizKtDRUxUG4zhV+nYKhEf8B/T0KW5emuyBc SU7/YiPTx/p4XwjveSoD9ArZ4RBdQFDmEuEwTKq3LkSDlqfG8kLu6EVuEmztAQwN u1QX9RQamB0l7bVoCRxu0l9uS6CZhhmb813pethiKPGeEulhEkO0P7Dd6d7pFpHO k+C1y4Al8lRwnTpqmCgDObDWPcKmUyZvTuHyQ6mSlRuuIhh91ZQ= -----END CERTIFICATE-----Generated at Mon Sep 21 06:53:26 2026 by rpki-client