$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft File: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft (raw, json) Hash identifier: 98nBaHFQu2WJ+LfUgFlebJG23A89ctbx8E7cCvCQ0Kk= Subject key identifier: 81:5E:47:FD:C1:86:9C:0C:13:FE:D3:A0:F4:21:31:4F:FC:49:92:C6 Authority key identifier: A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E Certificate issuer: /CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Certificate serial: 67E997290E41A5355066237EA4562DF830DCBFC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:57:45 +0000 Manifest this update: Mon 21 Sep 2026 04:52:45 +0000 Manifest next update: Tue 22 Sep 2026 05:30:45 +0000 Files and hashes: 1: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl (hash: F3bNmcJDOt1YIaLifT951njXIHu4vA9j8KjBVuodcpM=) 2: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: qHvmH7kkKUgxVXxeqg/YxT0IJ6BIS+6+UvvwAM7JNvs=) 3: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: bj0wxd5ICBouELscs1c53rXVki6zrAfUoc5PnYBmxBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e9:97:29:0e:41:a5:35:50:66:23:7e:a4:56:2d:f8:30:dc:bf:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Validity Not Before: Sep 21 04:52:45 2026 GMT Not After : Sep 22 05:30:45 2026 GMT Subject: CN=815E47FDC1869C0C13FED3A0F421314FFC4992C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:c3:32:be:2f:da:a9:e9:4d:1f:04:6d:94: 5f:88:b6:9b:4c:70:b1:54:09:c7:71:8a:e6:eb:d1: 66:df:87:f4:b9:cf:00:ae:8b:dc:e6:3d:13:f9:84: f8:bd:fd:54:0d:99:86:be:7e:3b:4b:26:60:9f:2c: c5:60:32:b5:20:b7:56:fd:2d:39:03:9b:14:d4:f1: a4:bd:a0:ee:e1:2e:f3:7a:0e:2a:91:a7:db:70:4f: 6c:1e:5e:26:0f:8a:18:8a:13:c5:20:19:47:9d:9f: 06:9d:9e:6d:82:04:40:74:08:d0:7d:d8:b8:f1:5e: 60:78:85:68:7c:74:12:0c:2e:2b:01:46:53:ef:70: 5f:c7:c4:70:fc:8a:a4:48:f4:de:84:62:6a:a8:84: 11:46:0a:1d:ab:93:91:1f:58:6b:cc:e0:5e:5a:57: cf:61:42:ee:39:92:82:7e:97:92:21:83:d9:0e:d3: cb:06:49:48:eb:5a:f8:63:9a:02:68:6e:d1:af:5a: 0a:5c:91:60:dc:d2:a5:f0:9b:7e:e9:c8:63:d4:17: 3b:ec:6d:34:88:1f:80:fb:ad:47:68:d9:a4:ee:de: 4b:4d:8e:af:a7:88:e8:e9:d8:a6:69:38:45:df:c5: d4:c1:9b:05:4d:62:20:24:2b:92:af:f9:a5:40:7b: 9d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5E:47:FD:C1:86:9C:0C:13:FE:D3:A0:F4:21:31:4F:FC:49:92:C6 X509v3 Authority Key Identifier: keyid:A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6e:5f:c3:db:48:3a:82:e1:16:22:33:c2:c6:70:11:86:7b: b1:45:ed:8d:ad:ab:f7:a6:ca:a6:77:c0:6c:41:04:a8:2d:76: 19:d0:67:bb:77:aa:d0:79:98:89:43:dd:e3:82:65:a8:82:66: 5c:74:f9:c9:c4:0b:d8:86:45:91:f6:bb:6a:cf:04:3e:62:c0: 17:a7:02:aa:7d:bb:9c:62:cd:f0:d7:26:8a:6b:c7:2a:e9:c1: d5:55:1c:ab:22:ff:db:26:89:ef:30:75:85:4f:85:be:a8:6b: 08:58:6d:bc:32:cf:6f:33:35:20:9a:43:81:51:bd:49:ff:97: ec:af:a7:f3:b5:f6:47:70:44:9a:ac:f9:87:aa:b4:09:19:0d: 44:0a:66:00:fe:55:4e:60:a7:12:27:44:32:ab:09:4d:e6:38: 8c:6e:99:61:2f:35:1b:78:64:be:53:fe:dd:af:6d:f4:72:36: d1:10:3f:a8:99:20:d7:da:55:5e:26:0b:ce:4a:86:84:fc:e4: 6f:3b:95:8f:fb:40:51:38:6a:ec:e7:aa:eb:4e:6c:ce:cb:65: 17:04:2b:70:6d:31:68:ac:fb:07:6d:20:6e:1e:ba:36:4e:81: f3:ad:7b:3e:d0:40:17:00:95:a2:ca:cf:b5:8b:33:f4:8c:5f: c4:7a:e7:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+mXKQ5BpTVQZiN+pFYt+DDcv8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlC NDFCMUMwRTAeFw0yNjA5MjEwNDUyNDVaFw0yNjA5MjIwNTMwNDVaMDMxMTAvBgNV BAMTKDgxNUU0N0ZEQzE4NjlDMEMxM0ZFRDNBMEY0MjEzMTRGRkM0OTkyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaoMMyvi/aqelNHwRtlF+ItptM cLFUCcdxiubr0Wbfh/S5zwCui9zmPRP5hPi9/VQNmYa+fjtLJmCfLMVgMrUgt1b9 LTkDmxTU8aS9oO7hLvN6DiqRp9twT2weXiYPihiKE8UgGUednwadnm2CBEB0CNB9 2LjxXmB4hWh8dBIMLisBRlPvcF/HxHD8iqRI9N6EYmqohBFGCh2rk5EfWGvM4F5a V89hQu45koJ+l5Ihg9kO08sGSUjrWvhjmgJobtGvWgpckWDc0qXwm37pyGPUFzvs bTSIH4D7rUdo2aTu3ktNjq+niOjp2KZpOEXfxdTBmwVNYiAkK5Kv+aVAe51nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgV5H/cGGnAwT/tOg9CExT/xJksYwHwYDVR0j BBgwFoAUo7pjO51ztz/qPoCsbVehqbQbHA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiNGZlOTMtNzI5Ni00OGI0LWFhMGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5 RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlCNDFCMUMwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0JBNjMzQjlENzNCNzNGRUEzRTgwQUM2RDU3QTFBOUI0MUIx QzBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiNGZlOTMtNzI5Ni00OGI0LWFh MGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0Ex QTlCNDFCMUMwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADduX8PbSDqC4RYiM8LGcBGGe7FF7Y2tq/em yqZ3wGxBBKgtdhnQZ7t3qtB5mIlD3eOCZaiCZlx0+cnEC9iGRZH2u2rPBD5iwBen Aqp9u5xizfDXJoprxyrpwdVVHKsi/9smie8wdYVPhb6oawhYbbwyz28zNSCaQ4FR vUn/l+yvp/O19kdwRJqs+YeqtAkZDUQKZgD+VU5gpxInRDKrCU3mOIxumWEvNRt4 ZL5T/t2vbfRyNtEQP6iZINfaVV4mC85KhoT85G87lY/7QFE4auznqutObM7LZRcE K3BtMWis+wdtIG4eujZOgfOtez7QQBcAlaLKz7WLM/SMX8R651Y= -----END CERTIFICATE-----Generated at Mon Sep 21 19:40:32 2026 by rpki-client