$ rpki-client -vvf rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft File: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft (raw, json) Hash identifier: BmgJ/K/r71GVL81h/zi0vr3GA6w3Qj6RDvZuViC1X9k= Subject key identifier: 29:CF:75:F4:C9:AE:2B:E3:8E:B8:BC:E8:FF:99:EF:C4:32:2D:5E:BB Authority key identifier: A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E Certificate issuer: /CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Certificate serial: 7F954F3AAFDE403B118FBE793A8C3AA14F063C9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 15:17:44 +0000 Manifest this update: Tue 16 Jun 2026 15:12:44 +0000 Manifest next update: Wed 17 Jun 2026 18:41:44 +0000 Files and hashes: 1: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: bj0wxd5ICBouELscs1c53rXVki6zrAfUoc5PnYBmxBA=) 2: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: qHvmH7kkKUgxVXxeqg/YxT0IJ6BIS+6+UvvwAM7JNvs=) 3: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl (hash: +YyiFu13tvR3Py8bNzZvdvBbeO7DMotn8Br2+q2XZ4A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:95:4f:3a:af:de:40:3b:11:8f:be:79:3a:8c:3a:a1:4f:06:3c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Validity Not Before: Jun 16 15:12:44 2026 GMT Not After : Jun 17 18:41:44 2026 GMT Subject: CN=29CF75F4C9AE2BE38EB8BCE8FF99EFC4322D5EBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:61:32:1e:22:63:22:b2:ee:a2:39:6c:58:4a: 13:4c:3a:2e:0a:8d:54:31:33:ef:c2:98:a0:d5:89: d0:9b:33:0d:a9:2a:c3:18:96:dd:21:ad:18:45:18: fe:42:8d:45:fc:64:53:f4:46:f0:ab:eb:57:3f:ac: 5a:05:48:55:86:cc:4a:7e:d1:4c:19:94:2f:79:40: ff:f9:71:12:35:98:45:91:01:41:69:03:4d:b6:3a: bf:fa:da:86:30:88:98:d8:1d:7f:a0:e3:f4:d2:13: ad:cf:9a:1d:8d:df:d9:33:a6:36:88:0b:3b:56:4a: d1:7e:95:d6:85:7f:ae:e0:64:d5:f0:cc:56:c5:17: 91:31:35:6d:66:5a:4f:d7:6c:dc:50:5a:3e:d0:6a: 87:94:6a:64:4f:b1:54:23:df:f6:dc:4c:be:eb:5c: e5:0b:ca:7a:f6:a8:a7:e3:44:5b:18:41:c0:9a:ab: 55:4c:e8:9c:c1:db:15:da:72:08:44:2c:0a:7c:43: 09:1e:b2:df:01:4a:e1:00:4c:6c:62:73:ea:ae:da: 24:20:87:8c:de:64:a0:9a:0a:dc:c3:8e:bb:0b:46: 38:70:de:47:34:33:f1:e3:21:18:ea:6f:3b:70:05: a8:5e:d3:10:31:86:76:fd:6e:2a:7a:00:63:63:15: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CF:75:F4:C9:AE:2B:E3:8E:B8:BC:E8:FF:99:EF:C4:32:2D:5E:BB X509v3 Authority Key Identifier: keyid:A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:7b:08:43:32:64:46:3d:0b:c9:70:d7:1b:94:67:8d:63:7d: 90:63:de:63:51:63:a5:c4:fc:58:94:de:7a:d6:dd:99:40:2a: 39:9e:93:36:1c:a9:56:40:ad:a6:41:b9:17:78:90:99:d9:bd: 44:66:7d:35:38:08:b6:41:fa:a0:37:69:4d:f3:67:b5:11:f7: 8c:4c:95:cf:ba:a5:3e:1c:0f:3b:fe:07:c4:96:b1:b1:6f:9d: e6:d4:cf:cc:3a:68:f7:24:b1:2d:64:f3:b4:01:8f:2e:3b:43: ef:59:46:a5:9c:57:e1:da:53:3b:65:43:37:a9:93:0c:52:22: 21:56:8f:93:32:68:dc:83:2c:46:a6:02:ca:84:8f:be:5f:eb: 35:83:9e:3a:33:1d:75:4f:0f:65:6c:ea:48:1f:ef:a4:49:e5: 02:a6:ca:68:6b:f2:49:0a:31:8b:48:f8:b1:58:57:d4:9d:ff: 60:02:fb:35:b9:e1:a3:fc:af:f1:a1:33:25:14:e1:ab:1d:2a: 02:cd:9e:59:4c:13:c0:2c:2e:88:3a:65:39:3b:03:a1:89:c5: 62:fa:ec:f1:fb:f4:a6:58:97:af:3e:00:78:ea:a8:85:91:a8: b8:e8:84:bf:da:ab:7e:25:fd:a2:2c:d9:09:db:c7:2a:42:87: 44:ca:fe:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf5VPOq/eQDsRj755Oow6oU8GPJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlC NDFCMUMwRTAeFw0yNjA2MTYxNTEyNDRaFw0yNjA2MTcxODQxNDRaMDMxMTAvBgNV BAMTKDI5Q0Y3NUY0QzlBRTJCRTM4RUI4QkNFOEZGOTlFRkM0MzIyRDVFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkYTIeImMisu6iOWxYShNMOi4K jVQxM+/CmKDVidCbMw2pKsMYlt0hrRhFGP5CjUX8ZFP0RvCr61c/rFoFSFWGzEp+ 0UwZlC95QP/5cRI1mEWRAUFpA022Or/62oYwiJjYHX+g4/TSE63Pmh2N39kzpjaI CztWStF+ldaFf67gZNXwzFbFF5ExNW1mWk/XbNxQWj7QaoeUamRPsVQj3/bcTL7r XOULynr2qKfjRFsYQcCaq1VM6JzB2xXacghELAp8Qwkest8BSuEATGxic+qu2iQg h4zeZKCaCtzDjrsLRjhw3kc0M/HjIRjqbztwBahe0xAxhnb9bip6AGNjFR5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKc919MmuK+OOuLzo/5nvxDItXrswHwYDVR0j BBgwFoAUo7pjO51ztz/qPoCsbVehqbQbHA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiNGZlOTMtNzI5Ni00OGI0LWFhMGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5 RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlCNDFCMUMwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0JBNjMzQjlENzNCNzNGRUEzRTgwQUM2RDU3QTFBOUI0MUIx QzBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiNGZlOTMtNzI5Ni00OGI0LWFh MGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0Ex QTlCNDFCMUMwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV7CEMyZEY9C8lw1xuUZ41jfZBj3mNRY6XE /FiU3nrW3ZlAKjmekzYcqVZAraZBuRd4kJnZvURmfTU4CLZB+qA3aU3zZ7UR94xM lc+6pT4cDzv+B8SWsbFvnebUz8w6aPcksS1k87QBjy47Q+9ZRqWcV+HaUztlQzep kwxSIiFWj5MyaNyDLEamAsqEj75f6zWDnjozHXVPD2Vs6kgf76RJ5QKmymhr8kkK MYtI+LFYV9Sd/2AC+zW54aP8r/GhMyUU4asdKgLNnllME8AsLog6ZTk7A6GJxWL6 7PH79KZYl68+AHjqqIWRqLjohL/aq34l/aIs2QnbxypCh0TK/ko= -----END CERTIFICATE-----Generated at Wed Jun 17 11:29:16 2026 by rpki-client