$ rpki-client -vvvf rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft File: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft (raw, json) Hash identifier: ydDuNnYsL8DWxL9EhTockdbG9nTO3nPVHJ3q9nI2rgU= Subject key identifier: A2:46:0F:38:CE:92:76:F1:67:70:6F:52:F0:C2:88:6F:C6:66:96:CC Authority key identifier: 3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B Certificate issuer: /CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Certificate serial: 53DE8D24D02172FF2264FD409A9DA0BADAE1FE76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:36:58 +0000 Manifest this update: Mon 21 Sep 2026 12:31:58 +0000 Manifest next update: Tue 22 Sep 2026 15:20:58 +0000 Files and hashes: 1: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (hash: IzKZnVRhi3vGvMtZ1nGW6jpAgrjEBqrGZ0c+G4cVeuM=) 2: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl (hash: FKUI6mIX5HW2z12yNOOUA4LUcwaX4cT1deSGUH/yqk4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:de:8d:24:d0:21:72:ff:22:64:fd:40:9a:9d:a0:ba:da:e1:fe:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Validity Not Before: Sep 21 12:31:58 2026 GMT Not After : Sep 22 15:20:58 2026 GMT Subject: CN=A2460F38CE9276F167706F52F0C2886FC66696CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:a0:dc:cc:6a:f1:5b:ac:72:6c:52:50:f4: 98:79:00:da:4e:56:b5:00:06:71:ca:ae:5c:7f:c3: 63:d8:1b:bf:90:af:e4:b4:c3:12:20:c8:9c:83:00: f7:2a:d8:80:b6:13:38:2d:12:70:de:0c:db:a4:55: 8d:a2:9e:97:cb:f5:57:3b:e0:12:5d:62:1b:bf:5e: 73:0c:7d:a0:a1:0d:aa:93:cf:02:4a:0d:3a:25:b8: b1:fa:c1:e3:5d:69:04:0a:9c:ac:ad:88:1a:1c:67: 55:d6:d2:e0:e1:0e:f1:73:45:93:3c:67:da:54:ee: c7:7c:b6:ad:6e:a2:78:26:73:ab:79:2f:4b:7d:de: cf:1a:04:b9:51:90:9f:2e:17:42:bd:a9:67:19:1a: f1:f6:6d:54:7a:70:f8:de:3a:91:60:b8:d9:d2:ba: f5:18:f8:fe:55:69:01:3a:f5:2d:31:6b:48:c7:20: eb:a7:45:9c:fb:5e:34:b1:a7:2b:0b:80:7f:b0:7d: c3:bd:4e:40:2f:5e:6d:2b:3f:ef:22:e1:66:1c:ee: db:2c:ed:01:c8:14:5e:db:ca:cf:10:ee:f8:30:ea: f8:bf:b3:c2:73:f8:95:df:fb:a3:07:a2:6a:aa:51: 86:e8:c1:f7:de:1d:c2:03:58:6d:06:ab:74:fd:b0: 97:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:46:0F:38:CE:92:76:F1:67:70:6F:52:F0:C2:88:6F:C6:66:96:CC X509v3 Authority Key Identifier: keyid:3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:99:44:d1:47:1e:38:e1:7d:97:43:fb:a9:b1:d6:72:ba:38: b4:b8:f8:0b:d5:b0:e5:8f:d8:06:4c:f4:d0:ac:29:a1:8c:41: 1e:7c:54:90:ac:c8:77:3e:cd:d4:fc:a8:df:59:a5:e0:0c:49: ee:ce:51:96:33:b6:b5:6b:ce:b7:38:8e:9f:fc:17:2f:e6:98: 13:65:38:8c:4c:7a:3f:ca:2f:d5:74:dc:76:16:89:77:d9:4a: 02:ec:7f:7a:89:d9:3b:56:ac:d0:5b:11:15:03:ab:64:56:bf: 3e:19:35:da:4c:67:aa:b8:36:28:d1:86:3e:80:2f:19:f4:6e: 52:6e:7f:2b:b9:e4:25:07:c2:78:3e:ce:1d:a4:cc:a8:f3:e7: 23:f3:f1:2d:1c:20:f4:ff:31:68:84:c6:50:8e:7b:5f:c9:58: a9:40:83:bf:c0:19:09:51:55:21:b6:e5:e5:d8:5f:1f:c1:a0: 41:17:d8:e3:dc:a3:db:15:65:e1:08:05:90:fa:2e:c3:c8:ae: 27:7f:28:2e:e8:ca:05:b6:ee:0d:32:9d:17:ce:b9:56:86:b8: 23:70:34:93:3e:8a:7c:80:a5:ed:8f:21:2d:17:1a:d9:96:1f: b8:d1:7d:ed:7a:8a:00:a8:78:85:bf:67:7e:f2:b8:c2:97:08: 68:69:d6:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU96NJNAhcv8iZP1Amp2gutrh/nYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMx RTc1QUUxQjAeFw0yNjA5MjExMjMxNThaFw0yNjA5MjIxNTIwNThaMDMxMTAvBgNV BAMTKEEyNDYwRjM4Q0U5Mjc2RjE2NzcwNkY1MkYwQzI4ODZGQzY2Njk2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYqDczGrxW6xybFJQ9Jh5ANpO VrUABnHKrlx/w2PYG7+Qr+S0wxIgyJyDAPcq2IC2EzgtEnDeDNukVY2inpfL9Vc7 4BJdYhu/XnMMfaChDaqTzwJKDToluLH6weNdaQQKnKytiBocZ1XW0uDhDvFzRZM8 Z9pU7sd8tq1uongmc6t5L0t93s8aBLlRkJ8uF0K9qWcZGvH2bVR6cPjeOpFguNnS uvUY+P5VaQE69S0xa0jHIOunRZz7XjSxpysLgH+wfcO9TkAvXm0rP+8i4WYc7tss 7QHIFF7bys8Q7vgw6vi/s8Jz+JXf+6MHomqqUYbowffeHcIDWG0Gq3T9sJclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUokYPOM6SdvFncG9S8MKIb8ZmlswwHwYDVR0j BBgwFoAUOoJe31GIqIi8zRnzXqg+Yx51rhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTczYjk1OWUtZmY1Mi00MDI4LWI1MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1 MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMxRTc1QUUxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTgyNUVERjUxODhBODg4QkNDRDE5RjM1RUE4M0U2MzFFNzVB RTFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTczYjk1OWUtZmY1Mi00MDI4LWI1 MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNF NjMxRTc1QUUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOZRNFHHjjhfZdD+6mx1nK6OLS4+AvVsOWP 2AZM9NCsKaGMQR58VJCsyHc+zdT8qN9ZpeAMSe7OUZYztrVrzrc4jp/8Fy/mmBNl OIxMej/KL9V03HYWiXfZSgLsf3qJ2TtWrNBbERUDq2RWvz4ZNdpMZ6q4NijRhj6A Lxn0blJufyu55CUHwng+zh2kzKjz5yPz8S0cIPT/MWiExlCOe1/JWKlAg7/AGQlR VSG25eXYXx/BoEEX2OPco9sVZeEIBZD6LsPIrid/KC7oygW27g0ynRfOuVaGuCNw NJM+inyApe2PIS0XGtmWH7jRfe16igCoeIW/Z37yuMKXCGhp1sU= -----END CERTIFICATE-----Generated at Mon Sep 21 18:02:28 2026 by rpki-client