$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft File: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft (raw, json) Hash identifier: hBHwDurDZly+29umLtDYM/Mpg8bJqimvl+42ObWobmE= Subject key identifier: AE:C6:9A:FD:8E:B4:D0:93:44:36:95:87:68:FD:58:17:72:71:AB:B7 Authority key identifier: 3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 Certificate issuer: /CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Certificate serial: 311011237A094417FD133952B819FB6C2231F0A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 20:10:03 +0000 Manifest this update: Sat 26 Sep 2026 20:05:03 +0000 Manifest next update: Sun 27 Sep 2026 22:40:03 +0000 Files and hashes: 1: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: /q+Q9j+twzjQ1vHcdhCkFEn4oIZ2D60UwxtbsrzeVbI=) 2: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl (hash: TCzhmvV7j7r7DLmqG6cOAHvGKL+dFNC7a+iCWLDCoZ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:10:11:23:7a:09:44:17:fd:13:39:52:b8:19:fb:6c:22:31:f0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Validity Not Before: Sep 26 20:05:03 2026 GMT Not After : Sep 27 22:40:03 2026 GMT Subject: CN=AEC69AFD8EB4D0934436958768FD58177271ABB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:5f:7b:08:33:bc:51:3e:75:05:41:a4:18: 47:99:4d:27:33:85:3b:b0:c5:79:4d:ea:8e:cd:aa: 49:34:fc:64:1d:6b:13:4b:cf:32:2c:6b:42:a6:ab: 9c:b2:93:25:c2:1c:7d:a3:ba:e6:cd:aa:20:eb:15: 87:1b:a0:d5:48:27:f9:c9:5b:ed:61:98:bb:54:f8: 7c:5b:94:58:f0:44:a2:7a:7d:b6:0d:75:82:c0:ed: d8:4f:5b:2e:a8:f6:d2:75:64:aa:b6:b1:e9:f0:8a: e0:7f:82:08:66:49:40:c8:bb:f7:97:03:35:1f:04: 5d:a7:45:61:1c:31:60:ef:44:18:ab:2c:27:1e:c9: 58:8d:02:75:6d:bd:bf:d7:29:7f:36:73:ec:5b:ce: d5:c7:35:16:10:ac:b6:52:19:3e:b3:db:1a:31:9e: 78:65:cb:44:c0:c6:e6:5c:75:60:01:34:04:c6:90: e8:f5:0c:35:71:ca:3c:00:17:eb:9e:ca:47:ae:f0: 3d:2c:ef:ad:81:69:54:1f:23:6e:5a:f8:f1:d1:6f: d7:b9:1b:f2:e5:85:3a:38:c2:42:54:c9:0e:04:b0: a5:48:0b:fb:c2:2c:73:eb:00:a5:9f:b8:17:b2:e2: c6:6a:16:f2:8c:05:01:1b:1b:e2:ba:04:2e:3d:34: 1b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C6:9A:FD:8E:B4:D0:93:44:36:95:87:68:FD:58:17:72:71:AB:B7 X509v3 Authority Key Identifier: keyid:3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:0c:e9:b9:23:15:0b:f5:71:4d:8e:cc:3b:91:88:4e:df:4d: bf:f7:51:0f:67:48:42:03:83:85:01:19:4d:54:d6:f3:a7:7f: 0a:57:d8:74:d9:52:08:b4:56:78:5e:fc:7a:d5:3a:6a:55:cd: ec:e0:cf:eb:a0:f3:40:cd:71:26:02:5b:21:88:51:34:7d:aa: ec:5c:eb:cc:46:2f:98:d9:ca:74:95:6a:6a:72:9f:3b:fa:36: d6:e5:aa:8f:3a:fe:ae:d7:0f:98:6f:98:49:ce:47:77:11:9d: 89:9b:a5:4f:b2:15:2f:d9:f1:42:df:a0:91:ae:0b:31:98:b3: 51:19:96:68:8f:c9:f8:25:91:59:01:57:71:5f:68:74:bd:46: 67:aa:6e:ba:43:47:3e:a5:90:a6:5e:0b:36:ff:8f:0f:02:d6: 0f:71:2a:d4:11:9a:87:6d:24:9c:bf:ba:06:e7:9b:c7:50:21: 21:b1:2e:f6:07:f4:b4:17:ab:42:f0:43:8c:44:72:28:0f:22: ba:73:53:1b:59:5c:8a:3c:71:01:bf:c2:30:72:de:50:2d:50: 96:27:67:99:fb:69:5b:ab:37:8c:35:1b:b7:f6:ff:e3:4a:6a: c9:4d:1e:0b:93:c4:53:8c:a3:b6:c0:10:b6:a5:5a:68:c3:c6: a9:b7:2c:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRARI3oJRBf9EzlSuBn7bCIx8KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2 QThBMjlFNTAeFw0yNjA5MjYyMDA1MDNaFw0yNjA5MjcyMjQwMDNaMDMxMTAvBgNV BAMTKEFFQzY5QUZEOEVCNEQwOTM0NDM2OTU4NzY4RkQ1ODE3NzI3MUFCQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRb197CDO8UT51BUGkGEeZTScz hTuwxXlN6o7Nqkk0/GQdaxNLzzIsa0Kmq5yykyXCHH2juubNqiDrFYcboNVIJ/nJ W+1hmLtU+HxblFjwRKJ6fbYNdYLA7dhPWy6o9tJ1ZKq2senwiuB/gghmSUDIu/eX AzUfBF2nRWEcMWDvRBirLCceyViNAnVtvb/XKX82c+xbztXHNRYQrLZSGT6z2xox nnhly0TAxuZcdWABNATGkOj1DDVxyjwAF+ueykeu8D0s762BaVQfI25a+PHRb9e5 G/LlhTo4wkJUyQ4EsKVIC/vCLHPrAKWfuBey4sZqFvKMBQEbG+K6BC49NBvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrsaa/Y600JNENpWHaP1YF3Jxq7cwHwYDVR0j BBgwFoAUOnrFKw8Mi06O6g+sViHDBWqKKeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjYwOTVjODUtOGM5Mi00MTRiLWJkNTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIw RjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2QThBMjlFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTdBQzUyQjBGMEM4QjRFOEVFQTBGQUM1NjIxQzMwNTZBOEEy OUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMz MDU2QThBMjlFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkM6bkjFQv1cU2OzDuRiE7fTb/3UQ9nSEID g4UBGU1U1vOnfwpX2HTZUgi0Vnhe/HrVOmpVzezgz+ug80DNcSYCWyGIUTR9quxc 68xGL5jZynSVampynzv6Ntblqo86/q7XD5hvmEnOR3cRnYmbpU+yFS/Z8ULfoJGu CzGYs1EZlmiPyfglkVkBV3FfaHS9RmeqbrpDRz6lkKZeCzb/jw8C1g9xKtQRmodt JJy/ugbnm8dQISGxLvYH9LQXq0LwQ4xEcigPIrpzUxtZXIo8cQG/wjBy3lAtUJYn Z5n7aVurN4w1G7f2/+NKaslNHguTxFOMo7bAELalWmjDxqm3LF8= -----END CERTIFICATE-----Generated at Sun Sep 27 07:56:48 2026 by rpki-client