$ rpki-client -vvvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json) Hash identifier: NZBlCDo5+4Cp4l5lFMQQLyzupY5nIjn7M+XKuZ+vEIA= Subject key identifier: FC:38:67:71:23:CC:61:E8:7F:24:11:C0:64:2E:CB:0D:35:B7:B5:F7 Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 7DE80B8B09C1794F91E963F59AFAB9FA1D3F3F0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft Manifest number: BD Signing time: Mon 21 Sep 2026 21:53:45 +0000 Manifest this update: Mon 21 Sep 2026 21:48:45 +0000 Manifest next update: Tue 22 Sep 2026 23:29:45 +0000 Files and hashes: 1: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: 0Jlk8pRUKfSIGCe9t47pi/cOsNZzfob1ffBNlemokrs=) 2: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=) 3: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=) 4: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e8:0b:8b:09:c1:79:4f:91:e9:63:f5:9a:fa:b9:fa:1d:3f:3f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: Sep 21 21:48:45 2026 GMT Not After : Sep 22 23:29:45 2026 GMT Subject: CN=FC38677123CC61E87F2411C0642ECB0D35B7B5F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:fc:75:f9:63:f6:65:cd:c8:94:5a:2b:e1: ad:0b:6e:46:45:62:4a:26:2a:43:88:e4:f9:fb:71: 20:2f:59:42:82:c8:9b:1b:73:6e:00:bd:a0:b5:88: b1:1d:fa:71:90:3f:c0:2e:35:3e:e2:11:3d:69:90: 8b:85:ab:99:5d:0a:42:c5:30:e4:fe:e6:1d:39:ad: 14:5c:cf:3c:90:37:46:8e:df:df:9b:58:0c:f9:09: 4e:23:b2:aa:ab:a3:6e:b1:76:92:30:c6:e7:4e:23: 26:f0:ce:c7:66:f2:6e:8a:93:6b:0b:9c:86:d5:f2: 92:f1:64:8e:7d:a9:7f:22:a2:1e:20:0c:fa:74:90: 9d:a6:b0:4f:4b:0a:1d:11:f1:10:49:29:0d:52:01: b8:5c:37:42:35:67:e9:96:f7:33:42:9c:67:f9:35: 72:43:b8:b8:ba:25:40:dd:94:ce:3a:02:6f:0a:98: 2f:f3:b2:94:2b:37:49:30:99:1a:5c:49:4c:d1:62: ce:5c:ef:de:8c:11:7b:6f:54:57:9a:f5:85:39:c7: d2:8e:e5:76:c8:af:0b:2f:bb:90:d4:84:4c:e3:0d: 6d:8b:ff:56:84:64:ba:9c:98:6b:e0:4e:d1:81:f5: 96:90:05:22:23:1c:6a:63:4e:34:96:91:c8:33:39: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:38:67:71:23:CC:61:E8:7F:24:11:C0:64:2E:CB:0D:35:B7:B5:F7 X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4b:26:7b:6f:1a:54:7c:11:da:84:5e:dd:2f:bc:e0:2b:fe: 1d:34:42:3d:3b:3a:1d:a3:72:b6:e0:02:e6:12:0f:d3:07:8d: 63:39:2a:4a:03:46:38:98:8e:f1:6e:b7:a8:c8:c5:90:82:96: 11:3c:a6:fd:83:9a:c3:32:b6:b6:ab:ab:51:12:4f:76:dc:89: f6:a2:86:25:33:a5:a0:f2:56:7b:e6:5c:15:dd:12:4d:3f:76: 4a:39:52:a7:9d:e8:50:2c:8a:a1:47:68:9f:8b:11:8d:6c:8c: 87:f3:30:2f:e2:c7:95:e8:3a:d5:91:e0:6f:49:af:47:72:ba: f2:9a:16:71:be:b6:e6:01:43:fb:c8:b9:cd:22:2b:95:64:3e: 80:e1:69:28:c7:29:03:57:1c:32:56:33:60:00:92:1d:ce:a6: 9f:64:81:da:f6:53:af:b2:25:59:fb:01:25:39:f9:8b:23:ce: 55:dc:80:d3:cb:fb:bd:1d:f0:68:79:6d:5a:0d:2d:de:86:37: 19:9e:a0:5e:80:03:7f:f8:33:e7:ce:b7:33:e6:10:c1:69:06: 5f:e0:e3:f4:7b:2f:41:fc:ef:f0:08:ce:9b:26:4d:b9:4e:0d: fe:dd:d2:cf:8f:5b:e1:18:73:45:e5:03:77:03:34:7e:a3:36: ab:14:17:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfegLiwnBeU+R6WP1mvq5+h0/Pw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx MjczMDUzQzAeFw0yNjA5MjEyMTQ4NDVaFw0yNjA5MjIyMzI5NDVaMDMxMTAvBgNV BAMTKEZDMzg2NzcxMjNDQzYxRTg3RjI0MTFDMDY0MkVDQjBEMzVCN0I1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Vvx1+WP2Zc3IlFor4a0LbkZF YkomKkOI5Pn7cSAvWUKCyJsbc24AvaC1iLEd+nGQP8AuNT7iET1pkIuFq5ldCkLF MOT+5h05rRRczzyQN0aO39+bWAz5CU4jsqqro26xdpIwxudOIybwzsdm8m6Kk2sL nIbV8pLxZI59qX8ioh4gDPp0kJ2msE9LCh0R8RBJKQ1SAbhcN0I1Z+mW9zNCnGf5 NXJDuLi6JUDdlM46Am8KmC/zspQrN0kwmRpcSUzRYs5c796MEXtvVFea9YU5x9KO 5XbIrwsvu5DUhEzjDW2L/1aEZLqcmGvgTtGB9ZaQBSIjHGpjTjSWkcgzORItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/DhncSPMYeh/JBHAZC7LDTW3tfcwHwYDVR0j BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1 OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhLJntvGlR8EdqEXt0vvOAr/h00Qj07Oh2j crbgAuYSD9MHjWM5KkoDRjiYjvFut6jIxZCClhE8pv2DmsMytrarq1EST3bcifai hiUzpaDyVnvmXBXdEk0/dko5Uqed6FAsiqFHaJ+LEY1sjIfzMC/ix5XoOtWR4G9J r0dyuvKaFnG+tuYBQ/vIuc0iK5VkPoDhaSjHKQNXHDJWM2AAkh3Opp9kgdr2U6+y JVn7ASU5+YsjzlXcgNPL+70d8Gh5bVoNLd6GNxmeoF6AA3/4M+fOtzPmEMFpBl/g 4/R7L0H87/AIzpsmTblODf7d0s+PW+EYc0XlA3cDNH6jNqsUFy0= -----END CERTIFICATE-----Generated at Tue Sep 22 16:42:33 2026 by rpki-client