$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft File: A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft (raw, json) Hash identifier: P+hXwb7khC05GHm/WLjK1Di5Dzzt/lUQZhSt40YWzbA= Subject key identifier: 2A:75:EF:3F:15:30:23:3C:26:9F:E3:06:63:82:61:AE:23:4D:7F:E3 Authority key identifier: A3:E8:D0:D5:6A:A9:0F:C9:8D:B7:BB:6A:DC:AB:D1:F4:D6:4C:9D:27 Certificate issuer: /CN=A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27 Certificate serial: 4AE358C5F10E2F5B384DA547AEB744A453D7B6A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft Manifest number: BD Signing time: Mon 21 Sep 2026 23:00:13 +0000 Manifest this update: Mon 21 Sep 2026 22:55:13 +0000 Manifest next update: Wed 23 Sep 2026 00:48:13 +0000 Files and hashes: 1: A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl (hash: xWkTRHG5jUDuaC2QtpSerj4/BmF5bVdbYnAsjZ+YYrw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e3:58:c5:f1:0e:2f:5b:38:4d:a5:47:ae:b7:44:a4:53:d7:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27 Validity Not Before: Sep 21 22:55:13 2026 GMT Not After : Sep 23 00:48:13 2026 GMT Subject: CN=2A75EF3F1530233C269FE306638261AE234D7FE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:79:c3:ce:d1:74:1f:50:89:1f:0f:59:7f: 22:13:67:fb:2c:b7:84:b5:6f:f4:ee:a2:7f:22:9d: 51:22:75:54:8d:97:96:a7:e4:ca:55:d2:61:59:95: cb:a1:74:c2:dc:72:02:8a:1b:34:33:4c:f2:fd:ab: 8f:48:40:71:d0:57:b3:77:de:74:6c:b2:ff:11:67: db:91:b6:94:51:b3:48:6c:64:bc:0e:c3:8e:c1:41: 1d:cd:98:f1:e1:c7:0e:e8:ab:57:58:6a:80:ae:55: eb:ec:f3:fc:36:71:31:7c:fb:61:b4:33:81:85:84: 60:85:35:c0:f4:6a:fd:0d:1f:4a:10:e9:1e:67:23: b3:9a:61:fd:08:ab:0e:0f:fb:35:0a:af:18:22:a9: a9:7d:f8:90:9e:9b:b7:ac:ea:8a:33:4a:f7:3f:ee: 00:3d:ef:c1:6b:20:29:2d:e7:6e:69:cc:69:31:72: 4a:2f:d7:83:7d:f5:79:5a:77:0f:22:97:09:05:b3: 0d:b8:f2:94:77:2c:ea:6d:87:28:de:ac:b3:75:09: 5d:a9:83:21:99:cb:37:f9:06:aa:e4:47:0b:1c:93: d6:f5:33:84:87:b5:87:24:d2:da:5e:7b:e8:e3:fb: 6d:16:5b:6d:d2:b4:84:2b:c8:ef:6e:1b:97:70:b7: e8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:75:EF:3F:15:30:23:3C:26:9F:E3:06:63:82:61:AE:23:4D:7F:E3 X509v3 Authority Key Identifier: keyid:A3:E8:D0:D5:6A:A9:0F:C9:8D:B7:BB:6A:DC:AB:D1:F4:D6:4C:9D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:01:b7:82:74:40:c9:14:17:84:5c:b5:28:f4:f4:0e:7b:df: 63:ed:52:e8:45:56:6d:52:25:01:b4:be:c9:c4:e7:d2:75:1e: 5b:f7:d7:44:7f:6a:c6:e3:65:b0:2f:68:3b:6b:f7:37:63:96: 9b:49:2f:92:6d:f7:0e:82:87:aa:77:2b:f9:1e:b2:bf:2a:85: 51:bb:0f:6d:a3:5c:32:00:51:cf:08:1d:d6:ed:2b:12:46:e0: a3:f7:ca:fc:96:0f:cd:8e:d2:cf:9a:78:07:c5:c0:9f:86:0d: b1:d2:94:74:04:8c:46:2a:f8:a6:c4:b1:68:5b:f4:f6:33:95: d1:c8:79:80:3b:5e:6d:93:5e:bb:eb:7f:81:d7:2f:27:a2:fd: a6:14:96:c0:9c:9f:8e:d3:a1:86:cc:12:4e:0b:fd:df:fd:0b: 37:fb:78:6c:17:c9:ec:a0:30:07:88:cf:06:f5:00:36:f0:40: 03:ca:a4:23:48:76:46:16:78:dc:f0:22:8c:d2:38:3c:fb:89: 48:94:96:c5:2c:34:d9:0d:a1:c1:d4:7f:47:d4:7b:b0:49:9c: de:3a:72:d8:94:d3:e7:14:2d:21:28:9a:0b:68:73:af:de:82: dd:74:a5:ee:08:f6:54:3a:c3:74:5b:f2:70:f2:74:69:34:71: a2:bd:30:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuNYxfEOL1s4TaVHrrdEpFPXtqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFOEQwRDU2QUE5MEZDOThEQjdCQjZBRENBQkQxRjRE NjRDOUQyNzAeFw0yNjA5MjEyMjU1MTNaFw0yNjA5MjMwMDQ4MTNaMDMxMTAvBgNV BAMTKDJBNzVFRjNGMTUzMDIzM0MyNjlGRTMwNjYzODI2MUFFMjM0RDdGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCisHnDztF0H1CJHw9ZfyITZ/ss t4S1b/Tuon8inVEidVSNl5an5MpV0mFZlcuhdMLccgKKGzQzTPL9q49IQHHQV7N3 3nRssv8RZ9uRtpRRs0hsZLwOw47BQR3NmPHhxw7oq1dYaoCuVevs8/w2cTF8+2G0 M4GFhGCFNcD0av0NH0oQ6R5nI7OaYf0Iqw4P+zUKrxgiqal9+JCem7es6oozSvc/ 7gA978FrICkt525pzGkxckov14N99Xladw8ilwkFsw248pR3LOpthyjerLN1CV2p gyGZyzf5BqrkRwsck9b1M4SHtYck0tpee+jj+20WW23StIQryO9uG5dwt+jFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKnXvPxUwIzwmn+MGY4JhriNNf+MwHwYDVR0j BBgwFoAUo+jQ1WqpD8mNt7tq3KvR9NZMnScwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwOTllNDItMmU5Zi00ZThhLTk5ZTgtYWQ1MDQ1M2IwNjZmLzAvQTNFOEQwRDU2 QUE5MEZDOThEQjdCQjZBRENBQkQxRjRENjRDOUQyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0U4RDBENTZBQTkwRkM5OERCN0JCNkFEQ0FCRDFGNEQ2NEM5 RDI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvQTNFOEQwRDU2QUE5MEZDOThEQjdCQjZBRENBQkQx RjRENjRDOUQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsBt4J0QMkUF4RctSj09A5732PtUuhFVm1S JQG0vsnE59J1Hlv310R/asbjZbAvaDtr9zdjlptJL5Jt9w6Ch6p3K/kesr8qhVG7 D22jXDIAUc8IHdbtKxJG4KP3yvyWD82O0s+aeAfFwJ+GDbHSlHQEjEYq+KbEsWhb 9PYzldHIeYA7Xm2TXrvrf4HXLyei/aYUlsCcn47ToYbMEk4L/d/9Czf7eGwXyeyg MAeIzwb1ADbwQAPKpCNIdkYWeNzwIozSODz7iUiUlsUsNNkNocHUf0fUe7BJnN46 ctiU0+cULSEomgtoc6/egt10pe4I9lQ6w3Rb8nDydGk0caK9MCo= -----END CERTIFICATE-----Generated at Tue Sep 22 12:04:24 2026 by rpki-client