$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft File: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft (raw, json) Hash identifier: Rxw6TP5TCuedsEZiNRbd9BlVb3+MYAhwNpdMoQcf7MM= Subject key identifier: 42:4A:1A:EB:5A:2D:B1:64:59:6D:5B:F6:57:01:8C:2D:18:E6:9A:0F Authority key identifier: A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D Certificate issuer: /CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Certificate serial: 1965CF62E5C2BA06817DD3DEA8BCD980A8BC5D90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft Manifest number: FE Signing time: Mon 09 Nov 2026 22:08:20 +0000 Manifest this update: Mon 09 Nov 2026 22:03:20 +0000 Manifest next update: Wed 11 Nov 2026 01:46:20 +0000 Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 0G4YBfT8XRPQC+cAerXBYMMW9I/KjiVejVSF2aUT8Xk=) 2: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl (hash: 2TYCwjuVeQ1Cdpzw2AKoBmD+OxTLhF73dUNjFBfrVSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 01:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:65:cf:62:e5:c2:ba:06:81:7d:d3:de:a8:bc:d9:80:a8:bc:5d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Validity Not Before: Nov 9 22:03:20 2026 GMT Not After : Nov 11 01:46:20 2026 GMT Subject: CN=424A1AEB5A2DB164596D5BF657018C2D18E69A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:04:82:16:1e:71:64:31:3d:b1:80:2c:94:3d: ce:01:81:22:bf:d4:99:c9:b9:dd:b1:3a:a2:d6:67: a1:12:fb:cb:c5:b1:cc:d2:7b:8f:2c:d8:13:e4:10: 95:9f:97:fa:42:af:4e:fe:13:d0:6e:0a:aa:ca:a1: ed:e1:65:ea:21:18:db:ac:0a:b3:c2:95:21:9b:e6: 94:08:88:75:d4:23:82:2a:2e:60:53:3b:2a:66:87: 77:f4:24:e7:75:15:fe:93:10:a2:68:3c:f7:8c:76: 33:e3:a9:87:4c:4a:7d:a6:4f:f4:9d:ff:64:de:ac: 9e:dd:1a:0c:94:2e:a7:5e:be:d5:e1:83:24:a2:bc: 0d:1a:7c:84:21:8b:df:ff:e1:4e:7d:1e:9a:cf:26: 78:c7:33:d6:b7:49:0d:25:8c:f5:b5:65:c0:83:0e: f1:e6:98:4e:cf:b4:bb:98:f2:92:eb:82:de:6b:76: ae:f1:e7:dc:16:96:54:ce:4f:dd:f8:c6:5a:b8:a6: 4c:a2:9f:07:29:3e:38:f6:12:38:ed:42:43:aa:d8: 80:d6:ab:0f:c8:97:02:23:78:8d:9e:15:e5:b5:e2: 38:04:d1:69:38:9e:e1:fb:6a:45:91:66:e2:37:83: b9:c6:44:c0:68:f4:b6:a2:a6:54:50:32:58:0e:99: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4A:1A:EB:5A:2D:B1:64:59:6D:5B:F6:57:01:8C:2D:18:E6:9A:0F X509v3 Authority Key Identifier: keyid:A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:6a:70:0d:32:92:c7:9c:05:05:98:41:90:f6:9f:db:16:4b: b0:76:39:62:ad:b6:b0:d3:1c:82:6c:1a:52:61:2e:54:e4:2d: f8:96:79:09:40:df:ca:a7:76:4e:2d:56:05:c9:19:1d:b3:1c: c2:10:af:a4:fa:72:99:06:93:6b:ba:4f:4f:da:28:96:37:36: e0:f8:fe:6e:a9:55:5f:e5:13:c2:bb:60:7a:6d:55:4d:60:57: 28:61:30:3a:bc:d2:e5:cd:37:38:16:28:e9:3e:97:f3:58:ca: 48:76:2a:85:cb:88:03:cb:78:49:fb:8b:cf:62:14:4e:2e:dd: f5:03:a4:b2:ea:b3:d4:1b:15:e9:30:bc:67:e8:bc:f5:00:3b: fc:37:d6:fd:21:36:ee:47:97:d8:ab:44:c5:8b:ef:58:81:24: 1f:65:32:80:97:06:33:52:8f:34:ff:2a:df:bb:c2:69:d5:4a: 36:b0:ef:75:8d:dd:03:13:31:a2:da:24:3f:be:9b:aa:37:55: 77:42:fe:69:99:68:ed:6b:77:1b:c9:e7:75:0c:70:7e:67:ac: 8e:10:8a:7c:ac:fc:e6:84:b9:1a:b8:f2:e9:42:b7:22:75:65: b1:73:23:80:3a:de:91:f8:e0:4e:b0:1a:1f:2d:c4:e5:24:8f: 40:f7:4c:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWXPYuXCugaBfdPeqLzZgKi8XZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZFQzRC RkQwMkY0RDAeFw0yNjExMDkyMjAzMjBaFw0yNjExMTEwMTQ2MjBaMDMxMTAvBgNV BAMTKDQyNEExQUVCNUEyREIxNjQ1OTZENUJGNjU3MDE4QzJEMThFNjlBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTBIIWHnFkMT2xgCyUPc4BgSK/ 1JnJud2xOqLWZ6ES+8vFsczSe48s2BPkEJWfl/pCr07+E9BuCqrKoe3hZeohGNus CrPClSGb5pQIiHXUI4IqLmBTOypmh3f0JOd1Ff6TEKJoPPeMdjPjqYdMSn2mT/Sd /2TerJ7dGgyULqdevtXhgySivA0afIQhi9//4U59HprPJnjHM9a3SQ0ljPW1ZcCD DvHmmE7PtLuY8pLrgt5rdq7x59wWllTOT934xlq4pkyinwcpPjj2EjjtQkOq2IDW qw/IlwIjeI2eFeW14jgE0Wk4nuH7akWRZuI3g7nGRMBo9LaiplRQMlgOmY8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQkoa61otsWRZbVv2VwGMLRjmmg8wHwYDVR0j BBgwFoAUo0Ecd7XlTyOTetCQgy7+xL/QL00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRjNmY3NzAtNjg2YS00NWVmLThkZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdC NUU1NEYyMzkzN0FEMDkwODMyRUZFQzRCRkQwMkY0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzQxMUM3N0I1RTU0RjIzOTM3QUQwOTA4MzJFRkVDNEJGRDAy RjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZF QzRCRkQwMkY0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERqcA0yksecBQWYQZD2n9sWS7B2OWKttrDT HIJsGlJhLlTkLfiWeQlA38qndk4tVgXJGR2zHMIQr6T6cpkGk2u6T0/aKJY3NuD4 /m6pVV/lE8K7YHptVU1gVyhhMDq80uXNNzgWKOk+l/NYykh2KoXLiAPLeEn7i89i FE4u3fUDpLLqs9QbFekwvGfovPUAO/w31v0hNu5Hl9irRMWL71iBJB9lMoCXBjNS jzT/Kt+7wmnVSjaw73WN3QMTMaLaJD++m6o3VXdC/mmZaO1rdxvJ53UMcH5nrI4Q inys/OaEuRq48ulCtyJ1ZbFzI4A63pH44E6wGh8txOUkj0D3THc= -----END CERTIFICATE-----Generated at Tue Nov 10 03:30:42 2026 by rpki-client