$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft File: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft (raw, json) Hash identifier: /CaKRmkZFP9ttl8huOkDBfDQ+Jdz+h9jpZp7sl7ifk8= Subject key identifier: 96:2D:79:D1:2A:7D:68:0E:4C:71:F2:63:53:E9:B5:D2:A6:7B:8C:37 Authority key identifier: A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D Certificate issuer: /CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Certificate serial: 2CF4C4C94469863840E3A04BE58D301E1CF209EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft Manifest number: BD Signing time: Mon 21 Sep 2026 20:37:07 +0000 Manifest this update: Mon 21 Sep 2026 20:32:07 +0000 Manifest next update: Tue 22 Sep 2026 22:32:07 +0000 Files and hashes: 1: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl (hash: C2JJ77AB2MXVDz6IrvpSz9Z0qXViHfQiB05WbSD+Y8U=) 2: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 0G4YBfT8XRPQC+cAerXBYMMW9I/KjiVejVSF2aUT8Xk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f4:c4:c9:44:69:86:38:40:e3:a0:4b:e5:8d:30:1e:1c:f2:09:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Validity Not Before: Sep 21 20:32:07 2026 GMT Not After : Sep 22 22:32:07 2026 GMT Subject: CN=962D79D12A7D680E4C71F26353E9B5D2A67B8C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2a:0a:17:29:fe:03:d8:1e:c2:56:28:99:8c: 24:75:7d:ff:70:15:75:42:19:e5:fe:df:55:a5:65: 4b:4b:11:01:ea:e0:77:09:00:21:d8:eb:4a:d7:95: 8e:c3:c8:98:f6:1b:83:e8:29:5d:1d:59:1d:27:7e: f8:2c:5e:7a:bf:d3:48:e4:46:9a:38:94:5d:04:38: e3:14:7e:f6:83:87:32:b0:c1:8b:18:ec:41:76:88: ed:01:c0:51:47:bc:da:bc:9d:8b:90:1e:6c:d6:b3: 3a:c9:07:ac:9a:37:c0:25:4e:7c:90:2e:cb:21:cf: ba:ca:0e:11:ff:f6:fc:55:61:41:d2:f7:3c:05:ae: 83:f3:9d:c1:6a:36:ad:4b:b2:b3:23:0c:4a:84:c6: 52:44:53:c8:49:48:c8:c7:73:da:f2:06:93:ec:89: 82:5d:20:9f:0d:6d:cf:ab:10:88:ea:89:3b:ae:40: 86:4c:b4:78:bb:83:39:ac:02:06:58:64:bd:20:2e: d5:00:18:69:c3:28:ec:49:51:82:7b:8f:0f:04:7b: ee:83:b4:80:da:4d:9b:60:4d:66:89:00:6f:0c:01: 45:d5:3a:73:30:a7:13:7a:3f:d8:36:03:2b:72:04: 21:7b:c7:c0:ff:9f:e5:3d:40:b1:07:24:58:ea:a2: c7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2D:79:D1:2A:7D:68:0E:4C:71:F2:63:53:E9:B5:D2:A6:7B:8C:37 X509v3 Authority Key Identifier: keyid:A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0d:18:ff:c4:5a:55:6f:f0:5c:a9:50:15:8b:2b:9d:29:35: 2b:fa:ea:ff:1c:b6:f7:f3:25:84:e6:3e:3e:b4:b6:c8:06:1b: 55:d9:5b:10:f5:73:b1:3d:d3:91:d7:37:d5:dc:98:2f:3d:ba: 96:3c:ae:01:2b:2d:e0:13:e9:a0:98:70:8f:df:3d:11:83:67: 75:1d:60:1c:ba:4d:a1:4e:38:00:74:50:43:a7:ec:7f:8a:fa: 60:c8:0a:c6:97:6d:21:a0:08:e8:c9:59:d7:cc:b8:45:22:7f: 96:da:55:ee:89:52:7f:f2:97:1b:ea:cc:bb:2c:b2:a9:b7:d4: b5:7f:f5:4d:41:cf:38:cc:d1:d8:08:3c:7d:53:50:17:db:31: 78:3b:0e:f1:8a:c0:36:97:31:5f:6e:b0:72:ec:00:1c:bd:b4: 6f:86:da:13:75:d8:9e:42:76:87:0a:22:ec:18:c3:9e:0b:2f: 3a:13:27:f3:7e:43:85:0a:22:46:69:1a:6f:22:0b:bf:51:5b: 45:6d:82:9f:0a:bf:d0:30:1e:d1:0e:eb:54:0b:06:c4:94:e9: 21:39:0c:65:50:14:3c:3c:fd:0f:f6:d7:09:2b:80:ef:79:9c: 86:5b:8d:92:b4:49:d3:d0:ed:fd:38:54:ce:c7:99:7d:4b:51: 5a:f2:53:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPTEyURphjhA46BL5Y0wHhzyCe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZFQzRC RkQwMkY0RDAeFw0yNjA5MjEyMDMyMDdaFw0yNjA5MjIyMjMyMDdaMDMxMTAvBgNV BAMTKDk2MkQ3OUQxMkE3RDY4MEU0QzcxRjI2MzUzRTlCNUQyQTY3QjhDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjKgoXKf4D2B7CViiZjCR1ff9w FXVCGeX+31WlZUtLEQHq4HcJACHY60rXlY7DyJj2G4PoKV0dWR0nfvgsXnq/00jk Rpo4lF0EOOMUfvaDhzKwwYsY7EF2iO0BwFFHvNq8nYuQHmzWszrJB6yaN8AlTnyQ Lsshz7rKDhH/9vxVYUHS9zwFroPzncFqNq1LsrMjDEqExlJEU8hJSMjHc9ryBpPs iYJdIJ8Nbc+rEIjqiTuuQIZMtHi7gzmsAgZYZL0gLtUAGGnDKOxJUYJ7jw8Ee+6D tIDaTZtgTWaJAG8MAUXVOnMwpxN6P9g2AytyBCF7x8D/n+U9QLEHJFjqosddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUli150Sp9aA5McfJjU+m10qZ7jDcwHwYDVR0j BBgwFoAUo0Ecd7XlTyOTetCQgy7+xL/QL00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRjNmY3NzAtNjg2YS00NWVmLThkZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdC NUU1NEYyMzkzN0FEMDkwODMyRUZFQzRCRkQwMkY0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzQxMUM3N0I1RTU0RjIzOTM3QUQwOTA4MzJFRkVDNEJGRDAy RjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZF QzRCRkQwMkY0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0NGP/EWlVv8FypUBWLK50pNSv66v8ctvfz JYTmPj60tsgGG1XZWxD1c7E905HXN9XcmC89upY8rgErLeAT6aCYcI/fPRGDZ3Ud YBy6TaFOOAB0UEOn7H+K+mDICsaXbSGgCOjJWdfMuEUif5baVe6JUn/ylxvqzLss sqm31LV/9U1BzzjM0dgIPH1TUBfbMXg7DvGKwDaXMV9usHLsABy9tG+G2hN12J5C docKIuwYw54LLzoTJ/N+Q4UKIkZpGm8iC79RW0Vtgp8Kv9AwHtEO61QLBsSU6SE5 DGVQFDw8/Q/21wkrgO95nIZbjZK0SdPQ7f04VM7HmX1LUVryU+U= -----END CERTIFICATE-----Generated at Tue Sep 22 01:17:45 2026 by rpki-client