$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft File: A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft (raw, json) Hash identifier: 9O1b+dPV/foxit6E4RQF8xRnboc0jRq+euZ3q5ij0Nk= Subject key identifier: 81:60:8F:A8:08:0F:47:A9:C4:13:D4:B9:F9:17:63:F9:7D:02:D5:E2 Authority key identifier: A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 Certificate issuer: /CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Certificate serial: 67A5DE9F4C4313D4D051AD04B4CB9557871869FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 08:31:09 +0000 Manifest this update: Thu 24 Sep 2026 08:26:09 +0000 Manifest next update: Fri 25 Sep 2026 10:51:09 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: rrzxlF06KjaeWOab2SfdeYXEnvubBNLCq3WZSBYMU7k=) 2: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: 9QZ4zyqSjuEvfgjJyJcGuDYRra6HiDhsRoStARqfwRU=) 3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: t5qlWMCg2l2O2xAA9OrAnjww8OOdg9aeZk/sDXkOKPY=) 4: A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl (hash: 7FDcqk7qNT+5fJSQoXgsRsRIz+b5NmFrkGvJc9Dg+Bc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a5:de:9f:4c:43:13:d4:d0:51:ad:04:b4:cb:95:57:87:18:69:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Validity Not Before: Sep 24 08:26:09 2026 GMT Not After : Sep 25 10:51:09 2026 GMT Subject: CN=81608FA8080F47A9C413D4B9F91763F97D02D5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:af:64:3c:f6:b2:8a:02:c9:e9:30:37:28: 22:4e:bc:ff:58:e3:41:a0:83:05:43:38:01:c8:f4: 50:2b:43:32:29:0f:de:f1:fd:b1:86:2b:37:c6:fc: 73:cb:bb:86:a0:09:38:1d:40:5f:63:0b:8a:18:14: 73:ca:7c:4e:e1:cf:31:68:38:20:09:26:e7:30:31: 01:d1:25:09:72:77:31:a7:ef:1c:e3:6f:7c:6c:5b: f0:1d:41:b0:53:33:39:7f:16:45:53:41:d0:d9:ca: 1f:35:55:b9:a7:7d:93:3b:42:e7:c2:0d:1a:5a:e7: 32:28:96:63:3f:60:e2:53:0d:e9:38:d2:7a:39:e8: f1:3f:2a:73:05:b7:d1:4d:d9:db:40:7c:f3:1b:e0: 84:8f:85:5e:1f:57:48:58:6b:cf:5d:93:11:b2:25: 1b:f3:61:df:58:ba:57:c9:dd:b3:1f:fa:5f:e5:e3: 18:a5:da:5b:57:5c:f7:71:64:b3:b8:44:a0:fc:8b: 90:31:78:02:90:b5:46:af:8c:40:72:24:6e:a9:68: a1:81:f0:6d:d7:8e:20:ee:8a:2a:13:32:0d:ad:95: bc:f7:65:41:d7:a3:2d:7e:e2:ee:f8:d9:c8:a1:62: 0d:75:3f:90:19:31:a7:50:4d:b6:ae:ad:97:28:d1: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:60:8F:A8:08:0F:47:A9:C4:13:D4:B9:F9:17:63:F9:7D:02:D5:E2 X509v3 Authority Key Identifier: keyid:A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:41:0a:16:f3:59:9e:a0:22:37:3e:b1:9f:51:82:55:16:4c: 92:fc:a5:05:4e:e6:17:3c:6d:75:50:32:ec:39:5a:74:57:05: 10:09:a9:e7:9e:a2:4a:3f:50:43:4c:c0:b2:68:99:f5:20:6d: 78:dc:ef:7c:39:db:9c:c0:84:49:a6:85:15:93:90:72:16:ce: be:34:a4:7f:5f:22:ec:73:e2:52:c2:6a:f1:a7:e1:39:7b:f0: 87:6b:bc:a6:eb:1a:e2:f2:52:f4:80:0c:fc:ee:3a:6d:5f:99: c6:07:ee:55:55:c3:fa:95:67:25:68:d4:15:7f:77:b2:1d:19: 4a:55:65:a1:71:1e:20:2f:b1:98:da:bc:1f:7c:9a:50:58:4c: c2:8e:f0:22:28:f1:87:cf:cb:88:0c:cd:d3:55:1a:00:45:00: 9c:9a:57:25:52:11:27:b7:04:0c:37:14:0f:a9:ce:97:8e:f4: 02:8f:8c:f5:f6:bc:42:f1:19:48:e9:c4:4c:b5:77:1a:3d:39: a8:c5:36:f1:7a:c2:94:58:df:11:5b:72:92:9a:1b:39:6f:9f: 51:f0:e1:3e:2e:3b:a6:6e:a7:ea:9c:16:79:90:22:a8:6b:bc: cc:73:26:6e:a4:55:a5:4b:b3:e7:84:2e:e1:e2:7e:82:f1:7d: 7f:c7:d3:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6Xen0xDE9TQUa0EtMuVV4cYaf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUx NDUxMTMzNTAeFw0yNjA5MjQwODI2MDlaFw0yNjA5MjUxMDUxMDlaMDMxMTAvBgNV BAMTKDgxNjA4RkE4MDgwRjQ3QTlDNDEzRDRCOUY5MTc2M0Y5N0QwMkQ1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP869kPPayigLJ6TA3KCJOvP9Y 40GggwVDOAHI9FArQzIpD97x/bGGKzfG/HPLu4agCTgdQF9jC4oYFHPKfE7hzzFo OCAJJucwMQHRJQlydzGn7xzjb3xsW/AdQbBTMzl/FkVTQdDZyh81VbmnfZM7QufC DRpa5zIolmM/YOJTDek40no56PE/KnMFt9FN2dtAfPMb4ISPhV4fV0hYa89dkxGy JRvzYd9YulfJ3bMf+l/l4xil2ltXXPdxZLO4RKD8i5AxeAKQtUavjEByJG6paKGB 8G3XjiDuiioTMg2tlbz3ZUHXoy1+4u742cihYg11P5AZMadQTbaurZco0WKFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgWCPqAgPR6nEE9S5+Rdj+X0C1eIwHwYDVR0j BBgwFoAUo+z5Fpis0lxO+1bDm3f49RRREzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU4ZDU4YTgtZTE5Ny00MTc5LWI3M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5 OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUxNDUxMTMzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BM0VDRjkxNjk4QUNEMjVDNEVGQjU2QzM5Qjc3RjhGNTE0NTEx MzM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4 RjUxNDUxMTMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdBChbzWZ6gIjc+sZ9RglUWTJL8pQVO5hc8 bXVQMuw5WnRXBRAJqeeeoko/UENMwLJomfUgbXjc73w525zAhEmmhRWTkHIWzr40 pH9fIuxz4lLCavGn4Tl78IdrvKbrGuLyUvSADPzuOm1fmcYH7lVVw/qVZyVo1BV/ d7IdGUpVZaFxHiAvsZjavB98mlBYTMKO8CIo8YfPy4gMzdNVGgBFAJyaVyVSESe3 BAw3FA+pzpeO9AKPjPX2vELxGUjpxEy1dxo9OajFNvF6wpRY3xFbcpKaGzlvn1Hw 4T4uO6Zup+qcFnmQIqhrvMxzJm6kVaVLs+eELuHifoLxfX/H00c= -----END CERTIFICATE-----Generated at Thu Sep 24 12:56:37 2026 by rpki-client