$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft File: A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft (raw, json) Hash identifier: q/eDts1F+EfvJCvMX1tbq5Je3zo+kevC9toXKAcylIc= Subject key identifier: 75:0B:77:AE:41:59:47:6E:E0:43:F8:38:1A:CF:9A:36:59:F4:93:83 Authority key identifier: A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 Certificate issuer: /CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Certificate serial: 4677F8E94041987F0198E8C5115FE49BEAF1DF5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 14:34:04 +0000 Manifest this update: Wed 23 Sep 2026 14:29:04 +0000 Manifest next update: Thu 24 Sep 2026 16:28:04 +0000 Files and hashes: 1: A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl (hash: KCayBvVqJ0ochWnI+I4LKpDfByrE5IxcOy1YRC3UvZE=) 2: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: rrzxlF06KjaeWOab2SfdeYXEnvubBNLCq3WZSBYMU7k=) 3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: t5qlWMCg2l2O2xAA9OrAnjww8OOdg9aeZk/sDXkOKPY=) 4: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: 9QZ4zyqSjuEvfgjJyJcGuDYRra6HiDhsRoStARqfwRU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:77:f8:e9:40:41:98:7f:01:98:e8:c5:11:5f:e4:9b:ea:f1:df:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Validity Not Before: Sep 23 14:29:04 2026 GMT Not After : Sep 24 16:28:04 2026 GMT Subject: CN=750B77AE4159476EE043F8381ACF9A3659F49383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:ef:3c:51:fd:fe:99:60:f6:0c:f4:42:49: ad:e2:d1:97:f9:5f:51:d3:c1:74:dd:2b:6f:80:6a: 97:bf:7b:5b:e2:e9:56:8c:56:6c:ec:62:49:27:57: d9:1e:05:f9:5b:d8:6d:36:09:d0:c6:2a:09:71:63: 67:30:5b:e1:21:74:77:4f:e4:96:3e:53:d6:45:02: e3:b9:36:41:13:0e:7f:cb:13:87:74:bb:db:4f:ca: 39:0f:98:85:03:e0:2a:ac:3f:bc:42:7d:ae:17:b8: 69:f6:c0:67:3d:73:2b:ec:ad:33:39:03:52:dc:99: a1:a0:e1:2b:95:58:64:3c:e6:9e:06:6a:9d:73:41: 32:bb:38:36:5c:ea:40:e8:89:3b:a4:4e:4f:2e:f2: 08:0a:14:ff:89:48:c8:88:ec:84:5a:d0:1f:c3:c8: 26:e8:17:24:fa:43:20:28:73:2e:14:77:e1:ff:35: 94:09:8a:a4:f3:94:ec:a0:2c:ac:e1:9b:52:98:3e: 0f:20:99:21:cb:0c:72:14:9f:62:ed:4d:98:93:ca: 70:84:33:ee:1b:80:c4:16:9b:a1:52:8f:e0:40:71: bd:2a:75:ce:83:d8:6f:2b:48:85:43:8e:90:b8:49: 05:30:fe:96:4f:c9:a0:5e:49:4f:61:57:ee:a6:80: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0B:77:AE:41:59:47:6E:E0:43:F8:38:1A:CF:9A:36:59:F4:93:83 X509v3 Authority Key Identifier: keyid:A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ac:4b:46:0d:e6:cb:3f:16:4c:d4:db:f0:1a:85:1e:e3:f3: e3:5f:e4:e9:e4:2c:c4:9a:1c:58:0b:09:d0:97:43:74:98:19: 2e:e3:fb:f9:f0:62:4c:2f:d0:1e:67:7a:8a:c1:b6:43:85:cd: 0a:c2:e4:4d:37:1e:03:1b:20:d3:69:c7:bc:4d:f9:6d:b2:de: de:aa:1e:e1:fa:57:c6:09:37:f2:bb:13:17:11:fa:19:06:21: 58:45:a5:49:2b:33:d8:a6:07:3f:fd:34:32:ee:1e:77:21:b7: 2d:f7:c6:dc:0c:41:9d:26:e3:4c:d8:dc:b0:99:00:a2:b3:89: b6:de:78:b1:71:31:fb:c2:24:b8:2b:76:73:31:5e:59:f4:98: 64:15:dc:3b:55:c9:20:bb:9b:99:bb:c8:fa:d8:d6:76:84:e0: e8:86:dc:39:ed:ae:5c:05:74:9c:8c:30:cf:77:99:82:e9:a4: 18:d4:76:9b:af:7c:66:7e:02:75:83:8e:3b:62:4d:91:2b:21: b0:39:8d:cb:d2:c4:d7:7b:76:ec:32:71:83:ae:47:6a:52:58: 70:84:8b:6e:d6:c8:f4:40:68:34:40:4b:b2:38:c4:bf:1a:46: 87:13:0c:c9:50:d6:c5:25:a1:40:0a:50:c2:dd:d1:41:2c:80: 62:da:6d:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnf46UBBmH8BmOjFEV/km+rx31swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUx NDUxMTMzNTAeFw0yNjA5MjMxNDI5MDRaFw0yNjA5MjQxNjI4MDRaMDMxMTAvBgNV BAMTKDc1MEI3N0FFNDE1OTQ3NkVFMDQzRjgzODFBQ0Y5QTM2NTlGNDkzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3x+88Uf3+mWD2DPRCSa3i0Zf5 X1HTwXTdK2+Aape/e1vi6VaMVmzsYkknV9keBflb2G02CdDGKglxY2cwW+EhdHdP 5JY+U9ZFAuO5NkETDn/LE4d0u9tPyjkPmIUD4CqsP7xCfa4XuGn2wGc9cyvsrTM5 A1LcmaGg4SuVWGQ85p4Gap1zQTK7ODZc6kDoiTukTk8u8ggKFP+JSMiI7IRa0B/D yCboFyT6QyAocy4Ud+H/NZQJiqTzlOygLKzhm1KYPg8gmSHLDHIUn2LtTZiTynCE M+4bgMQWm6FSj+BAcb0qdc6D2G8rSIVDjpC4SQUw/pZPyaBeSU9hV+6mgEk/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdQt3rkFZR27gQ/g4Gs+aNln0k4MwHwYDVR0j BBgwFoAUo+z5Fpis0lxO+1bDm3f49RRREzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU4ZDU4YTgtZTE5Ny00MTc5LWI3M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5 OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUxNDUxMTMzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BM0VDRjkxNjk4QUNEMjVDNEVGQjU2QzM5Qjc3RjhGNTE0NTEx MzM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4 RjUxNDUxMTMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+sS0YN5ss/FkzU2/AahR7j8+Nf5OnkLMSa HFgLCdCXQ3SYGS7j+/nwYkwv0B5neorBtkOFzQrC5E03HgMbINNpx7xN+W2y3t6q HuH6V8YJN/K7ExcR+hkGIVhFpUkrM9imBz/9NDLuHnchty33xtwMQZ0m40zY3LCZ AKKzibbeeLFxMfvCJLgrdnMxXln0mGQV3DtVySC7m5m7yPrY1naE4OiG3DntrlwF dJyMMM93mYLppBjUdpuvfGZ+AnWDjjtiTZErIbA5jcvSxNd7duwycYOuR2pSWHCE i27WyPRAaDRAS7I4xL8aRocTDMlQ1sUloUAKUMLd0UEsgGLabf4= -----END CERTIFICATE-----Generated at Wed Sep 23 22:32:54 2026 by rpki-client