$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft File: A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft (raw, json) Hash identifier: lyl7XyElBbH1FEiffJWRA1ELCUUsVZ9dsvbnMTNNLgM= Subject key identifier: A2:A3:36:27:2D:42:4E:89:CE:59:6E:6D:A0:8D:1F:8D:52:1E:B7:AB Authority key identifier: A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 Certificate issuer: /CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Certificate serial: 485E5C6C35C25E8864DAD4F48721E488CE004243 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:26:25 +0000 Manifest this update: Thu 23 Jul 2026 13:21:25 +0000 Manifest next update: Fri 24 Jul 2026 14:32:25 +0000 Files and hashes: 1: A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl (hash: 3yYcPwpPHCwVoI4HZZuHjVt/HE7wp/MUJni5RukK3NI=) 2: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: 9QZ4zyqSjuEvfgjJyJcGuDYRra6HiDhsRoStARqfwRU=) 3: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: rrzxlF06KjaeWOab2SfdeYXEnvubBNLCq3WZSBYMU7k=) 4: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: t5qlWMCg2l2O2xAA9OrAnjww8OOdg9aeZk/sDXkOKPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5e:5c:6c:35:c2:5e:88:64:da:d4:f4:87:21:e4:88:ce:00:42:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Validity Not Before: Jul 23 13:21:25 2026 GMT Not After : Jul 24 14:32:25 2026 GMT Subject: CN=A2A336272D424E89CE596E6DA08D1F8D521EB7AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a2:f2:ed:11:23:33:18:57:d4:0d:f9:5d:cf: ca:e0:67:d4:63:bf:76:ef:20:ac:1f:ad:ea:24:9e: d0:1a:e8:08:ad:a8:f5:d2:cf:a3:34:91:78:8a:2a: 3d:d1:f7:f2:ed:b5:25:22:43:8d:e3:e8:a7:94:6b: 06:dd:40:45:a3:1c:bd:c7:41:9b:15:87:8d:54:21: ae:d6:4c:18:60:e1:e5:33:7a:1e:f1:c5:eb:dd:e5: 72:7d:7e:64:ae:51:6d:27:4c:09:d1:79:64:11:3c: ac:25:ce:b8:6f:9e:4b:70:7e:36:ca:b5:f9:15:ff: 69:84:7a:4b:a3:80:43:ea:91:9f:15:6e:1f:96:85: cf:75:4a:92:46:87:5b:0f:42:f1:b1:ba:7e:92:00: 8e:71:41:48:24:31:3e:20:52:7a:88:b7:cf:23:50: 52:e5:22:52:e0:3e:54:9b:60:b9:9a:ec:13:15:12: c6:4b:5f:0e:96:62:2e:e2:42:80:05:f5:17:f5:f2: 2c:13:32:64:e3:00:16:82:41:7d:75:2b:c3:c4:ec: 2f:0e:e5:af:df:a8:16:ba:9d:bc:5c:e1:a5:82:6f: 56:9d:9a:9e:75:12:ec:34:8a:b5:27:06:a1:f0:28: 6c:61:83:d2:a1:01:e7:35:60:0f:de:2b:c4:c5:69: fb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A3:36:27:2D:42:4E:89:CE:59:6E:6D:A0:8D:1F:8D:52:1E:B7:AB X509v3 Authority Key Identifier: keyid:A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c4:fc:fe:00:f0:46:69:ce:dd:75:43:fa:eb:97:0c:36:ac: 6f:28:df:ac:95:47:3d:53:c2:18:91:41:dd:1a:ad:2f:1d:cf: ae:12:60:c9:5f:5f:f4:8c:2a:52:f9:af:43:94:e6:65:5a:64: ae:57:b0:db:3c:6a:67:71:81:c9:e9:7d:56:73:bb:e8:3e:8a: f3:6f:86:99:eb:86:f5:4d:4c:6c:5a:51:73:5c:52:25:ed:fd: 52:61:e6:62:17:db:db:f1:5a:8a:77:99:e5:2f:63:d3:87:27: 45:80:2e:da:a8:b3:50:e7:31:59:6e:90:32:c5:42:dc:f6:57: b6:06:00:33:d7:b9:6a:2c:bc:60:1a:25:a3:22:81:73:16:58: 4f:32:7f:88:1c:d6:3a:a0:73:7b:72:ba:a9:0b:bf:01:09:c4: 02:a8:2b:a6:81:d5:cf:02:35:a5:f0:d1:03:0e:7e:46:91:64: 0a:08:e4:73:14:dc:4d:13:aa:a3:f6:50:31:7b:a1:59:3c:9a: 96:57:91:1f:3a:cb:18:6c:82:65:d1:bd:65:cc:25:6f:ff:aa: 20:4f:ec:bf:cd:74:aa:65:01:9d:8b:18:8a:a1:5f:44:5f:e7: 0e:12:bd:17:d7:2b:6d:9b:0b:d3:8c:c2:42:ca:44:82:5e:c6: a9:12:8b:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSF5cbDXCXohk2tT0hyHkiM4AQkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUx NDUxMTMzNTAeFw0yNjA3MjMxMzIxMjVaFw0yNjA3MjQxNDMyMjVaMDMxMTAvBgNV BAMTKEEyQTMzNjI3MkQ0MjRFODlDRTU5NkU2REEwOEQxRjhENTIxRUI3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJovLtESMzGFfUDfldz8rgZ9Rj v3bvIKwfreokntAa6AitqPXSz6M0kXiKKj3R9/LttSUiQ43j6KeUawbdQEWjHL3H QZsVh41UIa7WTBhg4eUzeh7xxevd5XJ9fmSuUW0nTAnReWQRPKwlzrhvnktwfjbK tfkV/2mEekujgEPqkZ8Vbh+Whc91SpJGh1sPQvGxun6SAI5xQUgkMT4gUnqIt88j UFLlIlLgPlSbYLma7BMVEsZLXw6WYi7iQoAF9Rf18iwTMmTjABaCQX11K8PE7C8O 5a/fqBa6nbxc4aWCb1admp51Euw0irUnBqHwKGxhg9KhAec1YA/eK8TFafsxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoqM2Jy1CTonOWW5toI0fjVIet6swHwYDVR0j BBgwFoAUo+z5Fpis0lxO+1bDm3f49RRREzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU4ZDU4YTgtZTE5Ny00MTc5LWI3M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5 OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUxNDUxMTMzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BM0VDRjkxNjk4QUNEMjVDNEVGQjU2QzM5Qjc3RjhGNTE0NTEx MzM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4 RjUxNDUxMTMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjE/P4A8EZpzt11Q/rrlww2rG8o36yVRz1T whiRQd0arS8dz64SYMlfX/SMKlL5r0OU5mVaZK5XsNs8amdxgcnpfVZzu+g+ivNv hpnrhvVNTGxaUXNcUiXt/VJh5mIX29vxWop3meUvY9OHJ0WALtqos1DnMVlukDLF Qtz2V7YGADPXuWosvGAaJaMigXMWWE8yf4gc1jqgc3tyuqkLvwEJxAKoK6aB1c8C NaXw0QMOfkaRZAoI5HMU3E0TqqP2UDF7oVk8mpZXkR86yxhsgmXRvWXMJW//qiBP 7L/NdKplAZ2LGIqhX0Rf5w4SvRfXK22bC9OMwkLKRIJexqkSi9A= -----END CERTIFICATE-----Generated at Fri Jul 24 03:44:11 2026 by rpki-client