$ rpki-client -vvvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft File: A3FC798CD711AE0868F235A3EA767FB9B4129434.mft (raw, json) Hash identifier: yKg2qmQf6y5KFtypW4ta0ftVufI82hf5ipmjb1wdMF4= Subject key identifier: 66:66:FE:74:EA:28:01:79:E0:4C:CB:D1:A5:1C:23:9C:1F:FE:18:C2 Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 Certificate issuer: /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Certificate serial: 713415DFFF8A97BEE359615C39F6AFE36B28C4C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 01:21:46 +0000 Manifest this update: Fri 25 Sep 2026 01:16:46 +0000 Manifest next update: Sat 26 Sep 2026 02:52:46 +0000 Files and hashes: 1: 3130332e3137362e34342e302f32342d3234203d3e20313532373930.roa (hash: jXy0CdGkOe/aCpL4F3KoTBpYXV8a9YPJGcjZWIKjM3o=) 2: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: 6TaFuBiM6linhPB1ZFPQ8ukQQbZ31lu3G23g8rzDbhE=) 3: A3FC798CD711AE0868F235A3EA767FB9B4129434.crl (hash: q2v+DwbMggD6jSqnSShctY/Ntl6syaH8E1mTKKaKoqs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:34:15:df:ff:8a:97:be:e3:59:61:5c:39:f6:af:e3:6b:28:c4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Validity Not Before: Sep 25 01:16:46 2026 GMT Not After : Sep 26 02:52:46 2026 GMT Subject: CN=6666FE74EA280179E04CCBD1A51C239C1FFE18C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a9:07:af:77:7a:21:4b:ed:8a:96:97:ae:a7: 2a:9a:c7:6c:75:7a:2f:99:3f:52:94:5d:5b:38:a7: 76:fe:c0:87:bd:e1:ef:8b:31:c2:d5:f5:1c:4e:6f: 8c:1a:22:4f:b3:66:cc:dc:09:d1:2b:84:c7:70:c0: 2e:bf:48:71:fe:7b:22:bd:f3:97:bc:b5:84:79:f6: 78:28:3e:b5:b7:c9:ed:8e:8a:f7:3c:35:cb:ad:65: a5:22:4e:de:7d:51:3e:79:fe:06:16:53:68:5b:4c: b4:1f:68:45:51:19:1a:a4:f3:91:e7:8d:b3:02:38: b2:17:a9:89:46:ba:37:64:82:c1:00:31:da:66:31: 55:89:15:cb:89:6d:27:85:25:99:e4:51:ab:96:d5: ae:b1:e6:f9:83:2f:1b:0d:51:f3:10:1c:ca:07:98: 6c:87:3c:d5:c4:d2:11:12:c3:c4:eb:0c:34:5d:e7: ce:5b:34:ef:b6:c4:7b:d2:87:9c:45:50:6d:52:41: 36:ac:f3:d5:5c:cc:70:91:82:78:89:f0:aa:8a:53: ab:2e:96:dc:2b:87:ff:2f:b4:c2:d3:e4:ac:40:2e: 23:c3:fe:0f:85:16:27:36:d2:c3:1c:3b:39:2a:71: 93:8e:a2:45:c4:d1:59:25:03:c8:29:4f:5e:72:e9: ac:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:66:FE:74:EA:28:01:79:E0:4C:CB:D1:A5:1C:23:9C:1F:FE:18:C2 X509v3 Authority Key Identifier: keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c2:59:12:30:e0:48:52:af:78:3c:fd:53:52:7a:d2:88:35: 25:a1:70:e0:53:2b:fb:dd:b9:d3:7d:99:e7:11:5e:50:d7:bb: c4:97:db:1e:37:3b:f3:f8:61:ec:3c:25:8d:56:bc:04:ab:af: c9:c8:57:24:49:18:fc:3e:aa:f1:ce:74:e2:07:9b:39:41:2f: d2:30:81:8f:ef:84:bc:94:01:f5:b8:70:ca:c3:3c:ea:6f:13: 83:ea:03:f2:84:0e:c8:a9:16:41:8b:d8:a6:f1:fd:18:7a:8e: d8:fe:77:19:95:1c:61:25:df:d2:b2:c1:03:2a:00:7c:28:78: 1a:27:96:a5:7a:c6:ec:17:78:b7:71:1a:ec:1f:6e:66:67:8b: 1b:21:04:c2:41:4b:80:43:6a:76:81:1f:e1:43:25:24:d7:98: 75:76:e3:6d:6a:19:a2:dd:18:b5:b7:34:bb:36:6d:9d:55:a8: 99:4f:86:c3:ca:cb:f8:fd:a0:ea:3b:c0:4d:d5:00:18:8c:97: df:06:f9:e0:40:76:3d:83:40:15:ab:e8:63:af:4a:c9:4b:81: e7:ff:30:79:98:a0:d5:b0:b8:43:b9:58:34:75:60:e2:c7:0f: 3f:55:95:3f:7f:66:af:b6:b7:d5:6b:01:5a:2f:a6:21:20:f0: cd:aa:e2:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTQV3/+Kl77jWWFcOfav42soxMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdGQjlC NDEyOTQzNDAeFw0yNjA5MjUwMTE2NDZaFw0yNjA5MjYwMjUyNDZaMDMxMTAvBgNV BAMTKDY2NjZGRTc0RUEyODAxNzlFMDRDQ0JEMUE1MUMyMzlDMUZGRTE4QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8qQevd3ohS+2Klpeupyqax2x1 ei+ZP1KUXVs4p3b+wIe94e+LMcLV9RxOb4waIk+zZszcCdErhMdwwC6/SHH+eyK9 85e8tYR59ngoPrW3ye2Oivc8NcutZaUiTt59UT55/gYWU2hbTLQfaEVRGRqk85Hn jbMCOLIXqYlGujdkgsEAMdpmMVWJFcuJbSeFJZnkUauW1a6x5vmDLxsNUfMQHMoH mGyHPNXE0hESw8TrDDRd585bNO+2xHvSh5xFUG1SQTas89VczHCRgniJ8KqKU6su ltwrh/8vtMLT5KxALiPD/g+FFic20sMcOzkqcZOOokXE0VklA8gpT15y6aylAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZmb+dOooAXngTMvRpRwjnB/+GMIwHwYDVR0j BBgwFoAUo/x5jNcRrgho8jWj6nZ/ubQSlDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDMxYTk0MjYtM2MzNS00NzBlLWJmMzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENE NzExQUUwODY4RjIzNUEzRUE3NjdGQjlCNDEyOTQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0ZDNzk4Q0Q3MTFBRTA4NjhGMjM1QTNFQTc2N0ZCOUI0MTI5 NDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdG QjlCNDEyOTQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjCWRIw4EhSr3g8/VNSetKINSWhcOBTK/vd udN9mecRXlDXu8SX2x43O/P4Yew8JY1WvASrr8nIVyRJGPw+qvHOdOIHmzlBL9Iw gY/vhLyUAfW4cMrDPOpvE4PqA/KEDsipFkGL2Kbx/Rh6jtj+dxmVHGEl39KywQMq AHwoeBonlqV6xuwXeLdxGuwfbmZnixshBMJBS4BDanaBH+FDJSTXmHV2421qGaLd GLW3NLs2bZ1VqJlPhsPKy/j9oOo7wE3VABiMl98G+eBAdj2DQBWr6GOvSslLgef/ MHmYoNWwuEO5WDR1YOLHDz9VlT9/Zq+2t9VrAVovpiEg8M2q4uM= -----END CERTIFICATE-----Generated at Fri Sep 25 15:52:50 2026 by rpki-client