$ rpki-client -vvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft File: A3FC798CD711AE0868F235A3EA767FB9B4129434.mft (raw, json) Hash identifier: yqX3j6EHxKyow4PIYiXER8VAAB8G+kj6VvERI7/m5fU= Subject key identifier: B6:61:2A:69:6B:5E:E1:7A:FE:E3:79:E7:AE:08:07:BD:A3:CA:9E:87 Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 Certificate issuer: /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Certificate serial: 543A0515D61CBB9DB6D4A18487D28D9061149414 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:03:26 +0000 Manifest this update: Tue 12 May 2026 23:58:26 +0000 Manifest next update: Thu 14 May 2026 02:47:26 +0000 Files and hashes: 1: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: 6TaFuBiM6linhPB1ZFPQ8ukQQbZ31lu3G23g8rzDbhE=) 2: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (hash: PDocKRP/axnGK/2hTz0jcOJCSSzSK6wE612ykd5rfc4=) 3: 3130332e3137362e34342e302f32342d3234203d3e20313437313238.roa (hash: FHfHZKhnV6nBPDhXGsYl2nhVRShI8kqNDLyrWzHCF1g=) 4: A3FC798CD711AE0868F235A3EA767FB9B4129434.crl (hash: MJej2NybXO2lfZMAdq9J9sXJpaNZCUz5+dCEFX9To3A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3a:05:15:d6:1c:bb:9d:b6:d4:a1:84:87:d2:8d:90:61:14:94:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Validity Not Before: May 12 23:58:26 2026 GMT Not After : May 14 02:47:26 2026 GMT Subject: CN=B6612A696B5EE17AFEE379E7AE0807BDA3CA9E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f8:87:c6:f7:16:d0:5b:95:c6:fb:e1:b5:63: be:57:59:d5:a6:45:bb:ec:b2:23:8b:73:c7:f2:95: 11:50:d1:ea:04:b8:8a:cd:d0:fd:41:33:52:45:07: 56:09:7e:6e:a5:e3:45:ab:a8:01:8a:0b:fe:50:f0: b9:ee:44:dc:b6:8d:f2:2e:d2:db:fa:a0:81:65:37: 9e:2d:e2:c9:e7:f2:ce:e3:70:f6:d3:4d:7c:06:54: cb:5e:76:70:d2:f3:c3:67:87:8c:6b:ff:27:5c:4e: 85:bd:89:44:cf:93:31:7f:e5:bc:b9:ea:0e:44:11: 6a:8f:96:7e:66:0d:48:65:41:c7:8c:97:0f:95:8d: 2a:66:ef:ed:3a:56:34:cc:29:52:7f:27:54:03:30: ea:d3:80:ed:ab:46:b1:97:66:22:e3:aa:43:00:33: c3:5d:af:3b:26:56:14:a7:89:4f:0b:50:22:94:a0: c0:a4:71:a6:72:af:9b:c5:3a:6e:5a:e1:05:d2:ca: 02:7c:af:bc:1d:4b:31:2e:97:1b:17:3d:b5:47:25: 85:27:83:72:e3:d1:91:9e:72:49:3b:67:a8:0f:d3: 50:d0:bc:b1:3a:13:78:88:d9:ae:f8:2e:b9:06:79: ae:0e:7b:99:da:58:be:5d:aa:44:18:f9:a4:44:a2: 5c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:61:2A:69:6B:5E:E1:7A:FE:E3:79:E7:AE:08:07:BD:A3:CA:9E:87 X509v3 Authority Key Identifier: keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:40:67:00:8d:2e:c2:1b:2f:f5:99:63:11:78:4b:01:7e:c0: a7:12:31:55:89:47:44:70:f3:51:53:e4:77:39:a6:77:35:42: 4c:04:61:54:6d:e1:c1:38:a0:a7:d4:14:df:86:ae:5a:ea:e9: 97:73:4d:5b:8e:c6:c7:36:08:d4:92:bd:d5:1f:22:5c:f0:e4: 15:0d:a0:f5:13:03:40:b8:8d:78:a8:af:bf:87:b4:4f:0a:49: ea:25:64:29:51:a7:ec:92:e8:44:db:4a:65:38:c7:7e:47:60: 61:fd:2f:46:b3:f5:0e:32:20:88:d2:43:63:9d:87:9c:4b:02: 42:b9:90:5d:c7:64:34:ae:dc:e0:65:f6:df:9b:1c:eb:5c:29: 18:4d:d4:f2:6c:0c:80:81:ca:13:19:c4:18:c8:48:45:3f:77: 39:e4:30:cc:46:d8:17:1f:1e:ba:9e:8b:cf:cd:c7:c2:91:1d: e9:49:3d:22:f6:4b:94:fc:c4:e4:de:c8:52:0b:77:56:ae:c1: 00:78:8f:34:9e:98:46:1f:26:b7:3d:df:66:e5:16:c3:6a:9b: cf:24:75:26:50:f2:76:8a:5c:fa:11:a8:58:0a:24:11:09:a8: 01:7a:1a:7e:51:28:1d:96:c9:4d:12:0f:0c:c0:36:c0:48:7c: 5c:0d:5a:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDoFFdYcu5221KGEh9KNkGEUlBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdGQjlC NDEyOTQzNDAeFw0yNjA1MTIyMzU4MjZaFw0yNjA1MTQwMjQ3MjZaMDMxMTAvBgNV BAMTKEI2NjEyQTY5NkI1RUUxN0FGRUUzNzlFN0FFMDgwN0JEQTNDQTlFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK+IfG9xbQW5XG++G1Y75XWdWm RbvssiOLc8fylRFQ0eoEuIrN0P1BM1JFB1YJfm6l40WrqAGKC/5Q8LnuRNy2jfIu 0tv6oIFlN54t4snn8s7jcPbTTXwGVMtednDS88Nnh4xr/ydcToW9iUTPkzF/5by5 6g5EEWqPln5mDUhlQceMlw+VjSpm7+06VjTMKVJ/J1QDMOrTgO2rRrGXZiLjqkMA M8NdrzsmVhSniU8LUCKUoMCkcaZyr5vFOm5a4QXSygJ8r7wdSzEulxsXPbVHJYUn g3Lj0ZGeckk7Z6gP01DQvLE6E3iI2a74LrkGea4Oe5naWL5dqkQY+aREolxxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtmEqaWte4Xr+43nnrggHvaPKnocwHwYDVR0j BBgwFoAUo/x5jNcRrgho8jWj6nZ/ubQSlDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDMxYTk0MjYtM2MzNS00NzBlLWJmMzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENE NzExQUUwODY4RjIzNUEzRUE3NjdGQjlCNDEyOTQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0ZDNzk4Q0Q3MTFBRTA4NjhGMjM1QTNFQTc2N0ZCOUI0MTI5 NDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdG QjlCNDEyOTQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1AZwCNLsIbL/WZYxF4SwF+wKcSMVWJR0Rw 81FT5Hc5pnc1QkwEYVRt4cE4oKfUFN+Grlrq6ZdzTVuOxsc2CNSSvdUfIlzw5BUN oPUTA0C4jXior7+HtE8KSeolZClRp+yS6ETbSmU4x35HYGH9L0az9Q4yIIjSQ2Od h5xLAkK5kF3HZDSu3OBl9t+bHOtcKRhN1PJsDICByhMZxBjISEU/dznkMMxG2Bcf Hrqei8/Nx8KRHelJPSL2S5T8xOTeyFILd1auwQB4jzSemEYfJrc932blFsNqm88k dSZQ8naKXPoRqFgKJBEJqAF6Gn5RKB2WyU0SDwzANsBIfFwNWj8= -----END CERTIFICATE-----Generated at Wed May 13 03:51:06 2026 by rpki-client