$ rpki-client -vvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft File: A3FC798CD711AE0868F235A3EA767FB9B4129434.mft (raw, json) Hash identifier: vG5sXQtXVsNBcz3NJTeaiD9jMQ2qFDqEo4Fr+/SKDSQ= Subject key identifier: 03:7F:8E:3F:A9:99:1B:31:63:CE:D8:36:E6:7F:E5:62:5E:F6:F0:E2 Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 Certificate issuer: /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Certificate serial: 49A4DA427518430A94CDAB2F76E9D35945737E4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:26:24 +0000 Manifest this update: Thu 23 Jul 2026 17:21:24 +0000 Manifest next update: Fri 24 Jul 2026 19:57:24 +0000 Files and hashes: 1: A3FC798CD711AE0868F235A3EA767FB9B4129434.crl (hash: 05lPjcRN6Oh8f6nlDQPfA8SSVeNMmB2uBrwMduGZ47M=) 2: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: 6TaFuBiM6linhPB1ZFPQ8ukQQbZ31lu3G23g8rzDbhE=) 3: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (hash: PDocKRP/axnGK/2hTz0jcOJCSSzSK6wE612ykd5rfc4=) 4: 3130332e3137362e34342e302f32342d3234203d3e20313437313238.roa (hash: FHfHZKhnV6nBPDhXGsYl2nhVRShI8kqNDLyrWzHCF1g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a4:da:42:75:18:43:0a:94:cd:ab:2f:76:e9:d3:59:45:73:7e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Validity Not Before: Jul 23 17:21:24 2026 GMT Not After : Jul 24 19:57:24 2026 GMT Subject: CN=037F8E3FA9991B3163CED836E67FE5625EF6F0E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b1:d2:b9:38:7b:8e:bc:00:17:c0:34:65:29: d3:e3:a1:86:54:06:c8:6e:a7:c4:ca:df:e6:7c:25: c4:0b:60:ce:eb:40:1a:68:04:76:6d:11:55:4f:6b: 6e:8a:a9:e8:2b:0f:3d:40:f2:5d:e0:a4:e4:e1:53: 41:ca:1f:bf:ee:50:a6:4b:33:5e:dd:ec:c3:24:5a: 6a:3f:cb:d7:f2:91:63:04:c7:04:83:77:a5:cb:90: 10:e8:26:11:d9:34:61:01:40:1b:2d:2c:d6:15:9f: a6:5c:ae:cc:90:ab:c5:61:e2:be:39:1a:26:74:34: eb:a9:cf:d2:11:85:fc:a4:ab:c9:59:c9:0b:0e:17: 80:b4:14:59:89:fb:c7:9b:b1:81:cb:de:31:a0:1c: 7b:21:c5:c3:f3:70:df:f7:e8:03:4c:5c:88:a7:f3: e9:a0:23:ef:20:ee:ff:78:20:f2:99:a5:58:61:e3: d6:43:68:e1:6b:f0:bb:48:61:88:02:21:e1:ef:a3: 5c:93:5a:0e:e5:97:39:9b:47:ec:11:9a:c4:d5:d0: c8:f3:18:0d:f5:31:a7:00:4f:b8:71:2c:8a:63:dd: ac:45:de:4d:d9:68:73:a5:6c:6e:b8:44:79:b8:1f: 48:f9:af:c3:80:c4:43:72:90:7e:f0:01:59:ae:bb: 9a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7F:8E:3F:A9:99:1B:31:63:CE:D8:36:E6:7F:E5:62:5E:F6:F0:E2 X509v3 Authority Key Identifier: keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f4:85:66:60:8d:16:cb:f9:cd:a8:87:1b:35:90:aa:53:33: 79:b5:8d:01:4a:83:a5:17:ce:d6:35:24:75:21:47:5b:3b:70: 3a:48:0f:8e:5c:ae:1d:bc:d7:97:6f:85:72:f2:59:43:ab:38: dd:be:18:4c:fe:c1:46:ec:57:67:b9:bd:9d:29:74:c8:75:4c: 87:1b:9b:46:84:94:71:49:3d:16:4a:db:18:04:43:82:9e:90: 65:a8:8f:39:b1:ca:10:5d:8c:5b:72:1a:09:8e:d2:54:eb:5f: 9f:e8:b6:5f:36:6f:33:77:be:5a:14:d8:3f:8f:c8:07:f6:5a: f4:99:26:52:f2:ee:b0:97:a1:92:43:7e:a0:02:e0:02:71:13: 5d:e6:e7:fc:de:90:c5:9f:89:41:9f:b4:2b:13:2e:86:1f:61: 75:92:02:46:08:73:cf:69:75:95:fa:a7:5e:ac:40:1d:07:38: f1:84:48:74:7f:e3:8b:60:5f:0e:0d:83:e8:29:61:2c:c1:ab: d5:ec:25:8e:6c:59:4e:ad:f0:3d:9c:35:a4:43:0a:eb:2e:9e: 21:b1:9f:d1:a2:1f:56:c8:c7:fe:bb:3e:82:6a:b3:45:76:69: 94:cc:6e:d7:5e:a2:0c:2d:55:9f:f3:21:7a:57:92:ab:93:1d: ff:df:be:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSaTaQnUYQwqUzasvdunTWUVzfkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdGQjlC NDEyOTQzNDAeFw0yNjA3MjMxNzIxMjRaFw0yNjA3MjQxOTU3MjRaMDMxMTAvBgNV BAMTKDAzN0Y4RTNGQTk5OTFCMzE2M0NFRDgzNkU2N0ZFNTYyNUVGNkYwRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCssdK5OHuOvAAXwDRlKdPjoYZU Bshup8TK3+Z8JcQLYM7rQBpoBHZtEVVPa26KqegrDz1A8l3gpOThU0HKH7/uUKZL M17d7MMkWmo/y9fykWMExwSDd6XLkBDoJhHZNGEBQBstLNYVn6ZcrsyQq8Vh4r45 GiZ0NOupz9IRhfykq8lZyQsOF4C0FFmJ+8ebsYHL3jGgHHshxcPzcN/36ANMXIin 8+mgI+8g7v94IPKZpVhh49ZDaOFr8LtIYYgCIeHvo1yTWg7llzmbR+wRmsTV0Mjz GA31MacAT7hxLIpj3axF3k3ZaHOlbG64RHm4H0j5r8OAxENykH7wAVmuu5pFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA3+OP6mZGzFjztg25n/lYl728OIwHwYDVR0j BBgwFoAUo/x5jNcRrgho8jWj6nZ/ubQSlDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDMxYTk0MjYtM2MzNS00NzBlLWJmMzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENE NzExQUUwODY4RjIzNUEzRUE3NjdGQjlCNDEyOTQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0ZDNzk4Q0Q3MTFBRTA4NjhGMjM1QTNFQTc2N0ZCOUI0MTI5 NDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdG QjlCNDEyOTQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/0hWZgjRbL+c2ohxs1kKpTM3m1jQFKg6UX ztY1JHUhR1s7cDpID45crh2815dvhXLyWUOrON2+GEz+wUbsV2e5vZ0pdMh1TIcb m0aElHFJPRZK2xgEQ4KekGWojzmxyhBdjFtyGgmO0lTrX5/otl82bzN3vloU2D+P yAf2WvSZJlLy7rCXoZJDfqAC4AJxE13m5/zekMWfiUGftCsTLoYfYXWSAkYIc89p dZX6p16sQB0HOPGESHR/44tgXw4Ng+gpYSzBq9XsJY5sWU6t8D2cNaRDCusuniGx n9GiH1bIx/67PoJqs0V2aZTMbtdeogwtVZ/zIXpXkquTHf/fvnU= -----END CERTIFICATE-----Generated at Fri Jul 24 07:08:23 2026 by rpki-client