$ rpki-client -vvf rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft File: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft (raw, json) Hash identifier: 00el31i9UZP4j5LJt6Ow4BfzxQuRLytw/WcjX0Bnp40= Subject key identifier: 58:3C:3D:E1:C3:88:EB:DD:19:EB:A8:54:7E:4A:8F:E7:14:70:66:3B Authority key identifier: A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E Certificate issuer: /CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Certificate serial: 0A46F16ADD47DC11215B058DEFEC137A78069857 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:37:31 +0000 Manifest this update: Tue 12 May 2026 17:32:31 +0000 Manifest next update: Wed 13 May 2026 19:34:31 +0000 Files and hashes: 1: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: bj0wxd5ICBouELscs1c53rXVki6zrAfUoc5PnYBmxBA=) 2: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl (hash: 9td8v3GmnBqs1uBT/zWOjcEU2+8cG7CGSGbPdukmksU=) 3: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: qHvmH7kkKUgxVXxeqg/YxT0IJ6BIS+6+UvvwAM7JNvs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:46:f1:6a:dd:47:dc:11:21:5b:05:8d:ef:ec:13:7a:78:06:98:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Validity Not Before: May 12 17:32:31 2026 GMT Not After : May 13 19:34:31 2026 GMT Subject: CN=583C3DE1C388EBDD19EBA8547E4A8FE71470663B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cb:58:f9:cf:05:5a:0e:9e:fb:f6:6c:14:31: 91:d9:aa:d8:80:7c:51:13:4e:0d:ba:c1:dc:24:5c: a7:0b:e5:b5:fc:f3:9d:d1:dd:43:f5:6e:51:86:3b: a0:9f:53:7a:59:83:23:63:ce:c4:2f:e9:f8:20:57: 1d:07:d7:4a:59:be:d4:03:cd:61:ab:95:1b:44:51: 83:d9:d4:51:50:70:4a:6f:e3:bd:e3:ec:57:0f:53: 37:28:be:27:57:93:7a:dd:af:ec:a8:de:51:84:c1: fd:ea:72:1b:a2:e8:8a:6b:69:8d:f5:5b:b8:6e:ac: e5:14:ce:0d:38:0e:5e:0c:55:ec:24:b7:02:de:0e: 9e:e4:89:fc:ce:67:1d:7c:08:c2:90:24:da:2c:dd: 6a:60:64:c3:19:71:84:6d:3e:69:95:ee:44:f1:1f: cb:44:b0:d2:28:01:7b:d9:c7:e5:b1:60:ea:33:bb: ce:8c:ba:17:68:86:9d:91:0f:1e:3c:84:72:2f:a8: 79:c3:9a:7c:cc:9b:ab:af:6d:cb:5e:83:52:16:95: c7:02:2b:2f:59:28:b5:f0:03:59:16:8e:81:d7:47: ca:f8:c5:cf:44:9e:53:cf:98:1f:d6:46:df:78:09: 2b:de:80:dc:a5:6a:84:6d:23:4c:e4:ba:4f:0e:b2: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3C:3D:E1:C3:88:EB:DD:19:EB:A8:54:7E:4A:8F:E7:14:70:66:3B X509v3 Authority Key Identifier: keyid:A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b6:87:ee:9a:88:4e:02:f5:cb:26:d7:48:64:27:81:7a:75: 5a:e3:bb:f8:d8:4e:36:0c:a0:16:67:5f:e9:ea:f1:9d:bf:ea: 81:15:5c:f0:a1:ac:e0:ff:3e:e3:bc:01:58:9f:a7:a8:84:7b: 56:57:d1:ac:81:0a:90:c7:ac:d2:6b:0d:ff:f9:0f:0f:55:9b: 7c:16:fb:75:9a:ed:a7:9c:d8:0e:50:2d:08:38:bb:49:9d:30: 22:45:59:d2:66:c2:9f:03:bc:02:ff:d7:00:54:1d:a1:60:b4: eb:46:f5:db:29:e9:d2:b3:d5:eb:e2:38:a9:87:22:a6:96:1e: 11:00:9d:d2:ac:90:86:a7:31:bb:c0:b1:77:7a:21:96:b5:a6: 9b:a7:5b:4d:40:1d:dc:c5:68:ed:f2:bf:ba:88:35:be:62:d0: 3d:b8:6c:e5:01:dd:97:32:04:fd:fb:2d:c3:ab:02:e1:62:20: 63:cb:09:0e:8b:ee:d3:45:fc:80:47:26:1f:28:bf:60:e8:74: 7e:5b:11:c8:13:92:00:31:f9:21:01:4a:fa:df:f5:02:4f:f0: 38:c8:97:dd:86:3c:9a:98:5a:b9:59:0e:b5:cd:c5:68:38:f9: ca:4b:f9:a9:cf:0f:ff:50:4b:06:09:c9:cc:c6:38:07:37:f9: 5b:99:d2:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCkbxat1H3BEhWwWN7+wTengGmFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlC NDFCMUMwRTAeFw0yNjA1MTIxNzMyMzFaFw0yNjA1MTMxOTM0MzFaMDMxMTAvBgNV BAMTKDU4M0MzREUxQzM4OEVCREQxOUVCQTg1NDdFNEE4RkU3MTQ3MDY2M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRy1j5zwVaDp779mwUMZHZqtiA fFETTg26wdwkXKcL5bX8853R3UP1blGGO6CfU3pZgyNjzsQv6fggVx0H10pZvtQD zWGrlRtEUYPZ1FFQcEpv473j7FcPUzcovidXk3rdr+yo3lGEwf3qchui6IpraY31 W7hurOUUzg04Dl4MVewktwLeDp7kifzOZx18CMKQJNos3WpgZMMZcYRtPmmV7kTx H8tEsNIoAXvZx+WxYOozu86Muhdohp2RDx48hHIvqHnDmnzMm6uvbcteg1IWlccC Ky9ZKLXwA1kWjoHXR8r4xc9EnlPPmB/WRt94CSvegNylaoRtI0zkuk8OsoPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWDw94cOI690Z66hUfkqP5xRwZjswHwYDVR0j BBgwFoAUo7pjO51ztz/qPoCsbVehqbQbHA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiNGZlOTMtNzI5Ni00OGI0LWFhMGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5 RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlCNDFCMUMwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0JBNjMzQjlENzNCNzNGRUEzRTgwQUM2RDU3QTFBOUI0MUIx QzBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiNGZlOTMtNzI5Ni00OGI0LWFh MGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0Ex QTlCNDFCMUMwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIa2h+6aiE4C9csm10hkJ4F6dVrju/jYTjYM oBZnX+nq8Z2/6oEVXPChrOD/PuO8AVifp6iEe1ZX0ayBCpDHrNJrDf/5Dw9Vm3wW +3Wa7aec2A5QLQg4u0mdMCJFWdJmwp8DvAL/1wBUHaFgtOtG9dsp6dKz1eviOKmH IqaWHhEAndKskIanMbvAsXd6IZa1ppunW01AHdzFaO3yv7qINb5i0D24bOUB3Zcy BP37LcOrAuFiIGPLCQ6L7tNF/IBHJh8ov2DodH5bEcgTkgAx+SEBSvrf9QJP8DjI l92GPJqYWrlZDrXNxWg4+cpL+anPD/9QSwYJyczGOAc3+VuZ0sY= -----END CERTIFICATE-----Generated at Tue May 12 22:13:34 2026 by rpki-client