$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft File: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft (raw, json) Hash identifier: TiUJl7QjvtdnVr6SVz6iCBQRO60Fgqy7etQwenLVP5Y= Subject key identifier: 6A:E1:78:3C:36:05:F6:26:5B:B9:DD:2E:9B:FA:9D:C3:98:44:4B:E0 Authority key identifier: A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E Certificate issuer: /CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Certificate serial: 28700A46DC96A0D18656B51F948536F6C47C2759 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 03:45:17 +0000 Manifest this update: Thu 24 Sep 2026 03:40:17 +0000 Manifest next update: Fri 25 Sep 2026 05:07:17 +0000 Files and hashes: 1: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl (hash: mGx9B+1feo6H4A5Nf0wBDjpP24m8n2TouxxtnTK/XBg=) 2: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: qHvmH7kkKUgxVXxeqg/YxT0IJ6BIS+6+UvvwAM7JNvs=) 3: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: bj0wxd5ICBouELscs1c53rXVki6zrAfUoc5PnYBmxBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:70:0a:46:dc:96:a0:d1:86:56:b5:1f:94:85:36:f6:c4:7c:27:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Validity Not Before: Sep 24 03:40:17 2026 GMT Not After : Sep 25 05:07:17 2026 GMT Subject: CN=6AE1783C3605F6265BB9DD2E9BFA9DC398444BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:3c:c5:4f:6f:08:a6:d2:88:f4:b7:57:bc: f0:a6:eb:71:b1:5b:f6:1b:34:3b:5d:b4:02:2e:f9: 5b:ed:a0:52:95:26:aa:20:98:e5:11:9d:6d:ba:ae: 8b:bc:f6:e6:a3:45:2a:10:80:26:70:28:2d:a2:9d: 04:3a:32:0f:10:14:36:aa:1d:5e:15:4b:b9:07:75: 10:58:33:6f:a7:52:63:29:20:b8:ef:ac:de:3f:93: ea:dd:c1:74:a2:ad:5a:6f:f5:9e:06:f7:9e:1f:30: 79:61:00:f7:e5:b9:b9:17:3b:80:58:7b:48:0d:a6: 07:09:a0:18:8d:a0:9a:70:69:fb:b3:df:43:7b:26: 1c:b0:48:98:1f:22:72:d5:2a:f1:7c:49:26:d5:d3: fd:01:cb:a6:72:e7:ad:a2:50:f4:93:35:f6:49:9c: be:9f:68:4b:12:c3:32:8a:a3:81:df:0e:7d:9e:a6: ab:41:1e:cc:27:28:ea:a5:52:2b:4d:33:d4:8a:69: 01:4d:cf:57:68:d6:23:51:fc:9c:49:cc:53:21:8d: 93:a7:54:4e:55:f1:c9:ec:65:c8:a9:4e:80:32:92: d4:9c:b4:c2:8c:dc:4a:05:7d:f1:67:cf:4c:b8:b5: 7a:d2:90:76:de:20:0b:b2:40:69:f8:d9:6a:50:1b: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E1:78:3C:36:05:F6:26:5B:B9:DD:2E:9B:FA:9D:C3:98:44:4B:E0 X509v3 Authority Key Identifier: keyid:A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ce:e4:e1:d3:a1:fb:1f:6d:b2:20:f3:8c:ba:2a:88:06:d4: b4:f6:03:31:db:fb:27:48:8a:5d:b8:a4:2a:d8:79:b3:f2:12: a1:87:1c:11:1e:7b:e4:54:e9:f3:73:f0:ad:aa:24:ea:58:87: bc:31:eb:fe:a8:dc:82:ea:2a:05:b4:ed:57:19:28:c6:23:f8: 2c:87:ce:bb:dc:de:39:9f:de:6a:b4:8d:ea:9b:a0:c5:19:91: e5:54:6f:01:a1:59:86:e7:be:fb:c4:a7:f1:f4:3f:ab:0c:61: 37:ae:a6:82:9b:77:0e:36:94:be:ce:a7:04:77:d7:0b:ef:7a: 29:ae:2c:e0:65:87:a4:05:3a:2c:7a:1f:58:f3:ec:c0:a5:9e: 44:22:18:95:2b:d4:a2:a9:75:92:c8:8a:bb:db:ae:ba:b6:01: 31:34:5a:39:25:d6:2c:65:f5:cc:f6:e8:dc:f6:97:e7:a5:77: 77:c2:ca:c0:5a:7f:4f:ca:4c:91:a4:8e:be:35:57:4e:88:07: 8f:a4:fe:aa:2b:8a:f1:a0:f4:0a:61:58:7e:08:51:a8:55:ab: 3e:2d:b1:3f:51:b8:52:21:23:af:87:52:7f:56:2b:7d:21:45: 1b:59:f8:eb:f4:d6:aa:75:de:ba:63:b4:dc:53:2e:86:19:6c: e6:c4:35:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHAKRtyWoNGGVrUflIU29sR8J1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlC NDFCMUMwRTAeFw0yNjA5MjQwMzQwMTdaFw0yNjA5MjUwNTA3MTdaMDMxMTAvBgNV BAMTKDZBRTE3ODNDMzYwNUY2MjY1QkI5REQyRTlCRkE5REMzOTg0NDRCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmTzFT28IptKI9LdXvPCm63Gx W/YbNDtdtAIu+VvtoFKVJqogmOURnW26rou89uajRSoQgCZwKC2inQQ6Mg8QFDaq HV4VS7kHdRBYM2+nUmMpILjvrN4/k+rdwXSirVpv9Z4G954fMHlhAPflubkXO4BY e0gNpgcJoBiNoJpwafuz30N7JhywSJgfInLVKvF8SSbV0/0By6Zy562iUPSTNfZJ nL6faEsSwzKKo4HfDn2epqtBHswnKOqlUitNM9SKaQFNz1do1iNR/JxJzFMhjZOn VE5V8cnsZcipToAyktSctMKM3EoFffFnz0y4tXrSkHbeIAuyQGn42WpQG0g7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUauF4PDYF9iZbud0um/qdw5hES+AwHwYDVR0j BBgwFoAUo7pjO51ztz/qPoCsbVehqbQbHA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiNGZlOTMtNzI5Ni00OGI0LWFhMGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5 RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlCNDFCMUMwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0JBNjMzQjlENzNCNzNGRUEzRTgwQUM2RDU3QTFBOUI0MUIx QzBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiNGZlOTMtNzI5Ni00OGI0LWFh MGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0Ex QTlCNDFCMUMwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTO5OHTofsfbbIg84y6KogG1LT2AzHb+ydI il24pCrYebPyEqGHHBEee+RU6fNz8K2qJOpYh7wx6/6o3ILqKgW07VcZKMYj+CyH zrvc3jmf3mq0jeqboMUZkeVUbwGhWYbnvvvEp/H0P6sMYTeupoKbdw42lL7OpwR3 1wvveimuLOBlh6QFOix6H1jz7MClnkQiGJUr1KKpdZLIirvbrrq2ATE0Wjkl1ixl 9cz26Nz2l+eld3fCysBaf0/KTJGkjr41V06IB4+k/qorivGg9AphWH4IUahVqz4t sT9RuFIhI6+HUn9WK30hRRtZ+Ov01qp13rpjtNxTLoYZbObENTM= -----END CERTIFICATE-----Generated at Thu Sep 24 19:02:57 2026 by rpki-client