$ rpki-client -vvvf rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft File: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft (raw, json) Hash identifier: VY9oJ84xt2c3x6y73E07h3pEQWYZj8CB6j4BBs8FI6g= Subject key identifier: 18:7F:2E:45:8F:BE:01:E5:91:4D:04:D6:9B:10:DD:7D:A0:8C:14:C0 Authority key identifier: 3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B Certificate issuer: /CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Certificate serial: 23C9B7AF4DEB04954D2DFE3648502EF7EBDB8AC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 05:41:29 +0000 Manifest this update: Sun 27 Sep 2026 05:36:29 +0000 Manifest next update: Mon 28 Sep 2026 08:57:29 +0000 Files and hashes: 1: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (hash: IzKZnVRhi3vGvMtZ1nGW6jpAgrjEBqrGZ0c+G4cVeuM=) 2: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl (hash: qmdfm0uKi8yR5z9fOkYRgrY9p8m5KDz7dZtQjnICwMM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c9:b7:af:4d:eb:04:95:4d:2d:fe:36:48:50:2e:f7:eb:db:8a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Validity Not Before: Sep 27 05:36:29 2026 GMT Not After : Sep 28 08:57:29 2026 GMT Subject: CN=187F2E458FBE01E5914D04D69B10DD7DA08C14C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:52:e7:7f:10:e5:d5:53:67:e1:32:58:cc: aa:5a:bd:89:21:29:60:54:5d:52:21:d5:44:56:8a: 9e:6e:27:cb:0c:00:c3:87:86:e2:df:29:3b:61:c8: b8:93:c0:c7:5c:2b:a3:2d:8a:b6:c9:04:0d:e5:ad: 8d:82:ac:6b:74:54:e3:44:34:62:ab:e9:c1:ad:63: 66:fb:4a:ce:af:42:99:49:f8:e2:1a:53:29:ce:19: 7f:85:5c:51:f7:59:7e:c7:4b:14:31:6b:b1:95:c1: c8:82:ad:e4:06:6d:58:9a:77:e1:4e:96:11:ad:b0: ef:de:b9:fd:4f:50:13:f2:c6:54:08:47:a1:3f:e6: 48:30:dc:9a:b8:bb:71:50:9c:62:af:7d:f6:99:2b: 9d:9f:b7:bf:46:2c:e7:cc:52:9e:df:ad:22:58:ca: ce:38:5c:74:b2:dc:86:07:9b:9f:d8:89:a7:c0:92: ef:2f:80:0b:af:06:8d:7f:08:65:18:73:09:6e:7d: dc:bf:01:97:04:86:65:d6:4f:3b:e7:eb:20:ea:25: ef:1d:dc:db:48:58:e3:01:86:e3:b0:10:fb:7c:d5: 5a:03:f7:ef:aa:0d:7b:ac:d8:01:8c:ae:9f:79:97: 52:df:6b:4f:5d:69:76:d4:1d:bd:d9:24:7a:8b:55: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7F:2E:45:8F:BE:01:E5:91:4D:04:D6:9B:10:DD:7D:A0:8C:14:C0 X509v3 Authority Key Identifier: keyid:3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3a:40:7b:48:05:5d:21:8b:61:7b:13:85:3e:4f:81:25:60: 76:43:21:a0:ad:6a:c8:f2:8f:c2:e0:41:27:b7:be:cf:fa:da: 61:83:a2:f6:ec:22:b1:24:da:80:74:7b:06:2a:f9:9b:3f:85: 81:bb:37:d4:1d:13:eb:cd:83:e9:d5:70:60:85:8f:e1:4e:1d: 8c:23:eb:46:bb:ad:7f:ba:a3:59:aa:17:59:85:40:0e:33:ab: b2:51:1d:32:16:90:28:e8:3f:f6:fc:0f:04:3e:ab:5a:04:1b: b5:6f:68:94:23:f8:cc:cf:0c:98:35:45:f4:95:99:cd:b9:5c: be:59:d9:06:45:1b:eb:f1:d4:85:66:eb:ae:73:b6:62:42:0f: 0d:dd:f3:d1:7e:bb:3a:19:49:00:6d:86:4b:e8:10:99:24:fc: d7:d5:00:32:e9:3d:8f:c6:4c:68:ef:80:ed:52:6f:fb:a7:92: 38:2d:3a:dd:35:7e:54:0e:5a:38:44:3e:12:29:d6:a9:4c:b2: f2:18:ef:b9:50:79:79:50:a5:57:d8:df:69:48:57:5a:2a:8e: 52:93:c3:43:12:78:c1:c1:c5:99:94:1d:23:54:ed:47:7e:6a: 98:3e:22:9b:73:7e:1b:4e:24:e8:59:c8:31:80:44:f1:17:da: d9:e0:ee:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI8m3r03rBJVNLf42SFAu9+vbisMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMx RTc1QUUxQjAeFw0yNjA5MjcwNTM2MjlaFw0yNjA5MjgwODU3MjlaMDMxMTAvBgNV BAMTKDE4N0YyRTQ1OEZCRTAxRTU5MTREMDRENjlCMTBERDdEQTA4QzE0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkVLnfxDl1VNn4TJYzKpavYkh KWBUXVIh1URWip5uJ8sMAMOHhuLfKTthyLiTwMdcK6MtirbJBA3lrY2CrGt0VONE NGKr6cGtY2b7Ss6vQplJ+OIaUynOGX+FXFH3WX7HSxQxa7GVwciCreQGbViad+FO lhGtsO/euf1PUBPyxlQIR6E/5kgw3Jq4u3FQnGKvffaZK52ft79GLOfMUp7frSJY ys44XHSy3IYHm5/YiafAku8vgAuvBo1/CGUYcwlufdy/AZcEhmXWTzvn6yDqJe8d 3NtIWOMBhuOwEPt81VoD9++qDXus2AGMrp95l1Lfa09daXbUHb3ZJHqLVZDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGH8uRY++AeWRTQTWmxDdfaCMFMAwHwYDVR0j BBgwFoAUOoJe31GIqIi8zRnzXqg+Yx51rhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTczYjk1OWUtZmY1Mi00MDI4LWI1MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1 MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMxRTc1QUUxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTgyNUVERjUxODhBODg4QkNDRDE5RjM1RUE4M0U2MzFFNzVB RTFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTczYjk1OWUtZmY1Mi00MDI4LWI1 MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNF NjMxRTc1QUUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG86QHtIBV0hi2F7E4U+T4ElYHZDIaCtasjy j8LgQSe3vs/62mGDovbsIrEk2oB0ewYq+Zs/hYG7N9QdE+vNg+nVcGCFj+FOHYwj 60a7rX+6o1mqF1mFQA4zq7JRHTIWkCjoP/b8DwQ+q1oEG7VvaJQj+MzPDJg1RfSV mc25XL5Z2QZFG+vx1IVm665ztmJCDw3d89F+uzoZSQBthkvoEJkk/NfVADLpPY/G TGjvgO1Sb/unkjgtOt01flQOWjhEPhIp1qlMsvIY77lQeXlQpVfY32lIV1oqjlKT w0MSeMHBxZmUHSNU7Ud+apg+IptzfhtOJOhZyDGARPEX2tng7l4= -----END CERTIFICATE-----Generated at Sun Sep 27 08:48:37 2026 by rpki-client