$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft File: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft (raw, json) Hash identifier: Qlh0ooAkOrx4/h8qiuSh3/Hd//5iuv7vQp/g5Onmn9g= Subject key identifier: BE:02:5E:2F:8F:34:B2:DD:A5:FB:5F:79:EA:12:E4:02:1F:43:C0:08 Authority key identifier: 3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 Certificate issuer: /CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Certificate serial: 6618D3B5EEC9A18D98C9B48999DFA9BB8C821FE8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 14:38:58 +0000 Manifest this update: Thu 24 Sep 2026 14:33:58 +0000 Manifest next update: Fri 25 Sep 2026 15:07:58 +0000 Files and hashes: 1: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl (hash: je2efrVLNEoAJg4Ji2ZK4qVM4xve86zdyKIv8xmFkec=) 2: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: /q+Q9j+twzjQ1vHcdhCkFEn4oIZ2D60UwxtbsrzeVbI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:18:d3:b5:ee:c9:a1:8d:98:c9:b4:89:99:df:a9:bb:8c:82:1f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Validity Not Before: Sep 24 14:33:58 2026 GMT Not After : Sep 25 15:07:58 2026 GMT Subject: CN=BE025E2F8F34B2DDA5FB5F79EA12E4021F43C008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:32:99:f2:8d:ec:f1:bb:a5:5a:39:e4:aa: 3b:7a:3a:b0:c2:95:bb:eb:c8:4f:60:94:bf:27:cb: eb:56:42:23:68:71:16:9f:e3:1f:78:3b:91:0d:91: 01:07:89:88:8a:95:0a:fe:f5:07:a5:dd:eb:8f:b4: 2f:50:d1:2e:cc:b9:b4:13:f7:6c:8b:55:fa:bb:fe: ee:fe:a6:91:15:68:23:2f:e9:2c:3c:ef:55:da:0b: da:df:8a:ee:5b:c6:11:90:b3:1b:02:c3:4f:c0:9b: 6a:45:1e:59:5f:4c:d1:71:81:af:0e:5f:a8:fb:1e: 2d:c3:98:14:39:da:00:78:23:b3:01:b9:2c:97:ed: 41:4a:06:0c:dd:70:e1:ac:f8:dd:b7:bb:6c:df:64: 07:08:7f:78:85:6f:e8:df:69:e6:98:0d:b7:9e:4b: 62:4b:02:65:ca:ba:59:72:fe:fd:77:67:65:bb:6c: e4:be:f2:3a:20:20:6c:06:5b:ba:93:fe:8c:09:4b: e3:0f:f3:b9:1b:07:5a:4a:57:23:dd:80:55:09:32: df:13:d0:51:c5:7b:4f:53:9a:07:d6:2a:df:03:9e: 4c:e4:c6:b0:5e:ac:93:f5:87:c5:e1:d9:7a:31:98: 0d:90:25:93:a2:7a:4f:08:93:75:eb:cc:e6:1d:86: 92:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:02:5E:2F:8F:34:B2:DD:A5:FB:5F:79:EA:12:E4:02:1F:43:C0:08 X509v3 Authority Key Identifier: keyid:3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:39:db:de:c5:66:76:9d:c5:9d:8f:4c:3f:91:57:ad:85:32: c4:1f:01:81:35:c1:e4:f3:23:67:30:3a:c3:6e:8c:16:1b:ea: 44:c0:b7:b8:0e:47:48:cf:e4:e9:7f:c4:ef:ee:85:8e:15:57: b8:8d:55:af:a9:d0:c9:15:54:2e:d0:bc:24:db:f9:da:f8:36: 68:fd:d5:77:29:a2:3e:8b:2c:81:d7:b5:e7:be:c9:8f:3d:3d: 5d:5f:92:12:21:b9:42:6b:97:ad:5f:72:35:99:34:74:cd:f5: 03:93:61:9e:65:66:f0:d8:1b:13:43:84:12:fe:ad:e6:ec:79: 81:85:ee:5c:cf:e4:60:e5:a1:bf:33:a9:09:45:59:ae:e5:49: 74:63:10:ce:d2:48:c5:5e:9b:88:5a:08:ab:49:eb:cd:da:b7: 18:37:e3:99:5f:4f:94:95:80:d3:b7:e7:4e:ab:14:4c:5a:8b: 56:a2:b7:fc:db:2c:f1:a0:42:a0:c9:a8:2c:7f:c9:9b:4b:cb: de:a3:3a:17:ef:3d:08:b4:eb:ca:6d:d2:83:00:c2:4f:61:1e: a3:6e:32:16:40:f2:30:d7:4c:4a:ad:30:2a:9e:e2:f7:39:4d: da:0a:a0:86:1f:a2:b8:62:a6:23:02:0d:1d:66:db:99:bf:50: 1a:c3:70:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhjTte7JoY2YybSJmd+pu4yCH+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2 QThBMjlFNTAeFw0yNjA5MjQxNDMzNThaFw0yNjA5MjUxNTA3NThaMDMxMTAvBgNV BAMTKEJFMDI1RTJGOEYzNEIyRERBNUZCNUY3OUVBMTJFNDAyMUY0M0MwMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglTKZ8o3s8bulWjnkqjt6OrDC lbvryE9glL8ny+tWQiNocRaf4x94O5ENkQEHiYiKlQr+9Qel3euPtC9Q0S7MubQT 92yLVfq7/u7+ppEVaCMv6Sw871XaC9rfiu5bxhGQsxsCw0/Am2pFHllfTNFxga8O X6j7Hi3DmBQ52gB4I7MBuSyX7UFKBgzdcOGs+N23u2zfZAcIf3iFb+jfaeaYDbee S2JLAmXKully/v13Z2W7bOS+8jogIGwGW7qT/owJS+MP87kbB1pKVyPdgFUJMt8T 0FHFe09TmgfWKt8DnkzkxrBerJP1h8Xh2XoxmA2QJZOiek8Ik3XrzOYdhpLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvgJeL480st2l+1956hLkAh9DwAgwHwYDVR0j BBgwFoAUOnrFKw8Mi06O6g+sViHDBWqKKeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjYwOTVjODUtOGM5Mi00MTRiLWJkNTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIw RjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2QThBMjlFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTdBQzUyQjBGMEM4QjRFOEVFQTBGQUM1NjIxQzMwNTZBOEEy OUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMz MDU2QThBMjlFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ5297FZnadxZ2PTD+RV62FMsQfAYE1weTz I2cwOsNujBYb6kTAt7gOR0jP5Ol/xO/uhY4VV7iNVa+p0MkVVC7QvCTb+dr4Nmj9 1Xcpoj6LLIHXtee+yY89PV1fkhIhuUJrl61fcjWZNHTN9QOTYZ5lZvDYGxNDhBL+ rebseYGF7lzP5GDlob8zqQlFWa7lSXRjEM7SSMVem4haCKtJ683atxg345lfT5SV gNO3506rFExai1ait/zbLPGgQqDJqCx/yZtLy96jOhfvPQi068pt0oMAwk9hHqNu MhZA8jDXTEqtMCqe4vc5TdoKoIYforhipiMCDR1m25m/UBrDcB8= -----END CERTIFICATE-----Generated at Fri Sep 25 00:14:08 2026 by rpki-client