$ rpki-client -vvvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json) Hash identifier: TMKmOGJHZGEheVjhNUKyttsV9f4u8b3z2PWDpz0YYdU= Subject key identifier: B7:DD:28:61:C6:D9:E3:A3:28:4D:82:40:27:5D:1A:64:A1:32:C1:27 Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 05C1D77E3B2D0D03E8CC29140887652E88C5ABCD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 18:48:44 +0000 Manifest this update: Fri 25 Sep 2026 18:43:44 +0000 Manifest next update: Sat 26 Sep 2026 20:59:44 +0000 Files and hashes: 1: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=) 2: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: UIppyOHGtaLo9zoFz2NR9qLJdvIyyph3ruzXivlbVAc=) 3: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=) 4: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c1:d7:7e:3b:2d:0d:03:e8:cc:29:14:08:87:65:2e:88:c5:ab:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: Sep 25 18:43:44 2026 GMT Not After : Sep 26 20:59:44 2026 GMT Subject: CN=B7DD2861C6D9E3A3284D8240275D1A64A132C127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5b:07:8f:6e:bc:5b:42:8b:29:12:07:de:df: de:5a:ba:36:a1:2b:29:13:66:2b:90:c5:96:9b:56: 9c:06:77:3e:fe:0d:f2:16:09:f3:a2:52:fe:cb:46: 8a:3f:7f:9e:47:d1:67:17:63:6c:95:39:87:5b:01: a5:20:50:e5:7f:13:83:c6:52:0c:07:7c:ed:6e:aa: 24:35:14:aa:2a:6c:8f:67:28:c4:d5:1a:28:a4:d8: be:5e:dc:6f:50:4a:c9:94:8c:c0:30:d9:2b:a5:3c: c0:a2:34:5c:5a:2d:72:e8:7e:ea:7f:4f:33:ad:37: 7d:fa:eb:b9:ed:d3:e3:cc:08:fa:c5:a6:9f:b9:83: e3:83:f2:5e:7b:3b:cf:bf:06:4a:16:1e:3a:a8:1e: 21:5e:cd:50:7c:cd:de:65:f5:ed:56:7f:77:3d:ba: 7d:1a:95:e8:68:de:e9:02:7c:2b:2b:56:c7:58:8d: 5f:9c:3f:9a:8b:47:1e:53:be:69:b3:9e:5b:fa:d6: 7a:7c:22:e6:24:8d:78:1a:9f:6f:e7:ce:f9:ae:79: 9a:9e:96:e7:b1:4e:39:32:7a:d3:46:0e:82:b2:8c: 81:60:d2:d1:2f:de:89:58:6a:2e:49:cb:85:aa:4a: 0f:49:c3:f5:9e:c8:87:83:20:d5:c6:27:68:ff:af: 7b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DD:28:61:C6:D9:E3:A3:28:4D:82:40:27:5D:1A:64:A1:32:C1:27 X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:43:68:89:6c:12:aa:5a:96:2d:5b:26:0c:f8:16:f4:ac:fa: a2:74:58:ba:d5:ed:28:4a:3b:72:9b:53:ab:f6:62:f3:92:49: d8:68:b1:87:65:95:f0:ab:42:c9:9f:73:d9:60:4f:48:5b:9a: be:b3:ec:89:f0:bb:f5:b9:b2:1a:78:12:20:d6:9f:8e:d0:8b: df:80:8a:ba:68:73:80:a2:bb:7f:a6:6d:c1:26:ee:07:90:4b: e4:ca:a0:15:34:5f:b5:d2:1b:6d:f8:41:e0:72:a2:26:28:08: f3:92:73:a6:8a:43:bb:3e:e9:9e:a0:53:48:96:40:84:bb:cc: 4d:e4:d1:16:f6:6a:11:af:d1:df:d1:ed:62:2b:58:1f:10:63: ff:b2:5e:2a:38:52:1a:35:ba:8c:40:5f:cb:86:57:c5:8d:b1: b3:f3:05:8d:0e:5a:54:a4:61:34:e9:9e:1b:9c:61:59:54:56: 22:7a:e6:1b:63:17:58:7d:6b:6f:4f:63:87:6c:82:0e:9e:4a: cf:51:79:ea:c5:a4:d5:3b:1e:82:fd:96:b7:14:c8:38:e8:ec: 35:cd:1e:47:8e:61:50:df:c3:91:f3:05:0f:a7:d2:14:81:0f: 77:40:e2:f3:49:40:c4:e4:b4:f2:fb:f7:54:77:38:f7:de:e3: bd:a6:88:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcHXfjstDQPozCkUCIdlLojFq80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx MjczMDUzQzAeFw0yNjA5MjUxODQzNDRaFw0yNjA5MjYyMDU5NDRaMDMxMTAvBgNV BAMTKEI3REQyODYxQzZEOUUzQTMyODREODI0MDI3NUQxQTY0QTEzMkMxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYWwePbrxbQospEgfe395aujah KykTZiuQxZabVpwGdz7+DfIWCfOiUv7LRoo/f55H0WcXY2yVOYdbAaUgUOV/E4PG UgwHfO1uqiQ1FKoqbI9nKMTVGiik2L5e3G9QSsmUjMAw2SulPMCiNFxaLXLofup/ TzOtN33667nt0+PMCPrFpp+5g+OD8l57O8+/BkoWHjqoHiFezVB8zd5l9e1Wf3c9 un0aleho3ukCfCsrVsdYjV+cP5qLRx5Tvmmznlv61np8IuYkjXgan2/nzvmueZqe luexTjkyetNGDoKyjIFg0tEv3olYai5Jy4WqSg9Jw/WeyIeDINXGJ2j/r3tnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt90oYcbZ46MoTYJAJ10aZKEywScwHwYDVR0j BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1 OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApDaIlsEqpali1bJgz4FvSs+qJ0WLrV7ShK O3KbU6v2YvOSSdhosYdllfCrQsmfc9lgT0hbmr6z7Inwu/W5shp4EiDWn47Qi9+A irpoc4Ciu3+mbcEm7geQS+TKoBU0X7XSG234QeByoiYoCPOSc6aKQ7s+6Z6gU0iW QIS7zE3k0Rb2ahGv0d/R7WIrWB8QY/+yXio4Uho1uoxAX8uGV8WNsbPzBY0OWlSk YTTpnhucYVlUViJ65htjF1h9a29PY4dsgg6eSs9ReerFpNU7HoL9lrcUyDjo7DXN HkeOYVDfw5HzBQ+n0hSBD3dA4vNJQMTktPL791R3OPfe472miJk= -----END CERTIFICATE-----Generated at Sat Sep 26 11:06:52 2026 by rpki-client