$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft File: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft (raw, json) Hash identifier: 3VUgwBBrbScUTTsQIgJ8TfKczO9s2ik251yspXIS67o= Subject key identifier: 38:B7:3E:FE:32:9C:17:E2:47:A6:F4:25:ED:3D:FF:C9:82:13:7F:DD Authority key identifier: A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D Certificate issuer: /CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Certificate serial: 05E9209969D67098A021DEB9BC3F143DE59091A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 23:09:10 +0000 Manifest this update: Fri 25 Sep 2026 23:04:10 +0000 Manifest next update: Sun 27 Sep 2026 00:29:10 +0000 Files and hashes: 1: A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl (hash: CKgQzPkxpxc3czWY2E25sZUVvqGAjmSdUrl9S1PyR24=) 2: 3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (hash: lhhFXTGZiU1QkHFYBJ4wWU0h/3XC744iXGiTVreBn18=) 3: 3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (hash: W7doPEAlt7atW3PujV3jj4JUbhiVhrrULJlIpRgUn64=) 4: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (hash: njKsV+Ks6jWYRD/Bk8dM3j39b6JxY/7zJuEqTLSaQJo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 00:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e9:20:99:69:d6:70:98:a0:21:de:b9:bc:3f:14:3d:e5:90:91:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D Validity Not Before: Sep 25 23:04:10 2026 GMT Not After : Sep 27 00:29:10 2026 GMT Subject: CN=38B73EFE329C17E247A6F425ED3DFFC982137FDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:4f:90:c6:5f:e0:82:2f:b3:96:db:89:de: 30:0c:76:2f:44:5d:7d:40:f4:ae:e1:d2:5e:62:eb: a3:94:59:8e:09:97:d5:c2:31:63:9a:48:8c:e7:89: f3:d4:49:3f:7b:6b:fa:b6:2c:8a:bb:b0:68:62:28: 56:0f:19:36:22:f8:cf:09:95:ad:0e:fb:a9:9d:90: 39:cd:8f:5c:82:98:a2:69:eb:e1:8c:04:ae:80:cd: be:13:be:6c:ed:a3:49:14:ed:a3:94:72:46:c1:37: 8a:f3:ea:91:c5:44:68:eb:95:5a:55:40:c5:9c:23: a5:84:7f:15:45:f5:f2:7d:23:0b:f2:39:1e:78:ca: 63:df:2b:57:34:be:28:61:b8:44:2e:71:6d:00:ac: 02:46:5e:da:fa:8c:77:4e:d6:78:ff:3b:4e:0d:98: db:52:2b:44:2b:e4:72:d7:34:9e:07:1d:b1:5f:78: 25:bd:03:cd:5b:c5:a2:97:84:20:fb:b5:10:36:e6: d2:6c:7e:90:3b:4a:f1:22:0a:97:53:f1:00:35:f3: 3c:ad:b0:f3:1d:ee:fc:9d:51:9a:b2:b5:b7:f1:3d: 1b:c3:c4:ab:46:52:af:1b:3a:e0:5c:d3:93:b3:fb: 06:5c:e5:92:bd:37:4c:8c:d1:1a:c1:b2:05:5f:81: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B7:3E:FE:32:9C:17:E2:47:A6:F4:25:ED:3D:FF:C9:82:13:7F:DD X509v3 Authority Key Identifier: keyid:A1:1E:0A:62:38:26:E2:7C:F2:FC:29:CB:9B:01:08:FC:2D:1A:D0:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/A11E0A623826E27CF2FC29CB9B0108FC2D1AD00D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6e:67:10:01:1a:c5:29:fc:c4:e3:8b:25:6e:02:b7:14:c4: d0:5c:95:77:e9:c7:92:28:9d:f7:3a:46:95:1f:14:bd:f2:e9: c2:4b:ea:ce:97:bf:b2:ef:bd:79:88:97:8b:3a:d6:f7:56:20: a2:54:6a:3c:4b:e4:cc:7c:1c:2a:11:69:f7:e0:cb:7f:0b:c3: 05:6d:7e:cd:0f:d5:07:65:23:47:90:30:25:ca:e7:b5:85:bc: 82:05:a6:04:5d:99:57:80:c7:aa:a2:d3:c8:d8:75:df:16:d3: f9:b4:04:46:54:bd:54:cd:3e:3c:d7:b4:7f:9e:2a:c7:4b:37: df:3d:e9:cc:d1:92:ce:d5:19:98:60:23:53:2e:dc:30:68:24: 5a:da:b4:a9:d7:90:f3:42:ca:cb:99:6c:2c:57:36:02:d0:3b: ff:cd:b2:a1:7e:1a:c3:df:d3:75:d8:9e:43:16:9c:93:5f:08: 72:d5:1c:5b:1f:84:ec:40:a4:c7:23:b6:ab:12:05:27:d3:83: cf:e1:a8:55:6d:81:7c:93:e0:8a:1e:ec:54:91:db:40:cc:18: ec:91:09:47:f2:67:9b:2e:3c:94:fd:e5:7d:ca:11:9b:a1:86: 5d:ad:8d:28:20:1c:be:13:9a:a3:5d:6d:cd:7a:68:0e:5a:fa: c7:83:e8:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBekgmWnWcJigId65vD8UPeWQkaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTExRTBBNjIzODI2RTI3Q0YyRkMyOUNCOUIwMTA4RkMy RDFBRDAwRDAeFw0yNjA5MjUyMzA0MTBaFw0yNjA5MjcwMDI5MTBaMDMxMTAvBgNV BAMTKDM4QjczRUZFMzI5QzE3RTI0N0E2RjQyNUVEM0RGRkM5ODIxMzdGREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlE+Qxl/ggi+zltuJ3jAMdi9E XX1A9K7h0l5i66OUWY4Jl9XCMWOaSIznifPUST97a/q2LIq7sGhiKFYPGTYi+M8J la0O+6mdkDnNj1yCmKJp6+GMBK6Azb4Tvmzto0kU7aOUckbBN4rz6pHFRGjrlVpV QMWcI6WEfxVF9fJ9IwvyOR54ymPfK1c0vihhuEQucW0ArAJGXtr6jHdO1nj/O04N mNtSK0Qr5HLXNJ4HHbFfeCW9A81bxaKXhCD7tRA25tJsfpA7SvEiCpdT8QA18zyt sPMd7vydUZqytbfxPRvDxKtGUq8bOuBc05Oz+wZc5ZK9N0yM0RrBsgVfgXT7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOLc+/jKcF+JHpvQl7T3/yYITf90wHwYDVR0j BBgwFoAUoR4KYjgm4nzy/CnLmwEI/C0a0A0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU5ZTU2NTgtYWIxMC00Mjk3LTkyZjQtZjZhMjY2M2U1NGMwLzAvQTExRTBBNjIz ODI2RTI3Q0YyRkMyOUNCOUIwMTA4RkMyRDFBRDAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMTFFMEE2MjM4MjZFMjdDRjJGQzI5Q0I5QjAxMDhGQzJEMUFE MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU5ZTU2NTgtYWIxMC00Mjk3LTky ZjQtZjZhMjY2M2U1NGMwLzAvQTExRTBBNjIzODI2RTI3Q0YyRkMyOUNCOUIwMTA4 RkMyRDFBRDAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABluZxABGsUp/MTjiyVuArcUxNBclXfpx5Io nfc6RpUfFL3y6cJL6s6Xv7LvvXmIl4s61vdWIKJUajxL5Mx8HCoRaffgy38LwwVt fs0P1QdlI0eQMCXK57WFvIIFpgRdmVeAx6qi08jYdd8W0/m0BEZUvVTNPjzXtH+e KsdLN9896czRks7VGZhgI1Mu3DBoJFratKnXkPNCysuZbCxXNgLQO//NsqF+GsPf 03XYnkMWnJNfCHLVHFsfhOxApMcjtqsSBSfTg8/hqFVtgXyT4Ioe7FSR20DMGOyR CUfyZ5suPJT95X3KEZuhhl2tjSggHL4TmqNdbc16aA5a+seD6Hw= -----END CERTIFICATE-----Generated at Sat Sep 26 12:42:15 2026 by rpki-client