$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft File: A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft (raw, json) Hash identifier: OOn8ghDQAPdz6eHrUdB8LJTNs0j6CzsSlc3C1SRSmhs= Subject key identifier: 9E:DD:19:84:89:E3:76:67:AC:EA:85:5D:62:8F:32:24:B0:63:04:CD Authority key identifier: A3:E8:D0:D5:6A:A9:0F:C9:8D:B7:BB:6A:DC:AB:D1:F4:D6:4C:9D:27 Certificate issuer: /CN=A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27 Certificate serial: 372DEFB8C8B9294385A8A12DC1A80275B98E4B6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft Manifest number: BF Signing time: Wed 23 Sep 2026 11:15:02 +0000 Manifest this update: Wed 23 Sep 2026 11:10:02 +0000 Manifest next update: Thu 24 Sep 2026 13:26:02 +0000 Files and hashes: 1: A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl (hash: ER3x2HCjdDqwlg5OY1NzXry2xUzuLLyTIK0gUACYzJ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2d:ef:b8:c8:b9:29:43:85:a8:a1:2d:c1:a8:02:75:b9:8e:4b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27 Validity Not Before: Sep 23 11:10:02 2026 GMT Not After : Sep 24 13:26:02 2026 GMT Subject: CN=9EDD198489E37667ACEA855D628F3224B06304CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:e9:81:e6:49:c7:f4:c5:4c:f2:b9:57:cb: 75:50:e7:1e:f2:c6:f9:0f:8b:0b:ff:ae:f3:c6:09: 0f:a9:a7:e9:ba:1d:35:d0:25:51:39:53:87:aa:c6: 6d:df:c1:14:4d:fd:bb:48:ff:85:8d:15:c5:fd:25: d4:b0:9b:02:b6:f4:82:d3:c6:aa:ec:d3:83:1c:ff: 18:74:f1:46:42:83:50:46:25:97:5a:f2:a3:e1:89: a5:e3:d0:22:04:36:ce:33:9e:bd:ef:8a:d0:03:5c: c1:43:84:24:30:91:ee:b5:cd:80:8b:26:9e:2d:71: 14:34:bf:98:cc:ed:44:d4:74:e6:c3:05:ad:9c:84: e6:fa:80:f0:5f:11:22:64:b3:87:d6:a9:d5:94:f0: a3:e7:5e:1e:6f:53:e8:80:c9:0e:c2:af:52:d9:98: 16:ce:42:4e:57:48:ed:94:e5:f5:c7:12:fd:0c:81: 49:b2:be:77:72:bc:0e:c1:20:da:18:c3:b1:c2:3f: b0:b8:5b:f7:7b:6e:a2:95:ce:cc:70:0a:56:21:b0: 62:4f:e0:0d:4c:f3:4c:0c:29:90:3a:95:d9:da:a9: 3f:0e:a2:21:c0:20:c3:58:fc:dc:0d:f1:1c:3f:a7: ab:71:90:ad:fa:95:fe:48:33:b0:86:2a:34:e9:06: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DD:19:84:89:E3:76:67:AC:EA:85:5D:62:8F:32:24:B0:63:04:CD X509v3 Authority Key Identifier: keyid:A3:E8:D0:D5:6A:A9:0F:C9:8D:B7:BB:6A:DC:AB:D1:F4:D6:4C:9D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b6:5d:47:63:ee:ba:7d:55:2a:8b:ce:f9:63:89:4f:d1:32: b1:cd:f3:56:31:4f:69:50:07:ad:58:00:51:98:1a:5c:3b:61: 37:ff:11:44:cc:c4:a2:92:db:12:8c:19:68:7a:c2:d8:24:05: d0:70:da:53:12:d2:0d:26:ad:e1:f4:30:c6:f8:b9:36:38:4b: 1f:8f:32:04:d0:78:39:8c:06:92:73:9f:3d:04:39:95:b9:85: 00:26:f2:4d:15:34:73:4e:66:e4:45:e9:e4:38:0c:58:a8:1f: 45:e6:fa:e3:d2:06:8d:4a:5f:3e:60:1b:c5:5f:40:52:6c:fe: 35:a7:a2:e4:54:8f:d8:7d:89:15:ab:88:f3:a3:0b:ec:9e:56: 9d:b0:d0:62:7b:55:2f:63:a2:85:4b:9f:59:da:f5:4d:68:e4: 70:67:c4:a2:5d:99:cf:ee:e3:b2:2b:12:d3:6a:15:7e:d9:86: 62:4f:ce:ee:32:bd:01:ff:1c:2b:d1:b8:e8:5b:a3:7e:19:19: 92:55:78:69:24:18:20:3c:4a:28:e2:54:ed:08:e5:6c:95:4b: 91:b5:cb:f1:bc:d9:4b:0f:17:bc:e6:99:f5:9f:ea:c3:4e:4c: ae:14:b0:04:e4:4f:96:0c:8c:49:65:16:dd:35:7e:50:1f:ce: b7:08:56:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNy3vuMi5KUOFqKEtwagCdbmOS2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFOEQwRDU2QUE5MEZDOThEQjdCQjZBRENBQkQxRjRE NjRDOUQyNzAeFw0yNjA5MjMxMTEwMDJaFw0yNjA5MjQxMzI2MDJaMDMxMTAvBgNV BAMTKDlFREQxOTg0ODlFMzc2NjdBQ0VBODU1RDYyOEYzMjI0QjA2MzA0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc1umB5knH9MVM8rlXy3VQ5x7y xvkPiwv/rvPGCQ+pp+m6HTXQJVE5U4eqxm3fwRRN/btI/4WNFcX9JdSwmwK29ILT xqrs04Mc/xh08UZCg1BGJZda8qPhiaXj0CIENs4znr3vitADXMFDhCQwke61zYCL Jp4tcRQ0v5jM7UTUdObDBa2chOb6gPBfESJks4fWqdWU8KPnXh5vU+iAyQ7Cr1LZ mBbOQk5XSO2U5fXHEv0MgUmyvndyvA7BINoYw7HCP7C4W/d7bqKVzsxwClYhsGJP 4A1M80wMKZA6ldnaqT8OoiHAIMNY/NwN8Rw/p6txkK36lf5IM7CGKjTpBt63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnt0ZhInjdmes6oVdYo8yJLBjBM0wHwYDVR0j BBgwFoAUo+jQ1WqpD8mNt7tq3KvR9NZMnScwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwOTllNDItMmU5Zi00ZThhLTk5ZTgtYWQ1MDQ1M2IwNjZmLzAvQTNFOEQwRDU2 QUE5MEZDOThEQjdCQjZBRENBQkQxRjRENjRDOUQyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0U4RDBENTZBQTkwRkM5OERCN0JCNkFEQ0FCRDFGNEQ2NEM5 RDI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvQTNFOEQwRDU2QUE5MEZDOThEQjdCQjZBRENBQkQx RjRENjRDOUQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGC2XUdj7rp9VSqLzvljiU/RMrHN81YxT2lQ B61YAFGYGlw7YTf/EUTMxKKS2xKMGWh6wtgkBdBw2lMS0g0mreH0MMb4uTY4Sx+P MgTQeDmMBpJznz0EOZW5hQAm8k0VNHNOZuRF6eQ4DFioH0Xm+uPSBo1KXz5gG8Vf QFJs/jWnouRUj9h9iRWriPOjC+yeVp2w0GJ7VS9jooVLn1na9U1o5HBnxKJdmc/u 47IrEtNqFX7ZhmJPzu4yvQH/HCvRuOhbo34ZGZJVeGkkGCA8SijiVO0I5WyVS5G1 y/G82UsPF7zmmfWf6sNOTK4UsATkT5YMjEllFt01flAfzrcIVig= -----END CERTIFICATE-----Generated at Thu Sep 24 02:36:22 2026 by rpki-client