$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft File: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft (raw, json) Hash identifier: q/wAXqAZYxmWAl3FT9DiTmpi2SFV86V5D/B5UgKsIok= Subject key identifier: AE:2F:89:AA:5E:8B:67:5A:EB:91:7A:CD:EB:00:72:B0:C7:04:47:41 Authority key identifier: A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D Certificate issuer: /CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Certificate serial: 2496A3AE09850ECD818ABD4A1DC118F9C9B1D678 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft Manifest number: BF Signing time: Wed 23 Sep 2026 06:59:40 +0000 Manifest this update: Wed 23 Sep 2026 06:54:40 +0000 Manifest next update: Thu 24 Sep 2026 09:50:40 +0000 Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 0G4YBfT8XRPQC+cAerXBYMMW9I/KjiVejVSF2aUT8Xk=) 2: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl (hash: b6j0RurpAsU2ocoeTnMUwg1vO/9gthGTHm3hz93Ui0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:96:a3:ae:09:85:0e:cd:81:8a:bd:4a:1d:c1:18:f9:c9:b1:d6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Validity Not Before: Sep 23 06:54:40 2026 GMT Not After : Sep 24 09:50:40 2026 GMT Subject: CN=AE2F89AA5E8B675AEB917ACDEB0072B0C7044741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6b:c7:93:d1:fd:b4:c3:3a:f5:52:0b:f4:6c: 97:71:56:8d:20:87:f2:83:0e:58:2d:6a:91:45:60: 90:49:41:82:45:77:27:7b:8d:d6:6b:e3:49:db:9d: a4:62:2e:ae:29:ae:74:8f:f2:23:f1:20:49:1f:0d: 91:5f:fd:a0:5d:98:aa:22:70:a0:85:2d:ba:56:75: cf:54:a5:55:c9:a5:50:66:80:1b:43:b8:ff:a6:3f: b0:3e:13:05:15:e8:6d:1a:c2:d7:fa:7d:dd:c4:07: 74:78:d1:2d:f9:6c:4d:dc:2f:51:8a:55:b4:9a:cd: cb:31:e9:4f:75:de:55:fe:4c:2d:b0:7b:47:ba:23: 12:7c:cb:db:a0:53:90:f6:a9:28:3d:c4:73:1f:5e: 3b:cb:61:b3:97:47:ef:fd:e4:6d:c7:bc:78:db:b4: cc:dd:0c:e1:b5:68:d5:10:0d:1b:73:5a:9d:34:45: 4a:ad:15:0f:ad:2c:f7:04:98:eb:99:65:4f:36:17: 9f:66:a0:d7:f0:c5:f5:12:be:54:97:53:6c:98:f3: c3:7b:7b:be:65:5a:33:0d:2b:c9:1d:d7:8e:b4:03: cc:c2:61:50:23:a9:2a:09:b1:57:07:8c:cc:53:47: d7:0c:37:23:c8:78:77:6f:74:89:49:55:a9:36:51: 87:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2F:89:AA:5E:8B:67:5A:EB:91:7A:CD:EB:00:72:B0:C7:04:47:41 X509v3 Authority Key Identifier: keyid:A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:39:df:92:e9:b6:aa:68:35:0f:da:92:c0:69:f3:8f:ab:06: 50:b0:ff:cb:97:8f:7c:08:b6:35:cf:cb:b3:9f:fc:e1:42:79: bf:53:22:cc:a1:c2:4a:e1:d3:0e:ca:fd:92:3b:f1:c2:c2:ef: 05:9d:f4:15:94:9b:cc:42:1d:19:19:4c:70:cb:d1:62:7f:90: f6:b7:b1:54:a6:4e:4b:95:0c:f4:ba:47:5a:22:fa:ac:e3:8e: 3f:32:e6:a6:09:24:24:de:83:8a:74:a1:f4:9c:1f:32:58:0d: b0:a6:b9:2a:b9:9b:84:24:eb:f9:8d:3c:40:94:cb:77:5e:41: 61:f7:4e:b4:5b:19:95:a6:17:f6:cd:62:5f:41:61:4d:75:da: ab:23:82:fa:ce:b0:bf:f3:92:1b:28:04:f3:9e:b4:3e:ed:7c: 4c:99:c3:95:f0:a1:4f:99:c4:34:7e:9b:5a:a4:ca:c6:4a:83: 74:8c:86:51:8c:36:01:3c:cb:cb:b7:4a:72:63:0c:b5:e6:fe: 0f:3d:d9:26:ba:a7:81:92:57:3e:d6:64:e9:af:aa:57:cb:d4: 81:9a:85:22:7d:8e:d8:e3:41:a0:7e:1c:58:85:5c:7b:20:0a: ea:c3:41:f3:7b:6b:0b:33:1a:e7:2a:6e:aa:d1:15:b0:9a:f1: cf:9e:2c:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJajrgmFDs2Bir1KHcEY+cmx1ngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZFQzRC RkQwMkY0RDAeFw0yNjA5MjMwNjU0NDBaFw0yNjA5MjQwOTUwNDBaMDMxMTAvBgNV BAMTKEFFMkY4OUFBNUU4QjY3NUFFQjkxN0FDREVCMDA3MkIwQzcwNDQ3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJa8eT0f20wzr1Ugv0bJdxVo0g h/KDDlgtapFFYJBJQYJFdyd7jdZr40nbnaRiLq4prnSP8iPxIEkfDZFf/aBdmKoi cKCFLbpWdc9UpVXJpVBmgBtDuP+mP7A+EwUV6G0awtf6fd3EB3R40S35bE3cL1GK VbSazcsx6U913lX+TC2we0e6IxJ8y9ugU5D2qSg9xHMfXjvLYbOXR+/95G3HvHjb tMzdDOG1aNUQDRtzWp00RUqtFQ+tLPcEmOuZZU82F59moNfwxfUSvlSXU2yY88N7 e75lWjMNK8kd1460A8zCYVAjqSoJsVcHjMxTR9cMNyPIeHdvdIlJVak2UYdFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUri+Jql6LZ1rrkXrN6wBysMcER0EwHwYDVR0j BBgwFoAUo0Ecd7XlTyOTetCQgy7+xL/QL00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRjNmY3NzAtNjg2YS00NWVmLThkZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdC NUU1NEYyMzkzN0FEMDkwODMyRUZFQzRCRkQwMkY0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzQxMUM3N0I1RTU0RjIzOTM3QUQwOTA4MzJFRkVDNEJGRDAy RjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZF QzRCRkQwMkY0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQ535LptqpoNQ/aksBp84+rBlCw/8uXj3wI tjXPy7Of/OFCeb9TIsyhwkrh0w7K/ZI78cLC7wWd9BWUm8xCHRkZTHDL0WJ/kPa3 sVSmTkuVDPS6R1oi+qzjjj8y5qYJJCTeg4p0ofScHzJYDbCmuSq5m4Qk6/mNPECU y3deQWH3TrRbGZWmF/bNYl9BYU112qsjgvrOsL/zkhsoBPOetD7tfEyZw5XwoU+Z xDR+m1qkysZKg3SMhlGMNgE8y8u3SnJjDLXm/g892Sa6p4GSVz7WZOmvqlfL1IGa hSJ9jtjjQaB+HFiFXHsgCurDQfN7awszGucqbqrRFbCa8c+eLDo= -----END CERTIFICATE-----Generated at Thu Sep 24 02:29:31 2026 by rpki-client