$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft File: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft (raw, json) Hash identifier: PEE0M4/g3cN9vi1IiPi3qXLH9zIhWbkO1HcuOWrsKQ8= Subject key identifier: 4E:4B:C6:62:39:55:2B:5C:05:54:15:74:5F:B7:B7:27:A9:31:C5:59 Authority key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 Certificate issuer: /CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Certificate serial: 726B657170BAF38BC78E5012021E7459AB44B618 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 17:27:22 +0000 Manifest this update: Thu 24 Sep 2026 17:22:22 +0000 Manifest next update: Fri 25 Sep 2026 21:18:22 +0000 Files and hashes: 1: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: 96ge8Etcm2V6UZTk31GX2s/Ds/fuLYPEHIz1Z0SJfzE=) 2: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: fotOvd+PWoydj7VIP8y6JU/MYhbVEjOQqbEDgYpaLFU=) 3: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl (hash: NMItFMntMZLVwSI4diXs2hqI28+7vJ7yT0yW2ad32Q8=) 4: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: pf1zgGEHpfn1H78lzdIyJ+7RwP4PRuY4T6Xp4PahUm8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:6b:65:71:70:ba:f3:8b:c7:8e:50:12:02:1e:74:59:ab:44:b6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Validity Not Before: Sep 24 17:22:22 2026 GMT Not After : Sep 25 21:18:22 2026 GMT Subject: CN=4E4BC66239552B5C055415745FB7B727A931C559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:0a:b4:02:12:90:d4:6e:24:50:4e:a6:4d: 93:3e:f7:f3:e1:d2:95:d5:88:20:4b:3c:df:6e:a3: 4b:96:42:11:39:72:bf:3e:0f:e9:85:90:22:e0:ee: c9:66:b9:22:6d:d2:91:f6:03:49:43:06:4b:d7:93: 40:ff:9c:39:3a:fe:03:90:2f:62:15:83:4f:4a:96: dc:fd:f2:e3:5c:37:24:f4:39:77:6c:f3:8d:69:de: d2:d5:76:b8:5b:88:16:de:1c:0a:74:98:71:13:df: 51:1a:8f:a0:17:29:b3:61:d0:5a:bf:75:74:09:e0: b5:90:47:29:8c:8c:ae:3d:31:be:cc:52:7c:0f:01: 15:e5:c8:32:f3:9c:7c:eb:e1:6a:2e:ed:bd:8b:68: 16:65:23:b1:ce:71:9f:1a:84:d1:65:9b:0f:e1:8b: b0:0f:b0:7d:76:93:e0:78:6a:81:f3:16:1f:70:10: 0c:c5:1d:34:c3:0b:63:3f:0f:b0:ac:51:24:a0:30: 6c:1a:2f:a1:46:7a:8b:3f:2f:d6:7c:e4:9c:46:33: 25:ae:21:68:60:4c:2a:c3:54:00:96:cf:22:a3:f7: 01:4f:93:e1:5e:00:c9:0c:cf:0e:d2:23:e3:20:e6: fa:d0:fd:9b:97:5e:8a:a2:5b:72:3e:8d:85:f5:61: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4B:C6:62:39:55:2B:5C:05:54:15:74:5F:B7:B7:27:A9:31:C5:59 X509v3 Authority Key Identifier: keyid:3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ac:89:db:e4:75:36:25:a8:86:b6:89:dd:fe:4e:c3:fe:78: 18:ed:37:8e:06:86:0c:0b:58:92:68:a4:a8:43:7d:06:e4:52: 13:92:25:de:90:28:1e:be:ce:d8:b5:17:04:e9:c9:e3:65:43: f2:95:6e:75:3c:00:29:c4:80:5b:6b:8c:09:a1:66:5f:db:b3: fb:05:24:ec:19:9f:d8:f7:ec:48:47:d5:56:29:ab:1a:b5:95: a8:1d:3a:a0:f1:da:cc:f6:f3:98:a2:ad:7a:4a:9a:91:93:ef: 8c:d4:0c:5b:17:06:1d:7d:56:38:94:65:96:d5:b3:4c:0e:54: be:9a:c8:28:83:8c:fd:38:a9:ab:75:9d:92:f0:f0:f2:fa:6b: 92:9d:c0:6b:52:1c:62:d1:ab:f3:7e:1c:8e:c1:56:a5:38:79: 6a:55:01:1a:91:e5:7e:ae:9f:ab:c4:1a:f2:9c:5b:1a:e1:b7: 0a:22:49:9e:d6:2d:d6:e8:11:6a:4d:04:9f:33:f3:71:11:d5: 91:55:2a:f8:59:0c:2e:2e:49:c6:ef:32:00:c5:f3:34:e2:7c: 02:a3:e1:d4:69:08:7c:e8:53:19:9c:9a:02:68:0a:62:72:da: 21:9a:97:76:cb:92:c8:4a:f3:55:05:42:62:2c:5e:02:52:60: b3:7a:98:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmtlcXC684vHjlASAh50WatEthgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2 RDRGQURENDAeFw0yNjA5MjQxNzIyMjJaFw0yNjA5MjUyMTE4MjJaMDMxMTAvBgNV BAMTKDRFNEJDNjYyMzk1NTJCNUMwNTU0MTU3NDVGQjdCNzI3QTkzMUM1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0Qq0AhKQ1G4kUE6mTZM+9/Ph 0pXViCBLPN9uo0uWQhE5cr8+D+mFkCLg7slmuSJt0pH2A0lDBkvXk0D/nDk6/gOQ L2IVg09Kltz98uNcNyT0OXds841p3tLVdrhbiBbeHAp0mHET31Eaj6AXKbNh0Fq/ dXQJ4LWQRymMjK49Mb7MUnwPARXlyDLznHzr4Wou7b2LaBZlI7HOcZ8ahNFlmw/h i7APsH12k+B4aoHzFh9wEAzFHTTDC2M/D7CsUSSgMGwaL6FGeos/L9Z85JxGMyWu IWhgTCrDVACWzyKj9wFPk+FeAMkMzw7SI+Mg5vrQ/ZuXXoqiW3I+jYX1YRFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTkvGYjlVK1wFVBV0X7e3J6kxxVkwHwYDVR0j BBgwFoAUOlKm70VzL4LZQ1k6EMf2Sm1PrdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk5YjYwNGYtMTU3OC00YTBiLThmN2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0 NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2RDRGQURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTUyQTZFRjQ1NzMyRjgyRDk0MzU5M0ExMEM3RjY0QTZENEZB REQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2 NEE2RDRGQURENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJasidvkdTYlqIa2id3+TsP+eBjtN44GhgwL WJJopKhDfQbkUhOSJd6QKB6+zti1FwTpyeNlQ/KVbnU8ACnEgFtrjAmhZl/bs/sF JOwZn9j37EhH1VYpqxq1lagdOqDx2sz285iirXpKmpGT74zUDFsXBh19VjiUZZbV s0wOVL6ayCiDjP04qat1nZLw8PL6a5KdwGtSHGLRq/N+HI7BVqU4eWpVARqR5X6u n6vEGvKcWxrhtwoiSZ7WLdboEWpNBJ8z83ER1ZFVKvhZDC4uScbvMgDF8zTifAKj 4dRpCHzoUxmcmgJoCmJy2iGal3bLkshK81UFQmIsXgJSYLN6mMM= -----END CERTIFICATE-----Generated at Thu Sep 24 22:51:06 2026 by rpki-client