$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft File: A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft (raw, json) Hash identifier: epwXUqCDujCAEy374HGW9jnt1wIvBlGlbs24VkFRa3o= Subject key identifier: 76:C4:FC:83:F6:D9:05:60:E6:D4:0E:92:F0:99:6E:97:BD:C3:7D:A8 Authority key identifier: A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 Certificate issuer: /CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Certificate serial: 21B46ED16C2BF626B3F8ACA6D191DC0E152B343D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft Manifest number: E3 Signing time: Sun 18 Oct 2026 09:51:50 +0000 Manifest this update: Sun 18 Oct 2026 09:46:50 +0000 Manifest next update: Mon 19 Oct 2026 13:41:50 +0000 Files and hashes: 1: A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl (hash: MlQWyJ2YuQP3ZBdQN2qj/ZbA2dUm1REL9pYzdpI3toc=) 2: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: rrzxlF06KjaeWOab2SfdeYXEnvubBNLCq3WZSBYMU7k=) 3: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: 9QZ4zyqSjuEvfgjJyJcGuDYRra6HiDhsRoStARqfwRU=) 4: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: t5qlWMCg2l2O2xAA9OrAnjww8OOdg9aeZk/sDXkOKPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 01:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b4:6e:d1:6c:2b:f6:26:b3:f8:ac:a6:d1:91:dc:0e:15:2b:34:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Validity Not Before: Oct 18 09:46:50 2026 GMT Not After : Oct 19 13:41:50 2026 GMT Subject: CN=76C4FC83F6D90560E6D40E92F0996E97BDC37DA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:0b:d6:a4:e6:1d:f3:7b:17:9f:2d:c1:14: 59:e4:38:43:d3:53:02:31:92:48:82:06:0c:39:20: 99:7b:06:3c:c4:e0:98:68:33:0f:58:4d:ae:e4:33: fc:c4:b3:01:cd:1a:f4:a8:ad:04:04:20:bb:f8:3d: e6:9a:f5:ac:fd:ce:ef:b2:88:30:e4:fc:1b:8c:c4: 9d:e0:90:7a:3f:dd:a0:a1:38:41:58:ce:de:02:da: 41:1f:eb:3f:f4:16:e9:3e:66:e2:6a:7d:cc:12:02: 66:ad:2e:fd:4d:11:ce:41:5d:f4:90:4d:a5:c5:3f: 30:74:9b:b3:99:03:bf:ff:ce:21:0a:35:30:77:6b: 16:30:e6:52:d7:9f:99:0b:d0:1f:b6:50:af:e4:26: 20:37:4c:37:d0:c3:6b:fe:fe:bb:eb:dd:04:57:d0: 18:1c:37:0c:9d:20:8a:4f:97:03:ad:28:3f:d3:4c: 7a:34:82:3e:ee:7c:f4:37:35:ef:2f:55:ca:16:25: ce:8b:67:a5:66:a7:37:cb:89:42:50:6e:2c:5e:ff: 6e:7b:18:c8:3b:9f:f5:d1:30:4f:9b:6f:44:53:f1: dd:73:e9:31:d3:df:76:b4:cc:80:9e:b4:ab:09:a5: 05:ad:32:65:c8:ed:7e:04:82:14:64:44:5d:af:79: e5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C4:FC:83:F6:D9:05:60:E6:D4:0E:92:F0:99:6E:97:BD:C3:7D:A8 X509v3 Authority Key Identifier: keyid:A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b8:39:20:09:8c:1f:df:46:2b:e2:d9:89:04:90:98:70:31: 60:0c:ab:25:de:b1:16:27:cc:c2:e0:a8:c7:38:9c:d0:e0:fa: 1f:ea:39:ed:a8:f6:2a:c5:f0:eb:f5:58:34:27:cb:fb:9b:07: b6:7f:a5:4e:dc:0d:49:fc:b4:9b:9b:82:22:a4:d6:ee:d9:83: 99:a1:c7:33:99:29:d9:10:5c:e7:1c:a6:1e:7d:e8:b4:8d:40: cb:60:51:94:32:36:ad:ce:c7:4c:8e:77:ba:ef:89:8f:78:95: f4:c6:bf:b5:d3:a2:72:5f:27:a3:ed:17:7a:56:a8:9d:bd:61: 22:77:0f:9e:7b:95:92:da:c7:99:df:0c:3e:fd:93:d5:a8:30: b6:f3:a5:63:27:6e:10:1b:c3:68:49:45:e9:ce:07:25:32:22: e7:04:85:9c:0b:87:ea:ac:8d:02:f1:62:a6:01:d1:54:25:8a: 1b:77:a4:89:96:09:3f:be:49:fc:dd:f1:ba:94:ea:48:35:81: 1b:2f:8f:a2:8b:15:20:64:76:df:9a:22:93:d2:93:4e:1e:98: 2f:b7:66:2e:43:c8:1d:2a:b3:eb:28:c2:66:ee:5f:67:12:69: a8:64:29:bb:7c:07:80:ce:b6:b4:b9:5f:8a:29:d7:7e:ad:7c: 62:02:bf:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbRu0Wwr9iaz+Kym0ZHcDhUrND0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUx NDUxMTMzNTAeFw0yNjEwMTgwOTQ2NTBaFw0yNjEwMTkxMzQxNTBaMDMxMTAvBgNV BAMTKDc2QzRGQzgzRjZEOTA1NjBFNkQ0MEU5MkYwOTk2RTk3QkRDMzdEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEwvWpOYd83sXny3BFFnkOEPT UwIxkkiCBgw5IJl7BjzE4JhoMw9YTa7kM/zEswHNGvSorQQEILv4Peaa9az9zu+y iDDk/BuMxJ3gkHo/3aChOEFYzt4C2kEf6z/0Fuk+ZuJqfcwSAmatLv1NEc5BXfSQ TaXFPzB0m7OZA7//ziEKNTB3axYw5lLXn5kL0B+2UK/kJiA3TDfQw2v+/rvr3QRX 0BgcNwydIIpPlwOtKD/TTHo0gj7ufPQ3Ne8vVcoWJc6LZ6VmpzfLiUJQbixe/257 GMg7n/XRME+bb0RT8d1z6THT33a0zICetKsJpQWtMmXI7X4EghRkRF2veeWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdsT8g/bZBWDm1A6S8Jlul73DfagwHwYDVR0j BBgwFoAUo+z5Fpis0lxO+1bDm3f49RRREzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU4ZDU4YTgtZTE5Ny00MTc5LWI3M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5 OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUxNDUxMTMzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BM0VDRjkxNjk4QUNEMjVDNEVGQjU2QzM5Qjc3RjhGNTE0NTEx MzM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4 RjUxNDUxMTMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEy4OSAJjB/fRivi2YkEkJhwMWAMqyXesRYn zMLgqMc4nNDg+h/qOe2o9irF8Ov1WDQny/ubB7Z/pU7cDUn8tJubgiKk1u7Zg5mh xzOZKdkQXOccph596LSNQMtgUZQyNq3Ox0yOd7rviY94lfTGv7XTonJfJ6PtF3pW qJ29YSJ3D557lZLax5nfDD79k9WoMLbzpWMnbhAbw2hJRenOByUyIucEhZwLh+qs jQLxYqYB0VQliht3pImWCT++Sfzd8bqU6kg1gRsvj6KLFSBkdt+aIpPSk04emC+3 Zi5DyB0qs+sowmbuX2cSaahkKbt8B4DOtrS5X4op136tfGICv5w= -----END CERTIFICATE-----Generated at Sun Oct 18 16:16:30 2026 by rpki-client