$ rpki-client -vvvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft File: A3FC798CD711AE0868F235A3EA767FB9B4129434.mft (raw, json) Hash identifier: ANkgAEkgSQTXwalaKI1Q07qDhYHmVsVwAVn/JxHGxJo= Subject key identifier: 85:EA:68:C6:4B:85:20:33:81:74:85:A8:13:4C:76:41:29:87:18:45 Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 Certificate issuer: /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Certificate serial: 59A37C245FCFB70FF63C158C7DC80AC800B26820 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft Manifest number: FB Signing time: Wed 04 Nov 2026 22:42:21 +0000 Manifest this update: Wed 04 Nov 2026 22:37:21 +0000 Manifest next update: Thu 05 Nov 2026 23:55:21 +0000 Files and hashes: 1: 3130332e3137362e34342e302f32342d3234203d3e20313532373930.roa (hash: jXy0CdGkOe/aCpL4F3KoTBpYXV8a9YPJGcjZWIKjM3o=) 2: A3FC798CD711AE0868F235A3EA767FB9B4129434.crl (hash: uIwUtIZWCuS84bzYuCedjiifspf8OrUPd3d70HDtOBE=) 3: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: 6TaFuBiM6linhPB1ZFPQ8ukQQbZ31lu3G23g8rzDbhE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 23:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a3:7c:24:5f:cf:b7:0f:f6:3c:15:8c:7d:c8:0a:c8:00:b2:68:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Validity Not Before: Nov 4 22:37:21 2026 GMT Not After : Nov 5 23:55:21 2026 GMT Subject: CN=85EA68C64B852033817485A8134C764129871845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:0c:5a:82:48:23:94:84:f8:11:c9:c2:a9: d7:13:b9:27:eb:68:1a:f1:77:00:e8:b8:8d:13:8d: 93:6b:fe:eb:38:46:32:20:5d:cd:b2:80:ed:03:96: d0:04:09:6a:2a:ed:ce:e6:40:22:f0:63:df:6b:54: b4:18:19:0b:09:7c:24:3d:ca:d9:a2:a4:11:4c:4b: d5:1b:15:49:6f:1d:02:49:c3:db:d2:8a:9c:46:12: 6d:3c:8b:b1:5c:5f:5c:78:51:50:49:db:b0:2f:85: f5:26:d4:30:76:39:25:45:d0:62:43:bc:4f:43:96: e0:3d:de:cd:80:f6:c7:b5:30:e3:fa:07:56:e2:41: bb:bf:23:47:67:a6:fe:ca:7e:1b:79:58:9c:25:e2: eb:a7:79:49:83:9c:d5:aa:60:85:d0:05:67:14:49: cb:e2:94:a0:d4:ee:ee:e3:9e:58:28:08:04:9b:65: ce:af:d0:d0:d3:b6:93:5b:9f:bb:e1:49:2c:3e:be: 3c:ff:3c:ff:97:89:ab:62:71:2f:6b:66:67:35:2d: 54:1d:10:9c:d2:5d:79:bc:b7:40:e9:06:d7:0b:1f: dd:30:15:cb:c0:2f:54:c3:6d:29:57:cd:4a:0b:28: 3e:b3:eb:9d:da:6f:ad:ea:78:be:c7:10:87:8d:d0: d6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EA:68:C6:4B:85:20:33:81:74:85:A8:13:4C:76:41:29:87:18:45 X509v3 Authority Key Identifier: keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:51:36:96:cf:0b:73:63:01:10:a8:83:1c:8c:50:30:54:b8: 9f:34:94:76:77:e8:94:1c:09:4d:5b:d7:59:e6:10:1a:77:16: 50:ee:c4:72:5b:ec:a4:37:04:cf:80:74:c3:2b:76:86:4c:32: 35:31:3b:bb:da:12:b9:f1:d7:cf:74:6e:ac:67:ba:6b:63:5a: df:2d:1a:26:de:7e:b6:38:df:33:e6:31:13:3f:b7:7a:0f:22: 06:9a:3a:6f:c7:ec:cb:fd:49:b4:0d:f7:fb:3a:cb:62:79:4d: c7:d1:7f:42:07:98:91:d7:74:12:f1:4f:2b:69:55:c7:75:a2: 6b:35:60:39:1f:03:2b:d4:37:32:c6:d8:bc:0f:0f:cc:3d:9f: db:7d:c7:73:df:89:bc:cb:df:d6:99:4f:9c:b5:a1:ee:6d:29: 07:80:f7:a1:1e:f4:e4:93:df:4e:26:bf:f6:0c:9c:65:97:a2: e5:1f:e9:71:86:6c:a5:2a:7d:22:16:d8:37:5c:75:5d:79:a2: 3f:fb:e6:cb:95:49:56:c4:e7:31:68:f8:3e:01:ac:52:5d:f3: 10:5e:70:b8:12:d0:82:f6:93:ab:1d:a2:d1:95:74:31:57:63: 10:7b:bc:cc:aa:e2:56:ab:f8:7f:05:c4:b0:9b:8d:e8:43:8a: b4:b8:63:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWaN8JF/Ptw/2PBWMfcgKyACyaCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdGQjlC NDEyOTQzNDAeFw0yNjExMDQyMjM3MjFaFw0yNjExMDUyMzU1MjFaMDMxMTAvBgNV BAMTKDg1RUE2OEM2NEI4NTIwMzM4MTc0ODVBODEzNEM3NjQxMjk4NzE4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeQxagkgjlIT4EcnCqdcTuSfr aBrxdwDouI0TjZNr/us4RjIgXc2ygO0DltAECWoq7c7mQCLwY99rVLQYGQsJfCQ9 ytmipBFMS9UbFUlvHQJJw9vSipxGEm08i7FcX1x4UVBJ27AvhfUm1DB2OSVF0GJD vE9DluA93s2A9se1MOP6B1biQbu/I0dnpv7Kfht5WJwl4uuneUmDnNWqYIXQBWcU ScvilKDU7u7jnlgoCASbZc6v0NDTtpNbn7vhSSw+vjz/PP+XiaticS9rZmc1LVQd EJzSXXm8t0DpBtcLH90wFcvAL1TDbSlXzUoLKD6z653ab63qeL7HEIeN0NaDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhepoxkuFIDOBdIWoE0x2QSmHGEUwHwYDVR0j BBgwFoAUo/x5jNcRrgho8jWj6nZ/ubQSlDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDMxYTk0MjYtM2MzNS00NzBlLWJmMzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENE NzExQUUwODY4RjIzNUEzRUE3NjdGQjlCNDEyOTQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0ZDNzk4Q0Q3MTFBRTA4NjhGMjM1QTNFQTc2N0ZCOUI0MTI5 NDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdG QjlCNDEyOTQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRRNpbPC3NjARCogxyMUDBUuJ80lHZ36JQc CU1b11nmEBp3FlDuxHJb7KQ3BM+AdMMrdoZMMjUxO7vaErnx1890bqxnumtjWt8t GibefrY43zPmMRM/t3oPIgaaOm/H7Mv9SbQN9/s6y2J5TcfRf0IHmJHXdBLxTytp Vcd1oms1YDkfAyvUNzLG2LwPD8w9n9t9x3PfibzL39aZT5y1oe5tKQeA96Ee9OST 304mv/YMnGWXouUf6XGGbKUqfSIW2DdcdV15oj/75suVSVbE5zFo+D4BrFJd8xBe cLgS0IL2k6sdotGVdDFXYxB7vMyq4lar+H8FxLCbjehDirS4YwE= -----END CERTIFICATE-----Generated at Thu Nov 5 03:16:29 2026 by rpki-client