$ rpki-client -vvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft File: A3FC798CD711AE0868F235A3EA767FB9B4129434.mft (raw, json) Hash identifier: oGWGUiFCRUXsrC9SzSJ9QIoMIv07GIzoDhPnAY7456I= Subject key identifier: C7:FD:29:70:29:73:A8:D8:2C:F5:13:2C:62:C7:64:EC:FE:5D:C4:9E Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 Certificate issuer: /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Certificate serial: 156925A7A4058C1FDA99B2034C6687AE10B041B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 17:53:38 +0000 Manifest this update: Mon 20 Jul 2026 17:48:38 +0000 Manifest next update: Tue 21 Jul 2026 18:56:38 +0000 Files and hashes: 1: A3FC798CD711AE0868F235A3EA767FB9B4129434.crl (hash: 5GV+obZ5UXuj2zFAsBp8tgbsiYYapEZRJ23xhQomeuo=) 2: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: 6TaFuBiM6linhPB1ZFPQ8ukQQbZ31lu3G23g8rzDbhE=) 3: 3130332e3137362e34342e302f32342d3234203d3e20313437313238.roa (hash: FHfHZKhnV6nBPDhXGsYl2nhVRShI8kqNDLyrWzHCF1g=) 4: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (hash: PDocKRP/axnGK/2hTz0jcOJCSSzSK6wE612ykd5rfc4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:69:25:a7:a4:05:8c:1f:da:99:b2:03:4c:66:87:ae:10:b0:41:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Validity Not Before: Jul 20 17:48:38 2026 GMT Not After : Jul 21 18:56:38 2026 GMT Subject: CN=C7FD29702973A8D82CF5132C62C764ECFE5DC49E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5e:85:eb:92:0f:ea:90:f9:a4:5d:44:db:25: 20:1e:fd:e2:e9:6e:f2:ba:c9:59:7e:bf:43:1b:6f: e2:fa:23:70:97:87:28:89:01:e2:b7:53:89:0b:e8: 11:dd:d2:93:94:8f:ef:f1:4e:68:a3:58:e5:cf:33: 52:8e:b1:7d:2c:d1:40:58:25:20:d5:04:76:14:27: 48:90:7d:ab:7b:4d:31:04:16:9e:a0:af:ab:b7:4c: 23:78:f5:a5:73:f1:68:0f:5e:23:66:7e:d7:1a:43: ec:7f:f8:80:d8:4a:43:4b:43:03:7b:99:73:a4:a5: c5:9d:f9:bb:91:ad:d2:e1:ab:6d:d1:c2:cd:41:06: 6c:39:3f:da:40:99:f0:c4:1a:ba:9d:bb:c6:00:db: d0:24:27:12:20:26:30:33:06:a6:d7:2d:9d:40:92: 9d:aa:fc:5c:0e:96:e7:ae:7d:2d:16:d4:87:40:bb: e7:7e:f0:77:d2:f3:b6:92:86:e9:7c:17:48:65:c7: e0:49:1d:45:b0:a8:11:f3:60:4a:30:d0:09:a4:06: 65:7a:ee:3f:a1:c3:96:8f:d6:80:06:c0:35:a2:83: c5:54:0b:ec:6f:67:c0:76:f1:1c:99:df:fd:f3:32: 75:06:85:7a:0b:42:7d:d6:47:ba:37:3b:a9:ce:4a: 75:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FD:29:70:29:73:A8:D8:2C:F5:13:2C:62:C7:64:EC:FE:5D:C4:9E X509v3 Authority Key Identifier: keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:23:f1:12:be:53:8c:46:33:b7:fd:58:da:55:aa:34:34:db: a0:95:77:bf:36:db:1b:c0:d7:25:e1:86:81:aa:69:62:01:76: 14:b9:d7:d0:e8:98:cf:e9:48:e0:7a:55:21:3b:33:6e:40:79: 4f:5d:24:44:b6:b2:4b:65:44:97:cc:f4:a5:a8:b5:b2:05:9d: 5b:eb:a8:e6:b5:b6:41:fd:d5:2b:c4:7e:79:b3:7e:14:e6:ec: ba:11:69:43:44:0d:d8:2d:ef:96:0a:47:d7:b7:f8:cf:c1:f0: f0:c5:90:5e:30:f5:99:50:f7:91:0a:2d:07:23:a3:25:19:e5: f1:9f:08:55:78:8b:20:05:62:6a:93:2b:49:f6:c6:30:41:82: 6b:e6:4b:4f:4e:8c:50:eb:7a:ec:0e:51:db:37:58:2d:1a:35: 26:46:ac:d5:20:6f:d9:3b:16:db:ca:a2:6b:06:85:36:36:a8: 64:34:f0:9e:2e:3b:64:d1:ca:5c:a0:79:53:c3:2d:88:eb:ed: 2a:07:f6:2d:91:01:f4:e4:b2:54:2a:c0:2a:35:80:df:db:83: 0e:3d:9b:80:ed:d1:dd:b6:8b:9d:c6:a3:33:5b:9b:0e:fa:e5: 59:e7:a6:67:81:8b:2e:4f:12:a3:91:0d:ef:41:5c:ef:92:29: c0:24:97:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWklp6QFjB/ambIDTGaHrhCwQbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdGQjlC NDEyOTQzNDAeFw0yNjA3MjAxNzQ4MzhaFw0yNjA3MjExODU2MzhaMDMxMTAvBgNV BAMTKEM3RkQyOTcwMjk3M0E4RDgyQ0Y1MTMyQzYyQzc2NEVDRkU1REM0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XoXrkg/qkPmkXUTbJSAe/eLp bvK6yVl+v0Mbb+L6I3CXhyiJAeK3U4kL6BHd0pOUj+/xTmijWOXPM1KOsX0s0UBY JSDVBHYUJ0iQfat7TTEEFp6gr6u3TCN49aVz8WgPXiNmftcaQ+x/+IDYSkNLQwN7 mXOkpcWd+buRrdLhq23Rws1BBmw5P9pAmfDEGrqdu8YA29AkJxIgJjAzBqbXLZ1A kp2q/FwOlueufS0W1IdAu+d+8HfS87aShul8F0hlx+BJHUWwqBHzYEow0AmkBmV6 7j+hw5aP1oAGwDWig8VUC+xvZ8B28RyZ3/3zMnUGhXoLQn3WR7o3O6nOSnWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx/0pcClzqNgs9RMsYsdk7P5dxJ4wHwYDVR0j BBgwFoAUo/x5jNcRrgho8jWj6nZ/ubQSlDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDMxYTk0MjYtM2MzNS00NzBlLWJmMzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENE NzExQUUwODY4RjIzNUEzRUE3NjdGQjlCNDEyOTQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0ZDNzk4Q0Q3MTFBRTA4NjhGMjM1QTNFQTc2N0ZCOUI0MTI5 NDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdG QjlCNDEyOTQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsj8RK+U4xGM7f9WNpVqjQ026CVd7822xvA 1yXhhoGqaWIBdhS519DomM/pSOB6VSE7M25AeU9dJES2sktlRJfM9KWotbIFnVvr qOa1tkH91SvEfnmzfhTm7LoRaUNEDdgt75YKR9e3+M/B8PDFkF4w9ZlQ95EKLQcj oyUZ5fGfCFV4iyAFYmqTK0n2xjBBgmvmS09OjFDreuwOUds3WC0aNSZGrNUgb9k7 FtvKomsGhTY2qGQ08J4uO2TRylygeVPDLYjr7SoH9i2RAfTkslQqwCo1gN/bgw49 m4Dt0d22i53GozNbmw765VnnpmeBiy5PEqORDe9BXO+SKcAkl1w= -----END CERTIFICATE-----Generated at Tue Jul 21 06:11:44 2026 by rpki-client