$ rpki-client -vvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft File: A3FC798CD711AE0868F235A3EA767FB9B4129434.mft (raw, json) Hash identifier: +9rlQoDmEQeL17FjO9MYn2l1+tAxXdugZZMAoQCBRi0= Subject key identifier: 28:E1:1D:09:35:6D:D7:78:B6:8E:97:3F:F2:8A:87:E8:D2:3B:34:17 Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 Certificate issuer: /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Certificate serial: 5CBFF8839D0E334D216EF0BE05492D1FEA5A99D4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:31:03 +0000 Manifest this update: Tue 02 Jun 2026 21:26:03 +0000 Manifest next update: Wed 03 Jun 2026 23:20:03 +0000 Files and hashes: 1: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: 6TaFuBiM6linhPB1ZFPQ8ukQQbZ31lu3G23g8rzDbhE=) 2: A3FC798CD711AE0868F235A3EA767FB9B4129434.crl (hash: x68sVxqaU4kBRYwAqAE6z7Ms1wlTiZokIXvn4qofajs=) 3: 3130332e3137362e34342e302f32342d3234203d3e20313437313238.roa (hash: FHfHZKhnV6nBPDhXGsYl2nhVRShI8kqNDLyrWzHCF1g=) 4: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (hash: PDocKRP/axnGK/2hTz0jcOJCSSzSK6wE612ykd5rfc4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:bf:f8:83:9d:0e:33:4d:21:6e:f0:be:05:49:2d:1f:ea:5a:99:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Validity Not Before: Jun 2 21:26:03 2026 GMT Not After : Jun 3 23:20:03 2026 GMT Subject: CN=28E11D09356DD778B68E973FF28A87E8D23B3417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:7f:46:b5:7d:42:99:9a:b7:db:f0:b3:d9: e9:19:13:72:a5:f5:59:ba:1e:02:1b:f5:25:80:cf: af:21:13:ca:2b:97:1d:40:55:4b:6d:e1:e5:00:a6: d4:22:91:e4:d9:22:55:95:98:b1:d3:ab:f7:20:b0: 14:ca:b4:b7:3c:15:bc:36:d6:bf:eb:c6:04:47:99: b2:88:1d:0d:4b:85:75:e9:9d:31:c9:ac:73:f8:82: 4c:db:10:99:56:8a:f4:6d:5f:56:ee:26:33:75:35: 8f:ce:dc:35:7c:95:54:c0:e8:e1:29:b5:3d:79:89: fe:bb:d3:4b:1a:e2:89:f2:80:37:ba:2b:f5:fd:77: 3d:eb:19:b8:3c:e7:6e:2f:80:7e:db:a6:37:39:51: 3a:aa:75:24:1f:33:c8:cf:3e:18:0e:78:91:a4:ff: 29:de:5e:b9:f7:c8:07:e0:df:ba:8d:1c:bb:c4:8e: ab:1e:9e:a7:4e:5f:d7:c7:e8:c2:63:23:3f:a5:aa: a3:8f:e2:68:08:82:09:ed:ad:a2:dc:c8:81:4d:21: 39:aa:55:c4:18:7a:10:92:45:eb:87:34:03:5b:e7: 1a:19:e0:61:09:8a:e1:88:d6:da:42:51:32:13:cf: 8d:fe:7a:7a:69:f4:5c:c4:eb:aa:2d:c2:5e:68:61: 5f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E1:1D:09:35:6D:D7:78:B6:8E:97:3F:F2:8A:87:E8:D2:3B:34:17 X509v3 Authority Key Identifier: keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:50:7c:31:0b:d9:ad:22:f1:0c:83:11:b0:40:1b:a0:27:f9: c2:a6:aa:da:5c:b9:a5:97:47:70:83:fe:98:58:61:6c:52:5c: 35:d9:c9:ab:20:6f:70:72:d8:7b:51:63:26:5a:26:18:ea:55: 84:3e:63:4e:9b:28:ed:d9:f8:37:8b:4f:2d:41:71:df:b7:db: c9:0c:c6:0a:94:05:02:42:90:08:d6:c0:7d:b2:43:c9:76:e9: b3:ac:e5:12:00:42:05:ff:a3:36:d7:d0:bc:ac:d7:0d:2d:24: a7:e8:bd:13:b0:5b:c2:00:c3:a0:ba:19:bc:ed:95:b5:d0:7e: bb:6c:7e:8c:42:9c:ac:f7:dd:1b:80:e5:08:5d:35:a3:d3:2b: 35:79:9b:d8:5b:cc:6d:81:03:c7:7a:e3:35:e6:ae:50:e5:e4: 70:aa:71:05:6e:1f:93:fe:e3:7f:ae:4e:a4:e6:17:f0:ae:b2: 7a:6a:3e:2f:2e:92:c7:ae:9e:a4:71:1b:c1:46:7c:d8:5e:23: 9f:73:19:4d:b1:e8:ad:a7:71:6c:63:e8:62:bf:d2:01:97:c2: cb:18:e2:ac:da:a7:9e:a1:f8:d6:f7:65:2e:4c:54:0a:d3:3f: be:44:92:fa:a6:18:e5:44:01:ab:6f:8c:1e:8b:74:d9:02:41: 67:87:41:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXL/4g50OM00hbvC+BUktH+pamdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdGQjlC NDEyOTQzNDAeFw0yNjA2MDIyMTI2MDNaFw0yNjA2MDMyMzIwMDNaMDMxMTAvBgNV BAMTKDI4RTExRDA5MzU2REQ3NzhCNjhFOTczRkYyOEE4N0U4RDIzQjM0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChrn9GtX1CmZq32/Cz2ekZE3Kl 9Vm6HgIb9SWAz68hE8orlx1AVUtt4eUAptQikeTZIlWVmLHTq/cgsBTKtLc8Fbw2 1r/rxgRHmbKIHQ1LhXXpnTHJrHP4gkzbEJlWivRtX1buJjN1NY/O3DV8lVTA6OEp tT15if6700sa4onygDe6K/X9dz3rGbg8524vgH7bpjc5UTqqdSQfM8jPPhgOeJGk /yneXrn3yAfg37qNHLvEjqsenqdOX9fH6MJjIz+lqqOP4mgIggntraLcyIFNITmq VcQYehCSReuHNANb5xoZ4GEJiuGI1tpCUTITz43+enpp9FzE66otwl5oYV/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKOEdCTVt13i2jpc/8oqH6NI7NBcwHwYDVR0j BBgwFoAUo/x5jNcRrgho8jWj6nZ/ubQSlDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDMxYTk0MjYtM2MzNS00NzBlLWJmMzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENE NzExQUUwODY4RjIzNUEzRUE3NjdGQjlCNDEyOTQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0ZDNzk4Q0Q3MTFBRTA4NjhGMjM1QTNFQTc2N0ZCOUI0MTI5 NDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdG QjlCNDEyOTQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9QfDEL2a0i8QyDEbBAG6An+cKmqtpcuaWX R3CD/phYYWxSXDXZyasgb3By2HtRYyZaJhjqVYQ+Y06bKO3Z+DeLTy1Bcd+328kM xgqUBQJCkAjWwH2yQ8l26bOs5RIAQgX/ozbX0Lys1w0tJKfovROwW8IAw6C6Gbzt lbXQfrtsfoxCnKz33RuA5QhdNaPTKzV5m9hbzG2BA8d64zXmrlDl5HCqcQVuH5P+ 43+uTqTmF/CusnpqPi8ukseunqRxG8FGfNheI59zGU2x6K2ncWxj6GK/0gGXwssY 4qzap56h+Nb3ZS5MVArTP75EkvqmGOVEAatvjB6LdNkCQWeHQWk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:53 2026 by rpki-client