$ rpki-client -vvvf rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft File: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft (raw, json) Hash identifier: pHBZQADTuigyUvGYTuveVoh83QuN0JuScsbhw5cRvzw= Subject key identifier: A3:8D:49:E9:7B:6B:1B:CA:1D:DA:80:8A:93:82:34:8B:F5:DE:DB:95 Authority key identifier: 3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B Certificate issuer: /CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Certificate serial: 6FF3986024F5DD78309527883A8F57BFD12DF298 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 16:33:11 +0000 Manifest this update: Wed 02 Sep 2026 16:28:11 +0000 Manifest next update: Thu 03 Sep 2026 17:53:11 +0000 Files and hashes: 1: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (hash: IzKZnVRhi3vGvMtZ1nGW6jpAgrjEBqrGZ0c+G4cVeuM=) 2: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl (hash: PRZriwOhGyulO4V0OcnvqRsw639pewur45HTqWBiIJc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 17:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f3:98:60:24:f5:dd:78:30:95:27:88:3a:8f:57:bf:d1:2d:f2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Validity Not Before: Sep 2 16:28:11 2026 GMT Not After : Sep 3 17:53:11 2026 GMT Subject: CN=A38D49E97B6B1BCA1DDA808A9382348BF5DEDB95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:c6:2a:11:de:7e:eb:27:ad:49:90:3d:0b: 12:f3:5c:5c:1c:95:b0:e7:d2:26:58:14:ff:ac:8e: c2:63:73:a7:7e:44:6d:db:a8:1c:46:88:f0:c6:52: 78:83:63:09:74:17:96:45:6c:8a:bd:b6:0d:d8:59: 73:8f:e7:b8:d9:22:2b:5b:45:94:d3:8e:d9:7e:91: 4d:8e:77:54:cf:a4:5e:ed:18:3d:8b:c3:06:87:eb: 2b:13:16:f5:8e:e2:0b:86:7b:c1:ca:4a:97:4e:22: 1b:0a:d3:0f:a9:8d:d0:37:60:8d:b3:94:32:53:b1: 1b:95:6f:78:e7:c5:c4:e6:72:91:d8:26:31:00:4f: 72:81:16:78:68:17:a6:35:45:8e:fa:93:11:07:a5: 05:b1:b7:8a:ef:e7:01:2d:eb:40:e7:ee:54:25:5e: 60:33:06:e9:3b:d8:87:fc:a5:49:e3:96:04:9d:1d: 48:7d:94:36:b7:08:0a:4c:21:f6:a2:91:37:ac:97: 6b:d4:80:10:c9:38:67:c9:a3:09:d6:05:61:a7:a9: a7:06:05:e3:2d:6f:36:b7:fa:e4:bb:6e:54:cb:d0: 15:1f:3e:b1:2f:04:8e:7c:45:8b:77:cf:1c:e4:c8: 88:4d:f9:ab:ca:38:21:5e:55:7d:83:3f:35:ff:14: af:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8D:49:E9:7B:6B:1B:CA:1D:DA:80:8A:93:82:34:8B:F5:DE:DB:95 X509v3 Authority Key Identifier: keyid:3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a8:8d:4a:12:0f:aa:36:dd:9a:af:e0:da:0e:8f:7a:81:10: 99:12:46:4c:5a:5a:fa:43:7f:30:cf:9a:14:6c:ac:69:b2:7a: 25:e7:d0:9f:70:fb:73:09:23:26:71:48:67:0d:60:95:b7:92: b1:08:00:56:2d:51:34:e5:66:10:9a:47:e1:f6:be:e8:f9:6b: ff:2e:47:05:a7:d8:2a:d9:92:25:b5:6d:03:94:3e:c7:f2:be: fe:50:4a:22:33:d5:5b:50:35:cf:19:92:0c:4a:3d:b3:02:6b: 84:46:13:bd:6f:5b:8e:dc:48:a4:98:e9:c3:49:45:50:3a:12: 47:e5:6f:8f:c9:19:77:0d:aa:fb:ee:db:6b:32:d0:83:cb:34: 7e:65:15:81:2a:a6:ca:8c:3b:3d:f3:e0:4b:06:99:65:81:1b: 6b:11:dd:ba:30:e8:6e:6d:c4:03:d0:91:61:55:7c:a6:74:40: 9c:18:4d:ca:31:a2:4e:0e:f3:9f:ba:63:c7:e6:ba:e3:0b:06: 0c:04:28:4e:ca:ab:8f:f7:dc:ee:46:a3:9e:89:0a:c6:5f:3f: 69:10:26:b9:bb:fb:cf:71:37:66:a5:c6:d9:c8:a9:0e:7d:70: 63:e6:35:72:43:96:c9:9b:aa:d3:5c:69:f2:20:52:bb:6c:f9: 89:e2:8a:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/OYYCT13XgwlSeIOo9Xv9Et8pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMx RTc1QUUxQjAeFw0yNjA5MDIxNjI4MTFaFw0yNjA5MDMxNzUzMTFaMDMxMTAvBgNV BAMTKEEzOEQ0OUU5N0I2QjFCQ0ExRERBODA4QTkzODIzNDhCRjVERURCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfScYqEd5+6yetSZA9CxLzXFwc lbDn0iZYFP+sjsJjc6d+RG3bqBxGiPDGUniDYwl0F5ZFbIq9tg3YWXOP57jZIitb RZTTjtl+kU2Od1TPpF7tGD2LwwaH6ysTFvWO4guGe8HKSpdOIhsK0w+pjdA3YI2z lDJTsRuVb3jnxcTmcpHYJjEAT3KBFnhoF6Y1RY76kxEHpQWxt4rv5wEt60Dn7lQl XmAzBuk72If8pUnjlgSdHUh9lDa3CApMIfaikTesl2vUgBDJOGfJownWBWGnqacG BeMtbza3+uS7blTL0BUfPrEvBI58RYt3zxzkyIhN+avKOCFeVX2DPzX/FK9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo41J6XtrG8od2oCKk4I0i/Xe25UwHwYDVR0j BBgwFoAUOoJe31GIqIi8zRnzXqg+Yx51rhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTczYjk1OWUtZmY1Mi00MDI4LWI1MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1 MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMxRTc1QUUxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTgyNUVERjUxODhBODg4QkNDRDE5RjM1RUE4M0U2MzFFNzVB RTFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTczYjk1OWUtZmY1Mi00MDI4LWI1 MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNF NjMxRTc1QUUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2ojUoSD6o23Zqv4NoOj3qBEJkSRkxaWvpD fzDPmhRsrGmyeiXn0J9w+3MJIyZxSGcNYJW3krEIAFYtUTTlZhCaR+H2vuj5a/8u RwWn2CrZkiW1bQOUPsfyvv5QSiIz1VtQNc8ZkgxKPbMCa4RGE71vW47cSKSY6cNJ RVA6Ekflb4/JGXcNqvvu22sy0IPLNH5lFYEqpsqMOz3z4EsGmWWBG2sR3bow6G5t xAPQkWFVfKZ0QJwYTcoxok4O85+6Y8fmuuMLBgwEKE7Kq4/33O5Go56JCsZfP2kQ Jrm7+89xN2alxtnIqQ59cGPmNXJDlsmbqtNcafIgUrts+Yniirw= -----END CERTIFICATE-----Generated at Thu Sep 3 09:48:37 2026 by rpki-client