$ rpki-client -vvvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json) Hash identifier: tjPC1OOZArIoZCxcX0K5ZRvupcYwgO2gBY6JhH2EN9g= Subject key identifier: AC:56:A3:43:35:ED:93:4F:92:8F:D9:CD:D4:01:85:3F:37:C7:FB:3E Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 57F76E4B682C9C31F4DC2E671E4344987CC21CDA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft Manifest number: A4 Signing time: Thu 03 Sep 2026 00:18:27 +0000 Manifest this update: Thu 03 Sep 2026 00:13:27 +0000 Manifest next update: Fri 04 Sep 2026 02:47:27 +0000 Files and hashes: 1: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=) 2: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: IYm7XRJDR+xx+3naDTYgMUvA/J1+UxVTfB67DwQQFiY=) 3: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=) 4: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 02:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f7:6e:4b:68:2c:9c:31:f4:dc:2e:67:1e:43:44:98:7c:c2:1c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: Sep 3 00:13:27 2026 GMT Not After : Sep 4 02:47:27 2026 GMT Subject: CN=AC56A34335ED934F928FD9CDD401853F37C7FB3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:28:a6:4d:91:e5:84:a1:99:89:e9:73:3e: 70:24:5b:48:f4:c4:25:1a:81:c0:56:1d:75:b0:35: 98:77:63:c5:e2:5f:02:11:2f:e4:da:ae:fc:14:7c: ad:50:50:f6:23:c6:c4:42:ac:37:18:e8:c2:a8:d3: 40:93:4e:27:41:34:77:d2:57:98:c1:72:d2:63:11: ad:5d:27:02:f0:20:0b:a9:5c:84:2d:4d:40:30:6f: ac:a3:42:6b:8d:38:12:c5:c1:a7:b1:72:0f:e1:4f: 7d:b5:44:56:31:3a:4e:2f:32:ef:ef:30:b6:48:54: 71:42:77:0d:30:6b:e0:b4:f9:2c:c9:b5:2b:de:67: d7:a6:27:e0:d2:5b:d0:dc:0e:5f:30:6e:f2:0d:3e: d9:9b:02:cb:50:71:17:0e:61:58:4f:8f:72:7a:09: b6:4c:e2:77:0b:30:80:e5:e8:88:eb:3e:30:c4:82: 02:23:9d:aa:d8:58:3b:da:c0:49:6c:90:26:84:a0: 69:6e:f1:b7:77:13:db:79:ff:f3:c3:86:7d:2d:bb: bd:cc:ee:2d:b8:6d:ff:f6:1e:bf:36:09:f0:8e:73: bb:cb:65:93:97:b9:99:a5:18:64:50:c2:61:12:65: 0b:a1:82:96:d4:ed:9c:0e:e9:2b:71:a8:8e:dd:c3: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:56:A3:43:35:ED:93:4F:92:8F:D9:CD:D4:01:85:3F:37:C7:FB:3E X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:eb:79:68:f5:1a:89:06:81:46:01:fe:f1:58:67:a8:05:9d: 0d:ad:35:a7:4b:61:c1:f9:b4:fb:53:dd:51:eb:9f:98:3f:ef: 6f:5f:11:f1:05:a9:94:19:b9:f1:c0:f7:0b:2e:00:75:6d:ea: 4c:ea:ec:63:b7:01:87:33:3e:e3:8d:11:58:f8:72:d9:ad:8c: f0:4d:0f:a7:a4:a7:65:88:76:32:98:0f:43:a6:61:a1:fb:01: c6:5b:15:e8:18:4f:ca:09:14:82:3b:c9:1e:76:42:87:be:24: 77:1e:b2:13:68:fe:28:9f:f0:3f:0d:4c:bd:51:fd:7c:3f:bb: 1f:d4:ea:2e:e0:e0:1a:b1:09:1e:11:27:8c:33:57:db:e2:51: ff:5a:63:19:66:d1:47:d3:1f:31:47:f2:91:2b:2d:d5:05:00: 44:69:c6:ea:c7:c3:fe:5e:1e:68:96:fc:61:9c:92:22:61:be: 0d:c8:4e:86:27:35:79:82:09:45:83:3e:4f:d3:1a:93:83:f6: e4:23:c3:bf:87:fb:e7:92:3d:3b:43:ee:e3:80:69:ef:74:d5: 71:d2:9c:e4:10:4a:92:17:df:c1:9d:2c:e8:94:f5:11:79:b1: 21:00:4e:f1:d3:18:a4:08:c9:b7:86:1a:bc:46:79:51:3e:00: 42:94:e0:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/duS2gsnDH03C5nHkNEmHzCHNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx MjczMDUzQzAeFw0yNjA5MDMwMDEzMjdaFw0yNjA5MDQwMjQ3MjdaMDMxMTAvBgNV BAMTKEFDNTZBMzQzMzVFRDkzNEY5MjhGRDlDREQ0MDE4NTNGMzdDN0ZCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOdiimTZHlhKGZielzPnAkW0j0 xCUagcBWHXWwNZh3Y8XiXwIRL+TarvwUfK1QUPYjxsRCrDcY6MKo00CTTidBNHfS V5jBctJjEa1dJwLwIAupXIQtTUAwb6yjQmuNOBLFwaexcg/hT321RFYxOk4vMu/v MLZIVHFCdw0wa+C0+SzJtSveZ9emJ+DSW9DcDl8wbvINPtmbAstQcRcOYVhPj3J6 CbZM4ncLMIDl6IjrPjDEggIjnarYWDvawElskCaEoGlu8bd3E9t5//PDhn0tu73M 7i24bf/2Hr82CfCOc7vLZZOXuZmlGGRQwmESZQuhgpbU7ZwO6StxqI7dw3BrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrFajQzXtk0+Sj9nN1AGFPzfH+z4wHwYDVR0j BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1 OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDreWj1GokGgUYB/vFYZ6gFnQ2tNadLYcH5 tPtT3VHrn5g/729fEfEFqZQZufHA9wsuAHVt6kzq7GO3AYczPuONEVj4ctmtjPBN D6ekp2WIdjKYD0OmYaH7AcZbFegYT8oJFII7yR52Qoe+JHceshNo/iif8D8NTL1R /Xw/ux/U6i7g4BqxCR4RJ4wzV9viUf9aYxlm0UfTHzFH8pErLdUFAERpxurHw/5e HmiW/GGckiJhvg3IToYnNXmCCUWDPk/TGpOD9uQjw7+H++eSPTtD7uOAae901XHS nOQQSpIX38GdLOiU9RF5sSEATvHTGKQIybeGGrxGeVE+AEKU4BA= -----END CERTIFICATE-----Generated at Thu Sep 3 18:58:02 2026 by rpki-client