$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft File: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft (raw, json) Hash identifier: scg0XctdaJ42c23urXn3kOL2dD6c8gmAKQty4CcYxlg= Subject key identifier: FA:52:B2:FE:56:B1:28:82:0A:88:55:40:83:01:15:66:3B:51:37:F5 Authority key identifier: A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D Certificate issuer: /CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Certificate serial: 130866A6FB99C9055209CEFB4BA9BBD032026A30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 21:54:48 +0000 Manifest this update: Wed 02 Sep 2026 21:49:48 +0000 Manifest next update: Fri 04 Sep 2026 01:13:48 +0000 Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 0G4YBfT8XRPQC+cAerXBYMMW9I/KjiVejVSF2aUT8Xk=) 2: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl (hash: /VAN7a3ZuHTjPiqsBy9DmWfYAgp4d5IgQxUpBc0bHvo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 01:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:08:66:a6:fb:99:c9:05:52:09:ce:fb:4b:a9:bb:d0:32:02:6a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Validity Not Before: Sep 2 21:49:48 2026 GMT Not After : Sep 4 01:13:48 2026 GMT Subject: CN=FA52B2FE56B128820A885540830115663B5137F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:23:5d:5d:3c:0b:bf:d7:51:bf:e0:c3:28:b0: b8:38:af:78:29:7c:0a:de:f0:33:6b:65:34:e1:09: 10:d8:ef:7e:01:1d:4b:c5:b6:44:8b:91:8e:5f:5b: 89:ab:fd:96:d6:0a:f1:df:14:6e:70:5f:76:6d:e1: 1d:a4:8d:71:20:24:f8:44:1c:78:52:3c:f7:71:8e: ff:43:f7:f5:27:4a:56:22:6b:41:da:44:94:8c:c6: d4:49:5e:8d:c5:06:c7:fc:0b:d9:57:e4:df:2f:4c: 63:ed:5d:48:7d:cd:93:58:2b:cb:1c:95:3d:7b:ae: 13:4c:56:a3:f9:54:70:63:0e:8e:82:a3:9b:65:47: 59:8f:f8:99:4a:cf:aa:a3:82:ea:68:08:e6:26:04: 65:4e:05:39:80:45:8c:61:fc:71:62:be:54:f5:7e: fa:ff:01:da:1d:22:2a:e4:b6:af:6b:36:9e:9a:e6: 22:d1:81:23:43:46:2e:a3:12:b6:fb:83:b4:ca:02: 68:9a:26:3d:e3:5b:04:bf:6d:92:d4:66:b5:6a:6e: 8f:b1:c7:c1:9b:12:5b:10:d0:14:ca:20:97:6d:f9: 31:97:f6:f2:86:f1:ed:37:f0:1b:28:37:1c:ca:86: 3a:ba:c6:90:a5:7e:b3:fa:13:af:18:97:83:0a:e1: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:52:B2:FE:56:B1:28:82:0A:88:55:40:83:01:15:66:3B:51:37:F5 X509v3 Authority Key Identifier: keyid:A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e2:05:92:62:a6:a0:ad:c9:bf:a0:9d:78:b9:cf:35:b0:43: fb:b5:04:8c:7d:ee:f9:d8:c4:9a:0f:5d:c2:6b:cf:a9:6b:3a: cf:4d:84:24:31:5b:b0:54:08:4a:16:bf:02:6c:c3:4d:31:51: ee:55:a0:b4:1d:73:8f:e7:14:51:5e:e7:65:e6:ca:d7:46:2f: 64:62:f4:cc:48:8f:b0:09:f6:ae:00:d5:7e:b3:2b:28:3b:24: ad:b6:98:f7:77:f3:7c:de:60:58:58:ee:94:60:2e:58:93:39: ce:5f:9a:8a:d5:d0:6f:0b:77:6c:64:bb:75:96:57:f3:5d:7e: 95:1a:53:02:e1:15:44:35:a3:87:91:c2:bb:48:c7:04:26:05: 50:c3:4a:a3:4d:8f:fd:82:93:17:8b:27:f9:aa:9d:92:9c:b6: b9:93:ef:10:69:bd:92:3b:c2:2c:29:60:da:88:2e:f5:02:3a: 1e:94:d5:fb:12:b1:dd:97:47:5b:56:9c:04:4f:33:b9:1b:30: bc:26:0e:65:f8:82:10:a0:ac:5e:48:ab:d5:81:5f:db:6b:af: 0e:bd:17:6f:84:cb:d6:df:3c:d7:ea:f7:79:33:75:ff:2b:06: 59:5b:50:3b:43:27:41:9b:81:33:da:dc:cf:7e:7d:43:46:bd: b1:c0:d7:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwhmpvuZyQVSCc77S6m70DICajAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZFQzRC RkQwMkY0RDAeFw0yNjA5MDIyMTQ5NDhaFw0yNjA5MDQwMTEzNDhaMDMxMTAvBgNV BAMTKEZBNTJCMkZFNTZCMTI4ODIwQTg4NTU0MDgzMDExNTY2M0I1MTM3RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgI11dPAu/11G/4MMosLg4r3gp fAre8DNrZTThCRDY734BHUvFtkSLkY5fW4mr/ZbWCvHfFG5wX3Zt4R2kjXEgJPhE HHhSPPdxjv9D9/UnSlYia0HaRJSMxtRJXo3FBsf8C9lX5N8vTGPtXUh9zZNYK8sc lT17rhNMVqP5VHBjDo6Co5tlR1mP+JlKz6qjgupoCOYmBGVOBTmARYxh/HFivlT1 fvr/AdodIirktq9rNp6a5iLRgSNDRi6jErb7g7TKAmiaJj3jWwS/bZLUZrVqbo+x x8GbElsQ0BTKIJdt+TGX9vKG8e038BsoNxzKhjq6xpClfrP6E68Yl4MK4QSbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lKy/laxKIIKiFVAgwEVZjtRN/UwHwYDVR0j BBgwFoAUo0Ecd7XlTyOTetCQgy7+xL/QL00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRjNmY3NzAtNjg2YS00NWVmLThkZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdC NUU1NEYyMzkzN0FEMDkwODMyRUZFQzRCRkQwMkY0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzQxMUM3N0I1RTU0RjIzOTM3QUQwOTA4MzJFRkVDNEJGRDAy RjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZF QzRCRkQwMkY0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHiBZJipqCtyb+gnXi5zzWwQ/u1BIx97vnY xJoPXcJrz6lrOs9NhCQxW7BUCEoWvwJsw00xUe5VoLQdc4/nFFFe52XmytdGL2Ri 9MxIj7AJ9q4A1X6zKyg7JK22mPd383zeYFhY7pRgLliTOc5fmorV0G8Ld2xku3WW V/NdfpUaUwLhFUQ1o4eRwrtIxwQmBVDDSqNNj/2CkxeLJ/mqnZKctrmT7xBpvZI7 wiwpYNqILvUCOh6U1fsSsd2XR1tWnARPM7kbMLwmDmX4ghCgrF5Iq9WBX9trrw69 F2+Ey9bfPNfq93kzdf8rBllbUDtDJ0GbgTPa3M9+fUNGvbHA1wA= -----END CERTIFICATE-----Generated at Thu Sep 3 14:16:40 2026 by rpki-client