$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft File: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft (raw, json) Hash identifier: 8O5vnp67kpimdyzIib5N4oiVMgI7gQf7T7t/9U0Cjjg= Subject key identifier: B0:3B:63:DA:26:60:E7:61:52:E5:6D:95:30:37:0A:80:94:EA:7D:3C Authority key identifier: 3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 Certificate issuer: /CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Certificate serial: 0BBD96FCB0E9EEA469DCCF840663FE9BF9D96D8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft Manifest number: EB Signing time: Mon 26 Oct 2026 04:01:55 +0000 Manifest this update: Mon 26 Oct 2026 03:56:55 +0000 Manifest next update: Tue 27 Oct 2026 05:12:55 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: pf1zgGEHpfn1H78lzdIyJ+7RwP4PRuY4T6Xp4PahUm8=) 2: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: 96ge8Etcm2V6UZTk31GX2s/Ds/fuLYPEHIz1Z0SJfzE=) 3: 3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl (hash: CySLakg6pXnW2FaQPj5e0g64SmDmbl7MPjriR8BHOEs=) 4: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: fotOvd+PWoydj7VIP8y6JU/MYhbVEjOQqbEDgYpaLFU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 05:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:bd:96:fc:b0:e9:ee:a4:69:dc:cf:84:06:63:fe:9b:f9:d9:6d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A52A6EF45732F82D943593A10C7F64A6D4FADD4 Validity Not Before: Oct 26 03:56:55 2026 GMT Not After : Oct 27 05:12:55 2026 GMT Subject: CN=B03B63DA2660E76152E56D9530370A8094EA7D3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:f3:14:50:31:38:ff:3d:3d:15:58:f9:4b: 87:d5:b0:21:35:66:81:93:ee:d6:16:35:54:86:ab: e9:c0:52:95:ea:63:09:60:8e:24:2f:54:13:d1:32: bc:6b:e0:5b:29:74:29:7b:80:8a:1d:e1:6b:20:4d: cf:d8:79:a1:d3:30:e5:d5:00:9b:fe:a8:76:a1:cd: 44:55:e7:d6:38:96:65:8d:55:7a:69:35:94:b1:9a: 22:8d:89:5f:2c:c2:51:36:1f:49:e2:66:da:04:cd: 8a:55:ec:a4:81:c3:b9:42:5b:23:dd:0e:1f:37:c0: 34:92:12:7b:77:d1:43:0b:c3:71:3e:df:28:b3:6c: d6:06:d9:3d:36:63:3a:3b:44:9f:f5:6a:66:d5:56: 49:e8:c1:13:9f:e6:39:96:f8:1e:16:13:dc:4f:07: 4a:83:50:5b:a6:71:68:43:b3:2f:79:15:24:5e:8c: a9:fa:f9:81:f2:c6:6d:f9:a1:b6:a2:16:65:18:b2: 1a:de:33:e1:7d:4f:83:b9:85:51:7d:d3:f7:f3:17: 3a:24:2d:19:04:b4:d0:c1:d9:e6:7d:6e:4c:65:70: ab:97:dd:ac:cd:69:27:41:a3:28:78:7b:24:9f:68: 01:40:e5:aa:da:ce:12:4e:bb:fa:3f:54:cc:c8:a5: 1b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3B:63:DA:26:60:E7:61:52:E5:6D:95:30:37:0A:80:94:EA:7D:3C X509v3 Authority Key Identifier: keyid:3A:52:A6:EF:45:73:2F:82:D9:43:59:3A:10:C7:F6:4A:6D:4F:AD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3A52A6EF45732F82D943593A10C7F64A6D4FADD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:33:10:55:9b:22:da:cd:fd:02:17:06:ad:c1:6b:93:39:a3: 73:de:8d:f4:c5:c5:e4:fc:4e:87:97:98:7b:ad:e3:09:b6:a6: 74:74:38:16:da:9d:b3:b1:5e:bb:4b:af:1f:0b:97:a0:fa:36: 04:61:07:6a:88:7a:71:c6:31:55:3e:2e:5b:7e:a1:db:5d:27: f9:6c:b1:58:c2:a7:89:78:54:09:f9:97:dc:f8:6a:a1:a6:25: d1:4d:54:a4:d2:25:aa:6d:91:81:14:6d:97:ae:73:b3:5e:c3: 6e:ce:46:a0:a4:04:2e:00:08:c5:bc:38:34:26:eb:73:02:c7: ca:fb:68:b6:fb:29:75:a7:27:d7:b8:fd:47:49:1c:fd:64:f8: 5d:6a:df:96:6b:f3:fc:3a:70:11:4c:b1:d1:e7:31:fe:a0:e9: e4:79:82:bb:24:7e:b0:d1:14:a6:6e:3d:28:06:88:bd:bc:cb: 32:e8:f2:89:95:7e:95:7f:6e:c3:7e:59:ff:5a:ac:c2:64:32: 3c:8d:f7:cf:78:34:9f:2f:b4:34:5b:66:48:fa:96:64:68:0d: a9:e4:d1:e5:34:70:41:77:4c:d9:c6:0d:c8:74:a0:a8:6b:d2: d8:90:a9:e3:26:b2:44:b7:43:c7:a3:89:d4:e1:47:db:92:51: 32:a9:1d:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC72W/LDp7qRp3M+EBmP+m/nZbYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2 RDRGQURENDAeFw0yNjEwMjYwMzU2NTVaFw0yNjEwMjcwNTEyNTVaMDMxMTAvBgNV BAMTKEIwM0I2M0RBMjY2MEU3NjE1MkU1NkQ5NTMwMzcwQTgwOTRFQTdEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBofMUUDE4/z09FVj5S4fVsCE1 ZoGT7tYWNVSGq+nAUpXqYwlgjiQvVBPRMrxr4FspdCl7gIod4WsgTc/YeaHTMOXV AJv+qHahzURV59Y4lmWNVXppNZSxmiKNiV8swlE2H0niZtoEzYpV7KSBw7lCWyPd Dh83wDSSEnt30UMLw3E+3yizbNYG2T02Yzo7RJ/1ambVVknowROf5jmW+B4WE9xP B0qDUFumcWhDsy95FSRejKn6+YHyxm35obaiFmUYshreM+F9T4O5hVF90/fzFzok LRkEtNDB2eZ9bkxlcKuX3azNaSdBoyh4eySfaAFA5arazhJOu/o/VMzIpRu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsDtj2iZg52FS5W2VMDcKgJTqfTwwHwYDVR0j BBgwFoAUOlKm70VzL4LZQ1k6EMf2Sm1PrdQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk5YjYwNGYtMTU3OC00YTBiLThmN2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0 NTczMkY4MkQ5NDM1OTNBMTBDN0Y2NEE2RDRGQURENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTUyQTZFRjQ1NzMyRjgyRDk0MzU5M0ExMEM3RjY0QTZENEZB REQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvM0E1MkE2RUY0NTczMkY4MkQ5NDM1OTNBMTBDN0Y2 NEE2RDRGQURENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYzEFWbItrN/QIXBq3Ba5M5o3PejfTFxeT8 ToeXmHut4wm2pnR0OBbanbOxXrtLrx8Ll6D6NgRhB2qIenHGMVU+Llt+odtdJ/ls sVjCp4l4VAn5l9z4aqGmJdFNVKTSJaptkYEUbZeuc7New27ORqCkBC4ACMW8ODQm 63MCx8r7aLb7KXWnJ9e4/UdJHP1k+F1q35Zr8/w6cBFMsdHnMf6g6eR5grskfrDR FKZuPSgGiL28yzLo8omVfpV/bsN+Wf9arMJkMjyN9894NJ8vtDRbZkj6lmRoDank 0eU0cEF3TNnGDch0oKhr0tiQqeMmskS3Q8ejidThR9uSUTKpHRg= -----END CERTIFICATE-----Generated at Mon Oct 26 08:45:51 2026 by rpki-client