$ rpki-client -vvvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft File: A3FC798CD711AE0868F235A3EA767FB9B4129434.mft (raw, json) Hash identifier: miVbi1yUIvjCVHC+10K4iQXNPjl1PM9ata8n3aDyX30= Subject key identifier: F6:31:A5:DA:87:61:47:47:CF:EA:0D:C8:90:70:7D:8E:92:2B:82:F2 Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 Certificate issuer: /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Certificate serial: 7C7218B24B098CE36798333BE3DC009F82342D1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:34:06 +0000 Manifest this update: Thu 17 Sep 2026 04:29:06 +0000 Manifest next update: Fri 18 Sep 2026 06:29:06 +0000 Files and hashes: 1: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (hash: PDocKRP/axnGK/2hTz0jcOJCSSzSK6wE612ykd5rfc4=) 2: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: 6TaFuBiM6linhPB1ZFPQ8ukQQbZ31lu3G23g8rzDbhE=) 3: A3FC798CD711AE0868F235A3EA767FB9B4129434.crl (hash: +ML6oy54U98CUIaoXcMNhzfT3m4bsK3Cl0uSfk0c+HQ=) 4: 3130332e3137362e34342e302f32342d3234203d3e20313437313238.roa (hash: FHfHZKhnV6nBPDhXGsYl2nhVRShI8kqNDLyrWzHCF1g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:72:18:b2:4b:09:8c:e3:67:98:33:3b:e3:dc:00:9f:82:34:2d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434 Validity Not Before: Sep 17 04:29:06 2026 GMT Not After : Sep 18 06:29:06 2026 GMT Subject: CN=F631A5DA87614747CFEA0DC890707D8E922B82F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f3:f1:bd:6e:62:f2:9e:ec:02:c8:e4:0c:de: af:a9:ee:96:ae:34:76:65:27:63:c9:1a:e8:ec:3c: f3:51:f0:60:0c:f9:bc:cd:d6:c8:c1:24:94:0b:1e: f4:a6:03:76:55:cd:fe:a3:5f:85:5b:91:d6:b1:a5: 1c:53:3e:2f:f0:a1:88:d6:05:5c:c6:31:a0:82:26: 18:21:5d:d7:12:be:ca:32:6c:ac:c1:51:53:04:8a: 10:cc:f0:d5:de:47:a5:c6:9f:4a:da:bb:f8:84:67: ec:8b:79:64:69:77:bd:ff:31:18:a3:71:a3:5b:33: 93:9e:a5:62:6f:fe:a5:e0:51:19:15:52:d4:5c:a6: 64:82:43:c7:de:e3:4c:37:2b:09:6d:68:ce:87:14: 7d:9c:cd:a3:8a:36:56:49:3a:87:21:42:dc:38:32: a6:e5:86:ac:ab:19:03:eb:4a:f6:61:5e:d9:5d:a0: f7:7f:37:cb:f0:37:4f:04:40:32:0d:b7:98:b6:d7: c2:42:d3:63:9d:46:d9:38:60:54:62:99:e1:4b:22: 4d:86:6a:d6:1b:74:31:c5:40:6e:f1:ad:7f:86:ba: 61:39:f8:7d:d6:89:23:6f:be:07:fb:dc:2f:d8:b1: d0:06:17:56:f6:dc:0a:14:da:88:e9:55:00:f0:e1: cb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:31:A5:DA:87:61:47:47:CF:EA:0D:C8:90:70:7D:8E:92:2B:82:F2 X509v3 Authority Key Identifier: keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c5:cb:28:99:97:d5:62:ee:a5:cb:bb:d3:a0:69:b7:99:9b: d8:f0:64:38:e7:56:f8:c6:62:c1:fa:d6:c3:58:b1:4a:4f:22: 2d:a1:1c:56:25:c7:a1:12:81:1d:1e:e3:ff:a8:82:7f:7f:06: 27:be:40:db:ca:e7:89:83:05:61:69:bb:c3:62:6c:14:df:ce: 46:d1:2e:0c:d7:a6:cf:b8:97:c2:2e:9e:7e:42:fa:2d:f1:80: 3b:71:cf:0f:79:eb:f7:9b:20:cf:d9:b0:f0:10:8a:33:9b:41: b8:c7:b5:44:88:c8:36:52:ac:91:0f:be:05:49:3e:e9:9e:b1: 9d:98:2d:09:c6:8d:d1:da:22:44:36:14:9b:c3:a4:dd:3e:44: bc:da:b6:f2:93:25:81:25:1c:5b:1d:ad:bd:c0:ee:19:f1:64: 42:18:ca:5a:db:21:16:fc:ec:bf:0b:07:34:9f:6d:e1:7c:bf: b5:99:22:66:12:74:06:92:fc:ea:70:11:58:4a:39:4e:c5:a8: 8a:b7:bc:be:6a:e4:25:83:e5:80:1c:b0:98:b7:66:63:42:9e: af:2d:5c:df:3d:b7:ab:44:17:6c:48:77:94:65:f8:3b:5a:0e: be:6e:e9:2d:01:cb:1c:22:ed:b3:e8:1c:7d:b2:14:11:eb:8b: 93:34:3e:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfHIYsksJjONnmDM749wAn4I0LRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdGQjlC NDEyOTQzNDAeFw0yNjA5MTcwNDI5MDZaFw0yNjA5MTgwNjI5MDZaMDMxMTAvBgNV BAMTKEY2MzFBNURBODc2MTQ3NDdDRkVBMERDODkwNzA3RDhFOTIyQjgyRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8/G9bmLynuwCyOQM3q+p7pau NHZlJ2PJGujsPPNR8GAM+bzN1sjBJJQLHvSmA3ZVzf6jX4VbkdaxpRxTPi/woYjW BVzGMaCCJhghXdcSvsoybKzBUVMEihDM8NXeR6XGn0rau/iEZ+yLeWRpd73/MRij caNbM5OepWJv/qXgURkVUtRcpmSCQ8fe40w3KwltaM6HFH2czaOKNlZJOochQtw4 MqblhqyrGQPrSvZhXtldoPd/N8vwN08EQDINt5i218JC02OdRtk4YFRimeFLIk2G atYbdDHFQG7xrX+GumE5+H3WiSNvvgf73C/YsdAGF1b23AoU2ojpVQDw4cvRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9jGl2odhR0fP6g3IkHB9jpIrgvIwHwYDVR0j BBgwFoAUo/x5jNcRrgho8jWj6nZ/ubQSlDQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDMxYTk0MjYtM2MzNS00NzBlLWJmMzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENE NzExQUUwODY4RjIzNUEzRUE3NjdGQjlCNDEyOTQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0ZDNzk4Q0Q3MTFBRTA4NjhGMjM1QTNFQTc2N0ZCOUI0MTI5 NDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvQTNGQzc5OENENzExQUUwODY4RjIzNUEzRUE3NjdG QjlCNDEyOTQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvFyyiZl9Vi7qXLu9OgabeZm9jwZDjnVvjG YsH61sNYsUpPIi2hHFYlx6ESgR0e4/+ogn9/Bie+QNvK54mDBWFpu8NibBTfzkbR LgzXps+4l8Iunn5C+i3xgDtxzw956/ebIM/ZsPAQijObQbjHtUSIyDZSrJEPvgVJ PumesZ2YLQnGjdHaIkQ2FJvDpN0+RLzatvKTJYElHFsdrb3A7hnxZEIYylrbIRb8 7L8LBzSfbeF8v7WZImYSdAaS/OpwEVhKOU7FqIq3vL5q5CWD5YAcsJi3ZmNCnq8t XN89t6tEF2xId5Rl+DtaDr5u6S0Byxwi7bPoHH2yFBHri5M0Pls= -----END CERTIFICATE-----Generated at Thu Sep 17 15:50:34 2026 by rpki-client