$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft File: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft (raw, json) Hash identifier: emIq+1iqekI/+i6fYrw0V20h41tEhHTOane3PRKC7f8= Subject key identifier: C0:A7:75:1C:4F:43:9E:86:43:49:0B:C0:55:8E:3E:EB:8B:1D:99:65 Authority key identifier: A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E Certificate issuer: /CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Certificate serial: 514AE1C5205B4173276D01A3851942F04BF927FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft Manifest number: 9D Signing time: Thu 27 Aug 2026 08:15:46 +0000 Manifest this update: Thu 27 Aug 2026 08:10:46 +0000 Manifest next update: Fri 28 Aug 2026 10:29:46 +0000 Files and hashes: 1: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: qHvmH7kkKUgxVXxeqg/YxT0IJ6BIS+6+UvvwAM7JNvs=) 2: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: bj0wxd5ICBouELscs1c53rXVki6zrAfUoc5PnYBmxBA=) 3: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl (hash: e+eiM3hlYGcvLEM8/e/nIRXWVnRPNrFMadmehQNhXQU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:4a:e1:c5:20:5b:41:73:27:6d:01:a3:85:19:42:f0:4b:f9:27:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Validity Not Before: Aug 27 08:10:46 2026 GMT Not After : Aug 28 10:29:46 2026 GMT Subject: CN=C0A7751C4F439E8643490BC0558E3EEB8B1D9965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:28:97:d5:4a:e0:fe:d3:21:d1:99:d9:e7:e8: 83:c3:60:01:b0:da:0c:d9:46:68:06:fa:32:50:a5: 6e:d9:64:cd:53:a6:2e:37:12:ab:42:d5:05:eb:87: 59:cb:e5:47:b2:e3:ad:c3:16:97:a5:5a:4a:aa:0a: 3c:c4:ce:e9:f5:3e:3b:6a:76:30:8f:4a:c8:46:09: a6:74:f1:53:0e:53:fe:06:44:df:b4:a2:2a:40:f4: c0:cf:43:7b:0b:ba:b1:bd:4b:80:cc:07:43:da:3f: 81:43:fb:6e:c5:33:ea:36:2c:a0:ac:78:86:6e:84: 24:81:e9:29:5c:d7:97:fc:68:86:59:df:0f:89:7d: da:53:cf:2a:b5:e6:57:98:dc:50:50:c2:05:c9:bc: de:09:67:74:67:7b:df:1c:ee:b8:36:70:9e:29:c2: e1:ec:49:bd:4d:ba:00:30:6c:56:3b:0b:12:e9:85: f6:dd:37:4a:63:8f:63:a9:61:6c:22:e7:c3:c5:ca: f6:53:3f:a5:4d:4a:93:62:92:62:a8:1e:ae:94:10: 26:9d:c5:16:8f:fd:8c:b2:b4:d1:0c:af:3b:d3:95: 93:b1:43:48:dc:d4:46:ee:a6:52:57:e6:96:65:3e: 3f:e8:eb:44:d4:41:a2:d8:4b:2f:f1:1c:64:97:aa: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A7:75:1C:4F:43:9E:86:43:49:0B:C0:55:8E:3E:EB:8B:1D:99:65 X509v3 Authority Key Identifier: keyid:A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:26:80:91:3c:ce:e1:19:2a:b8:8a:d7:c2:12:aa:ad:aa:43: 2b:0a:84:62:96:58:5e:d3:d9:bf:fe:38:14:ed:2e:a9:5b:d9: c4:ac:5e:47:f9:f3:c1:de:81:18:53:f6:81:1b:7d:ad:ac:f0: 32:01:76:ff:8c:16:34:d4:c0:4a:b5:c5:e8:d5:47:30:c4:f5: c0:bd:af:50:a8:72:23:87:a6:18:aa:ee:1c:13:33:26:70:9e: 8d:c6:49:b1:42:f6:ea:40:54:44:f2:0b:fb:d1:42:ac:0a:92: c9:d6:82:b1:44:00:30:67:98:0a:d0:3e:35:27:80:c7:67:ab: 84:73:29:95:0f:f2:df:dd:53:19:46:d6:7c:5d:2f:d4:90:e5: 1d:bc:01:02:42:66:66:9a:d5:b2:85:7b:40:27:7a:4c:1f:c9: 0c:20:67:e2:23:fa:33:ef:77:f0:03:72:92:33:83:7f:89:f5: b1:d7:89:49:01:3c:f2:8c:3b:a2:c2:42:f6:11:49:94:4c:ad: 0f:95:bd:01:c6:d8:c2:cd:26:6d:8e:0b:f7:70:ec:6a:30:ce: ff:48:f0:d3:59:40:d0:6a:79:5a:dc:77:09:1f:2b:2c:41:b8: 04:84:4c:47:e3:71:8b:06:50:2d:78:57:38:1d:0c:26:c8:08: c3:8e:30:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUUrhxSBbQXMnbQGjhRlC8Ev5J/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlC NDFCMUMwRTAeFw0yNjA4MjcwODEwNDZaFw0yNjA4MjgxMDI5NDZaMDMxMTAvBgNV BAMTKEMwQTc3NTFDNEY0MzlFODY0MzQ5MEJDMDU1OEUzRUVCOEIxRDk5NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChKJfVSuD+0yHRmdnn6IPDYAGw 2gzZRmgG+jJQpW7ZZM1Tpi43EqtC1QXrh1nL5Uey463DFpelWkqqCjzEzun1Pjtq djCPSshGCaZ08VMOU/4GRN+0oipA9MDPQ3sLurG9S4DMB0PaP4FD+27FM+o2LKCs eIZuhCSB6Slc15f8aIZZ3w+JfdpTzyq15leY3FBQwgXJvN4JZ3Rne98c7rg2cJ4p wuHsSb1NugAwbFY7CxLphfbdN0pjj2OpYWwi58PFyvZTP6VNSpNikmKoHq6UECad xRaP/YyytNEMrzvTlZOxQ0jc1EbuplJX5pZlPj/o60TUQaLYSy/xHGSXqnp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwKd1HE9DnoZDSQvAVY4+64sdmWUwHwYDVR0j BBgwFoAUo7pjO51ztz/qPoCsbVehqbQbHA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiNGZlOTMtNzI5Ni00OGI0LWFhMGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5 RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlCNDFCMUMwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0JBNjMzQjlENzNCNzNGRUEzRTgwQUM2RDU3QTFBOUI0MUIx QzBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiNGZlOTMtNzI5Ni00OGI0LWFh MGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0Ex QTlCNDFCMUMwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAmgJE8zuEZKriK18ISqq2qQysKhGKWWF7T 2b/+OBTtLqlb2cSsXkf588HegRhT9oEbfa2s8DIBdv+MFjTUwEq1xejVRzDE9cC9 r1CociOHphiq7hwTMyZwno3GSbFC9upAVETyC/vRQqwKksnWgrFEADBnmArQPjUn gMdnq4RzKZUP8t/dUxlG1nxdL9SQ5R28AQJCZmaa1bKFe0AnekwfyQwgZ+Ij+jPv d/ADcpIzg3+J9bHXiUkBPPKMO6LCQvYRSZRMrQ+VvQHG2MLNJm2OC/dw7Gowzv9I 8NNZQNBqeVrcdwkfKyxBuASETEfjcYsGUC14VzgdDCbICMOOMD4= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:50 2026 by rpki-client