$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft File: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft (raw, json) Hash identifier: IXqw2fLBKH5H6SZ8PXWFbfp1ZkaxtHYJMXYz96UsQeQ= Subject key identifier: D0:1E:2E:C4:B5:A8:0F:50:D1:66:35:8A:4F:C9:AD:73:0C:E6:08:EC Authority key identifier: A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E Certificate issuer: /CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Certificate serial: 691736AA734CB96486F9EEB55D303EC94290A0F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft Manifest number: EA Signing time: Sat 24 Oct 2026 15:13:10 +0000 Manifest this update: Sat 24 Oct 2026 15:08:10 +0000 Manifest next update: Sun 25 Oct 2026 18:30:10 +0000 Files and hashes: 1: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: qHvmH7kkKUgxVXxeqg/YxT0IJ6BIS+6+UvvwAM7JNvs=) 2: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl (hash: FbkXNZsSpkxtaOaGP979JhlxXVtTFZ9HAAk+gzjZJuc=) 3: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: bj0wxd5ICBouELscs1c53rXVki6zrAfUoc5PnYBmxBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 18:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:17:36:aa:73:4c:b9:64:86:f9:ee:b5:5d:30:3e:c9:42:90:a0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Validity Not Before: Oct 24 15:08:10 2026 GMT Not After : Oct 25 18:30:10 2026 GMT Subject: CN=D01E2EC4B5A80F50D166358A4FC9AD730CE608EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:d0:29:34:a2:0d:4d:03:50:91:7d:ca:86: 67:0b:a8:16:82:10:b2:0d:05:31:83:6a:0b:7c:c3: 16:1f:79:28:f8:87:34:21:94:e3:e9:6b:2e:9f:1d: 7e:7e:2d:a2:d5:e0:f0:90:13:3a:84:56:48:0a:7d: 07:64:c2:3d:24:5f:aa:ac:7e:16:40:ef:44:c0:a7: 1b:67:54:55:3c:00:81:b6:d4:bb:d3:ad:ee:e4:fe: d0:8b:65:50:97:1f:ce:e5:55:e3:60:e3:c3:dd:27: 4f:ad:0c:7c:09:b1:5b:5b:60:78:14:33:6d:6a:67: 04:47:0a:df:84:c7:69:af:3d:56:d7:04:33:93:2e: f4:d5:98:c7:b3:9e:9e:cb:71:18:59:bd:58:6e:61: a1:6d:a3:8b:55:1d:f9:13:74:2e:b1:ae:64:5f:eb: 1b:af:36:ca:0a:a1:45:b9:30:18:9b:86:81:8b:dc: f1:88:4f:ce:51:8c:a6:6e:9f:10:32:f5:f4:dc:ac: 93:77:15:c3:f9:c5:4b:79:63:33:13:e7:38:5c:21: b0:40:80:1f:e5:49:d6:51:41:eb:7a:42:01:79:e2: 03:85:34:ca:25:50:9e:06:ae:ad:66:7d:6f:46:4c: e9:c3:21:cd:23:fd:24:9d:81:20:07:75:cc:13:35: ef:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1E:2E:C4:B5:A8:0F:50:D1:66:35:8A:4F:C9:AD:73:0C:E6:08:EC X509v3 Authority Key Identifier: keyid:A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:33:07:48:7c:be:dc:c2:b9:cb:5c:62:1c:73:cb:0f:a4:c9: f8:8b:5b:51:e7:9c:41:97:b6:66:a3:de:ca:66:f6:fe:0e:4f: e1:1e:f7:7a:28:b7:bc:00:0f:77:6d:f9:fc:8a:3c:b9:8f:72: f4:db:ed:73:03:13:ee:db:55:7d:42:2f:a5:a6:81:a5:77:1a: 8f:6f:4d:3c:e7:71:78:66:34:ca:89:15:5b:d0:c2:5b:93:46: 47:f4:f6:5b:5e:94:23:6e:73:01:4f:48:73:d0:c7:bd:6e:3e: dd:dc:f4:12:e6:3e:a8:16:2c:0c:48:6f:f1:06:6f:18:44:57: 82:bf:ff:94:53:fb:a9:18:ce:a4:fd:6a:ec:f5:48:db:d0:09: 76:d7:88:39:0d:82:da:63:3b:9f:ce:a1:1a:8a:ee:03:8c:92: 52:c0:3b:ac:fd:ee:0b:83:3a:61:e6:eb:d3:b2:36:5b:31:31: c4:7b:a9:06:ab:23:19:f4:22:cd:58:0e:2c:c0:ac:54:fe:42: 08:1f:14:f8:7d:0f:8a:1d:07:c2:7b:ae:a1:29:38:f2:b7:29: c8:04:b7:62:3d:2f:52:b4:8c:07:d9:37:69:45:95:c7:5a:84: b7:3a:b6:6f:d0:af:ae:8d:4c:91:59:b8:47:6d:3d:5c:d3:f8: a3:ce:fa:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaRc2qnNMuWSG+e61XTA+yUKQoPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlC NDFCMUMwRTAeFw0yNjEwMjQxNTA4MTBaFw0yNjEwMjUxODMwMTBaMDMxMTAvBgNV BAMTKEQwMUUyRUM0QjVBODBGNTBEMTY2MzU4QTRGQzlBRDczMENFNjA4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOdApNKINTQNQkX3KhmcLqBaC ELINBTGDagt8wxYfeSj4hzQhlOPpay6fHX5+LaLV4PCQEzqEVkgKfQdkwj0kX6qs fhZA70TApxtnVFU8AIG21LvTre7k/tCLZVCXH87lVeNg48PdJ0+tDHwJsVtbYHgU M21qZwRHCt+Ex2mvPVbXBDOTLvTVmMeznp7LcRhZvVhuYaFto4tVHfkTdC6xrmRf 6xuvNsoKoUW5MBibhoGL3PGIT85RjKZunxAy9fTcrJN3FcP5xUt5YzMT5zhcIbBA gB/lSdZRQet6QgF54gOFNMolUJ4Grq1mfW9GTOnDIc0j/SSdgSAHdcwTNe+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0B4uxLWoD1DRZjWKT8mtcwzmCOwwHwYDVR0j BBgwFoAUo7pjO51ztz/qPoCsbVehqbQbHA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiNGZlOTMtNzI5Ni00OGI0LWFhMGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5 RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlCNDFCMUMwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0JBNjMzQjlENzNCNzNGRUEzRTgwQUM2RDU3QTFBOUI0MUIx QzBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiNGZlOTMtNzI5Ni00OGI0LWFh MGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0Ex QTlCNDFCMUMwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIzB0h8vtzCuctcYhxzyw+kyfiLW1HnnEGX tmaj3spm9v4OT+Ee93oot7wAD3dt+fyKPLmPcvTb7XMDE+7bVX1CL6WmgaV3Go9v TTzncXhmNMqJFVvQwluTRkf09ltelCNucwFPSHPQx71uPt3c9BLmPqgWLAxIb/EG bxhEV4K//5RT+6kYzqT9auz1SNvQCXbXiDkNgtpjO5/OoRqK7gOMklLAO6z97guD OmHm69OyNlsxMcR7qQarIxn0Is1YDizArFT+QggfFPh9D4odB8J7rqEpOPK3KcgE t2I9L1K0jAfZN2lFlcdahLc6tm/Qr66NTJFZuEdtPVzT+KPO+ns= -----END CERTIFICATE-----Generated at Sun Oct 25 01:28:09 2026 by rpki-client