$ rpki-client -vvf rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft File: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft (raw, json) Hash identifier: yypCWO7ecHS1S1cisJjQCu5jSBf6D+G23NGMYhRx8p8= Subject key identifier: FF:79:4E:B1:75:32:22:D6:2F:1C:15:B1:E9:E3:9B:6C:2C:77:B1:4E Authority key identifier: A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E Certificate issuer: /CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Certificate serial: 69921E5E1393B28C67229DA564D9973C088102DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 18:07:43 +0000 Manifest this update: Fri 19 Jun 2026 18:02:43 +0000 Manifest next update: Sat 20 Jun 2026 18:46:43 +0000 Files and hashes: 1: A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl (hash: mGUjKsYHhV0ZICcsUlnmbXNCP2QoYe3i26etDRmomlY=) 2: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: bj0wxd5ICBouELscs1c53rXVki6zrAfUoc5PnYBmxBA=) 3: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: qHvmH7kkKUgxVXxeqg/YxT0IJ6BIS+6+UvvwAM7JNvs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:92:1e:5e:13:93:b2:8c:67:22:9d:a5:64:d9:97:3c:08:81:02:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E Validity Not Before: Jun 19 18:02:43 2026 GMT Not After : Jun 20 18:46:43 2026 GMT Subject: CN=FF794EB1753222D62F1C15B1E9E39B6C2C77B14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:73:51:92:14:8e:34:9d:14:36:8c:66:be: a8:35:51:52:3f:c9:fc:32:76:74:5a:78:71:e5:22: fb:07:07:c1:0d:a4:5f:c0:9f:33:b1:af:8f:1d:e3: 0d:44:39:67:47:8b:d8:32:e0:0f:c0:5a:61:3c:96: 5f:19:e5:41:05:fb:69:23:cc:6f:41:da:69:90:5d: 22:49:1d:5c:c5:cb:62:ec:2a:09:21:2d:96:aa:4a: 9d:a7:b3:4c:5c:2f:21:b4:aa:77:34:00:31:2f:65: 70:ef:ac:ef:5e:ac:a7:2b:b8:ca:20:4a:8e:d1:bb: 47:ab:5b:4f:52:b0:4a:e9:8d:eb:d7:c0:79:f4:c1: dd:2f:86:fd:2c:59:1d:32:d5:1a:fb:95:5a:24:51: 34:16:90:93:97:83:af:70:47:6a:2e:1c:de:f8:75: c8:f6:8e:99:01:38:7c:c0:c5:65:a2:1d:f7:6f:d3: a4:a6:76:60:d4:c6:40:4c:be:0f:ff:dd:f5:63:85: f2:cc:bc:4b:50:96:a6:85:50:41:62:51:4c:61:af: d1:73:d0:80:b1:61:2e:d1:62:a4:8b:b2:4d:22:47: bd:64:25:3c:28:14:16:95:1f:5d:4c:fe:d5:1b:25: 12:4c:cc:f9:e8:6c:28:11:f9:bc:e2:78:b8:dc:36: 14:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:79:4E:B1:75:32:22:D6:2F:1C:15:B1:E9:E3:9B:6C:2C:77:B1:4E X509v3 Authority Key Identifier: keyid:A3:BA:63:3B:9D:73:B7:3F:EA:3E:80:AC:6D:57:A1:A9:B4:1B:1C:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/A3BA633B9D73B73FEA3E80AC6D57A1A9B41B1C0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:05:06:a2:71:44:11:73:a6:4d:39:9b:9d:ab:5a:d8:91:a2: 3b:a6:fb:93:1f:c9:08:b1:0e:78:d3:dc:44:f9:c3:ae:a5:f6: 3c:a3:60:44:4d:6b:ba:f4:7e:a2:fd:07:6f:43:9a:cf:69:c9: ed:5b:7f:4c:0a:3b:72:9c:7e:da:34:35:7c:b2:87:09:a9:58: 74:92:a0:e9:ff:d2:22:a1:76:a8:8e:c6:83:57:0f:11:c1:ae: 9b:ce:a1:02:16:af:71:d5:00:9f:37:20:7c:6b:cb:72:b6:06: dc:33:0a:87:f9:5a:f4:63:91:90:42:1a:ea:8c:10:d5:e0:d9: 8b:8d:83:1a:7e:21:69:fe:93:43:d6:7d:71:f5:03:67:3a:73: 48:58:fe:5c:e1:55:a0:25:e3:8f:b9:57:41:e1:d5:91:a6:e6: b7:49:d4:67:cf:f2:1f:d8:ea:bd:32:cd:15:e5:c7:09:82:8b: 24:1d:02:da:1b:a8:20:a2:2b:25:40:84:26:d9:09:b9:eb:91: 5d:48:9f:bf:25:d1:c6:0c:00:d5:b5:f5:11:2e:7d:ee:79:dd: 15:2c:82:16:46:72:4b:0d:8e:c0:fc:73:d3:16:33:97:26:3f: 52:89:1c:ec:da:d1:65:2a:44:e3:be:58:46:58:7e:1e:2e:a8: 2c:de:76:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZIeXhOTsoxnIp2lZNmXPAiBAtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlC NDFCMUMwRTAeFw0yNjA2MTkxODAyNDNaFw0yNjA2MjAxODQ2NDNaMDMxMTAvBgNV BAMTKEZGNzk0RUIxNzUzMjIyRDYyRjFDMTVCMUU5RTM5QjZDMkM3N0IxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdUHNRkhSONJ0UNoxmvqg1UVI/ yfwydnRaeHHlIvsHB8ENpF/AnzOxr48d4w1EOWdHi9gy4A/AWmE8ll8Z5UEF+2kj zG9B2mmQXSJJHVzFy2LsKgkhLZaqSp2ns0xcLyG0qnc0ADEvZXDvrO9erKcruMog So7Ru0erW09SsErpjevXwHn0wd0vhv0sWR0y1Rr7lVokUTQWkJOXg69wR2ouHN74 dcj2jpkBOHzAxWWiHfdv06SmdmDUxkBMvg//3fVjhfLMvEtQlqaFUEFiUUxhr9Fz 0ICxYS7RYqSLsk0iR71kJTwoFBaVH11M/tUbJRJMzPnobCgR+bzieLjcNhQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/3lOsXUyItYvHBWx6eObbCx3sU4wHwYDVR0j BBgwFoAUo7pjO51ztz/qPoCsbVehqbQbHA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDRiNGZlOTMtNzI5Ni00OGI0LWFhMGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5 RDczQjczRkVBM0U4MEFDNkQ1N0ExQTlCNDFCMUMwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0JBNjMzQjlENzNCNzNGRUEzRTgwQUM2RDU3QTFBOUI0MUIx QzBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDRiNGZlOTMtNzI5Ni00OGI0LWFh MGQtYzhhNWEzZGZkNTlhLzAvQTNCQTYzM0I5RDczQjczRkVBM0U4MEFDNkQ1N0Ex QTlCNDFCMUMwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEFBqJxRBFzpk05m52rWtiRojum+5MfyQix DnjT3ET5w66l9jyjYERNa7r0fqL9B29Dms9pye1bf0wKO3Kcfto0NXyyhwmpWHSS oOn/0iKhdqiOxoNXDxHBrpvOoQIWr3HVAJ83IHxry3K2BtwzCof5WvRjkZBCGuqM ENXg2YuNgxp+IWn+k0PWfXH1A2c6c0hY/lzhVaAl44+5V0Hh1ZGm5rdJ1GfP8h/Y 6r0yzRXlxwmCiyQdAtobqCCiKyVAhCbZCbnrkV1In78l0cYMANW19REufe553RUs ghZGcksNjsD8c9MWM5cmP1KJHOza0WUqROO+WEZYfh4uqCzedl4= -----END CERTIFICATE-----Generated at Sat Jun 20 08:56:26 2026 by rpki-client