$ rpki-client -vvvf rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft File: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft (raw, json) Hash identifier: zl+W6X/VS+7k3OgoyUBMBaIWAjHb8IBbB3jCJI1dWLw= Subject key identifier: F1:AD:26:E1:24:61:BF:D9:3A:BD:98:ED:CC:15:33:A5:56:46:6B:79 Authority key identifier: 3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B Certificate issuer: /CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Certificate serial: 5F2059EFB4FB3A47842EE6C18DD80B34055BD1BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft Manifest number: EC Signing time: Sun 25 Oct 2026 22:14:29 +0000 Manifest this update: Sun 25 Oct 2026 22:09:29 +0000 Manifest next update: Tue 27 Oct 2026 00:18:29 +0000 Files and hashes: 1: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (hash: IzKZnVRhi3vGvMtZ1nGW6jpAgrjEBqrGZ0c+G4cVeuM=) 2: 3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl (hash: ffIitcKZF72DGKaXsemIRGMprztsirmgMty2CDzQZ14=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 00:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:20:59:ef:b4:fb:3a:47:84:2e:e6:c1:8d:d8:0b:34:05:5b:d1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A825EDF5188A888BCCD19F35EA83E631E75AE1B Validity Not Before: Oct 25 22:09:29 2026 GMT Not After : Oct 27 00:18:29 2026 GMT Subject: CN=F1AD26E12461BFD93ABD98EDCC1533A556466B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:d4:90:33:f1:dd:3a:5f:12:b4:d2:37:98: 48:2d:df:e3:22:38:0d:d1:2f:88:30:53:49:ce:07: bf:b7:72:53:94:8d:c6:13:bb:6a:b2:66:2f:15:87: 46:b3:31:51:fa:2f:2e:38:56:f3:fb:fe:fd:ec:a3: df:b9:5f:ed:3f:29:40:fd:62:b7:75:09:de:e5:22: 7c:0a:6b:a8:ac:c4:c7:59:82:46:29:2f:b1:67:46: 0f:5b:00:f0:d7:13:8e:a0:da:94:b5:a3:a8:d5:fb: 92:67:25:23:a5:df:f4:91:b3:ab:99:e7:4a:8a:ad: b8:b5:c6:cf:c7:ce:d3:77:36:60:cd:a8:31:32:f1: 93:05:f5:26:ac:43:e1:cd:35:ae:6b:bd:11:8c:34: 86:d8:7a:4c:f0:42:a6:f8:8c:3c:d5:3c:cf:2c:15: d1:5c:db:75:33:0d:20:40:cb:06:73:8b:73:5b:83: dd:5b:f1:d0:72:5b:cf:54:52:f4:37:87:f6:01:fa: 66:74:37:93:8b:2e:5a:07:1d:5c:f3:fe:e7:10:aa: d7:b8:64:fe:78:9b:70:fe:83:d5:4a:3c:35:41:05: a9:61:cd:fe:c5:6e:1c:32:59:78:5e:65:26:26:f1: 59:62:da:8c:c6:e0:24:7f:b3:0b:39:88:12:69:c9: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AD:26:E1:24:61:BF:D9:3A:BD:98:ED:CC:15:33:A5:56:46:6B:79 X509v3 Authority Key Identifier: keyid:3A:82:5E:DF:51:88:A8:88:BC:CD:19:F3:5E:A8:3E:63:1E:75:AE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3A825EDF5188A888BCCD19F35EA83E631E75AE1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9f:96:ee:89:d2:cb:5b:f9:42:16:3c:53:4a:87:7a:14:eb: 2f:b1:d6:7f:77:e7:ba:36:9e:1a:1f:4e:92:53:07:01:19:f7: dc:8d:0a:99:12:d4:33:e1:2e:30:1a:cf:a8:74:da:64:bd:a5: 52:e6:15:20:86:a3:bb:f5:eb:92:bd:44:be:09:28:2c:f5:33: 38:3e:27:2d:c3:15:4f:41:20:6d:d2:7d:2f:7b:2c:ab:32:01: be:4b:c3:9f:6e:97:ba:14:e9:f8:ed:27:2a:db:64:78:1d:aa: da:59:9c:4a:24:b3:e0:7d:9c:ce:86:d4:4e:45:7a:7c:25:dd: e7:1f:dd:b5:ae:26:d5:2c:8b:d9:ba:52:da:81:c7:3c:82:e1: 03:f8:6c:8d:1b:82:66:7b:ab:48:1c:3f:dc:0f:c4:35:e7:c1: 43:36:40:be:5d:ba:2f:1c:3e:1e:90:f3:52:48:70:d2:1d:ab: 8c:e0:87:a5:03:92:a6:20:1e:a2:0c:81:e1:bb:9b:de:85:5a: 25:31:b9:6c:79:38:5e:59:77:a8:45:7b:2a:7c:27:de:05:45: 6b:64:10:3d:47:99:56:88:a5:09:e6:31:56:21:a1:bc:54:5e: 3c:5f:77:dc:c6:b2:ad:02:44:f9:68:02:6b:07:44:99:05:d6: 4e:2f:c1:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXyBZ77T7OkeELubBjdgLNAVb0bwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMx RTc1QUUxQjAeFw0yNjEwMjUyMjA5MjlaFw0yNjEwMjcwMDE4MjlaMDMxMTAvBgNV BAMTKEYxQUQyNkUxMjQ2MUJGRDkzQUJEOThFRENDMTUzM0E1NTY0NjZCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBtSQM/HdOl8StNI3mEgt3+Mi OA3RL4gwU0nOB7+3clOUjcYTu2qyZi8Vh0azMVH6Ly44VvP7/v3so9+5X+0/KUD9 Yrd1Cd7lInwKa6isxMdZgkYpL7FnRg9bAPDXE46g2pS1o6jV+5JnJSOl3/SRs6uZ 50qKrbi1xs/HztN3NmDNqDEy8ZMF9SasQ+HNNa5rvRGMNIbYekzwQqb4jDzVPM8s FdFc23UzDSBAywZzi3Nbg91b8dByW89UUvQ3h/YB+mZ0N5OLLloHHVzz/ucQqte4 ZP54m3D+g9VKPDVBBalhzf7FbhwyWXheZSYm8Vli2ozG4CR/sws5iBJpyXuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8a0m4SRhv9k6vZjtzBUzpVZGa3kwHwYDVR0j BBgwFoAUOoJe31GIqIi8zRnzXqg+Yx51rhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTczYjk1OWUtZmY1Mi00MDI4LWI1MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1 MTg4QTg4OEJDQ0QxOUYzNUVBODNFNjMxRTc1QUUxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTgyNUVERjUxODhBODg4QkNDRDE5RjM1RUE4M0U2MzFFNzVB RTFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTczYjk1OWUtZmY1Mi00MDI4LWI1 MzQtMWQ2MDVmYTNhODBiLzAvM0E4MjVFREY1MTg4QTg4OEJDQ0QxOUYzNUVBODNF NjMxRTc1QUUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+flu6J0stb+UIWPFNKh3oU6y+x1n9357o2 nhofTpJTBwEZ99yNCpkS1DPhLjAaz6h02mS9pVLmFSCGo7v165K9RL4JKCz1Mzg+ Jy3DFU9BIG3SfS97LKsyAb5Lw59ul7oU6fjtJyrbZHgdqtpZnEoks+B9nM6G1E5F enwl3ecf3bWuJtUsi9m6UtqBxzyC4QP4bI0bgmZ7q0gcP9wPxDXnwUM2QL5dui8c Ph6Q81JIcNIdq4zgh6UDkqYgHqIMgeG7m96FWiUxuWx5OF5Zd6hFeyp8J94FRWtk ED1HmVaIpQnmMVYhobxUXjxfd9zGsq0CRPloAmsHRJkF1k4vwXw= -----END CERTIFICATE-----Generated at Mon Oct 26 08:59:09 2026 by rpki-client