$ rpki-client -vvvf rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft File: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft (raw, json) Hash identifier: IVGCips+3F1Nge89wQXz1GRNjPBsAvR/YX9piwRr8Rg= Subject key identifier: 0F:92:3C:1B:86:6D:DF:47:2A:31:CF:B7:7B:58:73:BE:49:E1:BC:F5 Authority key identifier: 3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 Certificate issuer: /CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Certificate serial: 0D9924EB3D327AC2727E8453499A3ADA2C0842B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:08:43 +0000 Manifest this update: Thu 17 Sep 2026 08:03:43 +0000 Manifest next update: Fri 18 Sep 2026 10:45:43 +0000 Files and hashes: 1: 3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl (hash: TKwyrjrFRBgHwD+95yKVmGxld+9iXkEUXQ/xCBv1R6Y=) 2: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: /q+Q9j+twzjQ1vHcdhCkFEn4oIZ2D60UwxtbsrzeVbI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:99:24:eb:3d:32:7a:c2:72:7e:84:53:49:9a:3a:da:2c:08:42:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5 Validity Not Before: Sep 17 08:03:43 2026 GMT Not After : Sep 18 10:45:43 2026 GMT Subject: CN=0F923C1B866DDF472A31CFB77B5873BE49E1BCF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:43:09:3c:b5:c2:af:e0:7b:3c:06:fe:39: c3:3a:9e:1b:f1:38:55:b1:ea:78:f5:2b:2c:c3:c3: d5:0e:c9:8c:ea:22:77:0a:a8:32:1f:62:6b:3f:47: 8f:17:aa:10:b0:2d:74:74:4b:ce:78:6b:9a:9b:72: 28:0e:bb:d0:72:45:2a:fb:e8:b5:6b:2a:98:52:53: b7:e9:a3:5c:4e:73:56:31:ae:6f:6c:64:bc:ad:8f: 53:45:d7:cc:95:ed:56:45:75:50:13:fa:14:1d:77: 0b:7b:ac:3e:97:06:d7:e3:11:fe:14:dc:9e:bf:40: 71:35:57:de:4c:a9:ba:3a:51:69:61:08:b6:79:91: 4d:55:63:6c:63:4c:39:90:ea:15:90:29:a7:42:7f: 9b:24:e0:ae:2d:79:b4:02:2a:e5:2f:76:1d:07:04: 1d:99:8b:00:f7:a2:2e:dc:e7:49:e5:e9:95:e6:35: 44:3e:dd:71:39:49:4f:58:03:34:ca:b1:ec:83:c3: da:ce:07:e4:98:48:e3:30:96:55:05:6e:78:71:3a: e9:df:55:9c:7b:16:15:8a:6a:93:f0:ee:fa:cb:83: e7:76:c0:1b:43:e1:c7:64:a8:0e:32:36:2e:48:a0: 8a:26:38:3d:3d:a6:62:b7:7f:89:c1:24:43:cd:da: d0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:92:3C:1B:86:6D:DF:47:2A:31:CF:B7:7B:58:73:BE:49:E1:BC:F5 X509v3 Authority Key Identifier: keyid:3A:7A:C5:2B:0F:0C:8B:4E:8E:EA:0F:AC:56:21:C3:05:6A:8A:29:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/3A7AC52B0F0C8B4E8EEA0FAC5621C3056A8A29E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:fa:0a:04:b5:d3:ec:fc:7d:7d:9e:4b:73:ba:9b:c1:3f:ca: da:ea:7a:2b:d2:2a:ff:03:78:cb:42:73:2b:14:17:08:b1:56: ad:33:7a:6e:fc:8b:e8:18:8e:da:8e:2f:76:43:52:58:94:57: 01:2e:d1:94:01:5f:4c:36:d6:41:6c:2d:76:ab:32:51:fb:04: b9:b8:84:f4:56:70:89:a3:46:14:c6:9b:01:3f:e8:c5:9c:79: 4f:8f:3e:af:b0:a1:49:a4:2b:86:db:af:f5:68:0d:08:ae:bc: 71:31:ba:ff:38:da:a3:1d:70:e9:13:d5:9a:ff:fc:26:a2:c4: 29:fe:67:5f:7d:b2:c5:8a:61:1f:35:19:f9:71:07:a9:a7:95: 97:e1:e8:78:31:fa:a6:0e:93:20:52:82:28:dc:30:96:0f:72: d7:7f:7c:fe:2e:6b:57:ed:6c:85:90:f0:6c:ae:35:5c:c1:9c: 5a:4a:fc:ed:73:54:c7:28:12:38:50:72:4b:cd:04:af:92:5c: 2f:b6:13:12:08:87:25:3d:3d:be:f9:7e:02:c4:b4:82:0c:2a: b8:20:61:3d:85:58:33:c6:f9:fc:c3:4a:95:64:fc:50:6c:68: ee:79:e6:37:35:ed:70:9c:47:67:53:31:8c:65:e6:dc:91:ee: 26:f0:b0:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDZkk6z0yesJyfoRTSZo62iwIQrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2 QThBMjlFNTAeFw0yNjA5MTcwODAzNDNaFw0yNjA5MTgxMDQ1NDNaMDMxMTAvBgNV BAMTKDBGOTIzQzFCODY2RERGNDcyQTMxQ0ZCNzdCNTg3M0JFNDlFMUJDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCX0MJPLXCr+B7PAb+OcM6nhvx OFWx6nj1KyzDw9UOyYzqIncKqDIfYms/R48XqhCwLXR0S854a5qbcigOu9ByRSr7 6LVrKphSU7fpo1xOc1Yxrm9sZLytj1NF18yV7VZFdVAT+hQddwt7rD6XBtfjEf4U 3J6/QHE1V95Mqbo6UWlhCLZ5kU1VY2xjTDmQ6hWQKadCf5sk4K4tebQCKuUvdh0H BB2ZiwD3oi7c50nl6ZXmNUQ+3XE5SU9YAzTKseyDw9rOB+SYSOMwllUFbnhxOunf VZx7FhWKapPw7vrLg+d2wBtD4cdkqA4yNi5IoIomOD09pmK3f4nBJEPN2tCTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD5I8G4Zt30cqMc+3e1hzvknhvPUwHwYDVR0j BBgwFoAUOnrFKw8Mi06O6g+sViHDBWqKKeUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjYwOTVjODUtOGM5Mi00MTRiLWJkNTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIw RjBDOEI0RThFRUEwRkFDNTYyMUMzMDU2QThBMjlFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQTdBQzUyQjBGMEM4QjRFOEVFQTBGQUM1NjIxQzMwNTZBOEEy OUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvM0E3QUM1MkIwRjBDOEI0RThFRUEwRkFDNTYyMUMz MDU2QThBMjlFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/6CgS10+z8fX2eS3O6m8E/ytrqeivSKv8D eMtCcysUFwixVq0zem78i+gYjtqOL3ZDUliUVwEu0ZQBX0w21kFsLXarMlH7BLm4 hPRWcImjRhTGmwE/6MWceU+PPq+woUmkK4bbr/VoDQiuvHExuv842qMdcOkT1Zr/ /CaixCn+Z199ssWKYR81GflxB6mnlZfh6Hgx+qYOkyBSgijcMJYPctd/fP4ua1ft bIWQ8GyuNVzBnFpK/O1zVMcoEjhQckvNBK+SXC+2ExIIhyU9Pb75fgLEtIIMKrgg YT2FWDPG+fzDSpVk/FBsaO555jc17XCcR2dTMYxl5tyR7ibwsLw= -----END CERTIFICATE-----Generated at Thu Sep 17 10:55:37 2026 by rpki-client