$ rpki-client -vvvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json) Hash identifier: VPqSpZ4KPdEf9kDsMCy7RvCRY02mGcpfmO/uBu5yRwM= Subject key identifier: F5:20:06:FD:60:5C:90:66:68:6F:B0:F9:7C:46:3E:5E:0B:3A:A8:E4 Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 25D7C03495E5605F96EBAEA729BC44182CFFF7DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft Manifest number: E4 Signing time: Wed 21 Oct 2026 01:46:21 +0000 Manifest this update: Wed 21 Oct 2026 01:41:21 +0000 Manifest next update: Thu 22 Oct 2026 01:50:21 +0000 Files and hashes: 1: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: ReGBj4mT4o+AyfgFcH3fxH9zBjSAnMIA2NbVYQ2+yf0=) 2: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=) 3: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=) 4: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 01:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d7:c0:34:95:e5:60:5f:96:eb:ae:a7:29:bc:44:18:2c:ff:f7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: Oct 21 01:41:21 2026 GMT Not After : Oct 22 01:50:21 2026 GMT Subject: CN=F52006FD605C9066686FB0F97C463E5E0B3AA8E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e9:f6:d9:f9:33:cc:91:89:b8:5a:25:e6:11: a3:8a:b3:f8:2b:2a:32:b6:b8:95:08:08:7a:80:bb: 84:db:a3:61:b5:92:b1:bb:4b:5d:25:a8:0c:02:c7: a8:28:27:b6:8b:ab:d8:8c:c1:8f:65:19:f0:d0:dc: 59:94:44:24:bb:f8:be:79:4e:b9:f0:b4:a0:0f:18: bb:fe:9c:f2:39:2b:0a:5d:8f:03:35:b5:01:68:23: 48:39:43:ff:6f:7c:81:7d:66:a4:c7:4c:39:03:65: ea:78:e1:b4:b3:b2:17:6d:f5:69:6d:ba:24:5d:a3: 77:8b:40:a0:d3:31:bd:c4:7b:d8:fe:f9:d7:90:f2: 2f:30:eb:48:2d:0e:e5:79:94:10:a8:d1:03:7e:6d: 48:28:f6:7a:a4:16:f9:70:a0:51:73:67:df:9d:72: ad:60:b3:32:34:81:21:07:1c:e5:c5:13:db:50:cc: ef:4c:e6:bd:c1:bb:85:6b:88:d4:4a:7a:ba:78:4f: d7:10:9a:19:ed:d3:ab:aa:85:77:26:74:b9:97:a2: 3e:e3:00:e1:b4:d8:1c:01:bc:ce:cd:a6:48:3a:32: 86:aa:95:8c:01:ea:ef:20:27:a9:74:96:a6:1b:c4: 0d:5d:e2:f2:cd:cf:63:70:72:b3:9f:a2:a8:0d:4a: b6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:20:06:FD:60:5C:90:66:68:6F:B0:F9:7C:46:3E:5E:0B:3A:A8:E4 X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:50:7b:8c:c9:af:29:bd:69:db:2f:0d:78:90:6d:ff:6c:11: e7:9f:f1:b7:94:f4:f5:18:05:86:a0:80:69:56:a2:9c:c9:78: 39:e8:92:c8:37:46:8b:21:a7:99:0a:6f:82:08:94:01:8c:34: dc:41:25:4f:96:67:c1:79:6a:54:24:3b:ce:50:3e:80:bd:42: f9:01:38:e3:63:0b:f1:af:ea:d7:8c:63:3f:27:8d:e7:8a:d9: 53:af:77:82:43:6a:f0:9d:94:5e:f0:a3:25:23:dd:fc:fd:67: 1b:5e:bc:2f:1a:15:e2:2c:e0:59:fd:a4:ef:2f:12:50:03:82: f4:e9:13:40:1f:be:55:89:0d:48:1f:6a:23:a8:8a:a0:39:50: 43:d6:f1:a7:24:18:77:6d:3d:c7:11:b2:ab:e2:01:2c:cc:df: 0d:39:33:9e:cb:36:a6:8f:cd:86:72:7e:1b:7d:28:5d:30:72: 29:34:ed:f8:b1:ab:12:65:d6:c8:17:1a:a2:2c:de:d0:56:67: 82:de:33:29:8b:cc:e3:41:f6:3b:93:49:a3:a6:57:62:c4:5f: 59:c3:e9:42:fd:e5:ee:0f:50:0b:e9:a8:41:69:7f:b0:e5:d8: 59:36:54:65:0f:75:e3:ac:0a:84:f5:c5:8b:ed:1e:f7:51:ee: 6b:8c:6c:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdfANJXlYF+W666nKbxEGCz/99swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx MjczMDUzQzAeFw0yNjEwMjEwMTQxMjFaFw0yNjEwMjIwMTUwMjFaMDMxMTAvBgNV BAMTKEY1MjAwNkZENjA1QzkwNjY2ODZGQjBGOTdDNDYzRTVFMEIzQUE4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD6fbZ+TPMkYm4WiXmEaOKs/gr KjK2uJUICHqAu4Tbo2G1krG7S10lqAwCx6goJ7aLq9iMwY9lGfDQ3FmURCS7+L55 TrnwtKAPGLv+nPI5KwpdjwM1tQFoI0g5Q/9vfIF9ZqTHTDkDZep44bSzshdt9Wlt uiRdo3eLQKDTMb3Ee9j++deQ8i8w60gtDuV5lBCo0QN+bUgo9nqkFvlwoFFzZ9+d cq1gszI0gSEHHOXFE9tQzO9M5r3Bu4VriNRKerp4T9cQmhnt06uqhXcmdLmXoj7j AOG02BwBvM7Npkg6MoaqlYwB6u8gJ6l0lqYbxA1d4vLNz2NwcrOfoqgNSrYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9SAG/WBckGZob7D5fEY+Xgs6qOQwHwYDVR0j BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1 OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNQe4zJrym9adsvDXiQbf9sEeef8beU9PUY BYaggGlWopzJeDnoksg3Roshp5kKb4IIlAGMNNxBJU+WZ8F5alQkO85QPoC9QvkB OONjC/Gv6teMYz8njeeK2VOvd4JDavCdlF7woyUj3fz9ZxtevC8aFeIs4Fn9pO8v ElADgvTpE0AfvlWJDUgfaiOoiqA5UEPW8ackGHdtPccRsqviASzM3w05M57LNqaP zYZyfht9KF0wcik07fixqxJl1sgXGqIs3tBWZ4LeMymLzONB9juTSaOmV2LEX1nD 6UL95e4PUAvpqEFpf7Dl2Fk2VGUPdeOsCoT1xYvtHvdR7muMbPw= -----END CERTIFICATE-----Generated at Wed Oct 21 19:46:02 2026 by rpki-client