$ rpki-client -vvvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json) Hash identifier: bojyUsWmMQqQQN53m5u0FgK3jXdSR5LVAJH18ODkeZY= Subject key identifier: B1:41:91:85:A2:6A:8D:97:85:32:63:73:0D:44:3C:CC:F0:F1:6B:05 Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 1EA7BA5A2743A66E651A6CBA60387B58E53A2869 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft Manifest number: E7 Signing time: Fri 23 Oct 2026 05:56:02 +0000 Manifest this update: Fri 23 Oct 2026 05:51:02 +0000 Manifest next update: Sat 24 Oct 2026 07:32:02 +0000 Files and hashes: 1: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=) 2: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=) 3: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: Xb1u5zG0TNLrh6MmTuQ5O2wP+q5gP7ljD6jXTh4atQ8=) 4: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 07:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a7:ba:5a:27:43:a6:6e:65:1a:6c:ba:60:38:7b:58:e5:3a:28:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: Oct 23 05:51:02 2026 GMT Not After : Oct 24 07:32:02 2026 GMT Subject: CN=B1419185A26A8D97853263730D443CCCF0F16B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:a1:7f:02:08:83:43:87:3e:f5:80:86:80: 5d:96:d5:fd:3b:f7:b2:50:52:b4:b0:ca:62:35:36: 36:68:32:9f:35:85:89:2c:39:fb:b6:bd:11:9e:f0: b1:6b:e3:91:eb:06:cd:5f:7d:90:e5:15:7b:4a:a9: 1b:2a:79:db:f6:c0:b5:ec:9a:63:a0:0c:66:8a:8a: 69:59:08:32:30:9a:2c:a1:18:c0:c4:46:4b:c5:19: bd:80:af:82:07:37:94:84:fc:d4:33:da:b9:7b:53: f4:f5:c3:e7:db:5f:ac:29:58:80:7a:0e:57:91:c0: 75:69:50:ee:13:55:29:1d:fd:5d:41:48:a4:bc:48: a9:6b:7e:92:95:ad:6b:7e:2d:e9:ac:4f:6e:64:98: 29:23:e9:0e:27:18:4f:36:9d:0e:6a:56:92:b8:56: 1a:a5:7d:36:90:9d:3f:5c:e1:b9:74:c4:ea:6c:2e: db:24:3a:81:f5:cf:a5:36:4d:0c:ce:6d:b6:64:66: 1c:12:a7:67:2c:bb:a9:a8:40:58:9c:b4:70:bf:e4: f1:cb:87:19:70:ca:bb:e6:0f:6a:0c:77:d5:3b:a6: 8a:dd:90:49:a3:57:46:08:0a:5c:94:f6:71:68:62: e0:ca:18:27:c9:4c:a3:f0:6d:73:57:d6:01:fb:92: 12:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:41:91:85:A2:6A:8D:97:85:32:63:73:0D:44:3C:CC:F0:F1:6B:05 X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:98:1f:97:8c:ac:2f:a8:b9:9f:52:28:a2:05:1d:f0:d6:c3: 72:f4:17:4f:30:07:b1:cb:24:eb:43:5e:4d:1b:6f:04:28:e2: bd:50:6c:7e:9c:2f:50:9b:44:1a:75:e2:e5:65:c4:96:46:62: bb:a8:95:40:9d:36:84:1d:55:d8:a6:d4:4c:b8:65:32:cc:57: df:6c:2d:57:c8:2c:fc:41:90:06:1f:d5:42:3e:89:76:91:8d: c7:31:52:4a:a5:3e:37:00:dd:3f:37:d3:47:30:a9:3d:f9:ad: e5:92:4e:c5:c3:a6:a3:da:61:48:62:8f:f9:d9:a0:e0:26:0c: ed:55:d9:48:e9:9e:c0:94:25:8c:70:ce:4d:56:91:fe:b1:d7: bc:0f:d4:f9:97:b0:08:07:8e:ac:b7:1e:a9:05:8b:af:ab:13: 4a:1f:fd:2f:dc:39:a7:e5:7c:1c:96:61:e9:b1:76:4f:d8:de: 8b:ca:c5:06:ac:51:ee:52:65:76:ff:27:6f:e7:fb:7b:21:9d: 7c:32:2a:73:10:90:f5:ba:da:da:d2:6d:34:1d:e3:35:9e:80: d6:08:9b:1c:fa:92:07:75:24:00:eb:b1:39:2f:8e:ef:40:ac: 5d:98:26:ef:d7:1c:33:aa:c6:9e:1b:c8:dd:32:d5:fc:5c:3b: c3:b6:2a:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqe6WidDpm5lGmy6YDh7WOU6KGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx MjczMDUzQzAeFw0yNjEwMjMwNTUxMDJaFw0yNjEwMjQwNzMyMDJaMDMxMTAvBgNV BAMTKEIxNDE5MTg1QTI2QThEOTc4NTMyNjM3MzBENDQzQ0NDRjBGMTZCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2S6F/AgiDQ4c+9YCGgF2W1f07 97JQUrSwymI1NjZoMp81hYksOfu2vRGe8LFr45HrBs1ffZDlFXtKqRsqedv2wLXs mmOgDGaKimlZCDIwmiyhGMDERkvFGb2Ar4IHN5SE/NQz2rl7U/T1w+fbX6wpWIB6 DleRwHVpUO4TVSkd/V1BSKS8SKlrfpKVrWt+LemsT25kmCkj6Q4nGE82nQ5qVpK4 VhqlfTaQnT9c4bl0xOpsLtskOoH1z6U2TQzObbZkZhwSp2csu6moQFictHC/5PHL hxlwyrvmD2oMd9U7pordkEmjV0YIClyU9nFoYuDKGCfJTKPwbXNX1gH7khK1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsUGRhaJqjZeFMmNzDUQ8zPDxawUwHwYDVR0j BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1 OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiYH5eMrC+ouZ9SKKIFHfDWw3L0F08wB7HL JOtDXk0bbwQo4r1QbH6cL1CbRBp14uVlxJZGYruolUCdNoQdVdim1Ey4ZTLMV99s LVfILPxBkAYf1UI+iXaRjccxUkqlPjcA3T8300cwqT35reWSTsXDpqPaYUhij/nZ oOAmDO1V2UjpnsCUJYxwzk1Wkf6x17wP1PmXsAgHjqy3HqkFi6+rE0of/S/cOafl fByWYemxdk/Y3ovKxQasUe5SZXb/J2/n+3shnXwyKnMQkPW62trSbTQd4zWegNYI mxz6kgd1JADrsTkvju9ArF2YJu/XHDOqxp4byN0y1fxcO8O2Kns= -----END CERTIFICATE-----Generated at Fri Oct 23 13:13:54 2026 by rpki-client