$ rpki-client -vvvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft File: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft (raw, json) Hash identifier: MoeNJCN0aEcupeycS9K/e+G4cbr474M6SCptPCXBgok= Subject key identifier: EE:66:E1:FC:6B:55:2F:B2:9A:31:3D:A4:A1:E5:E4:BD:FA:2F:2C:DA Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 019C95AC8FD68F3D56DAB70DC2598FC139B0ED94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 18:16:58 +0000 Manifest this update: Sat 24 Oct 2026 18:11:58 +0000 Manifest next update: Sun 25 Oct 2026 19:55:58 +0000 Files and hashes: 1: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: i/0I209EPRIUokXIhiN66Jf089MpyqUmHHFbT6/zLLE=) 2: 3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl (hash: 8iCjmJBTz6JlYhMZHBfPPwkfCQmDUtHAjf/++YRqoag=) 3: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=) 4: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:95:ac:8f:d6:8f:3d:56:da:b7:0d:c2:59:8f:c1:39:b0:ed:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: Oct 24 18:11:58 2026 GMT Not After : Oct 25 19:55:58 2026 GMT Subject: CN=EE66E1FC6B552FB29A313DA4A1E5E4BDFA2F2CDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:6a:05:b9:a2:76:ab:af:78:85:01:51:f4: 73:24:d6:73:a7:d4:8d:ee:37:b5:71:79:80:fe:ee: 18:fd:a6:e0:4a:42:cf:e2:ef:38:a6:47:d1:72:c0: 32:8a:43:b2:ce:d5:cd:1b:b6:17:f2:04:83:bc:4e: 08:03:cd:af:0c:37:7b:0e:4c:c2:ea:3f:5e:32:90: 71:2a:52:f7:4f:e9:ed:a2:dd:19:e9:d5:d3:2b:92: dc:9b:26:cd:f5:f7:55:9a:45:23:1f:01:46:16:01: 64:35:53:56:36:26:af:dd:76:b2:12:fb:8e:ca:21: e0:f1:f8:e8:84:71:d6:7d:ee:99:9b:5c:31:95:8d: 75:1b:9a:56:a2:06:78:8e:4f:f6:bc:cd:3b:f6:06: d6:27:85:69:40:db:fe:6f:cb:aa:2b:0b:29:77:82: c3:7b:dd:b1:69:6c:f8:2a:07:a4:04:32:d4:b7:7a: b6:f6:fd:9e:0b:00:b7:7f:c5:b6:e3:9b:5f:cb:4d: 1e:53:d1:92:13:2e:85:ff:7d:9a:7f:83:40:a0:cc: a3:31:ae:d6:d7:8d:f1:ef:38:db:10:be:84:78:21: 07:d1:13:d7:94:25:e1:4c:40:bd:7f:d2:4d:69:dc: d8:73:a8:90:ad:a6:d2:c4:d2:0d:29:a2:7e:0b:e2: e7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:66:E1:FC:6B:55:2F:B2:9A:31:3D:A4:A1:E5:E4:BD:FA:2F:2C:DA X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:94:43:04:dd:cf:5b:b7:32:58:f2:1c:cb:1c:0c:e3:1f:f2: 06:49:18:77:f1:2e:96:d1:33:20:99:8a:34:9b:8d:c9:99:fb: ca:0a:77:29:5d:3b:c2:6c:89:d9:48:59:b3:51:2c:48:09:dc: 43:fe:86:a3:df:63:6f:72:69:d3:b9:c1:36:4e:99:ff:a2:0e: 38:15:28:2e:88:27:f8:c4:5f:86:c9:5d:3f:30:b5:c1:d1:14: d3:74:07:15:82:9d:69:0b:4d:44:0f:f6:cc:f5:63:38:3e:8f: 91:22:98:dc:dc:39:99:0e:74:55:45:1d:a6:61:57:71:90:a5: 08:7f:73:66:e1:a8:7e:1c:cc:09:f6:b6:e6:4e:82:1b:25:10: 96:f6:59:e9:a3:cc:3b:04:0d:64:af:7e:89:43:4d:4e:c9:5c: b3:cb:a0:95:32:25:bd:08:3e:21:52:85:2d:6b:62:80:d0:d4: 0a:43:d0:3e:0b:3c:b4:89:20:ea:7d:e0:97:4d:1b:68:6d:9b: b5:b2:90:81:75:96:32:00:33:95:f3:b1:24:25:34:5a:f2:60: d3:24:2d:19:fb:b2:06:a3:37:16:a5:b2:4a:88:9c:1b:ab:40: 68:02:e8:ac:69:34:7b:51:5f:91:7e:b9:fb:55:56:1c:ad:ed: d0:b6:27:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZyVrI/Wjz1W2rcNwlmPwTmw7ZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx MjczMDUzQzAeFw0yNjEwMjQxODExNThaFw0yNjEwMjUxOTU1NThaMDMxMTAvBgNV BAMTKEVFNjZFMUZDNkI1NTJGQjI5QTMxM0RBNEExRTVFNEJERkEyRjJDREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYmoFuaJ2q694hQFR9HMk1nOn 1I3uN7VxeYD+7hj9puBKQs/i7zimR9FywDKKQ7LO1c0bthfyBIO8TggDza8MN3sO TMLqP14ykHEqUvdP6e2i3Rnp1dMrktybJs3191WaRSMfAUYWAWQ1U1Y2Jq/ddrIS +47KIeDx+OiEcdZ97pmbXDGVjXUbmlaiBniOT/a8zTv2BtYnhWlA2/5vy6orCyl3 gsN73bFpbPgqB6QEMtS3erb2/Z4LALd/xbbjm1/LTR5T0ZITLoX/fZp/g0CgzKMx rtbXjfHvONsQvoR4IQfRE9eUJeFMQL1/0k1p3NhzqJCtptLE0g0pon4L4ufRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7mbh/GtVL7KaMT2koeXkvfovLNowHwYDVR0j BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw NTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1 OEUxMjczMDUzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCUQwTdz1u3MljyHMscDOMf8gZJGHfxLpbR MyCZijSbjcmZ+8oKdyldO8JsidlIWbNRLEgJ3EP+hqPfY29yadO5wTZOmf+iDjgV KC6IJ/jEX4bJXT8wtcHRFNN0BxWCnWkLTUQP9sz1Yzg+j5EimNzcOZkOdFVFHaZh V3GQpQh/c2bhqH4czAn2tuZOghslEJb2WemjzDsEDWSvfolDTU7JXLPLoJUyJb0I PiFShS1rYoDQ1ApD0D4LPLSJIOp94JdNG2htm7WykIF1ljIAM5XzsSQlNFryYNMk LRn7sgajNxalskqInBurQGgC6KxpNHtRX5F+uftVVhyt7dC2J44= -----END CERTIFICATE-----Generated at Sun Oct 25 06:25:22 2026 by rpki-client