$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft File: A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft (raw, json) Hash identifier: 7F/rn/TfPZeTPjffMDisj9K5omuWREmRsqMHGvnypXQ= Subject key identifier: D4:0A:44:47:5B:19:6E:61:8C:3F:88:EC:AE:E0:87:3F:0B:B4:57:57 Authority key identifier: A3:E8:D0:D5:6A:A9:0F:C9:8D:B7:BB:6A:DC:AB:D1:F4:D6:4C:9D:27 Certificate issuer: /CN=A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27 Certificate serial: 74E718F7181A98F00348A0386FEB453C636B0237 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 13:56:19 +0000 Manifest this update: Wed 16 Sep 2026 13:51:19 +0000 Manifest next update: Thu 17 Sep 2026 16:02:19 +0000 Files and hashes: 1: A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl (hash: 0cTcQlmNtRjQviaB+yYpq/8SV7Obqt0EEKwYl83yEHg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:e7:18:f7:18:1a:98:f0:03:48:a0:38:6f:eb:45:3c:63:6b:02:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27 Validity Not Before: Sep 16 13:51:19 2026 GMT Not After : Sep 17 16:02:19 2026 GMT Subject: CN=D40A44475B196E618C3F88ECAEE0873F0BB45757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:5b:bb:66:fc:2f:2e:f9:f7:7b:98:fa:2c: 4b:82:a2:62:7f:79:ec:6a:8e:4b:82:ad:62:22:46: bc:01:bb:56:84:94:37:61:34:4c:2e:1a:65:e7:ef: 00:7f:7b:cf:4c:0e:e6:d2:f8:e2:da:4f:2d:47:98: d5:93:85:48:67:98:36:99:0c:be:40:61:76:8f:58: 36:70:0b:33:e9:b7:93:88:ce:df:63:e7:21:2d:f2: 7f:09:f1:6c:79:f4:9e:8e:79:f0:24:2d:ca:38:2c: b2:8c:71:80:83:90:eb:b9:54:d3:31:58:59:a6:d0: ed:5c:94:5b:1f:b9:62:f8:2c:97:b3:79:01:47:1f: de:59:e4:a7:6f:13:a2:f7:d8:4e:4f:8e:ec:25:77: 7c:dd:4d:59:1f:f0:41:cd:e2:fa:84:d5:07:56:d2: 10:d5:d3:cf:ab:54:a0:37:7b:41:e7:e0:ef:2a:b3: ca:9d:3e:d9:44:ad:5b:54:2f:8e:82:c1:64:54:46: 82:3d:78:a7:83:16:e0:c1:1e:18:07:be:88:83:fc: 1a:2c:2d:28:2f:01:79:ce:62:27:80:48:1e:ad:1f: 04:06:05:05:14:89:e0:e8:64:3d:da:68:fd:8a:95: 0b:f7:09:ec:32:14:19:83:dd:00:32:13:d6:85:39: e3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0A:44:47:5B:19:6E:61:8C:3F:88:EC:AE:E0:87:3F:0B:B4:57:57 X509v3 Authority Key Identifier: keyid:A3:E8:D0:D5:6A:A9:0F:C9:8D:B7:BB:6A:DC:AB:D1:F4:D6:4C:9D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/A3E8D0D56AA90FC98DB7BB6ADCABD1F4D64C9D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d1:76:57:b9:f5:44:ea:5d:50:5f:e5:65:ae:ab:14:26:57: 06:bf:fe:ba:b3:d3:ee:36:55:5b:51:73:4a:c1:a5:5b:2b:87: 3b:5b:b3:01:5e:43:5f:c1:70:0f:45:46:2b:06:9a:00:50:0d: df:53:9a:5b:99:38:cb:79:0c:20:9b:26:bd:9f:8a:df:f6:d1: 2c:ac:6f:41:9b:7d:ee:ea:f2:64:1f:7a:0b:25:15:d0:25:16: 00:ed:5d:14:cd:5a:c8:25:b5:43:3e:f8:6c:fa:80:ea:49:20: 5a:75:81:b4:be:8e:4c:5e:a0:3e:20:60:9a:45:55:5a:16:19: ae:4d:d5:50:12:46:86:cc:5f:18:2d:99:8e:06:ed:91:7c:44: 5c:40:ae:1a:7b:37:50:38:e1:4a:f4:b5:ba:0f:b2:24:c8:95: 54:d2:48:d0:c0:fa:c1:3c:c0:b5:01:dd:3e:d9:fe:ec:37:4b: 59:e9:41:6f:6d:db:64:13:91:45:73:28:9e:1b:e5:42:ec:3b: 78:f0:b2:7c:e4:d8:3a:f7:03:0b:ea:53:02:3d:9d:5b:64:50: 2d:ff:3d:ba:c0:0d:cd:ac:b7:e5:49:1d:9d:15:8e:31:78:8b: 7a:29:7e:3f:01:d1:b4:7b:22:4e:4a:81:d1:16:92:85:4a:ae: 6e:c6:07:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdOcY9xgamPADSKA4b+tFPGNrAjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFOEQwRDU2QUE5MEZDOThEQjdCQjZBRENBQkQxRjRE NjRDOUQyNzAeFw0yNjA5MTYxMzUxMTlaFw0yNjA5MTcxNjAyMTlaMDMxMTAvBgNV BAMTKEQ0MEE0NDQ3NUIxOTZFNjE4QzNGODhFQ0FFRTA4NzNGMEJCNDU3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TVu7ZvwvLvn3e5j6LEuComJ/ eexqjkuCrWIiRrwBu1aElDdhNEwuGmXn7wB/e89MDubS+OLaTy1HmNWThUhnmDaZ DL5AYXaPWDZwCzPpt5OIzt9j5yEt8n8J8Wx59J6OefAkLco4LLKMcYCDkOu5VNMx WFmm0O1clFsfuWL4LJezeQFHH95Z5KdvE6L32E5Pjuwld3zdTVkf8EHN4vqE1QdW 0hDV08+rVKA3e0Hn4O8qs8qdPtlErVtUL46CwWRURoI9eKeDFuDBHhgHvoiD/Bos LSgvAXnOYieASB6tHwQGBQUUieDoZD3aaP2KlQv3CewyFBmD3QAyE9aFOeN7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ApER1sZbmGMP4jsruCHPwu0V1cwHwYDVR0j BBgwFoAUo+jQ1WqpD8mNt7tq3KvR9NZMnScwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwOTllNDItMmU5Zi00ZThhLTk5ZTgtYWQ1MDQ1M2IwNjZmLzAvQTNFOEQwRDU2 QUE5MEZDOThEQjdCQjZBRENBQkQxRjRENjRDOUQyNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BM0U4RDBENTZBQTkwRkM5OERCN0JCNkFEQ0FCRDFGNEQ2NEM5 RDI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvQTNFOEQwRDU2QUE5MEZDOThEQjdCQjZBRENBQkQx RjRENjRDOUQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7Rdle59UTqXVBf5WWuqxQmVwa//rqz0+42 VVtRc0rBpVsrhztbswFeQ1/BcA9FRisGmgBQDd9TmluZOMt5DCCbJr2fit/20Sys b0Gbfe7q8mQfegslFdAlFgDtXRTNWsgltUM++Gz6gOpJIFp1gbS+jkxeoD4gYJpF VVoWGa5N1VASRobMXxgtmY4G7ZF8RFxArhp7N1A44Ur0tboPsiTIlVTSSNDA+sE8 wLUB3T7Z/uw3S1npQW9t22QTkUVzKJ4b5ULsO3jwsnzk2Dr3AwvqUwI9nVtkUC3/ PbrADc2st+VJHZ0VjjF4i3opfj8B0bR7Ik5KgdEWkoVKrm7GB0k= -----END CERTIFICATE-----Generated at Thu Sep 17 10:04:11 2026 by rpki-client