$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft File: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft (raw, json) Hash identifier: grZtZsIMrX3g2oRr/rGCNIoPx7qD9wDHPcX/h6q6w7g= Subject key identifier: 5A:ED:FF:85:F8:C7:86:00:64:F9:FA:1B:5C:B0:5D:42:96:D1:7F:4D Authority key identifier: A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D Certificate issuer: /CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Certificate serial: 34763F226DAC8A1E4CBBE5B8F07A2D99C1ED004E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft Manifest number: E8 Signing time: Sat 24 Oct 2026 13:05:18 +0000 Manifest this update: Sat 24 Oct 2026 13:00:18 +0000 Manifest next update: Sun 25 Oct 2026 16:07:18 +0000 Files and hashes: 1: A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl (hash: IjwCFVMyPWbmRDIU+SxvsJTMkiWm+kQE3TYhOK6NVaQ=) 2: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 0G4YBfT8XRPQC+cAerXBYMMW9I/KjiVejVSF2aUT8Xk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 16:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:76:3f:22:6d:ac:8a:1e:4c:bb:e5:b8:f0:7a:2d:99:c1:ed:00:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3411C77B5E54F23937AD090832EFEC4BFD02F4D Validity Not Before: Oct 24 13:00:18 2026 GMT Not After : Oct 25 16:07:18 2026 GMT Subject: CN=5AEDFF85F8C7860064F9FA1B5CB05D4296D17F4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:6d:0a:d3:a9:2d:0a:1b:1f:14:2e:62:be: b3:7a:b7:82:f7:53:ef:a2:e3:9b:a4:c4:55:10:d3: 3e:d5:15:4f:f1:4e:74:43:40:c6:c3:c7:f6:de:f7: df:0b:3a:d9:b5:5c:3b:aa:74:e9:5b:7d:1f:ff:6e: 7c:3f:e1:96:ff:35:94:0a:1f:38:f7:65:76:88:cc: 8d:f2:fb:bd:99:fd:4a:1d:24:db:2b:d6:b8:49:6f: 78:e7:b8:6c:b5:57:8e:15:07:ef:45:dc:b1:24:9a: 7b:89:a3:45:9a:ec:73:95:49:74:82:c5:53:42:67: 9a:79:ef:5b:93:86:c0:0f:f3:58:fe:31:60:1e:80: 13:91:65:8f:c8:31:9c:9f:0c:56:a8:0e:4c:57:19: 6a:52:dd:4a:8d:62:d7:ae:8f:07:07:48:86:cf:fd: 35:80:b6:91:30:e1:87:b2:39:07:78:56:92:4c:ca: 4b:ec:1b:9d:31:61:56:f4:3e:34:34:58:ff:8c:57: cc:6b:9c:c3:f7:28:e5:89:b8:53:be:54:8d:5a:60: e7:94:ea:c1:39:8c:96:33:56:d8:89:6e:b1:90:b7: 1a:3f:50:e6:d3:94:6d:a1:24:e5:51:4a:24:71:e7: bd:fb:d4:67:ba:4f:f3:3b:a1:4e:3e:53:83:15:dd: 18:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:ED:FF:85:F8:C7:86:00:64:F9:FA:1B:5C:B0:5D:42:96:D1:7F:4D X509v3 Authority Key Identifier: keyid:A3:41:1C:77:B5:E5:4F:23:93:7A:D0:90:83:2E:FE:C4:BF:D0:2F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/A3411C77B5E54F23937AD090832EFEC4BFD02F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4b:67:3c:c0:ed:af:44:3f:ca:8e:23:8a:fc:be:48:47:25: ff:6a:88:e9:49:e4:2e:1a:ac:fe:79:0e:44:81:45:7f:ad:04: 15:46:6f:fc:84:47:b6:1b:9e:62:ef:db:8b:f9:a0:d2:50:53: 80:04:89:c2:8b:ef:e1:c9:ed:e5:21:8f:0f:72:10:b7:9d:a7: fc:22:85:ef:be:38:3c:67:fe:0e:96:11:b9:fc:71:e9:13:5a: 84:41:8f:6a:b1:0a:88:be:df:de:fb:47:74:bd:09:e9:aa:69: 63:8d:5c:39:6f:8a:3d:36:f1:c3:8e:b3:d5:aa:f2:50:74:bf: 18:8a:4e:90:a9:00:e8:5e:86:42:aa:97:ab:b1:a9:c9:1f:e1: ed:eb:71:8f:80:90:9e:5c:35:1f:12:8f:20:85:fd:fd:76:87: 12:85:bc:85:60:b2:b3:82:47:a9:f3:4c:a3:da:b8:a0:e2:ce: c0:8a:ee:59:68:8c:a0:ba:e9:42:62:29:6a:7f:03:0c:dd:f8: a6:70:6e:b0:3b:fd:ed:48:6c:87:65:40:22:b5:b9:1f:78:33: 31:96:35:0b:00:d8:47:11:fa:17:b3:c9:b6:79:64:80:17:eb: 68:9a:16:b4:91:d1:e0:7c:cd:b5:7c:01:e5:8b:c4:36:16:f9: 8c:5b:c4:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHY/Im2sih5Mu+W48HotmcHtAE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZFQzRC RkQwMkY0RDAeFw0yNjEwMjQxMzAwMThaFw0yNjEwMjUxNjA3MThaMDMxMTAvBgNV BAMTKDVBRURGRjg1RjhDNzg2MDA2NEY5RkExQjVDQjA1RDQyOTZEMTdGNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXW0K06ktChsfFC5ivrN6t4L3 U++i45ukxFUQ0z7VFU/xTnRDQMbDx/be998LOtm1XDuqdOlbfR//bnw/4Zb/NZQK Hzj3ZXaIzI3y+72Z/UodJNsr1rhJb3jnuGy1V44VB+9F3LEkmnuJo0Wa7HOVSXSC xVNCZ5p571uThsAP81j+MWAegBORZY/IMZyfDFaoDkxXGWpS3UqNYteujwcHSIbP /TWAtpEw4YeyOQd4VpJMykvsG50xYVb0PjQ0WP+MV8xrnMP3KOWJuFO+VI1aYOeU 6sE5jJYzVtiJbrGQtxo/UObTlG2hJOVRSiRx57371Ge6T/M7oU4+U4MV3Rg7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWu3/hfjHhgBk+fobXLBdQpbRf00wHwYDVR0j BBgwFoAUo0Ecd7XlTyOTetCQgy7+xL/QL00wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRjNmY3NzAtNjg2YS00NWVmLThkZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdC NUU1NEYyMzkzN0FEMDkwODMyRUZFQzRCRkQwMkY0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzQxMUM3N0I1RTU0RjIzOTM3QUQwOTA4MzJFRkVDNEJGRDAy RjRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvQTM0MTFDNzdCNUU1NEYyMzkzN0FEMDkwODMyRUZF QzRCRkQwMkY0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpLZzzA7a9EP8qOI4r8vkhHJf9qiOlJ5C4a rP55DkSBRX+tBBVGb/yER7YbnmLv24v5oNJQU4AEicKL7+HJ7eUhjw9yELedp/wi he++ODxn/g6WEbn8cekTWoRBj2qxCoi+3977R3S9CemqaWONXDlvij028cOOs9Wq 8lB0vxiKTpCpAOhehkKql6uxqckf4e3rcY+AkJ5cNR8SjyCF/f12hxKFvIVgsrOC R6nzTKPauKDizsCK7llojKC66UJiKWp/Awzd+KZwbrA7/e1IbIdlQCK1uR94MzGW NQsA2EcR+hezybZ5ZIAX62iaFrSR0eB8zbV8AeWLxDYW+YxbxP4= -----END CERTIFICATE-----Generated at Sun Oct 25 08:03:41 2026 by rpki-client