$ rpki-client -vvf rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft File: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft (raw, json) Hash identifier: 2MtThIXYKArs0UAlAg/V+tAmDh6wsP8EHe7YJm+vrVA= Subject key identifier: 57:A8:C7:8C:84:0B:37:85:8E:F5:A1:74:98:D4:8B:7E:B9:9A:B1:77 Authority key identifier: 33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 Certificate issuer: /CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Certificate serial: 1EA1CB622BCE85B2DEB256EE5E8EC5D0D0566410 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:20:18 +0000 Manifest this update: Tue 12 May 2026 19:15:18 +0000 Manifest next update: Wed 13 May 2026 22:25:18 +0000 Files and hashes: 1: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: R6gLAkDdw5uoEeHIF+BZTSI8Nmt3rpd6kFAoBJizRp0=) 2: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: T06sDsvRxE4yK7ECDWNomJNJ5HNU4tQJl/HnEtrv2wM=) 3: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: 3A+tKNYPDWO1jDhVDZUdC2NZs5B4MixvTHgsf4h9Xzc=) 4: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: rjOP/mlx+e05g5g9m1lNDsLBX8nXjBRagTVjyUCAwbI=) 5: 3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl (hash: 9h15Q4dE21JfnXRgAMIVWwXU8eefT+wTR5X2CzQmlOg=) 6: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: qwCD6LMD3vcZUMJ0NyJQKQENdmqWnufrQ7c5rQMuFak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a1:cb:62:2b:ce:85:b2:de:b2:56:ee:5e:8e:c5:d0:d0:56:64:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62 Validity Not Before: May 12 19:15:18 2026 GMT Not After : May 13 22:25:18 2026 GMT Subject: CN=57A8C78C840B37858EF5A17498D48B7EB99AB177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f5:5c:34:2f:84:55:1a:43:c5:15:4e:b4:e8: 7d:8b:46:54:e3:4e:09:e7:5b:66:b6:97:c7:0b:a4: 3f:ff:3d:19:8b:42:0b:e9:96:bd:22:e6:34:6c:4a: 89:6b:dd:b9:7a:77:2d:f4:06:c8:9d:2e:cb:2d:8b: b4:f7:44:cd:a0:db:89:ac:10:41:27:2a:16:d9:a8: 40:46:46:75:07:6f:4c:76:de:aa:df:fa:b9:5e:08: 9b:31:8f:80:11:ed:bf:2e:4c:e1:4c:64:40:10:ff: 26:fc:d4:93:42:d8:f1:e5:06:9e:da:6d:38:c6:6b: b8:8c:68:40:8a:0c:b7:cb:de:4d:cd:c2:e5:79:6f: e0:ea:3e:7c:2a:b6:c3:df:61:51:70:55:c6:36:3a: f0:7c:69:5e:03:8e:a4:8e:03:d1:02:10:7d:fc:91: 82:64:67:27:d1:33:ed:a5:b9:47:f2:36:5c:8e:08: 79:60:30:ae:47:12:b1:8e:53:77:1c:3b:3a:40:0b: 0f:22:f0:17:1a:f0:b6:f9:eb:9e:65:3e:05:19:ee: 27:ab:1a:e7:c0:82:7f:e1:53:c0:08:3c:e8:8d:ce: 88:38:1d:f9:62:d3:2c:6e:a3:e8:6c:1a:1e:e8:e0: d2:2e:4c:dc:ec:13:c2:92:61:9d:c3:0d:5e:4a:2c: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A8:C7:8C:84:0B:37:85:8E:F5:A1:74:98:D4:8B:7E:B9:9A:B1:77 X509v3 Authority Key Identifier: keyid:33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:fb:24:3c:e4:aa:f1:64:79:03:4c:09:2e:c7:59:87:3b:9b: f7:57:ce:fe:b5:a8:b7:91:8e:65:ea:a1:5c:a0:ce:f0:5e:aa: 8a:d0:ba:92:02:36:16:40:53:70:be:ce:f4:aa:6b:71:f1:a0: 71:33:8b:1f:cd:ab:c0:bd:cf:0d:31:da:d5:ee:d9:dc:55:ec: 93:cf:e4:c5:fb:1b:ef:04:d3:c9:6b:8a:20:c0:8e:87:d1:83: e1:f5:8b:a3:2b:3c:3d:71:7f:dd:74:64:78:1e:3c:a5:70:26: 23:a4:c9:33:87:93:d3:83:c2:e7:4c:55:f8:22:0f:51:4c:5d: d3:ae:72:1b:1a:d1:f1:0b:af:f2:6e:8c:ae:81:ed:61:bd:8a: 9e:43:2d:45:9a:7a:c9:dd:ea:cd:b7:88:aa:4a:0f:6f:7a:ab: f7:a9:62:ad:a9:37:39:17:5c:66:73:5b:ba:2f:eb:4b:13:34: a9:cc:db:1d:40:ee:58:16:55:eb:30:ab:cd:fa:7a:ba:ae:7c: 6c:89:2f:69:66:05:e4:a2:31:c6:36:e9:d5:ad:54:6d:41:bb: d9:54:38:e5:ab:31:17:0a:10:1d:ff:98:46:c3:46:80:cc:03: 23:ad:8c:7a:e6:5b:82:77:14:36:ff:3b:f1:ac:5d:70:96:40: 4a:96:b2:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqHLYivOhbLeslbuXo7F0NBWZBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlENDdG QjU2MUI2MjAeFw0yNjA1MTIxOTE1MThaFw0yNjA1MTMyMjI1MThaMDMxMTAvBgNV BAMTKDU3QThDNzhDODQwQjM3ODU4RUY1QTE3NDk4RDQ4QjdFQjk5QUIxNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj9Vw0L4RVGkPFFU606H2LRlTj TgnnW2a2l8cLpD//PRmLQgvplr0i5jRsSolr3bl6dy30BsidLssti7T3RM2g24ms EEEnKhbZqEBGRnUHb0x23qrf+rleCJsxj4AR7b8uTOFMZEAQ/yb81JNC2PHlBp7a bTjGa7iMaECKDLfL3k3NwuV5b+DqPnwqtsPfYVFwVcY2OvB8aV4DjqSOA9ECEH38 kYJkZyfRM+2luUfyNlyOCHlgMK5HErGOU3ccOzpACw8i8Bca8Lb5655lPgUZ7ier GufAgn/hU8AIPOiNzog4Hfli0yxuo+hsGh7o4NIuTNzsE8KSYZ3DDV5KLJEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV6jHjIQLN4WO9aF0mNSLfrmasXcwHwYDVR0j BBgwFoAUMxPigd82Tgv6MqQyKsydR/tWG2IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ2MWQ3YTctYTExZS00MDBiLTkxNzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFE RjM2NEUwQkZBMzJBNDMyMkFDQzlENDdGQjU2MUI2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMzEzRTI4MURGMzY0RTBCRkEzMkE0MzIyQUNDOUQ0N0ZCNTYx QjYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvMzMxM0UyODFERjM2NEUwQkZBMzJBNDMyMkFDQzlE NDdGQjU2MUI2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAD7JDzkqvFkeQNMCS7HWYc7m/dXzv61qLeR jmXqoVygzvBeqorQupICNhZAU3C+zvSqa3HxoHEzix/Nq8C9zw0x2tXu2dxV7JPP 5MX7G+8E08lriiDAjofRg+H1i6MrPD1xf910ZHgePKVwJiOkyTOHk9ODwudMVfgi D1FMXdOuchsa0fELr/JujK6B7WG9ip5DLUWaesnd6s23iKpKD296q/epYq2pNzkX XGZzW7ov60sTNKnM2x1A7lgWVeswq836erqufGyJL2lmBeSiMcY26dWtVG1Bu9lU OOWrMRcKEB3/mEbDRoDMAyOtjHrmW4J3FDb/O/GsXXCWQEqWsks= -----END CERTIFICATE-----Generated at Wed May 13 05:14:44 2026 by rpki-client