$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft File: A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft (raw, json) Hash identifier: WkLnZhscmLU+fxiJ3uauHlcvQrMOO5KHUfx+WatEENQ= Subject key identifier: 3F:FC:A9:1D:09:83:11:10:91:CC:F3:06:BF:31:57:FE:5D:70:C6:00 Authority key identifier: A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 Certificate issuer: /CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Certificate serial: 7E12CB071D710CE35B5A59C9DAB7485A323A476A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:04:27 +0000 Manifest this update: Tue 12 May 2026 07:59:27 +0000 Manifest next update: Wed 13 May 2026 08:11:27 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: 9QZ4zyqSjuEvfgjJyJcGuDYRra6HiDhsRoStARqfwRU=) 2: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: rrzxlF06KjaeWOab2SfdeYXEnvubBNLCq3WZSBYMU7k=) 3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: t5qlWMCg2l2O2xAA9OrAnjww8OOdg9aeZk/sDXkOKPY=) 4: A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl (hash: IxDpW4OmFQY2oKddLNCdRTmdJ39RB1o+oDuoPsOmV0E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:12:cb:07:1d:71:0c:e3:5b:5a:59:c9:da:b7:48:5a:32:3a:47:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Validity Not Before: May 12 07:59:27 2026 GMT Not After : May 13 08:11:27 2026 GMT Subject: CN=3FFCA91D0983111091CCF306BF3157FE5D70C600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:62:fc:4b:ff:2c:f2:d2:3d:95:6f:4f:f6: a0:0f:85:74:2f:85:27:eb:f5:83:b2:4d:c5:a1:a3: 46:6b:c2:bd:31:25:e8:48:a2:ab:5b:f1:bf:06:fe: 34:95:1b:5e:88:84:41:47:66:33:71:d5:db:9f:38: 8e:bf:f0:7d:57:ae:bd:65:51:62:8b:4c:96:bb:e7: fe:11:60:b6:48:62:e3:a4:98:41:9c:02:4e:9c:88: a6:b0:e5:9f:c9:fe:27:6c:70:8f:45:76:f0:2b:d8: fe:01:89:cd:6b:44:cd:d6:9a:c8:9e:22:07:68:07: d2:8d:4e:23:ab:29:e1:48:98:21:11:e0:1b:95:a3: b9:5e:46:e8:16:8e:da:43:70:58:97:f0:3a:5b:12: 5f:f6:c8:36:a5:a1:03:9f:5a:eb:62:1f:50:dd:85: 24:ee:9a:53:c1:4c:7e:da:c4:7a:2a:04:65:7a:59: eb:b4:52:a2:1f:ae:2d:2d:d0:6c:b0:03:bf:84:0f: 9c:15:9e:58:aa:98:57:96:a5:90:8e:9e:4c:a5:af: 2b:4c:be:a8:11:74:96:86:a9:85:88:2f:7e:66:cf: 9e:8b:f9:9f:30:c5:af:53:31:d8:b6:3e:d1:0e:4d: 90:57:db:b8:c4:0b:20:89:6d:5f:91:2a:21:96:f3: f6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:A9:1D:09:83:11:10:91:CC:F3:06:BF:31:57:FE:5D:70:C6:00 X509v3 Authority Key Identifier: keyid:A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ff:4e:82:c3:59:ed:8c:08:de:c6:b7:bd:ea:9f:4a:5d:88: fc:d1:3d:9e:55:f3:0f:5b:27:15:f9:e1:1f:28:70:22:42:ab: b4:39:df:12:b2:c8:d7:fa:3b:57:6d:ea:f6:f6:64:2f:96:f3: 0f:66:00:a3:9c:f8:7f:ab:3a:58:65:7d:88:c9:64:2b:14:7a: 3d:b0:52:a4:36:2b:9f:22:01:f5:39:3f:de:06:1a:b1:8f:07: 50:bf:d9:d0:9f:52:d2:17:a1:60:56:df:67:46:bf:39:bf:11: 33:4c:19:d7:fd:c1:f6:76:b4:19:9d:2f:c6:41:c1:1c:39:91: fe:64:61:1c:b1:af:5e:9e:11:10:88:38:40:0e:23:a9:1a:2c: 62:7b:18:c8:be:3c:61:1e:33:30:51:e7:a7:6d:b5:c9:34:16: c2:cf:a3:3d:7a:95:18:c3:86:3a:dd:7d:f6:7c:87:b2:c3:45: 3d:db:b1:86:53:2b:ff:d8:a5:c6:a9:3a:33:dd:52:3c:1c:af: 21:6e:6b:01:d1:38:6d:16:25:75:18:5d:b4:41:9f:ef:58:9b: 96:95:c2:73:1b:a3:64:e7:dc:4e:4e:a1:ba:60:e2:51:f6:8a: b3:4c:8b:52:2c:c5:b3:20:a1:f0:40:9b:ea:88:ba:de:9a:90: a6:a5:97:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhLLBx1xDONbWlnJ2rdIWjI6R2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUx NDUxMTMzNTAeFw0yNjA1MTIwNzU5MjdaFw0yNjA1MTMwODExMjdaMDMxMTAvBgNV BAMTKDNGRkNBOTFEMDk4MzExMTA5MUNDRjMwNkJGMzE1N0ZFNUQ3MEM2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArmL8S/8s8tI9lW9P9qAPhXQv hSfr9YOyTcWho0Zrwr0xJehIoqtb8b8G/jSVG16IhEFHZjNx1dufOI6/8H1Xrr1l UWKLTJa75/4RYLZIYuOkmEGcAk6ciKaw5Z/J/idscI9FdvAr2P4Bic1rRM3Wmsie IgdoB9KNTiOrKeFImCER4BuVo7leRugWjtpDcFiX8DpbEl/2yDaloQOfWutiH1Dd hSTumlPBTH7axHoqBGV6Weu0UqIfri0t0GywA7+ED5wVnliqmFeWpZCOnkylrytM vqgRdJaGqYWIL35mz56L+Z8wxa9TMdi2PtEOTZBX27jECyCJbV+RKiGW8/a9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP/ypHQmDERCRzPMGvzFX/l1wxgAwHwYDVR0j BBgwFoAUo+z5Fpis0lxO+1bDm3f49RRREzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU4ZDU4YTgtZTE5Ny00MTc5LWI3M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5 OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUxNDUxMTMzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BM0VDRjkxNjk4QUNEMjVDNEVGQjU2QzM5Qjc3RjhGNTE0NTEx MzM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4 RjUxNDUxMTMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJX/ToLDWe2MCN7Gt73qn0pdiPzRPZ5V8w9b JxX54R8ocCJCq7Q53xKyyNf6O1dt6vb2ZC+W8w9mAKOc+H+rOlhlfYjJZCsUej2w UqQ2K58iAfU5P94GGrGPB1C/2dCfUtIXoWBW32dGvzm/ETNMGdf9wfZ2tBmdL8ZB wRw5kf5kYRyxr16eERCIOEAOI6kaLGJ7GMi+PGEeMzBR56dttck0FsLPoz16lRjD hjrdffZ8h7LDRT3bsYZTK//YpcapOjPdUjwcryFuawHROG0WJXUYXbRBn+9Ym5aV wnMbo2Tn3E5Oobpg4lH2irNMi1IsxbMgofBAm+qIut6akKallyk= -----END CERTIFICATE-----Generated at Tue May 12 22:40:15 2026 by rpki-client