$ rpki-client -vvf rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft File: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft (raw, json) Hash identifier: 3xXJbchVVAvjch4V4j3XGDL1gcT9saI1Ho8KqBDUFcc= Subject key identifier: 30:71:66:DA:55:61:C1:38:A2:4D:B8:E4:10:24:D0:56:0E:D0:EB:E7 Authority key identifier: D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 Certificate issuer: /CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Certificate serial: 5843E1C0FA9A6F76C172EE431B45AC3D3EF121D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft Manifest number: 0F Signing time: Wed 13 May 2026 01:04:50 +0000 Manifest this update: Wed 13 May 2026 00:59:50 +0000 Manifest next update: Thu 14 May 2026 03:21:50 +0000 Files and hashes: 1: D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl (hash: WgXcf4tG/g6hmAmzdWUHqJFdw2zX2b7OyYGF4G/h2Lo=) 2: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: EtsVHdeAuCEUKToYyc1AboiXRpshf+Ge4ld5y69utbM=) 3: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: 7YRFkgWqBTb6xXfqMpSxUz7NK51JToKbqOBLvR25NTc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:43:e1:c0:fa:9a:6f:76:c1:72:ee:43:1b:45:ac:3d:3e:f1:21:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3EC327D5669BC0B0FB2A4245617E44E36DC4473 Validity Not Before: May 13 00:59:50 2026 GMT Not After : May 14 03:21:50 2026 GMT Subject: CN=307166DA5561C138A24DB8E41024D0560ED0EBE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cc:27:83:07:a4:bd:de:74:fe:c6:8f:fc:57: fb:28:a8:8a:7d:13:e1:7f:2a:e8:e1:2f:2c:c6:4c: 63:b5:1b:6d:89:5d:7f:b5:c0:56:fa:dc:7b:b7:df: ae:15:66:a4:52:0c:cc:85:8d:a4:c7:20:7b:34:63: ef:1c:74:1c:5f:7f:ce:85:7f:94:c4:2e:d2:61:e6: 8b:d4:ca:69:5c:cd:89:e5:71:33:eb:12:d9:56:e2: 2b:33:65:ec:b4:7e:55:b6:ca:eb:de:aa:8d:14:f9: f8:c1:dc:6c:87:ea:12:04:0e:4d:6e:f1:33:b3:be: 46:15:cb:25:9a:9c:44:0b:3e:c9:60:32:98:d6:66: d7:4e:e8:66:77:5a:17:70:92:65:8f:df:a0:87:c5: 00:97:12:8d:54:5c:7d:6b:9e:6e:cd:b0:21:44:3a: e0:0b:1a:49:44:2e:46:3b:9c:94:71:53:ee:49:75: 83:30:00:4b:29:a3:b8:c3:47:83:c1:d1:40:92:ac: 8a:4d:e4:39:9a:1f:18:3e:ed:82:ae:78:a9:93:82: 31:65:76:4c:c3:4f:2a:a0:e2:d7:7b:1b:86:ea:df: 94:78:48:81:83:ac:ad:90:dd:51:a1:8c:12:5a:81: 48:63:88:64:3d:eb:1f:08:b0:94:f4:ae:f8:d0:c7: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:71:66:DA:55:61:C1:38:A2:4D:B8:E4:10:24:D0:56:0E:D0:EB:E7 X509v3 Authority Key Identifier: keyid:D3:EC:32:7D:56:69:BC:0B:0F:B2:A4:24:56:17:E4:4E:36:DC:44:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/D3EC327D5669BC0B0FB2A4245617E44E36DC4473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b6:bc:59:43:a1:17:34:f2:19:9d:f1:aa:a4:da:38:e0:df: a2:2d:d4:0a:e0:08:b5:f3:37:47:81:30:fa:b6:d6:8e:69:5e: 01:35:31:dd:64:33:1f:a6:b4:42:8d:5d:48:b8:75:94:7c:af: 7f:66:3f:8f:e5:4a:93:f3:09:ff:ce:79:c4:e1:00:fc:3e:d7: 0d:97:1e:4e:2c:5d:4e:5d:35:6e:df:ba:5f:d1:5a:4d:12:c1: 5d:98:16:11:bb:b4:af:22:64:d1:35:80:cf:a7:f0:2c:20:93: 10:27:ed:5e:ed:ce:a8:0b:72:5f:98:ee:7a:36:64:f2:75:84: c3:27:53:b1:1c:5e:f6:4e:a7:47:c9:19:e4:4e:f5:a4:2a:c8: df:8e:3f:ef:62:0e:f1:87:b2:f8:bc:ca:ed:f9:49:14:2b:d4: ed:f4:5b:43:9b:5a:dd:cc:98:31:df:9b:1d:6e:71:ac:3b:0e: 84:64:fe:4b:33:c6:93:72:01:04:df:5c:bd:2a:ff:cd:c3:a3: 0b:57:fb:92:1f:ea:5c:92:fc:5e:17:40:58:7c:2a:c3:e5:10: a6:e3:8f:e3:19:d4:11:ef:a8:de:72:97:0a:5a:b4:2e:ac:0a: 7e:a2:9b:33:67:04:18:ad:db:38:21:f8:48:73:d2:e9:53:d1: e3:e9:2b:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEPhwPqab3bBcu5DG0WsPT7xIdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUz NkRDNDQ3MzAeFw0yNjA1MTMwMDU5NTBaFw0yNjA1MTQwMzIxNTBaMDMxMTAvBgNV BAMTKDMwNzE2NkRBNTU2MUMxMzhBMjREQjhFNDEwMjREMDU2MEVEMEVCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCazCeDB6S93nT+xo/8V/soqIp9 E+F/KujhLyzGTGO1G22JXX+1wFb63Hu3364VZqRSDMyFjaTHIHs0Y+8cdBxff86F f5TELtJh5ovUymlczYnlcTPrEtlW4iszZey0flW2yuveqo0U+fjB3GyH6hIEDk1u 8TOzvkYVyyWanEQLPslgMpjWZtdO6GZ3WhdwkmWP36CHxQCXEo1UXH1rnm7NsCFE OuALGklELkY7nJRxU+5JdYMwAEspo7jDR4PB0UCSrIpN5DmaHxg+7YKueKmTgjFl dkzDTyqg4td7G4bq35R4SIGDrK2Q3VGhjBJagUhjiGQ96x8IsJT0rvjQx7D9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMHFm2lVhwTiiTbjkECTQVg7Q6+cwHwYDVR0j BBgwFoAU0+wyfVZpvAsPsqQkVhfkTjbcRHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTIzMDczOTAtNmVmMy00NDc2LWE2YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1 NjY5QkMwQjBGQjJBNDI0NTYxN0U0NEUzNkRDNDQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EM0VDMzI3RDU2NjlCQzBCMEZCMkE0MjQ1NjE3RTQ0RTM2REM0 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvRDNFQzMyN0Q1NjY5QkMwQjBGQjJBNDI0NTYxN0U0 NEUzNkRDNDQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHS2vFlDoRc08hmd8aqk2jjg36It1ArgCLXz N0eBMPq21o5pXgE1Md1kMx+mtEKNXUi4dZR8r39mP4/lSpPzCf/OecThAPw+1w2X Hk4sXU5dNW7ful/RWk0SwV2YFhG7tK8iZNE1gM+n8CwgkxAn7V7tzqgLcl+Y7no2 ZPJ1hMMnU7EcXvZOp0fJGeRO9aQqyN+OP+9iDvGHsvi8yu35SRQr1O30W0ObWt3M mDHfmx1ucaw7DoRk/kszxpNyAQTfXL0q/83DowtX+5If6lyS/F4XQFh8KsPlEKbj j+MZ1BHvqN5ylwpatC6sCn6imzNnBBit2zgh+Ehz0ulT0ePpKyc= -----END CERTIFICATE-----Generated at Wed May 13 04:08:37 2026 by rpki-client