$ rpki-client -vvf rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft File: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft (raw, json) Hash identifier: XNoRD6roaqOa1r/GBvxuYWsdmtXGCHwQbA3LWGAzfw0= Subject key identifier: 67:FC:BC:E9:9F:65:06:F6:38:A3:B4:F4:BF:2D:3C:92:19:8A:40:E3 Authority key identifier: 36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 Certificate issuer: /CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Certificate serial: 3F5B4B8F1D998C894803A3A33DB0CE3ED16D8534 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:45:58 +0000 Manifest this update: Tue 12 May 2026 19:40:58 +0000 Manifest next update: Wed 13 May 2026 21:02:58 +0000 Files and hashes: 1: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: eaitOk5B7Jr1jxdZCm0AVOvl4hgE6wJsB8PnaacOno4=) 2: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: c4wYihjNVRnxptUGtDAxVDHluIjX7/1xYD6gvJUxJM8=) 3: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: 4DtXaRxKzA2NgphfITj3rvmS/5Zg3IKyMFd8f9pE1pU=) 4: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: lpwKH/1rt1O8n37PkqiZ5Fo1jTQNKkwVgQuRatXBn2c=) 5: 3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl (hash: ViJEDEiyqkwchbXonTxGGqKraN0oLQDGlsbgSXCUKi0=) 6: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: lz98VZByNVjP88hEyC/FArLpyfqt3UkStR89LwAjmAE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5b:4b:8f:1d:99:8c:89:48:03:a3:a3:3d:b0:ce:3e:d1:6d:85:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3699EDD71DA60ABC50B3C8187A77DB9A24A8B877 Validity Not Before: May 12 19:40:58 2026 GMT Not After : May 13 21:02:58 2026 GMT Subject: CN=67FCBCE99F6506F638A3B4F4BF2D3C92198A40E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:ed:1b:ea:30:17:48:85:c2:a1:af:98:ec: c8:40:40:30:1a:e9:c6:d8:cf:63:20:1f:9f:f8:f4: 83:26:aa:72:0b:f9:38:5b:f3:9a:db:8a:5a:6c:fc: 63:2f:36:69:58:e5:60:38:a3:c3:1b:71:77:64:0c: 24:f5:82:18:43:5c:c4:6a:f8:f9:8c:f1:de:68:d2: 9e:31:7e:79:04:d8:68:91:a3:68:d4:31:d1:a0:02: e3:6e:96:41:6d:28:e8:21:38:41:87:4c:06:af:ea: d2:9c:b2:55:bb:9f:97:c4:28:af:88:fd:bb:0c:d8: 2b:66:24:16:3b:01:b1:5e:10:1a:34:21:bf:3d:1a: 9b:3d:e6:1e:3f:19:82:ae:e9:81:15:08:07:a9:e9: 74:82:d4:d3:c5:08:c6:7e:bc:8b:23:ec:7e:b9:66: c8:89:2a:e5:32:9f:8e:3f:f0:0c:87:1e:b8:47:1e: 91:35:68:a1:74:28:15:7d:cd:b8:c4:03:9f:61:83: d3:16:d7:c5:2f:d2:27:2c:1b:3e:a8:15:b5:11:d6: ce:23:7b:14:9a:98:56:8a:42:df:07:ba:b6:99:d0: d4:77:4a:1f:13:24:e1:21:d8:25:0d:65:6f:b9:fc: 16:b4:a6:aa:c7:29:28:05:32:90:24:74:03:69:d9: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FC:BC:E9:9F:65:06:F6:38:A3:B4:F4:BF:2D:3C:92:19:8A:40:E3 X509v3 Authority Key Identifier: keyid:36:99:ED:D7:1D:A6:0A:BC:50:B3:C8:18:7A:77:DB:9A:24:A8:B8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3699EDD71DA60ABC50B3C8187A77DB9A24A8B877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:33:65:2d:05:34:99:a0:29:1f:67:46:8c:b5:c2:ec:a8:10: 8b:48:34:4f:e1:be:89:21:b6:ca:f2:ce:53:fe:09:41:dc:a2: a2:18:1b:4c:3a:8e:46:6f:03:86:79:aa:ac:ef:eb:c6:6a:a6: 80:8e:f1:eb:d0:74:f1:ba:c4:05:1e:ac:95:02:b2:d0:4a:ea: e8:bb:55:c2:b3:b4:a7:a8:62:3a:84:39:6a:50:90:9d:ef:07: 3e:99:39:f9:41:97:d4:e1:b7:a6:93:e6:c4:fe:f3:09:3a:d9: f2:aa:0c:88:fa:20:f8:16:e2:fd:d4:c6:25:69:20:ae:cf:d6: 7a:a8:b4:d2:94:c0:44:dd:97:7b:a0:89:0b:db:db:58:ac:7a: 40:90:89:fb:6a:7d:f9:0e:7e:f2:5c:e2:8f:00:67:52:3b:45: 31:cd:c7:07:76:49:9f:c7:c9:63:61:1a:8a:c6:05:cb:c7:99: 31:5a:0b:c2:4a:fa:16:cb:ec:5a:86:1e:89:f8:16:dd:dd:ce: 49:bc:a9:f3:6d:fe:bf:65:a2:e0:2e:24:99:15:b7:38:a4:00: a5:fe:f1:22:24:5f:cf:23:fe:1a:ea:56:d5:11:8e:c6:71:c8: f7:f7:f5:34:ac:ee:86:67:49:19:50:74:88:39:49:b5:c8:6c: 74:22:3f:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1tLjx2ZjIlIA6OjPbDOPtFthTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RCOUEy NEE4Qjg3NzAeFw0yNjA1MTIxOTQwNThaFw0yNjA1MTMyMTAyNThaMDMxMTAvBgNV BAMTKDY3RkNCQ0U5OUY2NTA2RjYzOEEzQjRGNEJGMkQzQzkyMTk4QTQwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV1O0b6jAXSIXCoa+Y7MhAQDAa 6cbYz2MgH5/49IMmqnIL+Thb85rbilps/GMvNmlY5WA4o8MbcXdkDCT1ghhDXMRq +PmM8d5o0p4xfnkE2GiRo2jUMdGgAuNulkFtKOghOEGHTAav6tKcslW7n5fEKK+I /bsM2CtmJBY7AbFeEBo0Ib89Gps95h4/GYKu6YEVCAep6XSC1NPFCMZ+vIsj7H65 ZsiJKuUyn44/8AyHHrhHHpE1aKF0KBV9zbjEA59hg9MW18Uv0icsGz6oFbUR1s4j exSamFaKQt8HuraZ0NR3Sh8TJOEh2CUNZW+5/Ba0pqrHKSgFMpAkdANp2aTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ/y86Z9lBvY4o7T0vy08khmKQOMwHwYDVR0j BBgwFoAUNpnt1x2mCrxQs8gYenfbmiSouHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQwZjM3YzAtMzgwYy00MDUzLWIzYmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcx REE2MEFCQzUwQjNDODE4N0E3N0RCOUEyNEE4Qjg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk5RURENzFEQTYwQUJDNTBCM0M4MTg3QTc3REI5QTI0QThC ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvMzY5OUVERDcxREE2MEFCQzUwQjNDODE4N0E3N0RC OUEyNEE4Qjg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQzZS0FNJmgKR9nRoy1wuyoEItINE/hvokh tsryzlP+CUHcoqIYG0w6jkZvA4Z5qqzv68ZqpoCO8evQdPG6xAUerJUCstBK6ui7 VcKztKeoYjqEOWpQkJ3vBz6ZOflBl9Tht6aT5sT+8wk62fKqDIj6IPgW4v3UxiVp IK7P1nqotNKUwETdl3ugiQvb21isekCQiftqffkOfvJc4o8AZ1I7RTHNxwd2SZ/H yWNhGorGBcvHmTFaC8JK+hbL7FqGHon4Ft3dzkm8qfNt/r9louAuJJkVtzikAKX+ 8SIkX88j/hrqVtURjsZxyPf39TSs7oZnSRlQdIg5SbXIbHQiP1Q= -----END CERTIFICATE-----Generated at Wed May 13 00:14:01 2026 by rpki-client