$ rpki-client -vvf rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft File: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft (raw, json) Hash identifier: 6D12EC4caLz0DZaRWMRWVb4p50ktRD6R+vUUIVybvRY= Subject key identifier: 81:1A:B1:0A:78:FD:B9:06:71:6C:9B:B7:CF:B3:75:98:01:48:6C:3B Authority key identifier: C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 Certificate issuer: /CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Certificate serial: 757CD46F7F448389E0728450B2BAF35193A5B5AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:09:34 +0000 Manifest this update: Tue 12 May 2026 08:04:34 +0000 Manifest next update: Wed 13 May 2026 09:19:34 +0000 Files and hashes: 1: C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl (hash: iv/k4HNvazbxnJDbEUyCZFiofHjPcKNDp75vXmc6ZxQ=) 2: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 0WLfS7aDlUOO8gGFrEIWmBmwKDx6lnGogb/aAhlDo0s=) 3: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: 6yxa8Y8b4DaabwAbCdywk8T5puaQapNj4oIey5BeZh0=) 4: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: RYDFjSUq7+WTBKXlmjbV9d6C3LLSVr9xribVCYh4jog=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7c:d4:6f:7f:44:83:89:e0:72:84:50:b2:ba:f3:51:93:a5:b5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FB32C4A43D1AF4473AFFD72DA37C6041767F29 Validity Not Before: May 12 08:04:34 2026 GMT Not After : May 13 09:19:34 2026 GMT Subject: CN=811AB10A78FDB906716C9BB7CFB3759801486C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cd:60:0e:1e:f7:1a:24:4d:ef:99:6d:29:26: d7:ea:8c:a5:ed:fd:bb:8d:65:23:0a:e1:39:1c:30: 4a:32:c5:d7:a8:bb:8f:71:12:49:97:94:53:76:51: b1:64:3c:1b:43:c8:d3:34:fd:9a:63:8c:a2:a9:4f: 38:4b:b8:54:c9:fd:e5:49:21:10:1d:a0:c7:f1:f8: d1:4d:2b:28:a9:58:3a:da:96:9e:e8:33:74:46:f1: b8:08:c1:93:bc:76:b9:83:f0:a8:ee:4c:f2:3d:84: 18:c5:f3:70:70:ae:25:4e:31:7f:d7:0a:cb:56:23: 2f:f3:bc:e9:09:a3:e0:b8:32:c1:24:f4:1b:30:23: 2c:a2:f6:67:57:a2:e2:24:39:e9:66:fb:ee:97:8f: 7f:d0:b1:64:34:3f:d2:c1:4f:e1:4b:09:3a:81:33: f0:a3:e9:2d:58:bd:db:fd:4a:0c:df:e4:b9:a4:fe: ee:3b:0f:8d:b1:46:19:ef:2b:0b:1c:31:d6:8d:74: a9:45:d0:93:dc:36:b8:14:cb:86:ae:af:ad:63:05: 86:f1:21:17:41:9d:40:06:37:1a:cc:e7:ac:0d:10: 62:66:ca:b5:fc:43:99:1f:29:71:5d:77:2d:e2:be: 2b:d2:c9:b5:fe:01:4d:5b:9f:b7:1a:a5:7d:f0:98: 16:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1A:B1:0A:78:FD:B9:06:71:6C:9B:B7:CF:B3:75:98:01:48:6C:3B X509v3 Authority Key Identifier: keyid:C3:FB:32:C4:A4:3D:1A:F4:47:3A:FF:D7:2D:A3:7C:60:41:76:7F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/C3FB32C4A43D1AF4473AFFD72DA37C6041767F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:8b:b3:e4:48:ba:62:af:f1:fa:de:99:3c:a9:33:83:db:df: e7:72:41:53:06:b4:4b:9d:05:da:26:d0:d1:4c:58:03:d7:c9: 0c:b3:c3:7c:75:cd:71:5f:c6:56:2c:a4:da:4f:8e:af:5f:53: 8d:5f:8f:d1:65:7a:1a:d3:07:c5:6e:ed:49:25:67:bf:b5:51: 47:37:bd:5e:a3:89:4d:39:18:c6:d8:17:1b:a5:78:2d:60:36: ca:76:46:cb:6d:c9:a8:08:3b:af:48:26:9e:6c:3b:9c:cc:04: 97:4f:59:d9:fb:4e:5c:79:9e:ea:ac:9a:03:56:db:0e:dc:16: 5c:30:03:71:55:08:59:32:94:cc:82:6f:11:37:80:8e:85:19: 93:52:42:8e:9d:c7:69:73:aa:a6:b1:9c:ef:be:bb:d7:50:92: 5f:cb:8f:1e:4a:de:a9:7e:cd:5e:49:18:c3:bc:e7:0a:ff:d2: 5a:dc:e8:f9:9e:90:55:f4:dd:20:6f:51:af:02:53:dd:ed:f6: 8b:3a:76:60:41:08:6f:ac:43:e1:2a:73:c4:39:9f:44:44:86: 12:39:22:3b:61:ed:66:d2:61:57:4a:c0:09:be:f5:d6:00:98: 8b:3a:7c:d2:25:50:65:b2:d8:cd:49:e8:6c:d0:0b:5f:1e:25: 64:00:fb:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXzUb39Eg4ngcoRQsrrzUZOlta0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0 MTc2N0YyOTAeFw0yNjA1MTIwODA0MzRaFw0yNjA1MTMwOTE5MzRaMDMxMTAvBgNV BAMTKDgxMUFCMTBBNzhGREI5MDY3MTZDOUJCN0NGQjM3NTk4MDE0ODZDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDczWAOHvcaJE3vmW0pJtfqjKXt /buNZSMK4TkcMEoyxdeou49xEkmXlFN2UbFkPBtDyNM0/ZpjjKKpTzhLuFTJ/eVJ IRAdoMfx+NFNKyipWDralp7oM3RG8bgIwZO8drmD8KjuTPI9hBjF83BwriVOMX/X CstWIy/zvOkJo+C4MsEk9BswIyyi9mdXouIkOelm++6Xj3/QsWQ0P9LBT+FLCTqB M/Cj6S1Yvdv9Sgzf5Lmk/u47D42xRhnvKwscMdaNdKlF0JPcNrgUy4aur61jBYbx IRdBnUAGNxrM56wNEGJmyrX8Q5kfKXFddy3ivivSybX+AU1bn7capX3wmBblAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgRqxCnj9uQZxbJu3z7N1mAFIbDswHwYDVR0j BBgwFoAUw/syxKQ9GvRHOv/XLaN8YEF2fykwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ4ODU1MjUtY2IwZi00NmEwLTgyNTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRB NDNEMUFGNDQ3M0FGRkQ3MkRBMzdDNjA0MTc2N0YyOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0ZCMzJDNEE0M0QxQUY0NDczQUZGRDcyREEzN0M2MDQxNzY3 RjI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvQzNGQjMyQzRBNDNEMUFGNDQ3M0FGRkQ3MkRBMzdD NjA0MTc2N0YyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2Ls+RIumKv8fremTypM4Pb3+dyQVMGtEud Bdom0NFMWAPXyQyzw3x1zXFfxlYspNpPjq9fU41fj9FlehrTB8Vu7UklZ7+1UUc3 vV6jiU05GMbYFxuleC1gNsp2RsttyagIO69IJp5sO5zMBJdPWdn7Tlx5nuqsmgNW 2w7cFlwwA3FVCFkylMyCbxE3gI6FGZNSQo6dx2lzqqaxnO++u9dQkl/Ljx5K3ql+ zV5JGMO85wr/0lrc6PmekFX03SBvUa8CU93t9os6dmBBCG+sQ+Eqc8Q5n0REhhI5 Ijth7WbSYVdKwAm+9dYAmIs6fNIlUGWy2M1J6GzQC18eJWQA+2I= -----END CERTIFICATE-----Generated at Tue May 12 22:49:38 2026 by rpki-client