$ rpki-client -vvf rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft File: 3262903B69AE7339AAB9320A98EA5D1800FEC705.mft (raw, json) Hash identifier: VPSNESe3sNMO6uyFMvl5Ff2fNkNShXC8XZ5BmaLflEY= Subject key identifier: 33:74:75:BA:26:19:79:1C:9F:02:95:0C:0D:75:35:CA:D4:6A:4F:E1 Authority key identifier: 32:62:90:3B:69:AE:73:39:AA:B9:32:0A:98:EA:5D:18:00:FE:C7:05 Certificate issuer: /CN=3262903B69AE7339AAB9320A98EA5D1800FEC705 Certificate serial: 434D1217DF6DDCA65775E58A5941CF9512E7348D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:54:56 +0000 Manifest this update: Tue 12 May 2026 21:49:56 +0000 Manifest next update: Thu 14 May 2026 00:14:56 +0000 Files and hashes: 1: 3262903B69AE7339AAB9320A98EA5D1800FEC705.crl (hash: lE3JoXNgaG01ixBe1NUgTZI+NFruv2tm1o6PaMSYIN0=) 2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: mvp2yuPOBwuKJ3KSamrBGxDk5I0RR5jAQfoIbHtIVlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.crl rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4d:12:17:df:6d:dc:a6:57:75:e5:8a:59:41:cf:95:12:e7:34:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3262903B69AE7339AAB9320A98EA5D1800FEC705 Validity Not Before: May 12 21:49:56 2026 GMT Not After : May 14 00:14:56 2026 GMT Subject: CN=337475BA2619791C9F02950C0D7535CAD46A4FE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:65:07:2f:46:96:0d:1b:0b:61:de:cd:87:39: 12:fe:f0:d8:75:2a:e4:6f:74:0b:34:1e:ee:ce:8b: 5e:ca:46:5c:44:4f:04:82:16:70:4a:db:fc:c7:e7: 99:81:74:cc:53:e4:a4:33:78:03:c0:be:ae:2b:44: 7f:c9:38:a7:cf:11:02:9f:9f:0f:41:27:43:52:cb: d5:df:08:54:fb:b1:cc:74:af:93:be:c8:00:99:d3: 8e:ad:f5:71:e5:6a:70:4b:85:7a:48:8a:d3:75:dc: 26:cc:b6:b3:79:6e:77:98:a0:72:b4:c1:43:0f:b6: e7:ee:1b:39:89:9d:16:75:42:f0:8a:64:bf:79:cb: ed:0f:26:1e:f2:73:6f:6d:cf:d7:e8:be:35:8a:5a: c7:84:8a:e2:34:d7:be:e8:a1:1b:99:3e:f5:91:00: 9a:f8:b0:45:11:d7:a2:5a:81:11:87:81:bf:85:69: b0:4d:08:7c:59:02:0c:fc:04:93:46:87:45:fe:63: 18:fc:8c:3b:e0:95:4f:9b:a6:35:59:64:6d:b8:d4: b2:b3:57:f6:01:c4:8b:82:01:4c:0f:d1:32:fa:8f: 82:ee:b8:4a:8d:95:3b:07:57:6e:e7:41:19:6e:28: 63:51:cd:8e:f1:e7:37:94:9b:95:7a:9a:4d:16:9f: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:74:75:BA:26:19:79:1C:9F:02:95:0C:0D:75:35:CA:D4:6A:4F:E1 X509v3 Authority Key Identifier: keyid:32:62:90:3B:69:AE:73:39:AA:B9:32:0A:98:EA:5D:18:00:FE:C7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3262903B69AE7339AAB9320A98EA5D1800FEC705.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3262903B69AE7339AAB9320A98EA5D1800FEC705.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:95:8e:32:fd:02:b4:5f:48:db:5d:e3:90:33:7c:6f:bd:f7: e9:73:a8:b3:40:bd:4a:40:d6:be:29:e9:19:81:9b:28:32:92: 56:57:c1:90:b5:16:00:83:ce:e4:03:b9:6f:9d:81:df:12:33: 70:62:61:96:5e:09:56:5f:57:8d:03:43:d3:e3:ec:52:1d:d6: 48:9a:10:08:02:0d:2a:96:53:0c:ac:62:3c:5d:f8:5b:32:36: d2:b8:a6:46:23:d1:54:20:ed:34:ea:fc:28:dc:98:9e:df:b5: 00:ed:7e:92:92:14:1f:77:ab:18:0d:03:4b:06:e4:0a:68:8b: 37:53:94:cc:8a:93:1e:a3:9c:f3:6a:da:03:78:6a:77:cd:fc: 86:0b:9c:1a:a5:c5:d7:9c:fe:6f:52:1a:2a:7f:b3:b7:45:65: f1:7b:83:8b:05:48:f8:f1:2e:d8:b6:bb:12:df:a6:e1:8a:29: cd:63:57:c9:8d:d8:27:cb:ea:19:67:c4:20:6c:8b:cd:87:75: ed:b3:63:f0:4f:ee:e8:42:b3:99:ba:70:b8:7a:62:71:32:4f: 1c:1b:d0:10:0f:6a:c8:88:5e:ef:ee:24:6d:a3:72:eb:65:62: a1:9e:11:b7:55:d4:3e:13:a7:b0:32:13:67:5e:d7:04:82:6d: d0:37:7e:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ00SF99t3KZXdeWKWUHPlRLnNI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI2MjkwM0I2OUFFNzMzOUFBQjkzMjBBOThFQTVEMTgw MEZFQzcwNTAeFw0yNjA1MTIyMTQ5NTZaFw0yNjA1MTQwMDE0NTZaMDMxMTAvBgNV BAMTKDMzNzQ3NUJBMjYxOTc5MUM5RjAyOTUwQzBENzUzNUNBRDQ2QTRGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXZQcvRpYNGwth3s2HORL+8Nh1 KuRvdAs0Hu7Oi17KRlxETwSCFnBK2/zH55mBdMxT5KQzeAPAvq4rRH/JOKfPEQKf nw9BJ0NSy9XfCFT7scx0r5O+yACZ046t9XHlanBLhXpIitN13CbMtrN5bneYoHK0 wUMPtufuGzmJnRZ1QvCKZL95y+0PJh7yc29tz9fovjWKWseEiuI0177ooRuZPvWR AJr4sEUR16JagRGHgb+FabBNCHxZAgz8BJNGh0X+Yxj8jDvglU+bpjVZZG241LKz V/YBxIuCAUwP0TL6j4LuuEqNlTsHV27nQRluKGNRzY7x5zeUm5V6mk0Wnz2nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM3R1uiYZeRyfApUMDXU1ytRqT+EwHwYDVR0j BBgwFoAUMmKQO2muczmquTIKmOpdGAD+xwUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTYwZmUyYWMtMjlmNi00M2EyLWJlNjQtMDZhM2FlOWQ4ZDIwLzAvMzI2MjkwM0I2 OUFFNzMzOUFBQjkzMjBBOThFQTVEMTgwMEZFQzcwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zMjYyOTAzQjY5QUU3MzM5QUFCOTMyMEE5OEVBNUQxODAwRkVD NzA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvMzI2MjkwM0I2OUFFNzMzOUFBQjkzMjBBOThFQTVE MTgwMEZFQzcwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM6VjjL9ArRfSNtd45AzfG+99+lzqLNAvUpA 1r4p6RmBmygyklZXwZC1FgCDzuQDuW+dgd8SM3BiYZZeCVZfV40DQ9Pj7FId1kia EAgCDSqWUwysYjxd+FsyNtK4pkYj0VQg7TTq/CjcmJ7ftQDtfpKSFB93qxgNA0sG 5ApoizdTlMyKkx6jnPNq2gN4anfN/IYLnBqlxdec/m9SGip/s7dFZfF7g4sFSPjx Lti2uxLfpuGKKc1jV8mN2CfL6hlnxCBsi82Hde2zY/BP7uhCs5m6cLh6YnEyTxwb 0BAPasiIXu/uJG2jcutlYqGeEbdV1D4Tp7AyE2de1wSCbdA3fng= -----END CERTIFICATE-----Generated at Wed May 13 04:48:10 2026 by rpki-client