$ rpki-client -vvf rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft File: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft (raw, json) Hash identifier: 7eUEd8jY35GTOsm2HgimkenWFSV/QLdrw4wu6awF+9s= Subject key identifier: 07:B3:BD:5E:93:5C:73:09:99:FB:1A:A5:4A:45:05:CD:CA:35:FA:61 Authority key identifier: 2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 Certificate issuer: /CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Certificate serial: 71AD064D9628988F5D41C0EA01369E2CEC4D7F05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:53:07 +0000 Manifest this update: Tue 12 May 2026 20:48:07 +0000 Manifest next update: Wed 13 May 2026 21:09:07 +0000 Files and hashes: 1: 2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl (hash: G9m6CxRuwWtIuoqTOVHmTxbZSm9VhR+aEVoht9ETK/A=) 2: 3130332e31362e3131382e302f32332d3233203d3e20313530323234.roa (hash: cHWRS9jvMLPJtfkGwJTsPEjSAtpAq4obnCko3LPwDM4=) 3: 3130332e31362e3131382e302f32342d3234203d3e20313530323234.roa (hash: DmsqvgbVPNfcNdfJtucN0xsEHJ0/UNUr4pV2Ej4ylVY=) 4: 3130332e31362e3131392e302f32342d3234203d3e20313530323234.roa (hash: I2YIeew2oZSIPdct3GSYzDNuqJxTOhVzByMVv86tq2I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ad:06:4d:96:28:98:8f:5d:41:c0:ea:01:36:9e:2c:ec:4d:7f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A3B7113CD87302B2B15C036DABB55A1C61A4BC7 Validity Not Before: May 12 20:48:07 2026 GMT Not After : May 13 21:09:07 2026 GMT Subject: CN=07B3BD5E935C730999FB1AA54A4505CDCA35FA61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:68:2e:cb:19:5b:7b:61:87:c1:63:90:7c:48: 91:ec:01:1f:28:92:51:23:2a:3c:38:41:df:60:2c: 10:0d:34:d0:83:80:51:69:6f:df:e2:04:23:d2:e8: ff:40:a2:40:5f:19:e7:7d:30:ce:70:3f:f1:70:0d: 9a:d9:fa:9d:40:d1:2b:77:45:75:9a:4f:d7:8a:3f: 48:85:72:73:9c:6d:bc:db:b2:ad:16:ce:72:c7:ab: 7e:8c:47:94:e0:47:7f:7e:b7:3d:28:71:5b:41:60: b3:0d:d2:ad:bd:a9:88:b5:a9:ed:37:b4:dd:13:81: d9:38:d8:8d:36:40:5c:5c:30:2a:5a:75:07:59:8e: f3:0a:18:58:cd:d2:6d:e2:5c:cd:39:a8:f2:c8:7c: b8:5a:46:97:ee:83:84:e2:ed:d1:16:dd:5b:3c:c1: 1d:a0:d5:dd:29:21:31:64:2d:ea:77:33:b8:53:72: f0:5c:db:72:40:8c:96:3e:52:6e:0d:53:83:fa:11: df:f7:2a:82:8a:b0:ff:a1:0e:54:49:f0:21:21:db: 6f:ca:59:f9:3a:11:03:83:2f:01:19:01:dc:7c:30: 5b:30:61:dc:dd:4b:89:2a:21:e8:97:1c:50:01:7b: 39:83:3a:d8:e3:2c:6c:f0:48:95:92:f3:e4:21:20: c2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B3:BD:5E:93:5C:73:09:99:FB:1A:A5:4A:45:05:CD:CA:35:FA:61 X509v3 Authority Key Identifier: keyid:2A:3B:71:13:CD:87:30:2B:2B:15:C0:36:DA:BB:55:A1:C6:1A:4B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/2A3B7113CD87302B2B15C036DABB55A1C61A4BC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:72:86:41:ed:cc:b4:7d:86:fb:d7:2b:09:10:75:c0:44:7b: 11:a2:ed:8a:2e:bd:6f:10:51:61:ed:3c:95:bd:04:51:17:8a: b9:ff:1a:48:ce:9c:3a:aa:10:b5:21:44:c2:84:f2:4d:1b:b2: 46:2f:cf:e9:46:d8:95:f1:77:fc:62:f2:5a:e6:02:8a:44:1b: a3:0e:6d:ce:72:e4:8a:96:43:73:d6:d3:e9:58:c2:b7:09:44: b6:d0:d1:9a:b8:94:30:e5:44:4b:7c:ec:04:c6:1a:a5:19:4e: b6:f1:63:a3:09:97:a4:ed:c9:02:e0:eb:30:87:81:3b:3d:96: 9b:dd:fd:92:33:63:6d:b5:a9:6d:b3:08:2b:d4:52:01:17:51: b7:e7:23:20:f7:08:8b:d4:7a:db:1e:db:1a:c2:ba:cd:87:b8: 8d:56:09:92:2a:40:d1:cc:73:37:23:b0:d7:bf:ef:42:f6:5f: f9:c0:d3:6e:9e:9f:80:ae:dd:69:3f:c8:65:4c:8b:c6:fe:67: ce:50:26:16:9f:a1:9e:2d:36:42:ef:1e:73:5a:c2:d8:db:bb: 20:6b:ee:e2:6c:d2:ce:e6:03:51:ac:ec:09:4d:f0:ac:dc:09: e8:5f:c9:04:47:25:49:6d:f0:bc:38:aa:12:df:55:19:0a:5d: 92:8f:88:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUca0GTZYomI9dQcDqATaeLOxNfwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1QTFD NjFBNEJDNzAeFw0yNjA1MTIyMDQ4MDdaFw0yNjA1MTMyMTA5MDdaMDMxMTAvBgNV BAMTKDA3QjNCRDVFOTM1QzczMDk5OUZCMUFBNTRBNDUwNUNEQ0EzNUZBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgaC7LGVt7YYfBY5B8SJHsAR8o klEjKjw4Qd9gLBANNNCDgFFpb9/iBCPS6P9AokBfGed9MM5wP/FwDZrZ+p1A0St3 RXWaT9eKP0iFcnOcbbzbsq0WznLHq36MR5TgR39+tz0ocVtBYLMN0q29qYi1qe03 tN0Tgdk42I02QFxcMCpadQdZjvMKGFjN0m3iXM05qPLIfLhaRpfug4Ti7dEW3Vs8 wR2g1d0pITFkLep3M7hTcvBc23JAjJY+Um4NU4P6Ed/3KoKKsP+hDlRJ8CEh22/K Wfk6EQODLwEZAdx8MFswYdzdS4kqIeiXHFABezmDOtjjLGzwSJWS8+QhIMIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB7O9XpNccwmZ+xqlSkUFzco1+mEwHwYDVR0j BBgwFoAUKjtxE82HMCsrFcA22rtVocYaS8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTk4Nzk3NDQtYjgxOC00NmRjLThkOWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTND RDg3MzAyQjJCMTVDMDM2REFCQjU1QTFDNjFBNEJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yQTNCNzExM0NEODczMDJCMkIxNUMwMzZEQUJCNTVBMUM2MUE0 QkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTk4Nzk3NDQtYjgxOC00NmRjLThk OWYtOWMzNTc5M2Y0Y2JiLzAvMkEzQjcxMTNDRDg3MzAyQjJCMTVDMDM2REFCQjU1 QTFDNjFBNEJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5yhkHtzLR9hvvXKwkQdcBEexGi7YouvW8Q UWHtPJW9BFEXirn/GkjOnDqqELUhRMKE8k0bskYvz+lG2JXxd/xi8lrmAopEG6MO bc5y5IqWQ3PW0+lYwrcJRLbQ0Zq4lDDlREt87ATGGqUZTrbxY6MJl6TtyQLg6zCH gTs9lpvd/ZIzY221qW2zCCvUUgEXUbfnIyD3CIvUetse2xrCus2HuI1WCZIqQNHM czcjsNe/70L2X/nA026en4Cu3Wk/yGVMi8b+Z85QJhafoZ4tNkLvHnNawtjbuyBr 7uJs0s7mA1Gs7AlN8KzcCehfyQRHJUlt8Lw4qhLfVRkKXZKPiGM= -----END CERTIFICATE-----Generated at Wed May 13 02:49:23 2026 by rpki-client