$ rpki-client -vvf rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft File: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft (raw, json) Hash identifier: pdLPkq/L+XqaLcEDF9y0AmCzjc6M7E7jFsYfhjRoCf4= Subject key identifier: 16:4D:0E:E8:25:CA:D6:E8:D2:1E:9F:CF:90:20:47:DB:44:2A:8E:6C Authority key identifier: 3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E Certificate issuer: /CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Certificate serial: 67FAC0FDF0FED2812DEE2E880A902AF37D87B5AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft Manifest number: 0F Signing time: Tue 12 May 2026 12:53:05 +0000 Manifest this update: Tue 12 May 2026 12:48:05 +0000 Manifest next update: Wed 13 May 2026 14:26:05 +0000 Files and hashes: 1: 3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl (hash: Fq2D5ab3E98mfxaO/wxsd9Q6OF/my6w2awU02+VYUf8=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: RmMN8NhmM0RZ6Enalsn3xwEVvbhkE3C1i1JWeXv+gOw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fa:c0:fd:f0:fe:d2:81:2d:ee:2e:88:0a:90:2a:f3:7d:87:b5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F1A2D1D4B4536302A505977B78F5F9F1C7F651E Validity Not Before: May 12 12:48:05 2026 GMT Not After : May 13 14:26:05 2026 GMT Subject: CN=164D0EE825CAD6E8D21E9FCF902047DB442A8E6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:48:0e:3d:32:26:9a:8a:64:fe:15:9b:28:03: bd:56:c4:ba:50:0c:47:05:5e:ed:53:ef:49:b4:25: 34:d3:9e:b8:f2:5a:de:24:66:87:3c:f9:02:37:09: 8f:f8:b6:37:a3:c4:fe:be:e2:45:b6:24:d7:cc:f9: a2:dc:62:9b:ed:a2:04:b9:07:e1:40:ed:98:2c:71: 35:20:c2:fb:0b:01:5e:0b:9c:f8:04:42:bb:72:be: 46:59:1b:65:6d:89:2b:2e:04:be:e7:8e:3e:cd:5d: 56:22:6b:af:40:5b:c3:90:c5:4e:cb:af:0c:56:dc: 02:56:13:8f:32:94:8a:a8:c8:18:2a:4f:a3:68:46: 6f:56:7c:aa:b6:75:e6:cc:0f:83:22:eb:b4:41:99: ed:0b:f4:74:aa:f6:9d:97:11:81:fd:dc:7a:a3:a9: 64:a9:a7:68:ed:8b:c2:67:85:df:75:f8:83:ad:b3: 06:2b:43:40:6c:a4:58:6f:92:ac:3f:1f:73:e0:f4: d4:2a:aa:42:15:6e:56:22:e3:a7:c9:7a:5b:30:cb: 38:52:ce:d3:db:5b:c0:22:4c:5a:1d:65:c7:34:8d: 94:d4:c2:55:1c:b0:bf:01:e3:21:bf:7c:b5:76:34: 9d:a6:4f:fa:94:88:ec:c3:55:18:35:79:f4:e8:4c: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4D:0E:E8:25:CA:D6:E8:D2:1E:9F:CF:90:20:47:DB:44:2A:8E:6C X509v3 Authority Key Identifier: keyid:3F:1A:2D:1D:4B:45:36:30:2A:50:59:77:B7:8F:5F:9F:1C:7F:65:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/3F1A2D1D4B4536302A505977B78F5F9F1C7F651E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:97:ff:b7:b0:8e:03:a9:86:fc:c4:3c:6c:93:e6:b0:98:24: b1:f6:d2:d5:bb:4e:86:79:c4:f5:d6:f7:ae:91:f6:17:04:6a: ab:11:32:6c:76:25:b3:9e:85:73:e2:83:e2:12:04:ab:f0:4f: 6d:f5:d6:cd:a0:9d:70:c0:35:e2:59:be:24:15:dc:c1:0a:bc: 9f:bd:ec:64:da:0d:41:96:b7:8c:d6:53:40:c3:6d:41:f5:bf: e9:54:3b:93:98:01:36:78:67:57:c4:a8:9d:30:ea:d3:c0:d7: 4e:b7:dc:0a:dc:24:5d:e1:18:2a:8d:e4:3f:31:dd:86:cc:69: 0e:98:91:ae:d6:01:cf:df:21:12:96:f7:b9:79:b1:08:5d:a8: b3:37:01:70:05:2c:81:df:ef:76:65:3d:f1:c1:ed:b1:46:c6: 4d:5b:67:e0:5c:9d:82:19:04:52:a7:2f:ab:fb:a3:87:86:94: b2:25:45:f2:d8:3a:9e:26:2f:39:d9:2b:ee:ca:bd:b2:9b:a5: bd:41:8d:12:14:25:ba:e9:0f:e2:e5:c4:22:79:32:2e:e9:22: 32:59:ec:50:33:4e:66:73:71:92:37:ca:f1:2f:64:43:9a:75: 93:d3:45:85:54:86:a1:38:ab:51:4e:a6:9a:d1:a4:63:ef:10: 31:fe:78:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/rA/fD+0oEt7i6ICpAq832Hta4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYx QzdGNjUxRTAeFw0yNjA1MTIxMjQ4MDVaFw0yNjA1MTMxNDI2MDVaMDMxMTAvBgNV BAMTKDE2NEQwRUU4MjVDQUQ2RThEMjFFOUZDRjkwMjA0N0RCNDQyQThFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSA49MiaaimT+FZsoA71WxLpQ DEcFXu1T70m0JTTTnrjyWt4kZoc8+QI3CY/4tjejxP6+4kW2JNfM+aLcYpvtogS5 B+FA7ZgscTUgwvsLAV4LnPgEQrtyvkZZG2VtiSsuBL7njj7NXVYia69AW8OQxU7L rwxW3AJWE48ylIqoyBgqT6NoRm9WfKq2debMD4Mi67RBme0L9HSq9p2XEYH93Hqj qWSpp2jti8Jnhd91+IOtswYrQ0BspFhvkqw/H3Pg9NQqqkIVblYi46fJelswyzhS ztPbW8AiTFodZcc0jZTUwlUcsL8B4yG/fLV2NJ2mT/qUiOzDVRg1efToTIrdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFk0O6CXK1ujSHp/PkCBH20QqjmwwHwYDVR0j BBgwFoAUPxotHUtFNjAqUFl3t49fnxx/ZR4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjM2NTYxZDQtMjNjOC00YzliLTg5MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0 QjQ1MzYzMDJBNTA1OTc3Qjc4RjVGOUYxQzdGNjUxRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zRjFBMkQxRDRCNDUzNjMwMkE1MDU5NzdCNzhGNUY5RjFDN0Y2 NTFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvM0YxQTJEMUQ0QjQ1MzYzMDJBNTA1OTc3Qjc4RjVG OUYxQzdGNjUxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+X/7ewjgOphvzEPGyT5rCYJLH20tW7ToZ5 xPXW966R9hcEaqsRMmx2JbOehXPig+ISBKvwT2311s2gnXDANeJZviQV3MEKvJ+9 7GTaDUGWt4zWU0DDbUH1v+lUO5OYATZ4Z1fEqJ0w6tPA10633ArcJF3hGCqN5D8x 3YbMaQ6Yka7WAc/fIRKW97l5sQhdqLM3AXAFLIHf73ZlPfHB7bFGxk1bZ+BcnYIZ BFKnL6v7o4eGlLIlRfLYOp4mLznZK+7KvbKbpb1BjRIUJbrpD+LlxCJ5Mi7pIjJZ 7FAzTmZzcZI3yvEvZEOadZPTRYVUhqE4q1FOpprRpGPvEDH+eLo= -----END CERTIFICATE-----Generated at Wed May 13 01:10:21 2026 by rpki-client