$ rpki-client -vvf rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft File: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft (raw, json) Hash identifier: q7BYWuHZ/FyzBLy/ECvgK3nL4z1gqDJz9fb49Aj6HDk= Subject key identifier: 3E:33:F8:E1:41:BE:3C:3F:94:85:8A:FE:30:F6:51:D8:33:AC:64:03 Authority key identifier: C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 Certificate issuer: /CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Certificate serial: 68E47A6EEAB8FBB6AC1EE09B16B118810C7EF972 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:18:33 +0000 Manifest this update: Tue 12 May 2026 07:13:33 +0000 Manifest next update: Wed 13 May 2026 10:01:33 +0000 Files and hashes: 1: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: ax7Tz8igVzZFs/ShEmAUC7L5azN7xDE8dfSTDwz0nik=) 2: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: PA4mCIJ4WVxoHasll6BuHuPox/sleuIONJ29Vq08rHw=) 3: C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl (hash: FZvO0mVhHett1XC3BjTpJxIOHNzKjd092p4aFxvQeG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e4:7a:6e:ea:b8:fb:b6:ac:1e:e0:9b:16:b1:18:81:0c:7e:f9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25 Validity Not Before: May 12 07:13:33 2026 GMT Not After : May 13 10:01:33 2026 GMT Subject: CN=3E33F8E141BE3C3F94858AFE30F651D833AC6403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:ed:8a:fb:91:e8:9e:1e:22:46:a1:97:eb: dd:a9:52:00:05:3e:e9:be:62:bb:dc:81:e9:ce:40: f4:ce:c2:ff:85:14:24:d6:30:df:74:cd:fc:cf:d7: a6:62:f0:c9:91:05:72:22:d9:3f:ee:ee:41:73:69: 09:94:ac:f8:d7:95:1f:2a:6a:d6:b9:c7:7f:5a:94: eb:8b:a8:74:25:9f:19:64:a8:f3:8a:e1:17:40:87: a7:9c:05:9a:59:c5:37:2c:3f:d5:e5:b0:46:41:6d: 11:fc:9b:2a:12:f1:ec:81:89:6e:8e:e5:4f:b1:77: 38:f7:7b:8e:57:75:d5:ff:25:ef:ae:ba:bf:fd:5b: 00:3a:79:fc:4d:e5:c2:f3:ce:c6:ad:a2:5d:2c:ca: 8c:d7:42:88:79:a9:b7:ba:a8:aa:38:fd:1d:1e:86: 30:b7:31:ae:96:96:1f:1c:6a:82:c7:db:72:b5:0e: 0c:9b:a7:a0:77:40:4e:ce:f4:1c:8e:2f:48:9c:78: 77:0e:d4:5c:73:96:53:08:78:ae:e2:59:e2:a4:3c: de:29:5d:02:b9:d3:0b:9e:e0:10:44:b0:fc:39:9d: 87:7d:7c:55:71:2e:fa:29:57:60:70:f1:40:41:ab: 27:16:47:b9:43:bc:6f:ea:a7:70:df:fb:38:b2:3d: 59:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:33:F8:E1:41:BE:3C:3F:94:85:8A:FE:30:F6:51:D8:33:AC:64:03 X509v3 Authority Key Identifier: keyid:C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:d5:fb:c7:5d:6b:e0:a0:51:ea:5f:d1:6f:22:0b:0d:1f:c4: 21:23:5e:7e:23:5d:85:20:b4:7e:9a:83:af:21:b5:86:f7:1a: 21:bb:52:57:ce:8e:b4:ae:f7:ec:f5:e6:90:b9:20:92:c2:6a: bc:5f:04:23:ca:14:49:64:25:fd:46:21:c7:27:70:fd:b1:da: c5:1b:95:f9:89:ad:e8:11:38:a2:08:17:3c:23:27:d0:f1:74: b8:70:f4:a0:e5:d7:40:db:82:78:c3:43:88:a4:b3:87:61:2d: ef:6a:e0:64:06:bd:4f:dc:8e:df:c3:62:de:7d:51:eb:f0:4a: be:b5:c8:fc:6b:21:d1:d9:78:f6:cf:aa:8e:8d:df:5e:30:67: 5f:37:8f:68:3c:4e:1c:1e:24:32:b2:99:5c:46:63:bb:0b:3e: 1b:df:bc:18:e0:f9:7e:27:d1:45:1d:53:40:59:87:37:36:89: d7:38:4f:a6:40:1c:32:13:bf:5f:b8:40:f0:0a:66:33:0a:26: 32:bc:b6:01:56:54:d0:5d:b3:5c:49:0c:30:04:98:36:8a:33: 78:27:88:18:47:ff:4e:8b:09:58:c9:7e:1a:98:e9:24:b1:52: 7f:e8:34:52:d0:c6:e4:07:f8:36:f6:2b:04:99:a9:e0:6a:8e: bd:a3:77:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOR6buq4+7asHuCbFrEYgQx++XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1 NUI5OUYyNTAeFw0yNjA1MTIwNzEzMzNaFw0yNjA1MTMxMDAxMzNaMDMxMTAvBgNV BAMTKDNFMzNGOEUxNDFCRTNDM0Y5NDg1OEFGRTMwRjY1MUQ4MzNBQzY0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzse2K+5Honh4iRqGX692pUgAF Pum+YrvcgenOQPTOwv+FFCTWMN90zfzP16Zi8MmRBXIi2T/u7kFzaQmUrPjXlR8q ata5x39alOuLqHQlnxlkqPOK4RdAh6ecBZpZxTcsP9XlsEZBbRH8myoS8eyBiW6O 5U+xdzj3e45XddX/Je+uur/9WwA6efxN5cLzzsatol0syozXQoh5qbe6qKo4/R0e hjC3Ma6Wlh8caoLH23K1Dgybp6B3QE7O9ByOL0iceHcO1FxzllMIeK7iWeKkPN4p XQK50wue4BBEsPw5nYd9fFVxLvopV2Bw8UBBqycWR7lDvG/qp3Df+ziyPVk9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPjP44UG+PD+UhYr+MPZR2DOsZAMwHwYDVR0j BBgwFoAUw9+0nNcOUuRFDPL+XnISqFW5nyUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjY2NTIwMDAtMWYyYy00NzkxLTgxYjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNE NzBFNTJFNDQ1MENGMkZFNUU3MjEyQTg1NUI5OUYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DM0RGQjQ5Q0Q3MEU1MkU0NDUwQ0YyRkU1RTcyMTJBODU1Qjk5 RjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjY2NTIwMDAtMWYyYy00NzkxLTgx YjQtZDQ0NTdjZWYxMjcwLzAvQzNERkI0OUNENzBFNTJFNDQ1MENGMkZFNUU3MjEy QTg1NUI5OUYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzV+8dda+CgUepf0W8iCw0fxCEjXn4jXYUg tH6ag68htYb3GiG7UlfOjrSu9+z15pC5IJLCarxfBCPKFElkJf1GIccncP2x2sUb lfmJregROKIIFzwjJ9DxdLhw9KDl10DbgnjDQ4iks4dhLe9q4GQGvU/cjt/DYt59 UevwSr61yPxrIdHZePbPqo6N314wZ183j2g8ThweJDKymVxGY7sLPhvfvBjg+X4n 0UUdU0BZhzc2idc4T6ZAHDITv1+4QPAKZjMKJjK8tgFWVNBds1xJDDAEmDaKM3gn iBhH/06LCVjJfhqY6SSxUn/oNFLQxuQH+Db2KwSZqeBqjr2jd48= -----END CERTIFICATE-----Generated at Tue May 12 22:49:47 2026 by rpki-client