$ rpki-client -vvf rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft File: 3B49013F73B5A7AF137F414DE362E405F31D32DC.mft (raw, json) Hash identifier: skUMwKwr8TRtAO52fRj5XpUR+eQdCLmRxfFaoMtJSMU= Subject key identifier: 00:7E:94:88:21:0F:64:59:E0:D5:CE:1A:95:49:58:11:59:F9:7F:F1 Authority key identifier: 3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC Certificate issuer: /CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Certificate serial: 1BAC2E3E67DA08810EAA37530B155B47DF8143FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:40:52 +0000 Manifest this update: Tue 12 May 2026 19:35:52 +0000 Manifest next update: Wed 13 May 2026 22:38:52 +0000 Files and hashes: 1: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: 8mVUx2m6cehmTjXBEOh2fhiknIQmwcR5DCPv3UxdfA4=) 2: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: KAa2YP9GlXrFj15zwBpksmX3bAfUKyYMHaAYDuzpQWY=) 3: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: ahm/HoRAolOxtaIWGqQ0MLjBkp/CWv9tH60t0eSWQkU=) 4: 3B49013F73B5A7AF137F414DE362E405F31D32DC.crl (hash: AyW4/oD2iQwlyREBIKL7IyJZjoYlw7jxhot9Y4x3Y6E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ac:2e:3e:67:da:08:81:0e:aa:37:53:0b:15:5b:47:df:81:43:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49013F73B5A7AF137F414DE362E405F31D32DC Validity Not Before: May 12 19:35:52 2026 GMT Not After : May 13 22:38:52 2026 GMT Subject: CN=007E9488210F6459E0D5CE1A9549581159F97FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:36:34:8d:12:b0:e0:c4:c3:25:13:dd:85: aa:39:f4:41:95:1b:a2:27:0e:3a:3a:f5:07:e4:44: e5:02:01:b6:f0:07:c2:ad:39:64:a0:7f:b3:f3:8a: 8d:ff:5b:37:ac:3c:f5:2c:cf:8a:22:a3:f9:3c:b4: 95:d1:59:77:69:77:3d:b6:9b:30:a7:7e:69:b5:01: 67:f0:b4:69:43:87:21:60:a3:7c:6d:a6:e2:bb:2f: 59:3b:f6:af:2e:45:13:18:35:2c:7e:1c:8d:78:47: 29:96:61:08:85:ca:d5:b7:ed:16:d8:b6:f6:77:04: d2:42:4b:f0:96:99:9e:e9:cc:de:a6:60:8c:a3:64: 8e:8d:cb:a6:a1:95:0f:0f:c7:3f:90:18:96:b3:1c: 69:56:19:b6:e0:36:e7:84:28:2f:3b:ba:b7:83:92: c2:cb:a4:3a:01:d6:8a:d2:b9:12:72:cd:bf:ab:0f: 29:87:35:82:35:75:50:7b:98:41:71:9a:bc:e7:1c: 10:36:91:3e:16:4c:aa:d3:40:2d:6c:ff:63:60:73: 9c:46:c3:4a:ff:00:0c:b8:68:90:17:5d:9c:f0:c6: fa:fa:39:56:33:5e:f2:c2:78:a4:72:c1:7d:4d:96: bf:00:67:70:96:85:51:bf:7b:e6:76:bc:04:37:11: 78:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7E:94:88:21:0F:64:59:E0:D5:CE:1A:95:49:58:11:59:F9:7F:F1 X509v3 Authority Key Identifier: keyid:3B:49:01:3F:73:B5:A7:AF:13:7F:41:4D:E3:62:E4:05:F3:1D:32:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B49013F73B5A7AF137F414DE362E405F31D32DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/3B49013F73B5A7AF137F414DE362E405F31D32DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6e:a9:d9:6c:b8:0e:38:44:18:bb:cb:52:71:9c:f2:20:69: 76:d5:51:21:f5:51:c3:62:55:c9:4a:bb:de:36:2a:3a:33:c4: 5c:d6:b7:62:ad:36:c4:b5:7e:2b:89:b1:74:f3:6d:79:ec:d0: b3:9b:61:dc:c9:cf:5f:08:61:e1:71:cd:8a:06:14:8a:e2:53: 2a:cb:e6:3b:79:94:44:a5:55:12:74:96:b4:b4:ad:12:db:92: 8e:76:3d:9d:a7:de:fd:6f:73:ab:9b:ca:25:9a:3a:16:13:3b: d8:97:a2:6b:d5:70:47:7c:38:5b:9b:3c:ed:9b:a3:1d:a3:56: ad:57:38:22:0a:33:45:6a:c3:81:8f:c7:92:93:55:a2:b1:3a: 0b:82:71:d2:bd:de:c1:32:58:09:33:b0:4f:5e:96:51:68:bb: 2f:3c:67:6b:f0:19:ea:03:ff:e8:60:61:72:d1:f9:ed:ed:c9: 8d:1c:5b:b9:23:d2:0d:e9:90:0d:b4:2b:1b:2c:8e:75:22:38: 06:fe:65:fd:ea:94:e1:77:12:48:3a:b0:a9:90:d8:08:a6:47: 7e:88:aa:82:97:66:2e:00:f4:21:b9:b9:76:ec:ca:9a:5f:3c: f6:d4:08:8d:ac:2b:b3:f9:2e:20:a8:4e:07:b2:32:59:80:cd: 2e:5e:25:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6wuPmfaCIEOqjdTCxVbR9+BQ/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVG MzFEMzJEQzAeFw0yNjA1MTIxOTM1NTJaFw0yNjA1MTMyMjM4NTJaMDMxMTAvBgNV BAMTKDAwN0U5NDg4MjEwRjY0NTlFMEQ1Q0UxQTk1NDk1ODExNTlGOTdGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztTY0jRKw4MTDJRPdhao59EGV G6InDjo69QfkROUCAbbwB8KtOWSgf7Pzio3/WzesPPUsz4oio/k8tJXRWXdpdz22 mzCnfmm1AWfwtGlDhyFgo3xtpuK7L1k79q8uRRMYNSx+HI14RymWYQiFytW37RbY tvZ3BNJCS/CWmZ7pzN6mYIyjZI6Ny6ahlQ8Pxz+QGJazHGlWGbbgNueEKC87ureD ksLLpDoB1orSuRJyzb+rDymHNYI1dVB7mEFxmrznHBA2kT4WTKrTQC1s/2Ngc5xG w0r/AAy4aJAXXZzwxvr6OVYzXvLCeKRywX1Nlr8AZ3CWhVG/e+Z2vAQ3EXjJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAH6UiCEPZFng1c4alUlYEVn5f/EwHwYDVR0j BBgwFoAUO0kBP3O1p68Tf0FN42LkBfMdMtwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJmM2Y1ZDktY2ZiOC00MTIzLWEyYjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3 M0I1QTdBRjEzN0Y0MTRERTM2MkU0MDVGMzFEMzJEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQjQ5MDEzRjczQjVBN0FGMTM3RjQxNERFMzYyRTQwNUYzMUQz MkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvM0I0OTAxM0Y3M0I1QTdBRjEzN0Y0MTRERTM2MkU0 MDVGMzFEMzJEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1uqdlsuA44RBi7y1JxnPIgaXbVUSH1UcNi VclKu942KjozxFzWt2KtNsS1fiuJsXTzbXns0LObYdzJz18IYeFxzYoGFIriUyrL 5jt5lESlVRJ0lrS0rRLbko52PZ2n3v1vc6ubyiWaOhYTO9iXomvVcEd8OFubPO2b ox2jVq1XOCIKM0Vqw4GPx5KTVaKxOguCcdK93sEyWAkzsE9ellFouy88Z2vwGeoD /+hgYXLR+e3tyY0cW7kj0g3pkA20KxssjnUiOAb+Zf3qlOF3Ekg6sKmQ2AimR36I qoKXZi4A9CG5uXbsyppfPPbUCI2sK7P5LiCoTgeyMlmAzS5eJY8= -----END CERTIFICATE-----Generated at Wed May 13 02:40:04 2026 by rpki-client