$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft File: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft (raw, json) Hash identifier: T+Sr88rDF+esHfiz+ds2EKRAwlKIjd0yOOfA6UES1HU= Subject key identifier: A4:DE:51:0E:83:4B:6E:5A:3A:1B:FD:E4:BE:04:EB:D3:30:43:CD:AB Authority key identifier: F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9 Certificate issuer: /CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9 Certificate serial: 7485E8F52424E11BE8065B4F1797BF59D6F01C23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:12:09 +0000 Manifest this update: Tue 12 May 2026 03:07:09 +0000 Manifest next update: Wed 13 May 2026 06:30:09 +0000 Files and hashes: 1: F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl (hash: A+cL39gSTTvSlJytWXXTnrArRhOr7OxadTOpNwb3cpk=) 2: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: +QD/pWetD0IzXhbj5Z0Qy5abcmZ6aa3dun6UEco+UkE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:85:e8:f5:24:24:e1:1b:e8:06:5b:4f:17:97:bf:59:d6:f0:1c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3144B9CC1B386B202465161BF4D4EAD048C0FC9 Validity Not Before: May 12 03:07:09 2026 GMT Not After : May 13 06:30:09 2026 GMT Subject: CN=A4DE510E834B6E5A3A1BFDE4BE04EBD33043CDAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4e:40:8d:37:5a:d5:43:7c:6e:18:f7:b2:0d: d3:75:f8:54:19:7d:88:0c:25:cb:18:88:6a:6f:da: 41:82:9f:e6:dc:1d:e2:8a:55:b0:05:ff:0b:70:c0: 56:af:46:82:48:3d:b8:6e:be:5d:99:85:cb:7f:70: 2b:ae:65:fe:ba:62:01:b0:27:be:65:42:4c:67:34: 28:f8:61:9a:07:af:4a:41:b2:f3:b6:e0:66:37:55: 22:df:57:1e:6e:8c:ef:cb:e4:9b:f2:b5:02:7b:f1: 63:fd:fc:8b:d2:c8:6f:41:bd:76:cd:65:5a:c9:60: e5:95:c3:c1:af:66:36:e2:e0:86:c5:9e:31:d0:66: 91:05:0c:47:0f:df:5e:0f:f6:d0:2a:b6:53:ea:dc: ec:f7:24:14:be:86:62:f3:0e:4e:97:f3:4c:5d:02: 0b:11:ab:e9:bf:a8:8e:4e:73:72:ce:27:f5:cd:4c: cb:fe:5d:9c:4b:e6:c7:5d:52:fa:30:b0:f0:58:01: bb:b8:1d:cf:e7:83:f5:0e:be:24:9b:42:83:23:f6: 8e:fd:40:1f:30:ec:c4:ef:95:40:09:05:06:86:0d: bf:fb:a1:ae:75:8b:9b:a1:cd:8f:d0:d7:43:a8:f3: 46:2c:a1:03:85:d7:5d:77:be:7c:7a:49:d5:a7:d0: 2c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DE:51:0E:83:4B:6E:5A:3A:1B:FD:E4:BE:04:EB:D3:30:43:CD:AB X509v3 Authority Key Identifier: keyid:F3:14:4B:9C:C1:B3:86:B2:02:46:51:61:BF:4D:4E:AD:04:8C:0F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/F3144B9CC1B386B202465161BF4D4EAD048C0FC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f6:e8:66:68:b2:52:e0:26:e6:05:76:19:24:07:69:98:0b: 90:5a:69:75:ff:c6:2d:ea:e8:62:c1:98:e5:c3:35:b9:c3:da: 6e:87:c4:45:03:74:38:82:d9:5a:e4:a8:ed:2d:c3:a6:06:a6: 8f:fa:4a:17:07:79:80:9d:fe:35:df:e9:bc:ba:9f:03:21:f0: 83:34:dc:17:84:3e:3d:f2:1b:d8:e4:aa:04:cb:9c:81:b5:8f: e4:9a:cf:0d:71:c9:43:9a:8a:38:51:76:65:35:55:b4:70:55: e5:78:b4:2e:19:ee:93:5e:a0:f0:44:58:53:81:d0:df:f1:52: 0b:31:42:5e:3c:84:52:7e:0d:72:31:55:3d:b2:82:af:f6:46: 82:d3:70:cb:b7:17:8a:74:7e:2c:d3:7b:57:b5:de:88:8d:dd: 0a:2c:97:b6:d1:d6:05:24:6b:1e:c4:e6:9a:a4:1c:04:6c:d7: 8e:de:9e:1a:1a:7e:ad:ac:b6:fb:54:92:e6:11:7a:cf:8f:e0: 78:b6:72:2b:49:0e:aa:5f:8b:f3:6f:48:a4:b9:dc:52:1a:71: d7:01:4f:d5:ca:71:71:97:ca:42:54:9e:7c:a6:94:58:b5:c1: 25:e5:58:ff:36:29:95:00:3e:9f:8d:67:a8:08:93:31:61:a1: 15:61:b5:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIXo9SQk4RvoBltPF5e/WdbwHCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRFQUQw NDhDMEZDOTAeFw0yNjA1MTIwMzA3MDlaFw0yNjA1MTMwNjMwMDlaMDMxMTAvBgNV BAMTKEE0REU1MTBFODM0QjZFNUEzQTFCRkRFNEJFMDRFQkQzMzA0M0NEQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTkCNN1rVQ3xuGPeyDdN1+FQZ fYgMJcsYiGpv2kGCn+bcHeKKVbAF/wtwwFavRoJIPbhuvl2Zhct/cCuuZf66YgGw J75lQkxnNCj4YZoHr0pBsvO24GY3VSLfVx5ujO/L5JvytQJ78WP9/IvSyG9BvXbN ZVrJYOWVw8GvZjbi4IbFnjHQZpEFDEcP314P9tAqtlPq3Oz3JBS+hmLzDk6X80xd AgsRq+m/qI5Oc3LOJ/XNTMv+XZxL5sddUvowsPBYAbu4Hc/ng/UOviSbQoMj9o79 QB8w7MTvlUAJBQaGDb/7oa51i5uhzY/Q10Oo80YsoQOF1113vnx6SdWn0CwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpN5RDoNLblo6G/3kvgTr0zBDzaswHwYDVR0j BBgwFoAU8xRLnMGzhrICRlFhv01OrQSMD8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkYzAzNGYtMzgyMy00OGFmLTk1M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUND MUIzODZCMjAyNDY1MTYxQkY0RDRFQUQwNDhDMEZDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzE0NEI5Q0MxQjM4NkIyMDI0NjUxNjFCRjRENEVBRDA0OEMw RkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvRjMxNDRCOUNDMUIzODZCMjAyNDY1MTYxQkY0RDRF QUQwNDhDMEZDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEr26GZoslLgJuYFdhkkB2mYC5BaaXX/xi3q 6GLBmOXDNbnD2m6HxEUDdDiC2VrkqO0tw6YGpo/6ShcHeYCd/jXf6by6nwMh8IM0 3BeEPj3yG9jkqgTLnIG1j+Sazw1xyUOaijhRdmU1VbRwVeV4tC4Z7pNeoPBEWFOB 0N/xUgsxQl48hFJ+DXIxVT2ygq/2RoLTcMu3F4p0fizTe1e13oiN3Qosl7bR1gUk ax7E5pqkHARs147enhoafq2stvtUkuYRes+P4Hi2citJDqpfi/NvSKS53FIacdcB T9XKcXGXykJUnnymlFi1wSXlWP82KZUAPp+NZ6gIkzFhoRVhtdQ= -----END CERTIFICATE-----Generated at Tue May 12 22:20:02 2026 by rpki-client