$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft File: 3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft (raw, json) Hash identifier: H2wJOZY+Haf3vBdiKUD6B50tc1pwSp/0JwRHLt/CWHw= Subject key identifier: 26:F7:19:6D:A2:EA:0D:02:AD:A7:1B:76:53:11:83:75:10:DB:1D:B8 Authority key identifier: 3B:D4:34:9E:7B:55:0B:CE:0E:7C:95:7E:03:D6:2D:60:B7:D2:85:F8 Certificate issuer: /CN=3BD4349E7B550BCE0E7C957E03D62D60B7D285F8 Certificate serial: 7CAA11859F222B17E7E51E7211EF24A6C58C06FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:13:18 +0000 Manifest this update: Tue 12 May 2026 18:08:18 +0000 Manifest next update: Wed 13 May 2026 19:52:18 +0000 Files and hashes: 1: 3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl (hash: WelTqShonjl1bf1joq+IUXvdHyAWkxZJx4YgEI/xuc4=) 2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: ErPUUUg1dRZKVbJQVmVoH6jrv862m0Pddw1XMyfUrjA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:aa:11:85:9f:22:2b:17:e7:e5:1e:72:11:ef:24:a6:c5:8c:06:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BD4349E7B550BCE0E7C957E03D62D60B7D285F8 Validity Not Before: May 12 18:08:18 2026 GMT Not After : May 13 19:52:18 2026 GMT Subject: CN=26F7196DA2EA0D02ADA71B765311837510DB1DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:85:d1:29:42:57:fc:fb:43:69:5f:74:dd: d0:4f:23:ab:ca:ee:cc:ef:98:12:a6:d0:e1:11:db: 22:e3:92:cd:d6:51:31:f2:c0:f0:b9:57:e9:12:6d: c4:1b:1d:70:77:04:74:84:ca:67:cd:13:5d:89:19: fc:0f:96:0f:5e:05:07:b1:f8:7e:d5:ff:a8:bc:9d: 20:54:8f:04:84:7d:ee:a5:75:a1:72:15:1f:40:c1: 8a:ee:1c:bf:9a:fc:df:36:7a:a6:a9:3d:67:b6:85: 0d:cf:f3:c3:fb:c9:89:c8:c6:39:b5:b4:3c:c8:7a: 7a:22:5b:94:b3:c9:98:ae:4e:b5:80:3a:a2:56:c6: 1f:e9:3d:68:17:f0:9d:b0:e0:53:9f:a5:d7:68:f7: 4a:e2:63:e6:dc:2b:b4:63:0a:8d:ad:ec:81:89:a7: ed:49:bc:26:fc:e2:8f:13:54:80:9c:85:d9:e5:2d: 90:25:12:19:26:0c:f4:58:02:70:5c:49:c6:16:66: db:6d:54:bf:2a:44:b9:b8:c4:56:00:d7:fd:7e:29: 20:db:24:23:1b:52:52:11:79:49:00:fe:0b:bf:bd: 46:1a:84:47:06:e8:d4:e6:c4:9c:49:ce:84:86:12: ab:6c:d1:78:8d:ae:8b:c8:71:0f:bc:cc:9c:9a:d6: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F7:19:6D:A2:EA:0D:02:AD:A7:1B:76:53:11:83:75:10:DB:1D:B8 X509v3 Authority Key Identifier: keyid:3B:D4:34:9E:7B:55:0B:CE:0E:7C:95:7E:03:D6:2D:60:B7:D2:85:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3BD4349E7B550BCE0E7C957E03D62D60B7D285F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3c:a5:d1:ca:fc:7c:f0:3a:98:1d:45:8f:67:26:20:3a:9a: a0:e0:b9:6f:a0:40:aa:53:00:40:89:65:65:0a:9c:ad:28:4a: 0a:38:5e:13:99:2a:a1:d3:10:a7:64:0c:ab:3e:9a:ef:5b:79: 93:4a:89:b9:d3:23:48:20:4d:d6:81:34:05:cb:cf:fd:5b:f7: 0d:1f:78:85:fc:d5:e7:7a:7b:49:9c:cb:0a:cd:55:70:31:8d: 9a:4d:48:c8:bb:3b:dd:01:eb:ee:73:d0:c1:27:ee:17:8c:1d: 19:dd:59:5a:bf:3d:fa:f1:06:9b:b5:23:ca:b9:89:fd:fd:1d: 9b:63:28:e5:fb:4e:21:f6:2b:e0:a4:11:c2:64:58:80:c8:be: e4:a0:9f:37:54:d8:9e:77:11:70:b6:d9:7f:43:e5:ff:d4:30: af:b0:0b:e8:46:70:2f:81:81:f5:4b:d2:2f:66:8a:7c:e2:a3: 4c:0b:2d:16:45:23:3a:33:f9:1f:88:4c:df:36:81:aa:2c:66: 7a:6d:28:fc:82:c1:1a:4b:ce:96:2d:93:a1:34:4d:1a:91:a6: 2b:14:9b:64:bd:f5:d8:f4:0f:dc:e0:6e:44:09:82:a5:a8:72: ea:7e:18:49:9e:33:96:3b:fb:54:84:62:11:9e:65:1b:04:d5: fb:8d:52:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfKoRhZ8iKxfn5R5yEe8kpsWMBvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JENDM0OUU3QjU1MEJDRTBFN0M5NTdFMDNENjJENjBC N0QyODVGODAeFw0yNjA1MTIxODA4MThaFw0yNjA1MTMxOTUyMThaMDMxMTAvBgNV BAMTKDI2RjcxOTZEQTJFQTBEMDJBREE3MUI3NjUzMTE4Mzc1MTBEQjFEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeY4XRKUJX/PtDaV903dBPI6vK 7szvmBKm0OER2yLjks3WUTHywPC5V+kSbcQbHXB3BHSEymfNE12JGfwPlg9eBQex +H7V/6i8nSBUjwSEfe6ldaFyFR9AwYruHL+a/N82eqapPWe2hQ3P88P7yYnIxjm1 tDzIenoiW5SzyZiuTrWAOqJWxh/pPWgX8J2w4FOfpddo90riY+bcK7RjCo2t7IGJ p+1JvCb84o8TVICchdnlLZAlEhkmDPRYAnBcScYWZtttVL8qRLm4xFYA1/1+KSDb JCMbUlIReUkA/gu/vUYahEcG6NTmxJxJzoSGEqts0XiNrovIcQ+8zJya1ps3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJvcZbaLqDQKtpxt2UxGDdRDbHbgwHwYDVR0j BBgwFoAUO9Q0nntVC84OfJV+A9YtYLfShfgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2ExZjYyOTktYjE1NS00MjEyLWI1ZTEtOWY1NzAzY2QwOTg5LzAvM0JENDM0OUU3 QjU1MEJDRTBFN0M5NTdFMDNENjJENjBCN0QyODVGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQkQ0MzQ5RTdCNTUwQkNFMEU3Qzk1N0UwM0Q2MkQ2MEI3RDI4 NUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvM0JENDM0OUU3QjU1MEJDRTBFN0M5NTdFMDNENjJE NjBCN0QyODVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADU8pdHK/HzwOpgdRY9nJiA6mqDguW+gQKpT AECJZWUKnK0oSgo4XhOZKqHTEKdkDKs+mu9beZNKibnTI0ggTdaBNAXLz/1b9w0f eIX81ed6e0mcywrNVXAxjZpNSMi7O90B6+5z0MEn7heMHRndWVq/PfrxBpu1I8q5 if39HZtjKOX7TiH2K+CkEcJkWIDIvuSgnzdU2J53EXC22X9D5f/UMK+wC+hGcC+B gfVL0i9minzio0wLLRZFIzoz+R+ITN82gaosZnptKPyCwRpLzpYtk6E0TRqRpisU m2S99dj0D9zgbkQJgqWocup+GEmeM5Y7+1SEYhGeZRsE1fuNUr0= -----END CERTIFICATE-----Generated at Wed May 13 12:28:28 2026 by rpki-client