$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft File: B3CEDD0459F32B7E856E38152E88C017667C44C5.mft (raw, json) Hash identifier: TyrsvoL8fMLEqQ6xOUNnlqhx0BJu8g/MkOwNwQN/B8Q= Subject key identifier: 8C:D7:E6:DB:DA:03:BA:4C:CF:F9:54:05:64:D4:FD:AD:A2:F6:97:D4 Authority key identifier: B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 Certificate issuer: /CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Certificate serial: 31374CB32EA5D069D0CF0B5B4C6ED8C5E4E4B78E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:24:51 +0000 Manifest this update: Tue 12 May 2026 08:19:51 +0000 Manifest next update: Wed 13 May 2026 11:13:51 +0000 Files and hashes: 1: B3CEDD0459F32B7E856E38152E88C017667C44C5.crl (hash: ry2Age386OAfRsuMzY8yRZj15XiERUrcHB4LhcSHMhY=) 2: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: QGY4lzWj4Cp3rLIA8ZEjymdBTTpuyiO2y6++xao+5yg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:37:4c:b3:2e:a5:d0:69:d0:cf:0b:5b:4c:6e:d8:c5:e4:e4:b7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CEDD0459F32B7E856E38152E88C017667C44C5 Validity Not Before: May 12 08:19:51 2026 GMT Not After : May 13 11:13:51 2026 GMT Subject: CN=8CD7E6DBDA03BA4CCFF9540564D4FDADA2F697D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:12:f5:3b:dd:01:e0:a5:9b:7f:ae:58:a0: 27:b4:55:63:8c:88:00:a3:77:6b:91:aa:6e:79:06: bb:57:b8:10:e2:d4:94:eb:49:ca:71:d5:70:3b:f6: 85:10:d2:f5:4e:63:dc:56:e7:0c:6a:5b:00:25:48: 9d:ca:4a:9f:58:d4:dc:1c:4f:4b:c4:c1:4c:1c:91: 31:ac:c3:48:bf:f0:8a:b4:57:4e:9e:fa:0f:6c:c4: 86:da:6d:59:f9:c4:18:5c:eb:67:5d:dd:8e:a9:da: fd:da:66:97:0c:cc:81:e0:d3:e1:10:9e:69:30:bb: c6:f8:f3:00:10:76:b2:f9:46:fc:42:ef:64:67:a8: 23:0f:ba:5a:a4:0e:25:6d:d2:d1:3b:25:97:b2:29: 9c:3b:e7:9a:3f:0d:4e:29:12:a9:ad:4a:a2:81:15: 52:e4:dc:cc:ac:3f:d8:a7:2d:18:ff:c7:92:28:ad: d9:93:fa:f4:99:b8:49:48:ef:e8:d1:fc:f0:32:ee: f4:d4:00:d7:c4:78:2c:a6:55:6a:01:91:7e:98:4c: 4f:69:7d:09:b6:4d:d5:0c:bf:cb:41:f6:c7:70:e7: 8e:61:b3:d4:49:f4:da:11:1c:81:f9:71:f1:4e:e4: 7a:df:26:c9:6d:81:8f:4b:75:94:9e:0e:32:66:a8: c1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D7:E6:DB:DA:03:BA:4C:CF:F9:54:05:64:D4:FD:AD:A2:F6:97:D4 X509v3 Authority Key Identifier: keyid:B3:CE:DD:04:59:F3:2B:7E:85:6E:38:15:2E:88:C0:17:66:7C:44:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B3CEDD0459F32B7E856E38152E88C017667C44C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/B3CEDD0459F32B7E856E38152E88C017667C44C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:00:12:bb:7a:b5:b3:cd:cc:5d:5e:01:45:41:f8:18:2a:32: 9d:c4:bb:6d:0c:5a:c2:7c:db:66:57:19:94:85:53:db:3c:e9: 1f:62:fd:b3:53:14:28:91:99:b6:ae:d6:2f:7e:bd:22:ea:2a: e1:ce:72:95:98:d2:92:0d:e8:c4:6e:87:de:4f:78:81:3e:f8: f9:a9:bb:fd:97:7a:d4:a0:2d:6d:70:b5:5e:5a:93:c1:0e:78: 0c:8a:f8:a0:78:1e:b0:e3:c5:25:6d:eb:39:a7:e4:6f:33:ae: 80:a6:09:00:75:f7:c0:21:12:27:05:56:2a:f0:ab:9d:fe:de: ee:50:66:b7:ff:53:08:66:58:4f:be:5e:fb:8a:cd:2f:00:ee: 93:1d:86:e9:e2:c3:97:a7:cf:9c:01:e2:47:3c:1d:47:85:1e: 48:6d:d3:53:58:23:6a:41:84:24:39:28:0a:e3:95:6e:52:9b: 3a:65:e5:bc:e2:59:0f:eb:78:d8:2d:e8:fc:b6:45:c1:45:3a: 84:ae:ce:3f:e5:b2:6b:15:c5:3b:94:e5:a7:a7:76:8b:92:2c: 3b:f0:5b:16:c0:15:1a:6c:a6:c2:94:b4:bf:87:1c:34:c8:b0: ba:b6:e6:76:61:2b:14:4d:87:22:3d:e2:c5:eb:9f:bd:06:24: 93:17:d6:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTdMsy6l0GnQzwtbTG7YxeTkt44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2 NjdDNDRDNTAeFw0yNjA1MTIwODE5NTFaFw0yNjA1MTMxMTEzNTFaMDMxMTAvBgNV BAMTKDhDRDdFNkRCREEwM0JBNENDRkY5NTQwNTY0RDRGREFEQTJGNjk3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCStxL1O90B4KWbf65YoCe0VWOM iACjd2uRqm55BrtXuBDi1JTrScpx1XA79oUQ0vVOY9xW5wxqWwAlSJ3KSp9Y1Nwc T0vEwUwckTGsw0i/8Iq0V06e+g9sxIbabVn5xBhc62dd3Y6p2v3aZpcMzIHg0+EQ nmkwu8b48wAQdrL5RvxC72RnqCMPulqkDiVt0tE7JZeyKZw755o/DU4pEqmtSqKB FVLk3MysP9inLRj/x5IordmT+vSZuElI7+jR/PAy7vTUANfEeCymVWoBkX6YTE9p fQm2TdUMv8tB9sdw545hs9RJ9NoRHIH5cfFO5HrfJsltgY9LdZSeDjJmqMHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjNfm29oDukzP+VQFZNT9raL2l9QwHwYDVR0j BBgwFoAUs87dBFnzK36FbjgVLojAF2Z8RMUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FiMWE3OTAtZGNlZC00NjRhLTg5NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1 OUYzMkI3RTg1NkUzODE1MkU4OEMwMTc2NjdDNDRDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CM0NFREQwNDU5RjMyQjdFODU2RTM4MTUyRTg4QzAxNzY2N0M0 NEM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvQjNDRUREMDQ1OUYzMkI3RTg1NkUzODE1MkU4OEMw MTc2NjdDNDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4AErt6tbPNzF1eAUVB+BgqMp3Eu20MWsJ8 22ZXGZSFU9s86R9i/bNTFCiRmbau1i9+vSLqKuHOcpWY0pIN6MRuh95PeIE++Pmp u/2XetSgLW1wtV5ak8EOeAyK+KB4HrDjxSVt6zmn5G8zroCmCQB198AhEicFVirw q53+3u5QZrf/UwhmWE++XvuKzS8A7pMdhuniw5enz5wB4kc8HUeFHkht01NYI2pB hCQ5KArjlW5Smzpl5bziWQ/reNgt6Py2RcFFOoSuzj/lsmsVxTuU5aendouSLDvw WxbAFRpspsKUtL+HHDTIsLq25nZhKxRNhyI94sXrn70GJJMX1m4= -----END CERTIFICATE-----Generated at Wed May 13 02:25:36 2026 by rpki-client