$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft File: 3F5C3F8352410D0935346BFC981A5941F86DE152.mft (raw, json) Hash identifier: 9Kg3J8SMGvsOGoxtiwEKU1VFk1N34PfFaDGky5leWvs= Subject key identifier: 0E:2C:B3:2C:3F:AE:6A:2C:AC:0B:62:1F:27:9C:EE:3B:E7:05:73:2F Authority key identifier: 3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52 Certificate issuer: /CN=3F5C3F8352410D0935346BFC981A5941F86DE152 Certificate serial: 5DE55B67C003648D348B38FEAEDB263B9D041DDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:08:09 +0000 Manifest this update: Tue 12 May 2026 01:03:09 +0000 Manifest next update: Wed 13 May 2026 03:54:09 +0000 Files and hashes: 1: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 5KhdGAwFpBBISTY9aqPLqjFXwI/SAn/2iKibebTV35o=) 2: 3F5C3F8352410D0935346BFC981A5941F86DE152.crl (hash: aO6aWT5bZADJh7AS09jlLu2yYtZU+Ax8Hm90+oVAPX8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 03:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e5:5b:67:c0:03:64:8d:34:8b:38:fe:ae:db:26:3b:9d:04:1d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F5C3F8352410D0935346BFC981A5941F86DE152 Validity Not Before: May 12 01:03:09 2026 GMT Not After : May 13 03:54:09 2026 GMT Subject: CN=0E2CB32C3FAE6A2CAC0B621F279CEE3BE705732F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:9e:34:a6:c9:7f:e2:27:12:03:8a:84:51: 09:73:e1:eb:74:01:d9:21:f7:a1:12:b5:ab:ff:25: ee:85:b4:d2:f5:fd:14:37:3c:c6:2d:22:59:c9:7f: 94:e8:e9:df:da:59:fc:e3:0a:e5:8e:37:87:e6:42: de:31:12:83:ad:2b:02:36:1f:38:49:8b:2b:b9:2e: f9:22:a7:d0:99:e1:62:62:3e:84:70:6e:6e:54:7c: 8b:e8:22:eb:d8:55:6d:b2:8f:8f:67:85:b3:9f:20: bd:f8:84:5e:5b:b4:31:65:aa:47:83:25:17:23:49: 5d:d7:90:fd:3b:33:a6:b3:26:f9:84:33:2b:ca:6d: fb:dc:62:22:e1:4c:d2:96:76:b2:f1:6a:a7:01:a0: 87:94:00:f8:79:4e:57:65:a9:25:54:49:80:b6:48: 7e:e0:8e:90:4e:42:ed:85:ee:df:c2:c8:df:38:a3: 49:09:87:20:b5:5a:99:bb:c0:77:b1:63:b3:0e:7d: a3:64:c3:c2:f4:0f:a8:07:4e:85:fc:35:ae:72:c0: 53:4a:00:5e:07:e5:4c:37:d5:e6:ad:df:f3:9f:8f: 3c:a1:d3:e1:9f:51:26:14:f7:63:03:c7:46:1e:bc: 0c:33:d7:9c:08:c8:81:d1:f2:bd:90:41:e5:a7:ae: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2C:B3:2C:3F:AE:6A:2C:AC:0B:62:1F:27:9C:EE:3B:E7:05:73:2F X509v3 Authority Key Identifier: keyid:3F:5C:3F:83:52:41:0D:09:35:34:6B:FC:98:1A:59:41:F8:6D:E1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3F5C3F8352410D0935346BFC981A5941F86DE152.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3F5C3F8352410D0935346BFC981A5941F86DE152.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a1:c3:bf:0e:81:e4:bf:de:a2:6c:d4:86:c8:d6:a6:38:1d: f2:a4:b6:92:ce:74:40:5e:97:b9:9b:b6:f4:ef:67:17:03:a3: 82:55:cf:f1:49:5a:9e:80:93:e3:19:c3:c9:bc:55:6e:93:98: bb:0c:3d:d4:26:28:cf:a3:41:c2:87:90:a2:b1:ea:49:ce:0a: 6a:8b:26:59:e0:70:4c:f0:80:2d:e1:9f:10:34:86:03:f0:6b: 54:b8:ae:15:5c:bd:91:4b:1b:70:93:50:52:d4:e5:fc:c6:35: fe:52:74:3f:37:57:57:ac:d2:28:6a:b6:97:2f:2f:fd:d2:59: b5:fb:c4:79:11:88:21:52:d7:15:22:2c:0a:92:5f:c7:0c:87: 4c:a1:f2:aa:c2:8c:61:9b:2e:92:d4:97:d3:9d:1b:91:eb:e2: ff:ff:bf:7d:82:9b:ae:a9:c7:e5:77:62:95:d7:8b:63:fd:e8: 41:2c:7e:a2:47:c3:58:5c:94:7b:9f:88:90:bd:20:0f:75:26: eb:bb:f5:bd:6e:9c:b2:49:0f:eb:fa:80:36:41:d7:f4:08:d0: 55:ae:53:07:93:c1:c9:23:f5:d7:00:bf:16:32:01:ce:f1:ba: 7e:dc:cb:5a:39:2d:47:95:e0:bf:fe:c8:ec:40:d2:bf:7f:6e: 8e:3f:7e:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXeVbZ8ADZI00izj+rtsmO50EHdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFG ODZERTE1MjAeFw0yNjA1MTIwMTAzMDlaFw0yNjA1MTMwMzU0MDlaMDMxMTAvBgNV BAMTKDBFMkNCMzJDM0ZBRTZBMkNBQzBCNjIxRjI3OUNFRTNCRTcwNTczMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsp40psl/4icSA4qEUQlz4et0 Adkh96EStav/Je6FtNL1/RQ3PMYtIlnJf5To6d/aWfzjCuWON4fmQt4xEoOtKwI2 HzhJiyu5Lvkip9CZ4WJiPoRwbm5UfIvoIuvYVW2yj49nhbOfIL34hF5btDFlqkeD JRcjSV3XkP07M6azJvmEMyvKbfvcYiLhTNKWdrLxaqcBoIeUAPh5TldlqSVUSYC2 SH7gjpBOQu2F7t/CyN84o0kJhyC1Wpm7wHexY7MOfaNkw8L0D6gHToX8Na5ywFNK AF4H5Uw31eat3/Ofjzyh0+GfUSYU92MDx0YevAwz15wIyIHR8r2QQeWnri/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDiyzLD+uaiysC2IfJ5zuO+cFcy8wHwYDVR0j BBgwFoAUP1w/g1JBDQk1NGv8mBpZQfht4VIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2UxMjc0M2QtZDU2ZC00YTc3LTkwZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1 MjQxMEQwOTM1MzQ2QkZDOTgxQTU5NDFGODZERTE1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRjVDM0Y4MzUyNDEwRDA5MzUzNDZCRkM5ODFBNTk0MUY4NkRF MTUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvM0Y1QzNGODM1MjQxMEQwOTM1MzQ2QkZDOTgxQTU5 NDFGODZERTE1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGChw78OgeS/3qJs1IbI1qY4HfKktpLOdEBe l7mbtvTvZxcDo4JVz/FJWp6Ak+MZw8m8VW6TmLsMPdQmKM+jQcKHkKKx6knOCmqL JlngcEzwgC3hnxA0hgPwa1S4rhVcvZFLG3CTUFLU5fzGNf5SdD83V1es0ihqtpcv L/3SWbX7xHkRiCFS1xUiLAqSX8cMh0yh8qrCjGGbLpLUl9OdG5Hr4v//v32Cm66p x+V3YpXXi2P96EEsfqJHw1hclHufiJC9IA91Juu79b1unLJJD+v6gDZB1/QI0FWu UweTwckj9dcAvxYyAc7xun7cy1o5LUeV4L/+yOxA0r9/bo4/ft4= -----END CERTIFICATE-----Generated at Tue May 12 22:13:03 2026 by rpki-client